Privacy Policy last updated: January 2026 256-bit SSL encryption for all data and transactions Your data is never sold or shared without your consent Your rights to access, correct, and delete your data are guaranteed Compliant with the Personal Data Protection Act 2010 (PDPA) 24/7 privacy support – support@o9win.click Privacy Policy last updated: January 2026 256-bit SSL encryption for all data and transactions Your data is never sold or shared without your consent Your rights to access, correct, and delete your data are guaranteed Compliant with the Personal Data Protection Act 2010 (PDPA) 24/7 privacy support – support@o9win.click

Your Data Protection & Privacy

Privacy Policy o9win – Our Commitment to Protecting the Personal Data of Malaysian Players

Your privacy is not merely a legal obligation to us — it is a personal commitment. This document clearly explains how o9win collects, uses, stores, and protects your personal data as a Malaysian player.

Last Updated: January 2026 Bahasa Melayu 10 Sections PDPA 2010

O9win's Privacy Commitment

256-bit SSL for all data
Data is never sold to third parties
Full control over data access is yours
Compliant with Malaysia PDPA 2010
Right to erasure upon request
The Privacy Officer is available 24/7
10
Section
256
bit SSL
0
Data Sold
24/7
Privacy Support
PDPA
Compliance

Six Pillars of Privacy Protection o9win

These are the core principles that shape o9win's approach to managing and protecting every Malaysian player's personal data.

Minimal Data Collection

O9win only collects the personal data that is genuinely necessary to provide our services to you — nothing more. Every type of data we collect has a clear purpose, stated transparently in this policy.

Bank-Grade Security

All your personal and financial data is protected with 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions such as Maybank and CIMB. Your data is secure both in transit and at rest on our servers.

Your Data Is Never Sold

O9win has never and will never sell, rent or trade your personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not a business asset for us to sell.

Full Control Over Your Data

You have the right to access, correct, download, or request deletion of your personal data at any time. o9win fully respects these rights and ensures your requests are processed within a reasonable timeframe.

Compliant with Malaysia PDPA 2010

All of o9win's data management practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you are protected under Malaysian law, which governs how your personal data may be used by any organisation.

Full Transparency

We tell you exactly what data we collect, why we need it, how long we retain it, and who it may be shared with (if anyone). No confusing language, no information buried in fine print.

Important Note: By using the o9win platform, you agree to the data collection and usage practices described in this Privacy Policy. If you disagree with any part of this policy, please contact us before continuing to use the platform.

1. Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by o9win ("we", "Platform") and applies to all users who access or use the platform at https://o9win.click — including the website, mobile app, and all related services.

This document clearly outlines how o9win collect, process, store, share, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

We update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to registered members via email or an in-platform notification at least 7 days before taking effect.

PDPA Compliance: o9win is fully compliant with Malaysia's Personal Data Protection Act 2010. This means we only process your personal data with your consent, for legitimate purposes, and in a manner consistent with your rights under Malaysian law.

2. Types of Personal Data We Collect

O9win collects various types of personal data to ensure our services operate smoothly and securely for every player. Below are the categories of data we collect:

Data Category Example Purpose of Collection
Identification Data Full name, date of birth, IC number, photo ID Identity verification (KYC), legal compliance
Contact Information Phone number, email address, home address Account communications, notifications, customer support
Financial Data E-wallet account number, transaction records Processing deposits and withdrawals
Platform Activity Data Betting records, games played, login timestamps Account management, fraud detection, responsible gaming
Technical Data IP address, device type, web browser, cookies Security, platform optimisation, performance analytics
Communication Data Chat transcripts, support emails Complaint resolution, service improvement

O9win may also receive data about you from legitimate third-party sources, such as identity verification agencies used for the KYC process and publicly available data for fraud prevention purposes.

