Privacy Policy 09win — Member Personal Data Protection

09win respects the privacy of every individual who uses our platform. This Privacy Policy is designed to provide clarity on how we handle your personal information when you register, login, make a deposit, play, or simply browse the 09win website.

This policy applies to all services provided by 09win, including the official website at https://09win.vu, the 09win mobile app, and all our official communication channels. By using any of these services, you acknowledge that you have read and understood this Privacy Policy.

We are committed to ensuring that your personal data is handled in a transparent, secure manner that is consistent with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards.

09win only collects data that is necessary to deliver quality services, ensure account security, and comply with legal requirements. The following are the categories of data we collect:

The data we collect is used responsibly and only for legitimate purposes. The following are the primary ways we use your information:

• Account Management: Creating and managing your 09win account, processing registration, and verifying your identity through the KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and efficiently.
• Platform Security: Detecting and preventing fraudulent activity, multiple account creation, money laundering, and any other security threats.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to members.
• Service Communications: Sending important notifications related to accounts, security, transactions, and policy changes.
• Relevant Marketing: Sending promotional offers, bonuses, and platform updates — only to members who have agreed to receive such communications.
• Responsible Gaming: Monitoring wagering patterns to identify members who may need responsible gaming assistance or support.
• Legal Compliance: Fulfilling legal and regulatory obligations, including reporting to relevant authorities when required by law.

We do not use your data for any purpose not stated above without obtaining your consent first.

09win does not sell or trade your personal data. However, in certain situations, we may need to share your information with selected third parties to enable us to deliver our services fully:

• Payment Providers: Integrated payment partners such as FPX, DuitNow, Touch 'n Go eWallet, and other e-wallet providers that process your financial transactions. They are subject to their own privacy policies and security standards.
• Game Providers: Game developers providing slots, live casino, fish shooting games, and other games on the 09win platform receive only the minimum data required to run the games smoothly.
• Technical Service Providers: Companies providing hosting, cybersecurity, and analytics services that help us operate the platform safely and efficiently.
• Legal Authority: Government agencies or law enforcement bodies requesting information through valid legal process.

All third parties we work with are required to comply with strict data protection standards and are only permitted to use your data for the specific agreed purposes. We do not share your data with advertisers, data brokers, or any third parties unrelated to our platform's operations.

We continuously invest in security infrastructure to ensure your data is protected from unauthorised access, breaches, or misuse. The security measures we implement include:

• Data encryption in transit using 256-bit TLS/SSL protocol for all communication between your device and our servers.
• Data encryption at rest — all sensitive data such as financial information is stored in encrypted format within our database.
• Multi-layer access control ensuring only authorised personnel can access member data, with all access logged in detail.
• Two-factor authentication (2FA) available to all member accounts as an additional layer of protection.
• Real-time threat monitoring using an intrusion detection system that identifies and responds to suspicious activity in real time.
• Regular security testing including penetration testing and security audits conducted by independent third parties.

While we take all reasonable precautions, no security system can be guaranteed 100% safe. You also play an important role in protecting your account by using a strong password and never sharing your login credentials with anyone.

09win uses cookies and similar tracking technologies to enhance the user experience and platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as they are critical to platform operations.
• Functional Cookies: Saving your preferences such as language, region, and display settings to deliver a more personalised experience.
• Analytics Cookies: Helping us understand how members use the platform so we can improve and enhance our services. Analytics data is collected in aggregate and cannot be individually identified.
• Security Cookies: Used to detect and prevent fraud, unauthorised access, and other security threats.

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of some areas of the 09win platform. Our cookies are not used to track your activity on other websites outside the 09win platform.

As a 09win member, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010:

To exercise any of the above rights, contact the 09win support team via live chat or our official email. All requests will be processed within 14 working days. We may need to verify your identity before processing any data-related requests.

09win retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as your account remains active. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account remains active on the 09win platform.
• Financial transaction data: Retained for a minimum of 7 years after a transaction occurs, in line with applicable legal and tax requirements.
• KYC and identity verification data: Retained for 5 years after account closure as a legal compliance requirement under anti-money laundering regulations.
• Support communication logs: Retained for 2 years for reference purposes and resolution of any future disputes.
• System and security log data: Retained for 12 months for security and incident investigation purposes.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be personally linked to you. If you request account closure, we will initiate the data deletion process within 30 days, subject to the legal retention requirements stated above.

09win reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When significant changes are made, we will:

• Displaying a clear notice on the 09win platform homepage at least 7 days before the changes take effect.
• Sending notifications via email or in-platform notices to all active members.
• Updating the "Last Updated" date at the top of this document.

Continued use of the 09win platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account and we will process that request in accordance with established procedures.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist through the following channels:

• Live Chat 24/7: The fastest way to get an immediate response — accessible directly from the 09win platform.
• Support Email: [email protected] — for written enquiries requiring a detailed response. We reply within 24–48 business hours.
• FAQ Page: Visit FAQ page for answers to frequently asked questions about privacy and account security.

All privacy-related complaints will be investigated thoroughly and responded to within 14 business days. We are committed to resolving every issue transparently and professionally, in the interest of your trust and satisfaction as a valued 09win member.