M9Win Privacy Policy – Member Data Protection in Malaysia That You Deserve to Know

1. Introduction & M9Win's Commitment to Privacy

M9Win understands that your trust is our most valuable asset. When you register an account to bet on football, enjoy a live baccarat table, wager on a badminton match or follow your favourite Malaysian e-sports league on our platform, you are entrusting us with your personal information. We take that responsibility very seriously.

This Privacy Policy is drafted to provide full transparency regarding data handling practices at M9Win. We believe you have the right to know exactly what data we collect, why it is needed, who can access it, and how long it is retained. There is nothing we hide — every detail is here for you to review.

M9Win fully comply with the Malaysian Personal Data Protection Act 2010 (PDPA 2010) in all aspects of handling members' personal data. This means your data is processed only for legitimate purposes, stored securely, and not shared without proper consent. If you have any questions about this policy, the support team M9Win ready to assist you at any time.

2. Types of Personal Data We Collect

M9Win collects personal data across several categories depending on how you interact with our platform. Below is a full explanation of each category:

2.1 Data You Provide Directly

• Registration Information: Full name, Malaysian phone number, email address, username, and the password you created when registering your account.
• Identity Verification Information (KYC): A copy of your MyKad or passport, a selfie, residential address, and date of birth — collected during the account verification process.
• Payment Information: E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) or bank account information for deposit and withdrawal purposes. We do not directly store credit or debit card numbers.
• Customer Support Information: Any information you share when reaching out to our support team via live chat, WhatsApp, or email.

2.2 Automatically Collected Data

• Platform Usage Data: Betting activity records, game history, markets visited, session duration, and game preferences.
• Technical Data: IP address, device type, operating system, browser version, screen resolution, and other technical information automatically transmitted by your device.
• Location Data: General location information based on IP address for geographic compliance and account security purposes.
• Cookies Data: Information stored through cookies and similar tracking technologies — explained in further detail in Section 6.

3. Purposes for Using Your Personal Data

M9Win uses the collected personal data for the following purposes, all within the limits permitted by PDPA 2010:

• Account Management: Creating, verifying, and maintaining your account on the M9Win platform, including identity verification and the KYC process.
• Financial Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other local Malaysian payment methods, as well as processing withdrawals to your account.
• Service Provision: Giving you access to all M9Win products including Sports Betting (Malaysia Super League, EPL, badminton, e-sports), Live Casino (baccarat, blackjack, roulette), slots, and virtual sports.
• Platform Security: Detecting and preventing fraud, multi-account usage, bonus abuse, and any illegal or suspicious activity on the platform.
• Customer Support: Helps you resolve any issues, answers your queries, and provides 24/7 customer support in Bahasa Melayu.
• Legal Compliance: Fulfils reporting and compliance obligations under applicable Malaysian law.
• Platform Improvement: Analyses aggregated, anonymised usage patterns to improve the interface, performance, and overall user experience of the M9Win platform.
• Marketing Communications: Sends promotional information, bonus offers, and the latest M9Win news — only if you have consented to receive them, and you may withdraw that consent at any time.

M9Win will not use your data for any purpose beyond those stated above without first obtaining your consent. Should we intend to use your data for a new purpose, you will be notified and given the opportunity to agree or decline.

4. Sharing Data with Third Parties

M9Win does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. This is a commitment we have never compromised since the first day this platform launched. However, there are limited situations where your data may be shared with trusted third parties:

• Payment Service Provider: Payment platform providers such as the FPX system and e-wallet providers (Touch 'n Go, GrabPay) that require minimal transaction data to process your MYR deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Providers: Live casino studios and slots providers supplying games on the M9Win platform may require session identifiers that do not reveal your personal identity.
• Technology Service Providers: Companies that provide the technology infrastructure, cybersecurity, and support services that help us operate the platform — all bound by strict data processing agreements.
• Authorities: Malaysian law enforcement bodies, regulators or courts when we are legally required to do so, or when necessary to protect the safety of platform users.

In all of the data-sharing cases outlined above, M9Win ensures that recipients have adequate data protection in place and only receive the data strictly necessary for the stated purpose. We do not transfer your personal data outside Malaysia unless technically required and with appropriate safeguards in place.

