Personal Data Protection

Privacy Policy o9win

Your privacy is our priority. This document clearly explains how o9win collects, uses, stores, and protects your personal data in accordance with international security standards and Malaysia's data protection requirements.

256-bit SSL Encryption
No Data Sales
Malaysia PDPA Compliance
Updated 2026
Privacy Commitment o9win

Six core pillars of how we safeguard and respect every member's privacy

Comprehensive Data Encryption

All data transmitted between your device and o9win's servers is protected with 256-bit SSL encryption and TLS 1.3 protocol. Your sensitive information cannot be intercepted or read by any third party during transmission.

Secure Data Storage

Member personal data is stored in data centres equipped with multi-tier physical and digital access controls. Access to user data is granted only to authorised personnel with a legitimate business need.

Full Control in Your Hands

O9win members have the right to access, correct, or request deletion of their personal data at any time. Such requests will be processed within 14 business days through our official customer support channels.

No Third-Party Data Sales

O9win has never and will never sell, rent, or share your personal data with advertisers or external companies for marketing purposes without your explicit consent. Your privacy is not a product we trade.

Malaysia PDPA Compliance

All of o9win's personal data management practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We continuously update our internal procedures in line with the latest legislative developments.

Marketing Communication Preferences

You may opt in or out of promotional communications from o9win at any time. This preference can be managed directly through your account settings or by contacting our support team.

Note: This Privacy Policy applies to all information collected through the o9win website, mobile app, and all our service channels. By registering or using our platform, you agree to the terms set out in this document.

1. Information We Collect

As a responsible online entertainment platform, o9win collects personal data from members and visitors to ensure our services run smoothly, securely, and in compliance with legal requirements. The following are the categories of information we collect:

Data Category Example Information Collection Method
Personal Identity Full name, date of birth, identification card number, gender Account registration, KYC process
Contact Information Email address, phone number, residential address Registration form, profile updates
Financial Data Banking details, transaction records, deposit and withdrawal history Payment processing, KYC verification
Technical Data IP address, device type, web browser, operating system Automatic access logs
Behavioural Data Game history, betting preferences, usage patterns In-platform activity
Communication Data Customer support chat records, feedback Live chat, support email

We may also receive information about you from legitimate third-party sources, such as identity verification agencies and payment service providers, solely for verification and fraud prevention purposes.

2. How We Use Your Information

O9win uses collected personal information for legitimate and transparent purposes. We never use your data for purposes you have not consented to, except where required by law.

  • Account Management: Creating, verifying, and maintaining your member account, and securely processing login requests.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions related to your account.
  • KYC and AML Compliance: Fulfilling legal obligations related to Know Your Customer (KYC) and anti-money laundering (AML) requirements.
  • Platform Security: Detecting and preventing fraud, unauthorized access, multi-account usage, and activities that violate our Terms and Conditions.
  • Service Improvement: Analyzing platform usage patterns to improve the user experience, technical performance, and game offerings.
  • Service Communications: Sending important account-related notifications, including transaction confirmations, security updates, and policy changes.
  • Marketing (With Consent): Sending promotional offers, bonuses, and relevant gaming content based on your preferences.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support.

3. Legal Basis for Data Processing

O9win processes your personal data on a solid legal basis in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). For each processing activity, at least one legal basis applies:

  • Contract Fulfillment: Processing required to deliver the services you requested as a registered o9win member.
  • Legal Obligation: Compliance with regulatory requirements, anti-money laundering laws, and directives from relevant authorities.
  • Legitimate Interest: Purposes such as fraud prevention, network security, and service improvement that do not affect your fundamental rights.
  • Consent: Optional processing activities such as marketing communications, where you provide explicit consent and may withdraw it at any time.
Your Rights: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Sharing Information with Third Parties

O9win does not sell, rent, or disclose your personal data to third parties for independent marketing purposes. However, in the course of platform operations, we may share necessary information with the following categories of parties:

  • Payment Providers: Payment gateway providers such as FPX, DuitNow, Touch 'n Go, and GrabPay to securely process your financial transactions.
  • Identity Verification Providers: Certified third-party KYC services to verify your identity during registration and security checks.
  • Gaming Service Providers: Game providers operating games on our platform, limited to data required for the gaming session.
  • Regulatory Authority: Government agencies, law enforcement authorities, or regulatory bodies when required by law or court order.
  • Professional Advisors: Auditors, lawyers, and consultants bound by professional confidentiality obligations.

