Privacy Policy 9kis —
Your Data, Our Responsibility

1 Introduction

Welcome to the Privacy Policy page 9kis. We understand that your trust is the most valuable asset we hold. That is why we take the responsibility of protecting your personal data extremely seriously and are committed to handling your information in a transparent, responsible and secure manner.

This Privacy Policy clearly explains how 9kis collects, uses, stores, and protects your personal data when you use the website https://9kis.pro or our mobile app. It also outlines the rights you hold regarding your personal data and how you can exercise them.

By registering for or using 9kis services, you agree to have your personal data handled as described in this Privacy Policy. This Policy should be read together with Terms and Conditions which together form the complete agreement between you and 9kis.

2 Personal Data We Collect

9kis only collects data that is strictly necessary for platform operations and to ensure a safe, smooth user experience. We do not collect excessive or irrelevant information.

2.1 Data You Provide Directly

• Identity information: Full name, national ID or passport number, date of birth
• Contact information: Email address, Malaysian phone number
• Financial information: Bank account or e-wallet number for payment processing purposes
• KYC Documents: Digital copy of national ID or passport, verification selfie (where required)
• Account information: Username, password (stored as an unreadable hash), language preference

2.2 Automatically Collected Data

• Device data: Device type, operating system, app version, screen resolution
• Network data: IP address, approximate location (state/city level), internet service provider
• Session data: Login and logout times, session duration, in-platform navigation activity
• Game data: Records of betting, wins, losses, and transactions for audit and accountability purposes
• Cookie data: Cookie information and session tokens to ensure a seamless user experience

3 How We Use Your Data

Every piece of data we collect is used for defined and legitimate purposes. We do not use your data beyond the scope described here without obtaining fresh consent from you.

4 Data Sharing With Third Parties

9kis takes a very limited approach to sharing member data. We does not sell your data to anyone. Data sharing only occurs in very specific and legally justified circumstances.

4.1 Authorised Recipients of Data

• Payment service providers: DuitNow, FPX, Touch 'n Go, Boost, and GrabPay, along with our partner banks, collect only the minimum financial data necessary to process your transactions securely.
• KYC service providers: Trusted third parties who have signed strict confidentiality agreements to assist in verifying member identities
• Cloud infrastructure providers: Servers and storage services compliant with ISO 27001 security standards
• Competent authorities: Royal Malaysia Police (PDRM), Bank Negara Malaysia, or courts when required by court order or applicable law

4.2 Data Sharing Conditions

Every third party that receives 9kis member data is required to comply with the following strict conditions:

• Sign a Data Processing Agreement (DPA) with 9kis
• Use the data solely for authorised purposes
• Implement technical security measures equivalent to or exceeding 9kis standards
• Notify 9kis immediately in the event of any data security incident

5 Encryption & Technical Security

9kis continually invests in industry-grade security infrastructure to ensure your data is always protected against any digital threats.

5.1 Key Security Measures

• Data encryption in transit: TLS 1.3 protocol for all communications between our app/website and servers
• Data encryption at rest: All sensitive data is stored in AES-256 encrypted format
• Password management: Passwords are stored using the bcrypt algorithm with a unique salt — no one on the 9kis team can read your password.
• Two-factor authentication (2FA): Available for all accounts as an added layer of security
• Real-time monitoring: Active 24/7 IDS/IPS (Intrusion Detection/Prevention System)
• Penetration testing (Pen Test): Conducted periodically by qualified independent third parties

5.2 Incident Response

In the event of any data security incident involving members' personal information, 9kis is committed to:

• Identify and contain incidents within 24 hours of detection
• Notify affected members within 72 hours via their registered email
• Report incidents to the relevant authorities as required under PDPA
• Provide a full report on the incident and the remediation steps taken

6 Cookies & Tracking Technologies

9kis uses cookies and similar tracking technologies to ensure the platform functions correctly and to provide you with a better experience. We do not use cookies to track your activity outside of the 9kis platform.

6.1 Types of Cookies Used

• Essential cookies: Required for core platform functions such as Login session verification and account security. These cookies cannot be disabled.
• Performance cookies: Collect information on how you use the platform to help us improve functionality and speed.
• Functional cookies: Save your preferences such as language and display format for your convenience.
• Analytics cookies: Aggregated and anonymised data used to understand overall usage patterns.

7 Member Rights Regarding Personal Data

As a 9kis member and data subject under Malaysia's PDPA, you have the following rights, which you may exercise at any time by contacting our team:

• Right of access: You have the right to request a copy of the personal data we hold about you
• Right to rectification: You have the right to request correction of inaccurate or incomplete data
• Right to erasure: You may request deletion of your personal data in certain situations permitted by law
• Right to restrict processing: You may request that we restrict how we process your data under certain circumstances
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time
• Right to withdraw consent: You may withdraw consent at any time without affecting the validity of processing carried out prior to withdrawal

To exercise any of the above rights, please contact the 9kis support team via live chat or email at [email protected]. We will process your request within 14 working days from the date the request is received.

8 Data Retention Period

9kis retains your personal data only for as long as it is needed for the stated purpose or as required by Malaysian law. The following are retention period guidelines for key data categories:

• Active account data: Retained for the duration your account is active and for 5 years after account closure for financial compliance purposes
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysian financial and tax regulations
• KYC Documents: Retained for 5 years after account closure or longer if required by the relevant authorities
• System and security logs: Retained for 12 months for security incident investigation purposes
• Support conversation records: Retained for 2 years for quality control purposes

When the retention period expires or you submit a valid deletion request, your data will be permanently deleted or anonymised within 30 days.

9 Third-Party Links & Services

The 9kis platform may contain links or integrations to third-party services such as payment providers or partner gaming platforms. Please note that the 9kis Privacy Policy applies only for the 9kis platform only.

Each third-party service integrated with our platform has its own privacy policy. We recommend reading the privacy policy of each service you use to understand how your data is handled by them independently.

10 Privacy Policy Amendments

9kis reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements.

When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Send notifications to all members via their registered email at least 7 days before changes take effect
• Display a prominent notice within the platform when you first log in after any changes

Continued use of the 9kis platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

11 Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your rights regarding personal data, our Data Protection team is ready to assist:

• Live Chat: Available 24/7 on the 9kis web platform and mobile app — the fastest way to get a response
• Email Privacy: [email protected] — include "Privacy Enquiry" in your email subject line
• Response Time: Under 2 minutes via live chat; within 24 hours via email

For official requests relating to data rights under the PDPA, we will provide an acknowledgement within 3 business days and resolve the request within 14 business days.