x9gaming Privacy Policy

1 Introduction

x9gaming takes the privacy of its players seriously. As an online casino and sportsbook platform serving players primarily in Malaysia — across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and the wider region — x9gaming processes personal data as a necessary part of operating a licensed gaming platform. This includes data required for account registration, identity verification, payment processing, fraud prevention, and compliance with x9gaming's obligations under its international gaming authority license.

This Privacy Policy is intended to be clear and direct about what data x9gaming collects, why it is collected, who it may be shared with, how long it is retained, and what rights you have in relation to your personal data. x9gaming does not engage in the sale of personal data to third-party marketing organisations. Data collected by x9gaming is used for the specific, defined purposes set out in this policy.

If you have any questions about how x9gaming handles your personal data that are not answered in this policy, you may contact the x9gaming data protection team at [email protected].

2 Data Controller

For the purposes of applicable data protection legislation, x9gaming acts as the data controller in respect of personal data collected through the x9gaming.org platform. x9gaming is responsible for determining the purposes and means of processing personal data related to player accounts and platform usage.

x9gaming operates under an international gaming authority license, and the platform's data processing practices are subject to the requirements and oversight of that licensing jurisdiction. Players who have questions regarding the legal basis for data processing or wish to exercise their data rights should direct enquiries to [email protected].

3 Personal Data We Collect

x9gaming collects personal data in the following categories. Not all categories will apply to every player; the data collected depends on how you use the x9gaming platform.

x9gaming does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, unless specifically required by applicable law or licensing obligations (for example, health-related information provided voluntarily in connection with a responsible gaming self-exclusion request).

4 How We Collect Personal Data

x9gaming collects personal data through the following means:

• Directly from you — when you register an x9gaming account, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion;
• Automatically — through cookies, server logs, and similar tracking technologies when you access and navigate x9gaming.org (see Section 9 — Cookies & Tracking);
• From third-party verification providers — identity verification and KYC service providers used by x9gaming to verify your identity and age in compliance with licensing requirements;
• From payment processors — including Touch n Go eWallet, Boost, Maybank, CIMB Bank, and Public Bank, in connection with deposit and withdrawal transaction processing.

5 Purposes and Legal Basis for Processing

x9gaming processes your personal data for the following purposes and on the following legal bases:

x9gaming will not process your personal data for purposes that are incompatible with those listed above without providing prior notice and, where required by applicable law, obtaining your consent.

6 Data Sharing and Disclosure

x9gaming does not sell your personal data to third parties. x9gaming may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: Touch n Go eWallet, Boost, Maybank, CIMB Bank, and Public Bank, for the purpose of processing your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and age verification services used to confirm player identity and age as required under x9gaming's gaming license;
• Fraud Prevention and Security Services: Third-party providers that assist x9gaming in detecting and preventing fraudulent transactions and account activity;
• Regulatory Authorities: x9gaming's licensing authority and any applicable law enforcement or regulatory body where disclosure is required by law, court order, or regulatory direction;
• Gaming Software Providers: Live casino operators, slot game studios, and sportsbook data providers who require access to limited player session data to operate their games correctly within the x9gaming platform;
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by x9gaming, subject to confidentiality obligations.

7 International Data Transfers

x9gaming operates under an international gaming authority license and, as a result, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, x9gaming implements appropriate safeguards to ensure that your personal data is afforded a level of protection consistent with applicable data protection standards.

These safeguards may include standard contractual clauses approved by the relevant data protection authority, binding corporate rules, or reliance on the adequacy decisions of relevant regulatory bodies. If you wish to obtain further information regarding the specific safeguards in place for any particular international data transfer, please contact x9gaming at [email protected].

8 Data Retention

x9gaming retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and licensing obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active x9gaming account, and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial record-keeping obligations under x9gaming's gaming license;
• KYC and Verification Documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later;
• Customer Support Communications: Retained for a period of two (2) years following the resolution of the relevant support interaction;
• Technical and Log Data: Retained for a period of up to twelve (12) months from collection, unless a longer period is required for security or fraud investigation purposes.

Following the applicable retention period, x9gaming will securely delete or anonymise your personal data such that it can no longer be associated with your identity.