3. How We Use Your Data

O9win uses your personal data for the following purposes, all of which are lawful and necessary for the provision of our services:

  • Account Management: To register, verify, and manage your account on the o9win platform, including the login process and account security.
  • Transaction Processing: To securely and accurately process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX, as well as withdrawals to your account.
  • Legal Compliance: To fulfil our obligations under applicable laws, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
  • Fraud Prevention: To detect, investigate, and prevent fraudulent activity, platform abuse, or unauthorised access that could compromise your security.
  • Service Communications: To send important notifications relating to your account, transactions, promotions and policy updates relevant to your use of the platform.
  • Responsible Gambling: To monitor betting patterns and identify players who may need responsible gaming support, in line with our commitment to member wellbeing.
  • Platform Improvements: To analyse how players use the platform in order to improve the user experience, refine existing features, and develop more useful new ones.
  • Customer Support: To provide effective and accurate assistance when you contact the o9win support team via live chat or email.

Direct Marketing: o9win only sends you marketing communications if you have given explicit consent to receive them. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting our support team.

4. Data Sharing with Third Parties

O9win does not sell, rent, or trade your personal data to any third party. However, there are limited situations where we may need to share your data, and this is done only under strict controls:

  • Payment Service Providers: Required transaction information is shared with payment providers (DuitNow, TNG, GrabPay, FPX and others) solely for the purpose of processing your financial transactions. They are bound by strict confidentiality obligations.
  • Licensed Game Providers: A minimum amount of technical data is required by game software providers such as Evolution Gaming and Pragmatic Play to ensure games function correctly. This data is strictly limited to what is technically necessary.
  • Identity Verification Agency: Identity information is shared with authorised third-party KYC service providers to verify your identity in accordance with legal requirements. These services operate under strict data protection agreements.
  • Legal Authorities: o9win may be required to disclose certain data to law enforcement agencies, regulatory bodies or courts when mandated by applicable law. We will notify you of any such disclosure where permitted by law.

All third parties that receive your data are required to process it solely in accordance with o9win's instructions and are bound by confidentiality and data protection agreements.

International Data Transfers: Some third-party service providers we use may store or process data outside of Malaysia. In such cases, o9win ensures that protection equivalent to Malaysia's PDPA is applied through appropriate contractual agreements.

5. Data Security & Protection

O9win continually invests in security infrastructure to ensure your data is protected at every stage — in transit, in processing, and at rest.

Key security measures we have implemented include:

  • 256-bit SSL Encryption (TLS 1.3): All communications between your device and o9win's servers are encrypted using the latest security protocols to prevent data interception by unauthorised parties.
  • Data Encryption at Rest: Sensitive data such as financial and identity information is stored in encrypted format within our databases, ensuring it remains unreadable even in the event of an unexpected breach.
  • Tiered Access Control: Only o9win staff with a legitimate business need and who have undergone appropriate background checks are permitted to access player personal data. All access is logged and monitored.
  • 24/7 Security Monitoring: A real-time threat detection system monitors all activity on the platform to identify and respond to any suspicious activity immediately.
  • Regular Penetration Testing: o9win conducts regular independent security tests (penetration testing) to identify and address any vulnerabilities before they can be exploited.
  • Incident Response Plan: o9win has a clear incident response plan in place. Should a data breach occur that affects you, we will notify you and the relevant authorities within the timeframe required by law.

While o9win takes every reasonable security measure, no system can be guaranteed 100% secure. You also play a role in protecting your account — use a strong password, enable two-factor authentication (2FA), and never share your login credentials with anyone.

6. Data Retention Period

O9win retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law.

Data Category Retention Period Reason
Active Account Data Throughout the active account period Ongoing service management
Financial Transaction Records 7 years after the transaction Financial & audit compliance
KYC Documents 5 years after account closure AML requirements and regulatory compliance
Support Communication Logs 3 years Dispute referral and service improvement
Technical Log Data 90 days Security monitoring and troubleshooting
Marketing Data Until consent is withdrawn Consent-based marketing communications

Once the retention period expires, your data will be permanently deleted or anonymised in accordance with secure data disposal procedures. Anonymised data can no longer be linked to you and may be used for aggregate analytical purposes.

7. Cookies, Tracking Technologies & Analytics

O9win uses cookies and similar tracking technologies to enhance your experience on our platform, ensure the platform functions correctly, and understand how players interact with our services.

Types of cookies we use:

Essential Cookies (Cannot Be Disabled)

Required for core platform functions such as login authentication, session security and betting cart management. Without these cookies, the platform cannot function properly.

User Preference Cookies

Saves your preferences such as language, display settings, and game preferences so you don't have to reconfigure them every time you log in.

