9kwin
Privacy Policy

This Privacy Policy ("Policy") is issued by 9kwin ("we", "us", "our", "Company", "9kwin") and applies to all personal data collected, processed, stored, and shared by 9kwin in connection with the operation of the 9kwin online gaming and sports betting platform accessible at 9kwin.bio ("Platform"), including all associated services, mobile interfaces, customer support functions, and promotional activities.

This Policy applies to all registered users of the 9kwin platform ("User", "Player", "you"), including all individuals accessing the Platform from Pakistan, whether from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, Peshawar, or any other location. By creating a 9kwin account and using our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.

This Policy should be read alongside the 9kwin Terms and Conditions and the Responsible Gaming Policy, both of which are published on the Platform and form part of the overall framework governing the relationship between 9kwin and its users.

9kwin collects personal data through several channels: directly from you during registration and ongoing Platform use, automatically through your device and browser when you access the Platform, and from third-party service providers where necessary for compliance and fraud prevention purposes.

Data You Provide Directly:

• Full legal name (as it appears on your Pakistani CNIC or other identity document);
• Pakistani mobile number (registered with Jazz, Telenor, Zong, Ufone, or Warid);
• Date of birth (for age verification — 9kwin is a 21+ platform);
• CNIC number (collected during KYC identity verification);
• Residential address (required for full account verification);
• Account password (stored as a hashed value — never in readable form);
• Payment method details including JazzCash wallet number, EasyPaisa account, or bank account name and number for HBL, UBL, Meezan Bank, and other supported banks;
• Communications you send to 9kwin support via live chat, email, or any other channel;
• Responsible gaming preferences and self-imposed limits you set through account settings.

Data Collected Automatically:

• IP address and approximate geographic location at the time of login and transactions;
• Device identifiers, operating system, browser type and version;
• Session data including login timestamps, session duration, and pages viewed;
• Game activity logs — games played, bet amounts, win/loss outcomes, game duration;
• Transaction history — all deposits, withdrawals, and bonus transactions;
• Cookies and similar tracking technologies (see Section 6).

Data from Third Parties:

• Identity verification results from KYC verification service providers;
• Fraud scoring data from risk and compliance screening services;
• Age verification results from document authentication services;
• Self-exclusion registry checks from responsible gaming authorities where applicable.

9kwin processes the personal data described in Section 2 for the following purposes:

9kwin does not use your personal data for automated decision-making that produces significant legal effects on you without a human review step, except in relation to automated fraud detection systems where immediate account action may be taken pending human review within 24 hours.

9kwin processes personal data in accordance with the legal bases recognised by its international gaming licensing jurisdiction. The applicable legal basis for each processing activity is as follows:

• Contractual Necessity: Processing required to provide the gaming and betting services you have contracted for through account registration — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, age verification (21+ requirement), and mandatory reporting to our licensing authority.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, internal analytics for platform improvement, and communications about changes to our services that directly affect you. Where we rely on legitimate interests, we have assessed those interests against your privacy rights and concluded that they do not override your fundamental rights.
• Consent: Where we send you optional marketing communications (such as promotional email or SMS notifications about bonuses or special offers), we do so only with your explicit consent, obtained separately during registration or through account settings. You may withdraw this consent at any time.

9kwin does not sell your personal data. We share personal data with third parties only in the following defined circumstances:

• Game Providers: Providers such as Pragmatic Play, PG Soft, Habanero, Spadegaming, NetEnt, and Play'n GO receive the minimum data necessary to deliver their games on the 9kwin platform. Typically this is limited to a pseudonymised player identifier and session data — not your full personal identity.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to execute deposits and withdrawals. They operate as independent data controllers under their own privacy policies for the portion of data they process on their platforms.
• KYC and Identity Verification Services: Third-party identity verification providers receive document data and identity information solely to perform verification services. These providers are contractually bound to confidentiality and data protection obligations.
• Fraud Prevention and Risk Services: Fraud detection platforms receive device and behavioural data to identify suspicious activity. Data shared is used exclusively for fraud screening purposes.
• Regulatory and Licensing Authorities: Our gaming licensing authority receives transaction and compliance reports as required by our licence conditions. Law enforcement agencies may receive data where we are legally compelled to disclose it under a valid legal order.
• Professional Advisors: Legal, accounting, and compliance advisors may access personal data as necessary in the exercise of their professional functions, under strict professional confidentiality obligations.

All third parties to whom 9kwin discloses personal data are required to maintain appropriate data security measures and to process data only for the specific purposes for which it was shared. 9kwin does not permit third-party service providers to use your personal data for their own marketing or commercial purposes.

9kwin uses cookies and similar technologies (including local storage and session storage) on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function. They manage your login session, maintain your authenticated state between pages, and ensure the Platform loads correctly on your device. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby view preferences, and display settings. These improve your experience by reducing the need to configure the Platform each session.
• Analytics Cookies: Collect anonymised or pseudonymised data about how users navigate the Platform — which pages are visited most, where users encounter difficulty, session lengths, and device types. This data is used solely to improve Platform performance and user experience.
• Security Cookies: Support fraud detection by identifying unusual login patterns, detecting automated access attempts, and flagging suspicious sessions for human review.

9kwin does not deploy advertising cookies, retargeting cookies, or cookies that track your browsing activity on websites other than 9kwin.bio. We do not permit third-party advertising networks to place cookies on the Platform.

