PDPA COMPLIANT · SSL 256-BIT

Privacy Policy 9koi —
Your Data, Our Responsibility

We understand how valuable your personal information is. This Privacy Policy clearly explains how 9koi collects, uses, stores, and protects your data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international security standards.

Your Privacy Is Safe

9koi never sells members' personal data to any external party.

SSL 256-bit
PDPA Compliant
2FA Available
Important Note: By registering and using the 9koi platform, you confirm that you have read and fully understood this Privacy Policy. This Policy forms part of the agreement between you and 9koi, and should be read together with Terms and Conditions us.

01 Information We Collect

9koi collects your personal information through several channels when you register, verify your identity, make deposits or withdrawals, and when you interact with our platform. All data collection is carried out transparently and solely for the stated purposes.

A. Information you provide directly:

Full name MyKad / Passport Date of birth Phone number Email address Residential address Bank account details E-wallet

B. Information collected automatically:

  • IP address and IP-based geographic location
  • Device type, operating system, and browser version
  • Activity log data — pages visited, session duration, clicks, and navigation
  • Session cookie data and user preference cookies
  • Deposit, withdrawal, and wagering history transaction records

C. Information from third parties:

  • Identity verification data from approved KYC service providers
  • AML (Anti-Money Laundering) compliance information from relevant agencies
  • Payment data from authorised payment processors such as FPX and e-wallet operators
Data Minimisation Principle: 9koi only collects data that is genuinely necessary to operate our services. We do not collect irrelevant sensitive information such as medical data, political views, or religious beliefs.

02 How We Use Your Data

Every piece of data that 9koi collects has a specific and legitimate purpose. We do not use your data for any purpose other than those stated below, and we will not use it without a clear legal basis.

Purpose of Use Data Type Legal Basis
Identity verification & KYC Name, IC/Passport, date of birth Legal obligation
Deposit & withdrawal processing Bank / e-wallet details Contract execution
Account security & 2FA verification Phone number, email, IP Legitimate interest
Fraud prevention & AML IP, transaction records, geolocation Legal obligation
Customer support Email, phone number, account history Contract execution
Responsible gaming monitoring Betting patterns, deposit history Public interest
Promotional communications (with consent) Email, phone number Consent
Platform analytics & improvement Log data, cookies, navigation behaviour Legitimate interest
We Will Never: Sell your data to advertisers, use your data for third-party marketing purposes without your consent, or make automated decisions that materially and negatively affect you without human review.

03 Third-Party Disclosure

9koi only shares your personal data with selected and trusted third parties, strictly when necessary to deliver our services or fulfil legal obligations. Every third party that receives your data is bound by strict data protection agreements.

  • Licensed payment processors — FPX, Touch 'n Go, GrabPay, Boost, and partner banks to process your financial transactions.
  • KYC service provider — accredited identity verification companies that help us securely verify your documents.
  • AML compliance agencies — authorities and agencies designated by law for monitoring suspicious financial activity.
  • Cloud infrastructure provider — data storage servers and services that are audited and compliant with international security standards (ISO 27001).
  • Government authorities — only when required by court order, warrant, or applicable legal provisions in Malaysia.
Important: 9koi never sells, leases, or trades members' personal data to data brokers, marketing companies, or any other commercial party. This is our absolute commitment to every member.

04 Data Security

9koi invests seriously in cybersecurity infrastructure to ensure your personal and financial data is always protected. Our security systems are built on a "defense in depth" principle — multiple layers of protection ensuring that even if one layer is compromised, the remaining layers stay firmly intact.

  • 256-bit SSL/TLS encryption — all data transmitted between your browser and 9koi servers is fully encrypted. No one can intercept this communication.
  • Two-factor authentication (2FA) — an extra security layer for login and withdrawals to prevent unauthorised access even if your password is compromised.
  • Data encryption at rest (at-rest encryption) — all sensitive data in our database is encrypted using AES-256, including banking information and KYC documents.
  • 24/7 threat monitoring — our cybersecurity team monitors suspicious activity around the clock and can respond within minutes.
  • Regular penetration testing — independent security audits conducted regularly by accredited third-party firms to identify and address vulnerabilities.
  • Internal access controls — only authorised staff with a clear job requirement may access member data, and every access is logged and audited.
Incident Response: In the event of any data security breach affecting your personal information, 9koi will notify you within 72 hours of the incident being identified, in line with international data protection best practices.

05 Cookies & Tracking Technologies

9koi uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse how our platform is used. We believe in full transparency — here is everything you need to know about our cookies.

Cookie Type Purpose Duration Opt-Out Available?
Session Cookies (Required) Maintaining login sessions & session security Expires when the browser is closed No — required for the platform to function
Preference Cookies Saving language & display preferences 12 months Yes
Analytics Cookies Understanding platform usage patterns 6 months Yes
Security Cookies Detecting suspicious login attempts 30 days No — critical for account security

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality and account security. 9koi does not use third-party cookies for advertising purposes.


06 Data Storage & Retention

9koi retains your personal data only for as long as necessary for the original purpose of collection, or as required by Malaysian law. All primary 9koi servers operate in data centres certified to ISO 27001 and SOC 2 Type II standards.