Analytics Cookies (With Consent)

Helps us understand how players use the platform — which pages are visited most, time spent on each, and navigation paths. This data is used to improve the overall user experience.

Security Cookies

Used to detect and prevent fraudulent activity, manage secure sessions, and ensure that only you can access your account.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. For more granular cookie management, please reach out to our support team.

8. Your Rights Regarding Personal Data

Under Malaysia's PDPA 2010 and this Privacy Policy, you have the following rights regarding the personal data held by o9win:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request that we correct it without delay.

Right to Erasure

You may request deletion of your personal data, subject to our legal obligations to retain certain records.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.

Data Portability Rights

You may request a copy of your data in a machine-readable format for transfer to another service provider.

Right to Restrict Processing

Under certain circumstances, you may request that we limit how we process your data while a dispute is being resolved.

9. Child Protection & Age Restrictions

The o9win platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If you believe your child or any minor has registered for or used the o9win platform, please contact us immediately at support@o9win.click. We will take immediate action to investigate, close the account in question and delete all associated data.

O9win enforces a strict age verification process at registration and reserves the right to request supporting documents at any time to ensure compliance with age restrictions.

10. How to Contact o9win's Privacy Officer

If you have any questions or concerns, or would like to exercise your rights under this Privacy Policy, please contact o9win's Privacy Officer through the following channels:

  • Email: support@o9win.click (use the subject line "PRIVACY ENQUIRY" for priority handling)
  • Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
  • Response time: Privacy enquiries will be responded to within 3 business days

For enquiries relating to data access, correction, or deletion rights, please provide your registered account number and a clear description of your request so we can assist you as efficiently and accurately as possible.

Complaints to Regulatory Authorities: If you are not satisfied with how o9win has handled your data after contacting us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant regulatory body under applicable law.

This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions.

For any enquiries, please contact us at support@o9win.click or via live chat, available 24/7 within the platform.

Why Your Data Privacy Matters to o9win — Beyond a Legal Obligation

In today's digital world, many companies treat users' personal data as a revenue stream — something to be sold, shared, or traded with third parties for profit. o9win take a fundamentally different approach. To us, your personal data is not a business asset. It is information you have entrusted to us for very specific purposes, and we take that trust seriously.

When you register at o9win, making a deposit via DuitNow or Touch 'n Go eWallet, or reaching out to our customer support — you are sharing personal information with us. We understand that this requires trust. And trust is not given automatically; it must be earned through consistent action, transparent policies and demonstrable practices.

What Is PDPA and How It Protects You as a Malaysian Player

The Personal Data Protection Act 2010 (PDPA) is a Malaysian law that governs how organisations collect and use individuals' personal data. Under the PDPA, every organisation that processes the personal data of Malaysians must obtain meaningful consent before collecting data, use data only for the stated purposes, ensure data is accurate and up to date, retain data only for as long as necessary, and protect data from unauthorised access or misuse.

o9win fully comply with all of these PDPA principles. Beyond that, we adopt international best practices in data protection that go further than the minimum requirements under Malaysian law — because we believe our players deserve the best protection available, not just the bare legal minimum.

The KYC Process: Why It Exists and How It Protects You

Many players who are new to online betting platforms wonder why they are required to submit identity documents such as a national ID or utility bill. This is part of the KYC (Know Your Customer) process, which is mandatory for all licensed financial and betting platforms worldwide, including o9win.

KYC exists not to burden players — it exists to protect everyone. When o9win verifies the identity of every member, we ensure that no one can open an account using your identity without your knowledge. This protects you from identity theft. KYC also helps prevent money laundering — the practice of using financial platforms to conceal illegally obtained funds — which, if left unchecked, could harm all legitimate users of the platform.

All documents you submit to o9win for KYC purposes is stored with full encryption and is only accessible by staff specifically authorised for verification purposes. We do not share your identity documents with any third party other than accredited identity verification agencies that are bound by strict confidentiality agreements.

You Are in Control of Your Data

One of the things we are most proud of in our Privacy Policy o9win are the rights we give our players over their own data. You are not simply a passive "data subject" — you have real control over your information.