All third parties we work with are required to meet data protection standards equal to or higher than o9win's own practices. Legally binding data processing agreements are established with all our third-party partners.

5. Cookies and Tracking Technologies

O9win uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Cookie Type Purpose Status
Essential Cookies Login, session security, CSRF prevention Mandatory
Functional Cookies Storing language preferences, display settings, and gameplay session records Mandatory
Analytics Cookies Understanding usage patterns, popular pages, and time spent on the platform Options
Performance Cookies Monitoring page load times and technical issues Options

You can manage or disable optional cookies through your web browser settings. Please note that disabling essential cookies may affect your login functionality and account security.

6. Data Retention Period

O9win retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. Our core principle is data minimization — we do not keep what is unnecessary for longer than needed.

  • Active Account Data: Retained for the duration your account is active and for five (5) years after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for seven (7) years in compliance with Malaysian financial and tax legal requirements.
  • Security Logs: Retained for twelve (12) months for fraud detection and security investigation purposes.
  • Support Communication Data: Retained for three (3) years from the date of last interaction.
  • Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered or accessed again.

7. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by o9win:

1
Right of Access

Requesting a copy of the personal data we hold about you, including information on how it is used.

2
Right to Rectification

Requesting correction of inaccurate, incomplete, or outdated personal data.

3
Right to Erasure

Requesting the deletion of your personal data in certain situations provided for under the law.

4
Right to Object

Objecting to the processing of your data for direct marketing purposes or on the basis of our legitimate interests.

5
Right to Restrict Processing

Requesting that we restrict the processing of your data under certain circumstances during an investigation or review.

6
Right to Complain

Submitting a complaint to the Personal Data Protection Commissioner of Malaysia if you are dissatisfied with our response.

To exercise any of the above rights, please contact our data protection team by email [email protected] or via Live Chat on the platform. We will process your request within 14 business days of receipt.

8. Information Security

O9win continuously invests in robust cybersecurity infrastructure to protect members' personal data from unauthorized access, loss, destruction, or accidental disclosure. Our technical and organizational security measures include:

  • End-to-End Encryption: All communications between our platform and your device use TLS 1.3 protocol with AES-256 encryption.
  • Tiered Access Control: A role-based access control (RBAC) system ensures only authorized personnel can access specific data categories.
  • 24/7 Monitoring: Intrusion detection and prevention systems (IDS/IPS) operate around the clock to monitor for suspicious activity.
  • Regular Security Audits: Penetration testing and independent security audits are conducted regularly by third-party security experts.
  • Two-Factor Authentication: 2FA is available and encouraged for all member accounts as an additional layer of security.
  • Secure Data Backup: Data is automatically backed up and stored across separate locations with full encryption.
Breach Notification: In the event of a data breach that may affect your rights and freedoms, o9win will notify you and the relevant authorities within 72 hours of detecting the breach.

9. International Data Transfers

In certain operational situations, your personal data may be transferred to, or accessed from, servers located outside Malaysia. This may occur in the context of cloud services, international game providers, or global technical infrastructure.

O9win ensures that any international data transfers are carried out with adequate safeguards, including:

  • Use of internationally recognized Standard Contractual Clauses.
  • Ensuring that recipient countries maintain an equivalent or higher level of data protection.
  • Legally binding data processing agreements with all international partners.

You have the right to request further details about the safeguard mechanisms we use for international data transfers by contacting our privacy team.

10. Children's Privacy

The o9win platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under 18. If we discover that a minor's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account.

If you are a parent or guardian and suspect that your child has registered or used our platform, please contact us immediately at [email protected] and we will respond promptly.

11. Changes to This Privacy Policy

O9win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Each new version will be published on this page with an updated revision date.

For material changes that may significantly affect your rights, we will notify you via your registered email or in-platform notification at least seven (7) days before the changes take effect. Continued use of the o9win platform after such notice constitutes your acceptance of the updated policy.

Last Updated: This Privacy Policy was last updated on January 2026 and supersedes all previous versions.

12. Contact Us

If you have any questions, concerns, or wish to exercise your data protection rights, please contact the o9win Data Protection Officer through the following channels:

  • Email: [email protected]
  • Live Chat: Available 24/7 on the o9win platform
  • Response Time: Within 14 business days from the date the request is received

We are committed to addressing every privacy enquiry with seriousness and transparency. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Start Your Gaming Experience Safely

Your privacy and security are guaranteed at o9win. Register today and enjoy thousands of games with complete peace of mind — your data is fully protected.

Bahasa Melayu