Official Policy

Privacy Policy 9winbox — Malaysia Player Data Protection

Your privacy is more than a legal obligation to us — it is a moral commitment. This document transparently explains how 9winbox collects, uses, stores, and protects your personal information.

Updated: January 2026  |  Version 2.4

This Privacy Policy applies to all users of the 9winbox platform, including website visitors, registered players, and all individuals who interact with our services. By using this platform, you agree to the practices described in this document.

01 Personal Information We Collect

9winbox collects various types of personal information needed to provide a safe, responsible service that meets legal compliance requirements. We only collect what is genuinely necessary and nothing more.

Data Category Example Information Requirement
Personal Identity Full name, date of birth, MyKad/passport number Required — KYC
Contact Information Email address, phone number, residential address Required — Account
Financial Data Bank account number, bank name, transaction records Required — Payment
Technical Data IP address, device type, web browser, operating system Automatic
Activity Data Game history, login activity, platform interactions Automatic
Verification Documents Copy of ID card, bank statement, proof of address Required — Verification

We do not collect sensitive information such as biometric data, medical records, religious beliefs, or political views unless specifically required by applicable law.

02 How We Collect Your Information

Your personal information is collected through several different channels as you interact with the 9winbox platform. Each collection method is used responsibly and is intended to enhance your experience.

  • Account Registration — Information you enter directly when creating a new account at 9winbox.
  • KYC Verification — Identification documents and proof of address submitted to our compliance team.
  • Financial Transactions — Payment information processed during deposits or withdrawals.
  • Platform Usage — Data automatically generated when you use the platform, including activity logs and session cookies.
  • Support Communications — Information you provide when contacting our customer support team via live chat or email.
  • Third-Party Sources — In certain cases, we may receive information from identity verification providers or payment service partners for verification purposes only.

03 Purpose of Personal Information Use

9winbox uses collected information solely for legitimate and reasonable purposes. We do not use your data for anything unrelated to platform operations or that could harm your interests.

  • Process account registrations and maintain accurate user records.
  • Conduct KYC processes and age verification to ensure legal compliance.
  • Process deposits, withdrawals, and all financial transactions securely.
  • Provide responsive and effective customer support.
  • Send important notifications related to your account, security, and promotions (with your consent).
  • Detect and prevent fraud, money laundering, and other illegal activities.
  • Improve platform functionality and user experience based on usage patterns.
  • Comply with legal and regulatory obligations imposed on online platform operators.

We will not use your data for third-party marketing without your explicit consent. You may withdraw marketing consent at any time through your account settings.

04 Sharing Information With Third Parties

9winbox does not sell, lease, or trade your personal information to any third party for commercial purposes. However, there are specific situations where we need to share your data with carefully selected parties.

  • Payment Service Providers — Financial institutions and e-wallet providers that process your transactions, such as licensed banks and FPX/DuitNow operators.
  • Identity Verification Partners — Third-party services that assist in conducting KYC checks and document verification securely.
  • Gaming Platform Providers — Game developers that require basic session information to enable games to function.
  • Competent Authorities — Government agencies, law enforcement bodies, or courts when required under Malaysian law.
  • Professional Consultants — Lawyers, auditors, and consultants bound by professional confidentiality obligations.

All third-party partners handling 9winbox user data are required to comply with our data security standards and are not permitted to use that data for any purpose other than what is specified in their service agreements.

05 Security & Data Protection

We take the security of your data very seriously. 9winbox invests in industry-grade security infrastructure to keep your information consistently protected against unauthorised access, breaches, or misuse.

  • 256-bit SSL encryption for all data transmitted between your device and our servers.
  • Data-at-rest encryption for all personal and financial information stored in our databases.
  • Role-based access control — only authorised staff may access user data, and only to the extent required for their duties.
  • Regular security audits by independent third parties to identify and address system vulnerabilities.
  • Continuous 24/7 monitoring to detect and respond to any suspicious activity promptly.
  • Two-factor authentication (2FA) is available for all user accounts as an additional layer of protection.

