9win Privacy Policy — How We Protect Your Data

1. Who We Are

9win is an online gaming and sports betting platform serving players in Pakistan. When this policy refers to "9win", "we", "us" or "our", it means the team and systems behind the 9win platform at 9win.gd. We operate the website and mobile application through which you access slots, fish games, bingo, sports betting and all other services offered under the 9win brand.

For the purposes of this Privacy Policy, 9win acts as the data controller — meaning we are responsible for deciding how and why your personal data is processed. If you have any questions about your data, you can reach our support team through the contact details provided in this policy.

2. What Data We Collect

We collect personal data directly from you when you register, use the platform or contact us. We also collect certain technical data automatically when you browse the site or use the app. Here is a summary of the categories of data we collect:

Category	Examples	How Collected
Identity Data	Full name, date of birth, CNIC number	Registration and KYC verification
Contact Data	Email address, phone number	Registration form
Financial Data	JazzCash / Easypaisa / Raast account details, bank account info, card details (masked)	Deposit and withdrawal processing
Transaction Data	Deposit amounts, withdrawal history, bet history, game activity	Platform activity
Technical Data	IP address, device type, browser, operating system, session logs	Automatically via cookies and server logs
Usage Data	Pages visited, games played, features used, time on platform	Automatically via analytics
Communications Data	Support chat transcripts, email correspondence	When you contact support

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or biometric data beyond what is strictly required for identity verification where applicable.

3. Why We Collect Your Data

9win collects and uses your personal data for specific, legitimate purposes. We do not collect data we do not need, and we do not use your data for purposes beyond those described below:

• Account creation and management: To register your account, verify your identity, and maintain your player profile.
• Processing transactions: To process deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfer, cards and other supported payment methods.
• Platform operation: To provide you access to games, sports betting markets, bonuses and all other 9win features.
• Security and fraud prevention: To detect, investigate and prevent fraudulent activity, money laundering, duplicate accounts and other prohibited activities.
• Know Your Customer (KYC) compliance: To verify your identity and age, particularly before processing withdrawals or in response to account reviews.
• Responsible gaming: To monitor gaming patterns and support the use of responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: To respond to your queries, complaints and support requests.
• Marketing communications: To send you information about promotions, bonuses and platform updates — only where you have opted in to receive such communications.
• Platform improvement: To understand how players use the platform so we can improve features, fix issues and develop new content.

4. Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. Depending on the purpose, we rely on one or more of the following bases:

• Contract performance: Processing that is necessary to provide you with the services you have signed up for — account management, transactions and platform access.
• Legitimate interests: Processing for fraud prevention, security, platform analytics and responsible gaming monitoring, where these interests do not override your rights.
• Legal obligation: Where we are required to process data to comply with applicable legal requirements, including KYC and anti-money laundering obligations.
• Consent: Where we rely on your consent — such as for marketing communications — you have the right to withdraw that consent at any time by updating your account preferences or contacting support.

5. Payment Data and PKR Transactions

When you make a deposit or request a withdrawal on 9win, your payment details are processed by your chosen payment provider — JazzCash, Easypaisa, Raast, your bank or card issuer. 9win does not store full card numbers or mobile wallet PINs. Payment data is handled in accordance with the security standards required by your payment provider.

All transaction records — including amounts, dates, payment methods and account references — are stored securely and retained as part of your account history. This data is used for transaction processing, support queries and fraud prevention. It is not shared with third parties for marketing purposes.

6. Cookies and Tracking

9win uses cookies and similar tracking technologies on the website and in the mobile app. Cookies are small data files stored on your device that help us recognise you, maintain your session and understand how you use the platform.

6.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function — login sessions, security tokens, language preferences.
• Analytics cookies: Used to understand platform usage patterns — which pages are most visited, how long sessions last, which games are most popular.
• Preference cookies: Store your settings and preferences so you do not have to reconfigure them on each visit.
• Marketing cookies: Used only where you have consented, to show relevant promotions and track the effectiveness of campaigns.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality. Analytics and marketing cookies can be disabled without affecting your ability to use 9win.

7. Sharing Your Data

9win does not sell your personal data to third parties. We share data only in the following circumstances and only to the extent necessary:

• Payment providers: JazzCash, Easypaisa, Raast, banks and card processors — shared only to process your transactions.
• Identity verification services: Third-party KYC providers used to verify your identity documents when required.
• Game providers: Third-party game studios that supply slots, fish games and bingo titles may receive a player session identifier to deliver game content. They do not receive your full personal profile.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics platforms to help us understand platform performance.
• Legal and regulatory authorities: Where required by applicable law, court order or to investigate fraud and financial crime.
• Business transfers: In the event of a merger, acquisition or sale of business assets, your data may be transferred to the new entity, subject to the same privacy protections described in this policy.

All third parties who handle your data on our behalf are required to process it securely and only for the purposes for which it was shared. We do not permit third-party service providers to use your data for their own marketing purposes.

8. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period afterwards to meet legal, regulatory and business requirements. Specific retention periods vary by data type:

• Account and identity data: Retained for the lifetime of your account plus a minimum of five years after account closure, in line with standard record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Support communications: Retained for up to three years from the date of the last interaction.
• Technical and usage logs: Typically retained for up to 12 months and then anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period for audit purposes.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9. Your Privacy Rights

As a 9win player, you have rights over your personal data. Here is a summary of the main rights available to you:

To exercise any of these rights, contact 9win customer support from your registered account. We will respond within a reasonable timeframe. Note that some rights are subject to legal exceptions — for example, we cannot delete transaction records that we are legally required to retain.

10. Data Security

9win uses technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the 9win platform.
• Secure, access-controlled storage for all databases containing personal and financial data.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Regular internal reviews of data handling procedures and system security.
• Strict access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role.

11. Children's Privacy

The 9win platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we discover that an account has been created by or is being used by a minor, the account will be closed immediately, play history will be voided and any deposited funds will be returned to the original payment method following verification.

If you are a parent or guardian and believe that a minor has registered on 9win, please contact our support team immediately so we can investigate and take appropriate action.

12. Marketing Communications

9win may send you promotional emails, app notifications or SMS messages about bonuses, new games, sports betting offers and platform updates — but only where you have given consent to receive such communications. You can update your marketing preferences at any time from your account settings, or by replying to any marketing message with an opt-out request.

Even if you opt out of marketing communications, we will continue to send you transactional messages related to your account — such as deposit confirmations, withdrawal notifications and security alerts. These are not marketing messages and cannot be opted out of while your account remains active.

13. Changes to This Privacy Policy

9win may update this Privacy Policy from time to time. The date of the most recent revision is displayed at the top of this page. Where changes are material — meaning they significantly affect how we use your data or the rights available to you — we will notify you through the platform or via your registered email address before the changes take effect.

Continued use of the 9win platform after any update to this policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically so you are always aware of how your data is being handled.

14. Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data is being handled, please contact the 9win support team through the Help section of your account. Our team operates on Pakistan Standard Time and aims to respond to all data-related queries promptly.

For general privacy enquiries you can also reach us at: [email protected] — please note this address is displayed as text only and is not a clickable link.