Last Updated: 1 January 2026

9club8 Privacy Policy — How We Handle Your Data

At 9club8, the privacy and security of your personal data are not optional extras — they are fundamental obligations we take seriously. This Privacy Policy explains in plain, structured terms exactly what personal data we collect from Malaysian players and visitors, why we collect it, how we use and store it, who we may share it with, and what rights you hold over your information. Please read this document carefully before registering an account or submitting any personal data to the Platform.

Six Principles That Guide How We Handle Your Data

These principles do not replace the full Privacy Policy below, but represent the core data protection values that shape every decision we make about your personal information.

We Only Collect What We Need

9club8 collects the minimum personal data necessary to operate your account, process transactions, verify your identity, and comply with our international licensing obligations. We do not collect data speculatively or for purposes unrelated to delivering our services to you.

We Never Sell Your Data

Your personal information — including your name, email address, Malaysian IC details, payment method data, and betting history — is never sold, rented, or traded to third-party marketers, data brokers, or advertising networks under any circumstances.

Bank-Grade Encryption in Transit

All data transmitted between your browser or device and the 9club8 Platform is encrypted using TLS 1.2 or higher (the same standard used by major Malaysian banks including Maybank and CIMB). Sensitive data at rest is stored with AES-256 encryption.

Controlled Third-Party Access

Where data is shared with third parties — such as payment processors (Touch 'n Go, DuitNow, FPX) or KYC verification providers — those parties are bound by strict contractual data processing obligations and may only use your data for the specific purpose for which it was shared.

Your Rights Are Enforceable

You have clear, actionable rights over your personal data: the right to access it, correct it, restrict its processing, request deletion (subject to regulatory retention obligations), and object to processing. We will respond to all valid data rights requests within 30 calendar days.

Defined Data Retention Periods

We do not retain your personal data indefinitely. Retention periods are defined by the purpose for which data was collected and by applicable regulatory obligations under our international gaming licence. Account data is typically retained for five years following account closure.

Section 14 — Your Data Protection Rights

You hold meaningful rights over your personal data held by 9club8. These rights may be exercised free of charge at any time by contacting our Data Privacy team as described in Section 16. We will respond to all valid requests within 30 calendar days.

Right of Access

You have the right to request a copy of all personal data 9club8 holds about you, together with information about how it is being processed, where it is stored, and with whom it has been shared.

Right to Rectification

If any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct or update it without undue delay. Account profile updates can be made directly via your account settings.

Right to Erasure

Subject to regulatory retention obligations (such as the 5-year AML record-keeping requirement), you may request the deletion of your personal data. Erasure requests will be fulfilled to the maximum extent permitted by applicable legal obligations.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing pending verification of legitimate grounds.

Right to Data Portability

Where processing is based on your consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.

Right to Object

You may object at any time to the processing of your personal data for direct marketing purposes — including promotional emails and bonus notifications. Objections to marketing will be honoured immediately and without question.

Questions About Your 9club8 Data?

Our support team is available around the clock to handle any privacy enquiry, data rights request, or general question about how 9club8 handles your information. We're committed to being transparent and responsive.