While we apply the best available security measures, no system is completely immune. Should a data breach affect you, we will notify you within 72 hours of becoming aware of it.

06 Cookies & Tracking Technologies

9winbox uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you on return visits and keep platform features running smoothly.

  • Essential Cookies — Required for core platform operations such as login session verification and security. Cannot be disabled.
  • Performance Cookies — Collects data on how you use the platform to help us improve website functionality and speed.
  • Functional Cookies — Stores your preferences such as language, display settings, and personal preferences for ease of use.
  • Analytics Cookies — Used internally to understand usage patterns and improve platform content.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality and your login experience.

07 Your Rights as a User

As a registered 9winbox user, you have certain rights regarding your personal data. We respect these rights and are committed to helping you exercise them easily and without unreasonable barriers.

Right of Access

You have the right to request a copy of all personal information we hold about you at any time.

Right to Rectification

If any of your information is inaccurate or outdated, you have the right to request an immediate correction.

Right to Erasure

You may request deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing or profiling purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service if needed.

To exercise any of the above rights, contact our privacy team via email or live support. We will process your request within 30 calendar days of receipt.

08 Data Retention & Deletion Period

9winbox retains your personal information for as long as your account is active or as needed to provide our services. Once an account is closed, we retain certain data for a defined period to fulfil legal and regulatory obligations.

  • KYC and identity verification records: retained for a minimum of 5 years after account closure in line with Malaysia's anti-money laundering legal requirements.
  • Financial transaction records: retained for 7 years for audit and tax compliance purposes.
  • Customer support communication logs: retained for 3 years for reference and dispute resolution.
  • Cookie and analytics data: deleted or anonymised after 13 months.
  • General account information: deleted within 90 days after a confirmed account closure request, subject to no active retention obligations.

09 Cross-Border Data Transfers

In some cases, your personal information may be transferred to and processed in countries outside Malaysia, particularly in connection with international game software providers or our global cloud server infrastructure.

Each such data transfer is carried out with adequate safeguards, including:

  • Data processing agreements compliant with internationally recognised data protection standards.
  • Standard contractual clauses ensuring that data recipients outside the country maintain an equivalent level of protection.
  • Regular risk assessments of all cross-border data transfers to ensure ongoing security.

We ensure that cross-border data transfers do not reduce the level of protection you enjoy under this Privacy Policy, regardless of where the data is physically processed.

10 How to Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the 9winbox privacy team is ready to assist you.

You can reach us through our 24/7 live support available on the platform, or via our official email at [email protected]. Please include the subject line "Privacy Inquiry" along with your username so we can address your concern more quickly and efficiently.

Any amendments to this Privacy Policy will be published on this page with a clear update date. We encourage you to check this page from time to time to stay informed of how we protect your information.

9winbox's Six Pillars of Privacy Protection

Privacy is not just a document — it is a working culture at 9winbox. Here are six concrete commitments we uphold every day.

End-to-End Encryption

Every bit of data you transmit through 9winbox is protected by 256-bit SSL encryption. Your data cannot be read by any party while in transit, including network operators.

Strict Access Controls

User data is only accessible to staff with a direct need for their assigned tasks. All access is logged and continuously monitored to detect any misuse.

Independent Security Audit

9winbox's data infrastructure and security practices are regularly audited by independent cybersecurity firms. Audit findings are used for continuous improvement, not just compliance.

No Data Selling

Your personal data is never sold, leased, or traded to advertisers or third-party marketing companies. Your information belongs entirely to you — not to us as a business asset.

Immediate Breach Notification

In the event of any security incident involving your data, we are committed to notifying you within 72 hours with details of the incident and the steps being taken.

Full Control in Your Hands

Through your account settings, you can manage communication preferences, withdraw marketing consent, and request a copy or deletion of your data easily without long wait times.

Play With Peace of Mind on 9winbox

Your data is protected, your identity is secure. Join 9winbox today and enjoy a responsible, trusted online gaming experience in Malaysia.

Bahasa Melayu