At 09win, we take your privacy seriously. This document clearly and honestly explains how we collect, use, store, and protect your personal information. It's written in plain language — not drawn-out legal jargon.
Our Privacy Commitment
Your privacy is not merely a legal obligation to us — it is a moral responsibility we take seriously every day.
09win is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). All collection, storage, and use of members' personal data is carried out in accordance with applicable Malaysian legal requirements.
Every data exchange between your browser and 09win's servers is encrypted using 256-bit SSL encryption — the same security standard used by Maybank, CIMB, and Malaysia's leading financial institutions.
You have full rights to access, correct, download, and request deletion of your personal data from 09win's systems at any time. Requests are straightforward to submit and are processed within 14 business days.
09win has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not our commodity.
09win member data is stored in ISO-certified data centres protected by multi-layered firewalls, intrusion detection systems, and regular automated backups. Physical and digital access to servers is strictly controlled 24/7.
If you no longer wish to receive marketing communications from 09win, you may unsubscribe at any time via the "Unsubscribe" link in any email we send, or directly through your account settings.
Privacy Statement: This document describes 09win's privacy practices regarding the collection, use, disclosure, transfer, and storage of your personal information. By using the 09win platform, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform.
09win collects various types of personal information for legitimate purposes as described in this policy. We only collect what is strictly necessary — nothing more, nothing less. The following are the main categories of information we collect:
| Data Category | Sample Information | Primary Purpose |
|---|---|---|
| Identity Information | Full name, date of birth, MyKad number, gender | Identity verification (KYC), PDPA compliance |
| Contact Information | Malaysian phone number, email address, mailing address | Account communications, transaction notifications |
| Financial Information | E-wallet account numbers (TnG/DuitNow/GrabPay), FPX details | Deposit & withdrawal processing in RM |
| Platform Activity Data | Betting history, game types, session duration, wagering amounts | Fraud detection, responsible gaming |
| Technical Data | IP address, device type, browser, operating system, geographic location | Account security, platform optimisation |
| Cookie Data | Platform preferences, login sessions, language settings | Enhanced user experience |
How we collect information:
Data Minimisation Principle: 09win only collects information necessary for the stated purposes. We do not request irrelevant information, nor do we retain it longer than required.
09win uses the information we collect for legitimate, transparent, and strictly limited purposes. We will not use your data for any purpose beyond what is described here without obtaining your consent first.
Important: 09win does not use your personal data for automated decision-making that materially affects you without human review. Every decision relating to your account involves review by our team.
09win does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, there are limited situations where we need to share certain information with specific parties:
In all instances of data sharing outlined above, 09win ensures that any party receiving your data is bound by data protection obligations that are equivalent to or more stringent than our own.
09win takes cybersecurity infrastructure seriously to protect our members' personal data. The following security layers are in place:
256-bit SSL Encryption
All data in transit is encrypted using the latest SSL/TLS standards, which cannot be broken with current technology.
Two-Factor Authentication (2FA)
An additional security layer for logins and key transactions to prevent unauthorised access.
Multi-Layered Firewall
Multiple layers of firewalls protect our servers against external attacks, DDoS threats, and unauthorised intrusion attempts.
24/7 Monitoring
Our security team continuously monitors systems to detect and respond to threats in real time.
Regular Security Audits
Penetration testing and independent security audits are conducted regularly by certified third-party cybersecurity firms.
Automated Data Backups
Data is automatically backed up to separate secure locations to ensure service continuity and disaster recovery.
Shared Responsibility: While 09win takes all reasonable steps to protect your data, you also play an important role. Use a strong password, never share your login credentials, and keep your device protected with up-to-date antivirus software.
09win uses cookies and similar tracking technologies to enhance your experience and ensure the platform operates correctly. Cookies are small text files stored in your browser when you visit our platform.
You can manage your cookie settings through your browser settings. However, disabling certain cookies may affect the functionality of some parts of the 09win platform. For more information on managing cookies, please refer to your browser's documentation (Chrome, Firefox, Safari, Edge).
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 09win:
Right to Access
Request a copy of all personal data we hold about you. Processed within 14 business days.
Right to Rectification
Requesting correction of inaccurate or incomplete data. Updated within 7 business days.
Right to Erasure
Request the deletion of your personal data when it is no longer required, subject to legal obligations.
Right to Object to Processing
Object to the use of your data for direct marketing or profiling at any time.
Right to Data Portability
Receive your data in a machine-readable format for transfer to another service if needed.
Right to Withdraw Consent
Withdraw marketing consent at any time via your account or by emailing us.
To exercise any of the rights above, please contact our Privacy Officer at privacy@09win.biz. All requests will be acknowledged within 3 business days and processed within 14 business days.
09win does not retain your personal data longer than necessary for the purposes for which it was collected. Retention periods are as follows:
Upon expiry of the retention period, data will be securely deleted using irreversible data deletion methods, or fully anonymised for statistical purposes.
09win takes the protection of minors extremely seriously. Our platform is strictly for individuals aged 18 and above. We do not accept registrations from minors and do not knowingly collect personal data from them.
If you discover that your child or a minor has registered an account with 09win, please contact us immediately at privacy@09win.biz. We will take immediate action to close the account and delete all associated data.
We also have dedicated procedures for vulnerable individuals — including those experiencing gambling problems, mental health issues, or who are in a recovery programme. If you need assistance or wish to activate additional protection tools, please contact our Responsible Gaming team.
Warning: If you suspect your 09win account has been accessed by a minor or an unauthorised individual, please change your password immediately and contact our support team. Prompt action is essential to protect all parties involved.
09win has appointed a Data Protection Officer (DPO) responsible for ensuring full compliance with Malaysia's PDPA and our internal privacy policies. If you have any questions, concerns, or complaints regarding your data privacy, please reach us through the following channels:
Privacy@09win.biz
Available 24/7 within the platform
3 business days (acknowledgement) • 14 business days (resolution)
Malaysia — Personal Data Protection Act 2010
This Privacy Policy was last updated on 1 January 2026. 09win reserves the right to amend this policy at any time. Significant changes will be communicated to members via email or in-platform notification at least 7 days before taking effect.
PDPA complaints: If you are not satisfied with how 09win has handled your privacy complaint after contacting us, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner under PDPA 2010.
You now know how we protect your personal data. Create a free 09win account today and enjoy over 500 games safely, securely, and responsibly. Deposit easily via Touch 'n Go, DuitNow, or GrabPay.