  • Active account data — retained for as long as your account is active and in use.
  • Financial transaction records — retained for seven (7) years after the transaction occurs, as required by Malaysian financial and tax legislation.
  • KYC Documents — retained for five (5) years after account closure, in accordance with AML requirements.
  • Log and activity data — retained for two (2) years for security audit and customer support purposes.
  • Marketing data (with consent) — retained until you withdraw consent or request deletion.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you.


07 Your Rights Under PDPA

As a user protected under Malaysia's Personal Data Protection Act (PDPA) 2010, you have several important rights regarding your personal data. 9koi is committed to facilitating the exercise of these rights promptly and without hassle.


08 Privacy Policy Amendments

9koi reserves the right to update this Privacy Policy at any time to reflect changes in operational practices, new legal requirements, or improvements in how we protect your data.

  • The "Updated" date at the top of this page will always reflect the latest version of this policy.
  • For material changes that significantly affect how we process your data, we will send a notification via email or an in-platform notice at least 14 days before the changes take effect.
  • Your continued use of the 9koi platform after amendments are published constitutes your acceptance of the revised policy.
  • If you disagree with the amendments, you have the right to close your account and request the deletion of relevant data.
Stay Updated: We encourage you to review this page periodically. A history of policy amendments is available upon request through our customer support channels.

09 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 9koi, our team is ready to assist you.

  • Live Chat 24/7 — the fastest way to get immediate assistance, available directly within your 9koi platform.
  • Official Email — [email protected] — for written enquiries requiring documentation or further reference.
  • Data Protection Officer (DPO) — for formal complaints relating to data protection, you may contact our DPO via the same email with the subject "DPO COMPLAINT".
Response Time: We aim to respond to all privacy-related inquiries within 3 working days. For official requests regarding PDPA rights, we will respond within 21 days in accordance with legal provisions.

Your Privacy Rights at 9koi

Under the Personal Data Protection Act 2010, you have full control over your information. 9koi ensures every one of these rights can be exercised with ease.

01
Right of Access

You have the right to request a copy of all personal data we hold about you at any time.

02
Right to Rectification

If any of your data is inaccurate or incomplete, you may request an immediate correction.

03
Right to Erasure

You may request deletion of your data when it is no longer needed, subject to our legal obligations.

04
Right to Opt Out of Marketing

You may opt out of receiving marketing communications at any time via the unsubscribe link in our emails.

05
Right to Restrict Processing

In certain circumstances, you may request that we restrict how we use your data while a review is pending.

06
Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another provider.

Why Your Data Is Safe with 9koi

We do not merely comply with the law — we set a higher standard than what is required, because your trust is 9koi's most important asset.

Bank-Grade Encryption

The same 256-bit SSL/TLS technology used by the world's leading financial institutions protects every byte of data you send to 9koi — no compromises.

Automated & Secure KYC

9koi's identity verification process uses AI technology and end-to-end encryption. Your documents are processed in a secure environment and are not stored as raw files.

Two-Factor Authentication (2FA)

Every login and withdrawal can be secured with 2FA via SMS or an authenticator app. This ensures only you can access and manage your account.

Zero Data Selling

This is not merely a promise — it is a core operating principle of 9koi. We have never and will never sell, lease, or trade members' personal data to any commercial party.

Independent Security Audit

Independent cybersecurity firms conduct regular penetration testing and security audits on 9koi systems, ensuring no vulnerabilities go unaddressed.

Full PDPA Compliance

9koi operates in full compliance with Malaysia's Personal Data Protection Act 2010, ensuring your legal rights as a Malaysian user are always respected.

Privacy & Data Questions at 9koi

No, absolutely not. This is one of 9koi's core non-negotiable policies. We do not sell, lease, trade, or transfer your personal data to any external commercial party for marketing purposes or for any purpose beyond what is stated in this Privacy Policy. Your data belongs to you — it is not our commodity.

You may submit a data access or deletion request via 9koi's in-platform 24/7 Live Chat or by emailing [email protected], clearly stating the type of request. Our team will verify your identity before processing the request, and we will respond within 21 working days in accordance with PDPA provisions.

Yes. All KYC documents you upload are processed in an encrypted environment and stored using AES-256 encryption. Your documents cannot be accessed by unauthorised personnel, and access to KYC files is logged and audited regularly. These documents are retained for five years after account closure as required by Malaysia's AML legislation.

Yes, you can opt out of marketing communications at any time. Every 9koi promotional email contains an easy-to-use "unsubscribe" link. You can also update your communication preferences directly in your account settings under the "Notifications & Communications" section. Unsubscribe requests will be processed within 48 business hours.

When you close your account, 9koi will delete or anonymise your data that is no longer required. However, financial records and transaction history must be retained for seven years and KYC documents for five years as required by Malaysian law. This data will not be used for marketing purposes and is kept solely for legal compliance.

Data Protected. Privacy Respected. Play with Confidence.

9koi ensures every aspect of your privacy is protected to the highest standard. Over two million Malaysian players have trusted us — and we safeguard that trust wholeheartedly. Register now and enjoy a safe, fair, and responsible gaming experience.

Bahasa Melayu