Privacy Policy
ss9 Online Sportsbook & Casino

This Privacy Policy ("Policy") describes how ss9 ("ss9", "we", "usour"), operator of the online gaming platform athttps://ss9.cam, collects, uses, stores, shares, and protects personal data relating to registered players and visitors to the Platform. It applies to all personal data processed in connection with your use of ss9, including data provided during registration, identity verification (KYC), transaction processing, customer support, and general platform usage.

ss9 is committed to processing personal data in accordance with applicable international data protection standards, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

By registering an account or using the ss9 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms and Conditions, which form the overarching agreement governing your use of ss9.

In this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, contact information, financial data, device identifiers, and behavioural data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means ss9, which determines the purposes and means of processing personal data collected through the Platform.
• "KYC" means Know Your Customer — the identity and age verification process required prior to withdrawal processing.
• "Platform" means the ss9 website accessible at https://ss9.cam and all associated services.
• "Third-Party Service Providers" means entities engaged by ss9 to assist in service delivery, including payment processors (such as providers of Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank integrations), KYC verification providers, fraud detection services, and IT infrastructure partners.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your wishes, expressed by a clear affirmative action.

ss9 collects the following categories of personal data in connection with Platform use:

ss9 collects personal data through the following means:

4.1 Data You Provide Directly

You provide personal data directly to ss9 when you register an account, complete KYC verification, make a deposit or withdrawal (including via Touch 'n Go eWallet, DuitNow, Maybank, CIMB, or other Malaysian payment methods), contact customer support, or set responsible gambling preferences such as deposit limits or self-exclusion.

4.2 Data Collected Automatically

When you access the Platform, ss9 automatically collects technical data including your IP address, device identifiers, browser information, access timestamps, and session behaviour data. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 10.

4.3 Data from Third Parties

ss9 may receive personal data about you from third-party identity verification providers (used to cross-reference KYC submissions), payment processors (to confirm transaction completion and detect fraud), and fraud prevention services (to screen for known bad actors).

ss9 processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your player account, including processing login credentials and updating account settings.
• Identity Verification (KYC): To verify your identity, confirm your age (minimum 21 years), and comply with our international licensing obligations related to anti-money laundering (AML) and know-your-customer requirements.
• Transaction Processing: To process deposits and withdrawals in MYR via Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct.
• Platform Operation: To provide and improve the ss9 sports betting, live casino, and gaming services.
• Customer Support: To respond to your queries, complaints, and support requests via live chat and email.
• Responsible Gambling: To implement and monitor responsible gambling tools, including deposit limits, self-exclusion, and problem gambling indicators, fulfilment of our licensing obligations.
• Legal & Regulatory Compliance: To comply with applicable legal, regulatory, and licensing obligations including record-keeping requirements.
• Communications: To send you transactional communications (account activity notifications, withdrawal confirmations) and, where you have consented, promotional communications about ss9 offers.

ss9 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and ss9 — including account creation, transaction processing, and KYC verification — is processed on the basis that it is necessary for the performance of that contract.
• Legitimate Interests: Processing for fraud prevention, platform security, system improvement, and responsible gambling monitoring is conducted on the basis of ss9's legitimate interests, balanced against your privacy rights.
• Legal Obligation: Processing required to comply with applicable laws, licensing conditions, AML obligations, and regulatory record-keeping requirements is conducted on the basis of legal obligation.
• Consent: Where ss9 processes your data for optional purposes — such as sending marketing communications about promotions — we do so on the basis of your freely given consent, which you may withdraw at any time.

ss9 does not sell, rent, or trade your personal data to third-party marketers or data brokers. We may share personal data with the following categories of third parties, strictly for the purposes described:

• Payment Service Providers: To process deposits and withdrawals, ss9 shares necessary transaction data with Malaysian payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX network partners (Maybank, CIMB, Public Bank, Hong Leong, RHB), and cryptocurrency processing partners. Shared data is limited to what is required complete each transaction.
• KYC & Identity Verification Providers: To satisfy identity verification obligations, KYC document data is shared with accredited third-party verification service providers operating under equivalent data protection standards.
• Fraud Detection & AML Services: Transaction and behavioural data may be shared with fraud prevention and anti-money laundering screening services to protect the integrity of the Platform.
• IT Infrastructure & Cloud Service Providers: Personal data is hosted on secure third-party server infrastructure. All hosting partners are bound by contractual data processing agreements with security obligations equivalent to ss9's own standards.
• Regulatory & Law Enforcement Authorities: ss9 will disclose personal data to competent authorities where required by applicable law, court order, or regulatory obligation, or where disclosure is necessary to protect the rights, property, or safety of ss9, its players, or the public.

As an internationally licensed platform, ss9 may transfer personal data to servers and service providers located outside Malaysia. Where such transfers occur, ss9 implements appropriate safeguards to ensure that your personal data receives a level of protection equivalent to that provided under applicable data protection law.

Safeguards applied to international transfers may include contractual data protection clauses, data processing agreements with equivalent security requirements, and selection of third-party providers operating in jurisdictions with recognised data protection frameworks.

By using the ss9 Platform, you acknowledge that your personal data may be processed outside Malaysia in the ordinary course of Platform operations.

ss9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, and licensing retention obligations. Indicative retention periods are as follows:

• Account and KYC records: Retained for a minimum of five (5) years from account closure, in accordance with standard AML record-keeping requirements.
• Transaction records (deposits, withdrawals, wagers): Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction.
• Technical and device data (logs, IP records): Retained for up to twelve (12) months, unless extended retention is required for active fraud or security investigations.
• Marketing consent records: Retained for the duration of consent and for one (1) year following withdrawal, for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.

ss9 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and gather analytical data. The following types of cookies may be set when you access the Platform:

• Strictly Necessary Cookies: Essential for Platform functionality — session management, login authentication, and security. These cannot be disabled without materially impairing Platform use.
• Functional Cookies: Store your preferences such as language settings, responsible gambling configuration, and display options to provide a personalised experience.
• Analytical Cookies: Collect anonymised or pseudonymised data about how players use the Platform — page views, session duration, features accessed — to inform Platform improvement decisions.
• Fraud Prevention Cookies: Assist in detecting suspicious behaviour patterns, multiple account creation, and other prohibited conduct as described in our Terms and Conditions.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in or use Platform features. Third-party analytical cookie services are configured to anonymise IP addresses before processing.

As a data subject, you hold the following rights in respect of your personal data processed by ss9. You may exercise any of these rights by contacting us as described in Section 15.