Privacy Policy 9kelab – Member Personal Data Protection

9kelab understands that your trust is our most valuable asset. We are committed to ensuring that every piece of personal information you share with us is handled with full integrity, transparency, and accountability.

This Privacy Policy applies to all services provided through the 9kelab platform, including the main website, mobile app, and all our official communication channels. This Policy is to be read together with Terms and Conditions 9kelab.

If you have any questions about how we handle your personal data, our customer support team is ready to assist through the channels available on the platform.

9kelab collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data categories such as health information or political affiliations unless specifically required by law.

The personal data we collect is used solely for the following purposes:

• Account Management: Create, verify, and maintain your member account on the 9kelab platform.
• Transaction Processing: Securely and accurately process deposits, withdrawals, and all financial transactions.
• KYC Verification: Fulfil identity verification and anti-money laundering (AML) compliance requirements as mandated.
• Customer Support: Handle inquiries, complaints, and provide technical assistance to members.
• Platform Security: Detect and prevent fraud, system abuse, and suspicious activity.
• Service Improvement: Analyse usage patterns to improve the user experience and develop better new features.
• Marketing Communications: Send promotional information, exclusive offers, and platform updates — only to members who have given their consent.
• Legal Compliance: Meet reporting obligations and compliance requirements with relevant authorities when required.

9kelab processes your personal data based on one or more valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: When you register an account and agree to these Terms and Conditions and Privacy Policy, you give your consent for data processing for the stated purposes.
• Contract Performance: Processing necessary to fulfil the contractual obligations between you and 9kelab, including payment processing and account management.
• Legitimate Interest: Processing necessary for the legitimate interests of 9kelab, such as fraud prevention, system security, and service improvement, provided these interests do not override your fundamental rights and freedoms.
• Legal Obligation: Processing necessary to fulfil legal obligations imposed on 9kelab by the relevant authorities.

9kelab does not sell or disclose your personal data to third parties, except in the following limited and controlled situations:

• Service Providers: We share necessary data with third-party service providers who assist us in operating the platform, such as payment processors, cloud service providers, and identity verification platforms. All such providers are bound by strict confidentiality agreements.
• Legal Compliance: When required by law, court order, or direction from a legitimate authority, we may need to disclose certain data to the relevant authorities.
• Fraud Prevention: In cases involving fraudulent activity or money laundering, we may share relevant information with financial institutions or law enforcement agencies.
• Business Transfer: In the event of a merger, acquisition, or business asset transfer, member data may be transferred to the new entity, subject to equivalent privacy protections.

In all situations above, we ensure that only the minimum necessary data is shared, and all sharing is carried out with adequate protective measures.

9kelab continuously invests in the latest security infrastructure to protect your personal data from unauthorized access, loss, or leakage. Key security measures we implement include:

• Data Encryption: All data communications are protected with 256-bit SSL/TLS encryption. Sensitive data stored in our databases is also encrypted using robust encryption algorithms.
• Access Control: A role-based access control (RBAC) system ensures that only authorised personnel can access data based on their job requirements.
• Continuous Monitoring: A 24/7 security monitoring system detects any unusual activity or intrusion attempts in real time.
• Security Audit: Security assessments and penetration testing are conducted periodically by independent security experts to identify and address any vulnerabilities.
• Two-Factor Authentication: Two-factor authentication (2FA) is available and encouraged for all member accounts as an added layer of protection.

9kelab retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. Our general data retention guidelines are as follows:

• Active Account Data: For as long as your account remains active on the 9kelab platform.
• Post-Account Closure Data: Up to seven (7) years after account closure, to meet legal and financial compliance requirements.
• Financial Transaction Records: A minimum of seven (7) years as required by Malaysian financial and tax laws.
• Security Logs: Up to two (2) years for security investigation and audit purposes.
• Support Communication Data: Up to three (3) years after your last interaction.

Once the retention period has ended and there is no legal requirement to retain the data, your personal information will be securely deleted or anonymised so it can no longer be linked to you.

As a data subject, you have the following rights guaranteed under Malaysia's PDPA and 9kelab's internal policies:

To exercise any of the above rights, please contact the 9kelab customer support team through the channels available on the platform. We will process your request within thirty (30) business days.

9kelab uses cookies and similar tracking technologies to enhance the user experience and gather statistical information on platform usage. The types of cookies we use include:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect statistical information on how users interact with the platform to help us identify areas for improvement.
• Preference Cookies: Store your personal preferences such as language and display settings to provide a more personalised experience.
• Analytical Cookies: Used to understand platform usage patterns in aggregate and anonymized form for service improvement purposes.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect your experience on the 9kelab platform.

9kelab reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. When material changes are made:

• The "Last Updated" date at the top of this document will be revised.
• Members will be notified via in-platform notifications or their registered email for significant changes.
• Continued use of the platform after changes are made constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, our team is here to help:

• In-Platform Support: Use the live chat function available on the 9kelab platform — real-time responses 24 hours a day, 7 days a week.
• Support Email: [email protected] — for written enquiries requiring documentation or detailed responses.
• Help Centre: Visit page FAQ us for answers to the most frequently asked questions about privacy and account security.