Privacy Policy 9sl — Personal Data Protection for Malaysian Users

9sl ("we", "Platform" or "9sl.vin") takes seriously its responsibility to protect the privacy of every user of our services. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management.

By registering and using the 9sl platform, you agree to the collection and use of your information as described in this document. If you do not agree with any part of this Privacy Policy, please discontinue use of the platform and contact us to close your account.

This Privacy Policy applies to all 9sl services including the main website at 9sl.vin, the 9sl mobile app for Android and iOS, and all related services operating under the 9sl brand.

9sl collects various categories of information depending on how you interact with our platform. This data collection is carried out transparently and only for legitimate purposes.

Data you provide directly covers all information you submit during registration, KYC verification, withdrawal applications, and interactions with our support team. You are solely responsible for the accuracy of the information you provide.

Data collected automatically includes technical and behavioural data automatically recorded while you use our platform. This data is used to detect fraud, improve platform performance, and ensure the security of your account.

Every piece of information we collect is used for a specific and legitimate purpose. 9sl does not use your data for any purpose not stated in this Privacy Policy without obtaining your consent first.

• Account Management: Create, verify, and maintain your account on the 9sl platform.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
• Identity Verification (KYC): Comply with legal requirements and ensure the platform remains free from money laundering.
• Fraud Prevention: Detect and investigate suspicious activity to protect your account and the integrity of the platform.
• Customer Support: Respond to inquiries, resolve issues, and provide technical assistance to you.
• Platform Communications: Send important notifications about your account, security, terms changes, and promotions (with your consent).
• Platform Enhancement: Analyze usage patterns to enhance user experience and system performance.
• Legal Compliance: Comply with all legal obligations and reporting requirements set by Malaysian authorities.

9sl does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes. However, in certain limited situations, we may need to share your information with the following parties:

• Payment Service Providers: Required transaction information is shared with trusted payment processors such as FPX, TNG eWallet, GrabPay, and Boost providers to enable your transactions to be processed securely.
• Technical Service Provider: Trusted hosting, cybersecurity, and technical infrastructure service providers bound by strict data confidentiality agreements.
• Regulatory Bodies and Authorities: When required by Malaysian law, court orders, or legitimate requests from law enforcement authorities.
• KYC Service Provider: A third-party identity verification platform used to authenticate your identification documents for PDPA compliance and anti-money laundering purposes.
• Selected Business Partners: In the event of an acquisition, merger, or sale of the business, user data may be transferred subject to prior notice to you.

All third parties that receive your data are required to maintain data security and confidentiality standards equivalent to those of 9sl. We are not responsible for the privacy practices of third parties who operate under their own privacy policies.

9sl continually invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, leaks, destruction, or misuse.

• 256-bit SSL Encryption: All data transmitted between your device and 9sl servers is encrypted using 256-bit TLS/SSL protocols, the same standard adopted by leading banking institutions.
• Stored Data Encryption: Sensitive information such as passwords and financial details are stored in encrypted format using strong hashing algorithms — no one, including 9sl employees, can view your password in its original form.
• 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect and contain intrusion attempts, cyberattacks, and unusual activity.
• Two-Factor Authentication (2FA): An additional security layer via OTP codes sent to your registered phone number for every login and important transaction.
• Internal Access Controls: Access to user data within our organisation is strictly limited on a need-to-know basis. Unrelated employees have no access to your account information.
• Regular Security Audits: 9sl conducts regular penetration testing and security audits by independent cybersecurity experts.

9sl uses cookies and similar tracking technologies to enhance user experience, maintain your login session, and collect analytics data on platform usage. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and security management. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect anonymized data on how users use the platform to help us identify areas for improvement.
• Functional Cookies: Remember your preferences such as language, location, and display settings to deliver a more personalized experience.
• Analytical Cookies: Help us understand traffic and usage patterns for overall service improvement purposes.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the 9sl platform and your overall user experience. Major browsers such as Chrome, Firefox, Safari, and Edge all have options to manage cookies in their privacy settings.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you. You may exercise any of these rights by contacting the 9sl support team.

9sl retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your account is active and used for ongoing platform management.
• Financial Transaction Data: Retained for a minimum of 7 years after the transaction occurs, in line with Malaysian financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with the Anti-Money Laundering Act 2001.
• Communication Logs: Customer support communication records are retained for 2 years for reference and dispute resolution purposes.
• Technical Data: Technical logs and analytical data are retained for 12 months and then deleted or anonymized.

Once the specified retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. All data is stored on servers located in regions that meet or exceed Malaysia's data protection standards.

9sl reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any changes will be communicated to you through the following means:

• In-platform or 9sl mobile app notifications upon login.
• Email notifications to your registered email address for significant changes.
• Updates the "Last Updated" date displayed at the top of this page.

It is your responsibility to review this Privacy Policy periodically. Continued use of the 9sl platform after any amendments are published will be deemed as your acceptance of the latest version of this Privacy Policy.

If you have any inquiries, concerns, or wish to exercise any of your privacy rights, the 9sl Data Protection Officer (DPO) team is ready to assist you through the following channels:

• Live Chat: Available 24/7 directly within the 9sl platform or mobile app. This is the fastest way to get a response.
• Email: [email protected] — privacy and data protection requests will be responded to within 3 business days.
• WhatsApp: Support number available once you log in to your 9sl account.

For specific enquiries regarding responsible gaming, account limits, or self-exclusion, please refer to our Responsible Gaming us. For other general enquiries, our FAQ may already contain the answer you are looking for.

If you feel your complaint has not been handled satisfactorily, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.