9toto Privacy Policy

1 Introduction

9toto respects the privacy of website visitors and eligible adult account holders. This Privacy Policy sets out the categories of information that 9toto may collect, the purposes for which that information may be processed and the safeguards used to protect it.

The policy applies to website browsing, account registration, identity verification, casino and sports activity, customer-service communication, responsible-gambling controls and transactions involving Malaysian Ringgit or supported digital assets.

Privacy and account security are shared responsibilities. 9toto applies appropriate controls to information within its systems, while users must protect passwords, one-time codes, banking PINs and device access.

2 Scope and Definitions

For this policy, personal data means information relating to an identified or reasonably identifiable individual. Processing includes collecting, recording, organising, using, storing, disclosing, restricting or deleting information.

An account holder is an eligible person who has registered with 9toto. A service provider is an organisation engaged to perform a defined function, such as hosting, identity verification, fraud screening, payment processing or technical support.

References to Malaysian users include visitors in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and elsewhere in Malaysia. The same core privacy standards apply regardless of city or preferred 9toto service.

3 Information We Collect

The data collected by 9toto depends on how a person uses the website. Visitors who only read public content provide less information than registered players who request MYR deposits or withdrawals.

4 Purposes of Data Processing

9toto may process personal information for the following operational purposes:

• Creating and administering a secure user account.
• Confirming that a user meets the minimum age requirement of 21.
• Completing KYC, identity, payment ownership and fraud checks.
• Providing casino information, sports markets and account functionality.
• Recording wagers, settlements, bonus activity and transaction history.
• Processing deposits and withdrawals in MYR or supported digital assets.
• Responding to support enquiries, complaints and account instructions.
• Detecting unauthorised access, collusion, bonus abuse and financial crime.
• Applying deposit limits, cooling-off periods or self-exclusion requests.
• Meeting legal, regulatory, accounting and dispute-resolution obligations.

Where consent is required for a particular activity, 9toto will seek it through an appropriate notice or account choice. Other processing may be necessary to perform the account agreement, protect legitimate security interests or meet applicable obligations.

5 Payment and Financial Information

9toto may process payment references and account ownership information relating to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank and supported cryptocurrency transfers. The exact information depends on the selected method.

Financial information is used to match deposits, assess withdrawal requests, identify unusual activity and return funds to a verified payment method. Users should only transact from an account held in their own legal name.

9toto will never ask a player to reveal a full banking password, e-wallet PIN, one-time authorisation code or cryptocurrency recovery phrase. Anyone receiving such a request should stop the interaction and protect the affected account immediately.

6 Cookies and Device Information

9toto may use cookies and similar browser storage to maintain secure sessions, remember essential settings, understand page performance and detect suspicious login patterns. Some cookies are necessary for account functionality and cannot be disabled without affecting the service.

Device information may include browser type, operating system, approximate location derived from an IP address, screen size, language preference and session timestamps. 9toto uses this information to improve compatibility across common Malaysian mobile and desktop devices.

Browser controls can remove or block certain cookies. Doing so may sign the user out, reset preferences or prevent some 9toto account functions from operating correctly.

7 Sharing and Disclosure

9toto does not disclose personal information without a legitimate purpose. Information may be provided to carefully selected service providers where required to operate, protect or administer the platform.

Potential recipients may include:

• Identity and age-verification providers.
• Payment processors, banks, e-wallet services and transaction partners.
• Hosting, security, analytics and technical-support providers.
• Professional advisers engaged under confidentiality obligations.
• Authorities or dispute bodies where disclosure is lawfully required.

Service providers should receive only information reasonably necessary for their assigned function. They are expected to apply confidentiality and security measures appropriate to the nature of the data.

8 International Data Transfers

Some technical, payment or verification providers may process information outside Malaysia. Privacy laws and enforcement arrangements in another jurisdiction may differ from those applicable to a Malaysian user.

When an international transfer is necessary, 9toto seeks to use contractual, organisational or technical safeguards appropriate to the circumstances. Transfer decisions should consider the sensitivity of the information, processing purpose and security arrangements of the recipient.

9 Data Retention

9toto retains personal information only for as long as reasonably required for the purpose for which it was collected, subject to legal, financial, security and dispute-resolution needs.

Account records may remain necessary after closure to resolve payment disputes, maintain self-exclusion controls, investigate fraud, satisfy accounting requirements or respond to lawful requests. Retention periods may differ between identity records, transaction data, support correspondence and technical logs.

When information is no longer required, 9toto may securely delete it, anonymise it or isolate it from ordinary operational access, depending on technical and legal considerations.

10 Data Security

9toto uses layered technical and organisational measures intended to reduce the risk of accidental loss, unlawful disclosure, alteration and unauthorised access. These measures may include controlled access, encrypted transmission, security monitoring, authentication controls, logging and staff confidentiality requirements.

No internet-based service can promise absolute security. Users can reduce personal risk by choosing a unique password, protecting their email account, keeping devices updated and signing out after using a shared computer.

A suspected compromise should be reported promptly. 9toto may temporarily restrict access while verifying account ownership and reviewing unusual login or payment activity.

11 User Rights and Choices

Subject to applicable law, identity verification and legitimate exceptions, a user may request information about the processing of their personal data. Available privacy choices may include:

• Access Request confirmation of whether 9toto holds personal information associated with the verified account.
• Correction Ask 9toto to update inaccurate or incomplete account information supported by suitable evidence.
• Restriction Request that certain processing be limited while an accuracy or privacy concern is reviewed.
• Deletion Ask for eligible information to be removed where retention is no longer required by law or operational necessity.
• Communication choice Change preferences for optional promotional messages while continuing to receive essential account notices.
• Complaint Raise a concern about the handling of personal information and request a review by 9toto.

A privacy request may require proof of identity to prevent disclosure to an unauthorised person. 9toto may decline or limit a request where necessary to protect another person, prevent fraud or comply with a lawful retention obligation.

12 Service and Promotional Communications

Essential messages may include account security alerts, payment status updates, changes to legal terms and responsible-gambling notices. These communications are part of administering the 9toto account and may continue while the account remains active.

Optional promotional communications may relate to casino entertainment, EPL or Liga Super Malaysia markets, bonus offers and loyalty activity. Where applicable, users may change their communication preference through available account or support channels.

Stopping optional marketing does not prevent 9toto from sending important security, transaction or policy notices.

13 Age Restrictions

9toto is intended only for adults aged 21 and above. The platform does not knowingly permit minors to register, deposit or participate in casino-style gambling.

Age and identity information may be checked during registration, before withdrawal or when inconsistent account details are detected. If 9toto reasonably believes an account belongs to a person under 21, access may be suspended while the matter is investigated.

Parents and guardians should protect shared devices, avoid saving gambling passwords in an accessible browser and consider device-level controls where appropriate.

14 Changes to This Privacy Policy

9toto may revise this Privacy Policy to reflect changes in services, security practices, payment methods or applicable requirements. The updated review date will identify when the policy was most recently changed.

Where a change materially affects how existing account data is used, 9toto may provide an additional website or account notice. Continued use after the effective date means the revised policy applies to later processing, subject to any consent required by law.

15 Contact Us

Questions, correction requests or concerns about this Privacy Policy may be directed to the 9toto support team. The website email is displayed below as plain text:

Website Email: [email protected]

Include enough information to identify the relevant account and describe the request, but never send a password, banking PIN, one-time code or cryptocurrency recovery phrase. 9toto may request a proportionate identity check before discussing personal account data.