5. M9Win Data Security Measures

M9Win invests seriously in data security infrastructure to protect every member's personal information. We employ multiple layers of complementary technical and organisational safeguards:

• 256-bit SSL Encryption: All communications between your device and M9Win's servers are protected with 256-bit SSL encryption — the same level of security used by Malaysia's leading banks to safeguard online banking transactions.
• Personal Data Encryption: Sensitive data such as MyKad numbers, bank account information, and payment details are stored in encrypted form on our servers. No staff member can view this data in its original form without a multi-layered authorisation process.
• Two-Factor Authentication (2FA): You can enable 2FA in your M9Win account settings for an added layer of protection that prevents unauthorised access even if your password is compromised.
• 24/7 Security Monitoring: Automated monitoring systems continuously track account activity to detect suspicious patterns, unauthorised login attempts, and any anomalies that may indicate a security breach.
• Internal Access Controls: Access to members' personal data among M9Win staff is restricted on a need-to-know basis. Audit logs record every instance of access to sensitive data.
• Regular Security Testing: The M9Win platform undergoes regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.

That said, it's important to remember that no security system is 100% foolproof. You also play a key role in keeping your account safe — use a strong, unique password, never share your login credentials, and enable 2FA. If you suspect your account has been compromised, contact the support team M9Win immediately.

6. Use of Cookies and Tracking Technologies

Platform M9Win uses cookies and similar technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website. Below are the types of cookies we use:

You can manage cookie settings through your internet browser. Most browsers allow you to view, manage, and delete stored cookies. However, disabling essential cookies may affect the functionality of the platform. M9Win and your overall playing experience. We recommend keeping essential cookies enabled for the best experience.

7. Your Rights as an M9Win Member

Under the Malaysian Personal Data Protection Act 2010 and this Privacy Policy, you have several important rights regarding your personal data held by M9Win. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, submit a written request to the M9Win at support@m9win.best. State the right you wish to exercise and provide the information needed to verify your identity. We will respond within 14 business days. Identity verification may be required before a request is processed to ensure the security of your account.

8. Data Retention Period

M9Win retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Below are the retention period guidelines for key data categories:

• Active Account Data: Retained for as long as your account is active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian accounting and financial compliance requirements.
• KYC and Identity Verification Records: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering requirements.
• Platform Activity Logs: Retained for 12 months for security and dispute resolution purposes.
• Customer Support Contact: Retained for 2 years for reference and service quality improvement purposes.
• Marketing Data: Retained until you withdraw consent to receive marketing communications.

Once the retention period has ended, data will be securely deleted or anonymised in a manner that ensures it can no longer be linked back to you as an individual. The data deletion process is carried out using methods that comply with recognised security standards.

9. Links to Third-Party Websites

Platform M9Win may contain links to third-party websites or services in certain contexts. This Privacy Policy applies only to the M9Win only and does not cover the privacy practices of any third-party websites or services you access through those links.

M9Win is not responsible for the content or privacy practices of third-party websites. We recommend reading the privacy policy of every website you visit to understand how they handle your personal data. This includes payment provider websites such as Maybank2u or CIMB Clicks when you are redirected to their pages to complete a deposit transaction via FPX.

10. Protection of Underage Users

Platform M9Win is intended for individuals aged 18 and above only. We do not knowingly collect personal data from minors. If you believe your child or an underage individual has submitted personal data to our platform, please contact our support team M9Win immediately at support@m9win.best.

Where we discover that personal data of a minor has been collected without proper consent, we will take immediate steps to delete that data and close the account in question. Age verification is conducted during the account registration process as a primary preventive measure.

Parents and guardians concerned about potential use of the platform M9Win by their underage children can use parental control software at the device or home network level to block access to betting websites. M9Win fully supports proactive underage protection measures.

11. Amendments to This Privacy Policy

M9Win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements to the way we protect your information. The latest version of the Privacy Policy will always be published on this page with a clear update date.

For significant amendments that materially affect your privacy rights, M9Win will endeavour to notify you in advance via your registered email or in-platform notification at least 14 days before the changes take effect. Your continued use of the platform after the effective date of any such amendment will be considered acceptance of the new terms.

It is your responsibility to review this page periodically to ensure you are always aware of the latest version of our Privacy Policy. The most recent update date is displayed at the top of this document for your easy reference.

12. How to Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way M9Win handles your personal data, we encourage you to reach out to us directly. We are committed to responding to every privacy enquiry seriously and within a reasonable timeframe.

• Email: support@m9win.best — for privacy enquiries, data access requests, and official complaints.
• Live Chat: Available 24/7 on the M9Win platform for general privacy and data protection enquiries.
• WhatsApp: Contact the M9Win support team via WhatsApp for faster responses to straightforward privacy queries.

We will endeavour to respond to all privacy enquiries within 14 business days. For more complex requests such as data access or data deletion, processing may take up to 30 business days depending on the complexity of the request. We will keep you informed of the status of your request throughout the process.

If you are not satisfied with our response M9Win regarding your privacy enquiry, you have the right to contact the Malaysian Department of Personal Data Protection or the relevant supervisory authority for guidance or to file a formal complaint.