Privacy Policy

This Privacy Policy ("Policy") describes how 9wickets ("the Company," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of users ("you" or "User") who access or use the 9wickets online betting and gaming platform, accessible at https://9wickets.cam ("Platform").

9wickets operates the Platform for the purpose of providing online sports betting, live casino, and related gaming services to eligible users, with a primary focus on the Malaysian market. We serve players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.

The Company is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws and regulations. By registering an account on the Platform or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your data as described herein.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, device identifiers, and transaction records.
• "Processing" means any operation performed on personal data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, 9wickets.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "Sensitive Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or financial information requiring enhanced protection.
• "Cookie" means a small text file placed on your device by the Platform to enable certain website functions and to collect anonymous usage analytics.
• "KYC" means Know Your Customer — the identity and age verification process mandated under the Company's licensing and anti-money laundering obligations.

9wickets acts as the Data Controller in respect of all personal data collected through and processed in connection with the Platform. The Company determines the purposes for which your personal data is collected and the means by which it is processed.

Where third-party service providers process personal data on behalf of 9wickets — such as payment gateway operators, identity verification services, and platform analytics providers — they act as Data Processors and are bound by contractual data processing agreements that require them to process data only on the Company's documented instructions and to maintain equivalent data security standards.

For any queries relating to this Policy or to exercise your data rights, please contact us using the details provided in Section 15 of this Policy.

9wickets collects personal data from the following sources and in the following categories:

• Full legal name and preferred display name;
• Date of birth (for age verification purposes — users must be 21 or above);
• Malaysian residential address;
• Email address and, where provided, mobile phone number;
• Government-issued identity document details (e.g., MyKad number, passport number) submitted during KYC verification;
• Payment method details, including e-wallet identifiers (Touch 'n Go, Boost, GrabPay), bank account numbers for FPX and DuitNow transactions, and card details for Visa/Mastercard payments;
• Communications you send to our customer support team via live chat, WhatsApp, or email.

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session data including login times, pages visited, and duration of sessions;
• Betting history, wagering patterns, and game activity records;
• Deposit and withdrawal transaction records including amounts, timestamps, and payment channels used.

• Identity verification results from KYC service providers;
• Transaction confirmation data from payment processors including DuitNow, FPX operators (Maybank, CIMB, Public Bank, Hong Leong), and e-wallet platforms;
• Fraud screening and risk assessment data from our compliance partners.

9wickets processes your personal data for the following purposes:

To create and administer your 9wickets account, authenticate your identity at login, process your KYC verification, and provide you with access to all Platform features including sports betting markets, live casino, and promotional offers.

To process deposit and withdrawal transactions via your chosen payment channel — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Visa, Mastercard, BTC, and USDT — and to maintain accurate financial records of all account activity.

To fulfil obligations under applicable anti-money laundering (AML) legislation, to comply with Know Your Customer (KYC) requirements imposed under our licensing conditions, and to respond to lawful requests from competent regulatory or law enforcement authorities.

To detect, investigate, and prevent fraud, money laundering, identity theft, and other unlawful activities on the Platform. This includes automated monitoring of unusual transaction patterns, login anomalies, and device fingerprinting for account security purposes.

To respond to your queries and complaints, resolve account issues, and provide assistance through our live chat, email ([email protected]), and WhatsApp support channels. Support interactions are recorded for quality assurance and training purposes.

To administer responsible gambling tools including deposit limits, session timers, cool-off periods, and self-exclusion. Where self-exclusion is activated, we process your data to enforce the exclusion across all Platform products and to suppress marketing communications for the duration of the exclusion period.

To analyse aggregated usage data for the purpose of improving Platform features, optimising betting market offerings, enhancing the mobile experience, and developing new products suited to the needs of Malaysian players.

To send you promotional communications about 9wickets offers, bonuses, and seasonal campaigns — including Deepavali Festival promotions — where you have consented to receive such communications or where we have a legitimate interest in contacting existing customers. You may unsubscribe from marketing communications at any time through your Account settings or by contacting our support team.

9wickets processes personal data on the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and 9wickets — including creating your account, processing bets and transactions, and providing customer support.
• Legal Obligation: Processing is required to comply with applicable laws, including AML legislation, KYC requirements, tax reporting obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for the Company's legitimate interests in fraud prevention, platform security, and service improvement, provided such interests do not override your fundamental rights and freedoms.
• Consent: Where required by applicable law, we process your data on the basis of your freely given, specific, and informed consent — in particular for marketing communications and non-essential cookies. You may withdraw consent at any time without penalty.

