Privacy Policy e9win – Personal Data Protection for Malaysian Members

1Introduction & Scope of e9win's Privacy Policy

E9win is an online Sports Betting and casino platform operating under a valid international licence. We understand that member trust is our most valuable asset, and that trust depends greatly on how we handle your personal information. That is why privacy is not merely a legal obligation for e9win – it is a core value that shapes the way we operate every day.

This Privacy Policy applies to all users of the e9win platform, including registered members, general website visitors, and any individual who contacts the e9win support team. This Policy should be read together with e9win Terms & Conditions and Responsible Gaming Policy us.

2Personal Data We Collect

E9win collects only the personal data necessary to deliver a safe, seamless, and high-quality service. We collect what is truly needed — no excess data is gathered purely for storage purposes.

2.1 Automatically Collected Data

When you browse or use the e9win platform, our systems automatically record certain technical information such as your IP address, browser type, pages visited, and session duration. This data is used solely for security, fraud detection, and improving the user experience — not to personally identify you for marketing purposes.

2.2 Data You Provide Directly

The majority of personal data we hold is information you provided directly during account registration, identity verification (KYC), deposits or withdrawals, or when contacting the e9win support team. This data is the foundation of our ability to deliver a secure and personalised service to you.

3How e9win Uses Your Personal Data

E9win uses your personal data solely for lawful, necessary, and relevant purposes in connection with the delivery of platform services. The following is a complete list of the purposes for which your data is used:

• Account management and verification – ensuring your account is verified, secure and functioning correctly.
• Financial transaction processing – processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as your withdrawal payouts.
• Identity verification (KYC) – to meet anti-money laundering (AML) requirements and ensure only eligible individuals use the platform.
• Fraud prevention and security – detecting and blocking suspicious activity, unauthorised access attempts, and multi-account usage.
• Provision of customer support services – enabling e9win's Bahasa Malaysia-speaking support team to assist you effectively.
• Service communications – sends important notifications about your account, promotions you are eligible for, changes to terms, or security issues.
• Legal and regulatory compliance – to meet reporting requirements to the relevant authorities in line with licensed operating obligations.
• Platform improvement – analysing aggregated, anonymised usage patterns to improve the experience for all e9win users.

4Data Sharing with Third Parties

E9win does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, there are limited situations where e9win may need to share data with certain parties to keep the platform functioning properly:

4.1 Technical Service Providers

E9win shares necessary data with carefully selected technical service providers – including casino game providers (such as Evolution Gaming, Pragmatic Play Live), payment service providers (for processing Touch 'n Go, GrabPay, DuitNow and FPX transactions), and server infrastructure providers. All these providers are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.

4.2 Legal Requirements

E9win may be required to disclose personal data to law enforcement authorities, regulatory bodies, or enforcement agencies when compelled to do so by applicable law, court order, or in the context of a financial crime investigation. In such situations, e9win will endeavour to notify you in advance unless prohibited by law from doing so.

4.3 Business Transfers

In the event that e9win undergoes a merger, acquisition, or transfer of business assets, member personal data may be transferred as part of that transaction. Members will be notified of any change in ownership and their rights before any such data transfer takes place.

5Personal Data Security at e9win

E9win invests seriously in security infrastructure to ensure the personal data of all members is protected at all times. The key security measures we have in place are as follows:

• 256-bit SSL Encryption – all communications between your device and e9win's servers are encrypted using bank-grade security standards.
• Tiered access controls – sensitive member data is accessible only to e9win staff who genuinely require it to perform their duties, with full audit logs maintained.
• Two-factor authentication (2FA) – e9win supports two-factor authentication to protect your account from unauthorised access.
• Regular security scans – the e9win system undergoes regular penetration testing and security audits conducted by accredited third parties.
• Real-time activity monitoring – the e9win system monitors account activity in real time to detect suspicious patterns and respond promptly.

6Data Retention Period

E9win retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. General data retention guidelines are as follows:

• Active account data – retained for the duration your account remains active and for a reasonable period after closure for audit purposes.
• Financial transaction records – retained for a period of seven (7) years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Support communication records – retained for a period of two (2) years for training purposes, service improvement, and dispute resolution.
• Security and access logs – retained for a period of one (1) year for security investigation and fraud detection purposes.
• Closed account data – identifying information is deleted or anonymised within 90 days of account closure, subject to any longer retention periods required by law.

When data is no longer needed, e9win will delete or anonymise it using secure procedures to ensure it cannot be recovered or reused.

7Cookies & Tracking Technologies

E9win uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the e9win website. The types of cookies we use are as follows:

You can manage your cookie settings through your internet browser at any time. However, disabling essential cookies may affect the login functionality and overall experience on the e9win platform. Analytics and performance cookies can be disabled without affecting the platform's core functionality.

8Your Rights as an e9win Member

Under the Malaysia Personal Data Protection Act (PDPA) 2010 and e9win's own policies, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the e9win privacy team at support@e9win.best with the email subject line "Data Privacy Request", along with your account details for identity verification. All valid requests will be processed within 21 working days from the date of receipt.

9Financial Transaction Security

The security of financial transactions is among e9win's highest priorities. All deposits and withdrawals processed through the e9win platform – whether via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks) – are protected by comprehensive layers of security.

Sensitive financial information such as full e-wallet account numbers or bank account numbers is never stored directly in e9win's systems. Instead, we use secure payment tokens provided by accredited payment gateway providers. This means that even in the unlikely event of a data breach, your full financial information remains protected.

E9win also operates a real-time fraud detection system that monitors all transactions. Unusual or suspicious transactions are automatically flagged and may require additional verification from you before being processed – this is to protect your funds, not to inconvenience you.

10Children's Privacy

The e9win platform is intended for adult users aged 18 and above only. e9win does not knowingly collect or store personal data from individuals under the age of 18. If we discover that someone under 18 has provided us with personal data, that account will be closed immediately and all associated data will be deleted from our systems.

If you are a parent or guardian and believe your child has registered an e9win account without your knowledge, please contact our support team at support@e9win.best promptly. We will take appropriate action within 24 hours of receiving the report.

11Changes to the Privacy Policy

E9win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this document.
• Displays a notification within the e9win platform when you log in.
• Sends notifications via SMS to your registered phone number (for significant changes).

Continued use of the e9win platform after any policy changes take effect will be considered acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of how e9win protects your information.

12Contact e9win for Privacy Enquiries

If you have any questions, concerns, or requests regarding e9win's Privacy Policy or how we handle your personal data, please do not hesitate to get in touch. The e9win team is always ready to help:

We speak Bahasa Melayu, English, and Mandarin. Feel free to reach out in whichever language you are most comfortable with — our team will ensure you receive a clear and satisfactory answer about how e9win protects your privacy.