9 Cookies and Tracking Technologies

x9gaming uses cookies and similar tracking technologies on x9gaming.org to support the operation of the platform and enhance the player experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the x9gaming platform to function correctly — including maintaining your login session, storing your account preferences, and enabling secure transactions. These cookies cannot be disabled without significantly impairing platform functionality;
• Functional Cookies: Used to remember your preferences (such as language and responsible gaming settings) across sessions on x9gaming;
• Analytics Cookies: Used to collect aggregated, anonymised information about how players navigate and use x9gaming, enabling x9gaming to improve the platform's performance and usability;
• Security Cookies: Used to detect and prevent fraudulent activity, including login anomalies and suspicious session patterns.

x9gaming does not use third-party advertising or behavioural targeting cookies. You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies may prevent you from accessing certain features of the x9gaming platform, including the ability to log in to your account.

10 Your Data Rights

Subject to applicable law and certain exceptions permitted under data protection legislation and x9gaming's licensing obligations, you have the following rights in relation to your personal data held by x9gaming:

• Right of Access: The right to request a copy of the personal data x9gaming holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data in certain circumstances. Note that x9gaming may be required to retain certain data to comply with legal obligations, even after account closure;
• Right to Restriction of Processing: The right to request that x9gaming restricts the processing of your personal data in certain circumstances;
• Right to Data Portability: The right to receive personal data you have provided to x9gaming in a structured, commonly used, machine-readable format;
• Right to Object: The right to object to processing of your personal data based on x9gaming's legitimate interests;
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact x9gaming at [email protected]. x9gaming will respond to verified data rights requests within thirty (30) days. x9gaming may require identity verification before processing a data rights request.

11 Security Measures

x9gaming implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption across all pages of x9gaming.org, including the login page, deposit pages, and account management pages;
• Passwords stored as one-way cryptographic hashes — x9gaming employees cannot access or retrieve your plain-text password;
• Segregated storage of player fund accounts, separate from x9gaming's operating accounts;
• Role-based access controls limiting employee access to player data to those with a defined operational need;
• Automated fraud monitoring and anomaly detection on login activity and transaction patterns;
• Regular security assessments and penetration testing of the x9gaming platform infrastructure.

While x9gaming implements industry-standard security controls, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own x9gaming account credentials. If you suspect your account has been compromised, contact x9gaming support immediately at [email protected].

12 Children and Minors

The x9gaming platform is strictly for adults aged 21 years and above. x9gaming does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the x9gaming account registration process.

If x9gaming becomes aware that personal data has been collected from an individual under the age of 21, x9gaming will promptly suspend the associated account, delete the personal data concerned, and report the matter in accordance with its licensing obligations. If you believe that x9gaming may have inadvertently collected data from a person under 21, please contact [email protected] immediately.

13 Marketing Communications

x9gaming may send you promotional emails and platform notifications about bonuses, new games, and special offers where you have provided consent to receive such communications at the point of registration or subsequently through your account settings. x9gaming does not send unsolicited bulk marketing communications.

You may withdraw your consent to marketing communications at any time by:

• Clicking the unsubscribe link in any x9gaming marketing email; or
• Updating your communication preferences in your x9gaming account settings; or
• Contacting x9gaming support at [email protected] and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect the delivery of transactional communications that are necessary to the operation of your x9gaming account, such as deposit confirmations, withdrawal notifications, and security alerts.

14 Changes to This Privacy Policy

x9gaming reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or x9gaming's licensing requirements. The date of the most recent revision is displayed at the top of this page.

Material changes to this Privacy Policy will be communicated to registered players via email or by a prominent notice on the x9gaming platform prior to the change taking effect. Your continued use of the x9gaming platform following notification of a material change constitutes your acknowledgment of the revised Privacy Policy. x9gaming recommends that you review this page periodically.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or x9gaming's data processing practices, please contact the x9gaming data protection team:

x9gaming will acknowledge receipt of a data-related enquiry within five (5) business days and aims to provide a substantive response within thirty (30) days. Complex requests may require additional time, in which case x9gaming will notify you of the expected resolution timeline.