9wickets does not sell your personal data to any third party. We share your data only in the limited circumstances described below:

Transaction data is shared with our approved payment processing partners — including DuitNow and FPX operators (Maybank, CIMB, Public Bank, Hong Leong Bank), e-wallet platforms (Touch 'n Go, Boost, GrabPay), card networks (Visa/Mastercard), and cryptocurrency processing services — solely for the purpose of completing your requested transactions.

KYC identity and age verification data is shared with our authorised identity verification service providers. Fraud screening data may be shared with our AML compliance partners. All such sharing is governed by contractual data processing agreements.

We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of 9wickets, our users, or the public.

Personal data may be shared with entities within the 9wickets corporate group for the purposes of internal administration, compliance, and service delivery. In the event of a merger, acquisition, or sale of assets, personal data may be transferred to a successor entity subject to equivalent privacy protections.

Certain service providers engaged by 9wickets operate servers or process data in jurisdictions outside Malaysia. Where such international transfers occur, the Company ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applicable within Malaysia. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as Malaysia. We take steps to ensure that any such transfer is conducted lawfully and with appropriate protections in place.

9wickets retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in compliance with applicable AML and financial record-keeping requirements.
• Transaction records: Retained for a minimum of seven (7) years following the date of each transaction, in accordance with financial regulatory obligations.
• Customer support communications: Retained for two (2) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing preferences: Retained until you withdraw consent or object to processing, at which point your data will be suppressed from marketing communications within 5 business days.
• Session and technical data: Retained for up to thirteen (13) months for platform analytics and security monitoring purposes.

Where data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with the Company's data retention schedule.

9wickets uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain your session, and collect aggregate analytics data. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function — including session authentication, load balancing, and security tokens. These cannot be disabled without disrupting Platform functionality.
• Functional Cookies: Remember your preferences such as language selection and display settings to personalise your Platform experience across sessions.
• Analytics Cookies: Collect anonymised data on how users interact with the Platform — including pages visited, session duration, and feature usage — to help us understand and improve Platform performance.

9wickets does not deploy third-party advertising or retargeting cookies without your explicit consent. You may manage cookie settings through your browser preferences. Disabling non-essential cookies will not prevent you from accessing core Platform features.

9wickets implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive data fields including payment instrument details and identity document numbers;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Two-factor authentication (2FA) available for all User accounts and enforced for all administrative system access;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Intrusion detection systems and real-time anomaly monitoring on all Platform infrastructure.

Subject to applicable law, you hold the following rights in respect of your personal data held by 9wickets. To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to all valid requests within 30 calendar days at no charge.

The 9wickets Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Our registration process includes age declaration requirements, and we conduct KYC age verification to confirm the eligibility of all account holders.

If we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the collected data to the extent not required by legal obligation, and return any deposited funds to the original payment source following verification of the payee's identity.

If you believe that a minor has registered an account on the Platform, please contact our support team immediately at the details provided in Section 15.

9wickets reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. Material changes will be notified to registered Users by prominent notice on the Platform and/or by email to the address registered on your Account, with at least 14 days' advance notice where practicable.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed of how 9wickets protects your personal data. Continued use of the Platform following the effective date of any updated Policy constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 9wickets, please contact us through the following channels. All privacy-related communications should be directed to our support team, who will escalate data rights requests to our data protection function:

• Live Chat: Available 24/7 directly through the Platform. Reference "Data Privacy Request" at the start of your chat for priority routing. Average response time: 3–5 minutes.
• Email: [email protected] — please include "Privacy Policy" or "Data Rights Request" in your subject line. Responses within 2 business hours during standard operating periods.
• WhatsApp: Available 24/7; contact details are displayed within your Account dashboard once logged in.

Data rights requests will be acknowledged within 5 business days and fully addressed within 30 calendar days of receipt. Where a request is complex or where you have submitted multiple concurrent requests, we may extend this period by a further 30 days with prior notification.

For information about responsible gambling support resources available to Malaysian players, including self-exclusion requests, please visit our dedicated Responsible Gambling page.