If you would like to know what data we hold about you, you may request a full copy and we will provide it within 14 business days. If any information is inaccurate, you may request a correction and we will handle it promptly. If you decide to close your account and want your data deleted, we will action that request — subject to the record retention obligations required under financial and anti-money laundering laws.

These rights are not empty promises. They are commitments you can exercise at any time by contacting the Privacy Officer o9win via email or live chat. Our Bahasa Malaysia-speaking team is ready to help you understand and exercise these rights easily and without hassle.

Data Security in Malaysia's Digital Payment Ecosystem

Malaysia has a highly advanced digital payment ecosystem — from DuitNow, which enables instant money transfers using a phone number, to Touch 'n Go eWallet, which has become a part of everyday life for Malaysians. When you use these methods for deposits or withdrawals at o9win, we ensure that your transaction data is handled to a level of security that meets or exceeds the standards set by the e-wallet providers themselves.

Every financial transaction involving an o9win you are protected by end-to-end encryption. Your e-wallet or banking account details are never stored in full within our systems — we only retain the tokens or transaction references needed for financial reconciliation and fraud detection. This is standard industry practice, ensuring that even in unforeseen circumstances, your complete financial information remains protected.

PLAY WITH CONFIDENCE ON A PLATFORM THAT RESPECTS YOUR PRIVACY

Your Data Is Safe. Your Experience Is Secured. Register with o9win Today.

O9win safeguards your personal data to the highest security standards. Register for free, claim a Welcome Bonus of up to RM888, and enjoy Sports Betting, Live Casino, and slots in a safe and transparent environment.

✓ SSL 256-bit ✓ PDPA Compliant ✓ Data never sold
Related Document Links

This Privacy Policy should be read together with the following documents: Terms & Conditions — which covers the complete terms governing use of the o9win platform. Responsible Gaming — guides and tools for a healthy betting experience. About Us — for more information about o9win as a platform and company. Any privacy-related enquiries may be sent to support@o9win.click.

FAQ – Privacy Policy o9win

Answers to the questions Malaysian players ask most frequently about how o9win manages their personal data.

No — o9win has never and will never sell, rent, or trade your personal data to advertising companies or any third party for commercial purposes. Your data is shared with third parties only in three strictly limited situations: with payment service providers to process your transactions, with accredited identity verification agencies for KYC purposes, and when required by law or regulatory authorities. All such sharing is carried out under strict controls and binding confidentiality agreements.

To request a copy of your personal data, send an email to support@o9win.click with the subject line "DATA ACCESS REQUEST", along with your registered account number and a brief identity verification. We will process your request within 14 business days and deliver your data report in a secure format. The report will include all personal data we hold about you, the purposes for which it is used, and who it has been shared with (if any) according to our records.

When your account is closed, o9win will take the following steps: data that is no longer needed for operational purposes will be deleted or anonymised. However, financial transaction records are retained for 7 years and KYC documents for 5 years following account closure, as required under Malaysian financial and anti-money laundering laws. This is a legal obligation, not a choice we make. Once the mandatory retention period has elapsed, all your data will be permanently deleted in accordance with secure, irreversible data disposal procedures.

Yes, the identification documents you submit for KYC are protected with full encryption both in transit (SSL 256-bit) and at rest within our systems. Access to these documents is strictly limited to personnel who are specifically authorised for identity verification purposes, and every access is logged for audit purposes. We work with accredited third-party identity verification agencies that are bound by stringent data protection agreements. Original documents are not retained beyond what is necessary for the KYC process — once verification is complete, only the verification record (not the full document) is kept for audit requirements.

Yes, you may withdraw your consent to receive marketing emails at any time through either of these methods: (1) Click the "Unsubscribe" link found at the bottom of any marketing email you receive from o9win — the change takes effect within 48 hours. (2) Log in to your account, go to your profile settings, and uncheck the marketing communications preference. Withdrawing consent for marketing emails does not affect your receipt of essential service communications such as transaction notifications, security alerts, or policy updates required to keep your account secure.

Privacy Assured. A Trusted Platform. Join o9win Today.

Over 250,000 Malaysian players trust o9win — not just for the games and bonuses, but because they know their personal data is protected with the utmost seriousness. Now it's your turn.

Bahasa Melayu