You may control cookie settings through your browser's privacy preferences. Note that disabling strictly necessary cookies will prevent you from logging in to your 9kwin account and using Platform services.

9kwin implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the 9kwin Platform;
• AES-256 encryption for personal data stored in 9kwin databases;
• Password hashing using industry-standard algorithms — plaintext passwords are never stored;
• Role-based access controls limiting internal access to personal data to authorised staff with defined operational need;
• Regular security audits and penetration testing of Platform infrastructure;
• Two-factor authentication (2FA) available for all user accounts, strongly recommended;
• Automated monitoring for anomalous access patterns and potential data breaches;
• Incident response protocols with defined timelines for breach containment, investigation, and notification.

While 9kwin implements robust security measures, no system can guarantee absolute security against all forms of cyberattack. Users are responsible for maintaining the security of their own devices and login credentials. You should use unique passwords and enable 2FA on your 9kwin account for maximum account protection.

9kwin retains personal data for the period necessary to fulfil the purpose for which it was collected, plus any additional period required by our licensing obligations, legal requirements, or legitimate business interests. The following general retention periods apply:

• Active Account Data: Retained for the lifetime of your 9kwin account, plus a minimum of 5 years following account closure, in accordance with our licensing authority's record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in accordance with anti-money laundering regulatory requirements.
• KYC Identity Documents: Retained for the duration of the account relationship plus 5 years following closure, or longer if required by applicable law or regulatory directive.
• Customer Support Communications: Retained for 2 years following the resolution of the relevant query or complaint, or longer where the matter involves ongoing legal proceedings.
• Marketing Communication Preferences: Retained until you withdraw consent or close your account, plus a brief period thereafter to demonstrate compliance.
• Game Activity and Responsible Gaming Logs: Retained for 5 years to support responsible gaming monitoring, dispute resolution, and regulatory reporting.

Following the applicable retention period, personal data is either securely deleted from 9kwin systems or anonymised such that it can no longer be associated with any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9kwin operates as an international online gaming platform. Your personal data may be transferred to and processed in countries outside Pakistan in connection with the following activities:

• Storage on secure servers operated by our hosting infrastructure providers, which may be located outside Pakistan;
• Processing by game providers whose infrastructure is located in their respective countries of operation;
• Processing by KYC and identity verification service providers whose systems may be hosted internationally;
• Reporting to our licensing authority, which is located in our licensing jurisdiction outside Pakistan.

Where personal data is transferred internationally, 9kwin takes steps to ensure that such transfers are subject to appropriate safeguards, including contractual data protection obligations (data processing agreements or standard contractual clauses) with all third-party recipients.

By using the 9kwin platform, you acknowledge that your personal data may be transferred, stored, and processed outside Pakistan as described in this section, subject to the safeguards described above.

As a 9kwin user, you have the following rights in relation to your personal data. These rights may be subject to certain limitations and exceptions under applicable law and our licensing obligations, but 9kwin is committed to facilitating their exercise in good faith.

• Right of Access: You may request a copy of all personal data 9kwin holds about you. We will provide this within 30 days of a valid request.
• Right to Rectification: If your personal data is inaccurate or incomplete, you may request that we correct it. Some corrections (e.g., name changes) may require supporting documentation.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the original purpose. This right does not apply where we have a legal obligation to retain the data (e.g., AML record-keeping).
• Right to Restriction: You may request that we restrict processing of your data (e.g., during a dispute about its accuracy) while the matter is resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of the above rights, contact 9kwin's support team through live chat or at [email protected] (plain text — not clickable). Please include your registered account mobile number and clearly describe the right you wish to exercise. We will respond within 30 days.

The 9kwin platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to any individual under the age of 21. Age verification is a mandatory component of the 9kwin account registration and KYC process.

If 9kwin discovers that personal data has been collected from an individual under 21 years of age — whether through misrepresentation during registration or any other means — the following actions will be taken immediately:

1. The account will be permanently suspended pending investigation;
2. All personal data associated with the account will be identified and flagged for deletion;
3. Any funds in the account will be handled in accordance with our licensing authority's requirements for underage account closures;
4. The matter will be escalated to the compliance team and licensing authority where required.

If you are a parent or guardian and believe a minor may have accessed 9kwin services using false information, please contact our support team immediately via live chat. We take underage access reports with the highest priority.

9kwin may send you promotional communications — including information about bonuses, free spins, PSL betting promotions, seasonal offers, and VIP programme updates — through SMS to your registered Pakistani mobile number or through in-Platform notifications.

We will send marketing communications only where you have provided explicit consent to receive them, either at registration or subsequently through your account settings. You may opt out of marketing communications at any time by:

• Updating your communication preferences in your 9kwin account settings;
• Contacting 9kwin live chat support and requesting removal from marketing communications; or
• Replying "STOP" to any marketing SMS received from 9kwin.

Opting out of marketing communications will not affect transactional communications that are necessary for the operation of your account — such as deposit confirmation, withdrawal notification, KYC requests, bonus expiry reminders, and responsible gaming notifications. These essential service communications are sent regardless of marketing preferences.

The 9kwin Platform may reference or contain links to third-party services, including game provider platforms accessed within the Platform's game launcher. Third-party services operate under their own privacy policies and data practices, over which 9kwin has no direct control.

Game providers whose content is embedded within the 9kwin Platform interface may collect certain technical data about your game session directly through their game engines. This data is governed by the game provider's own privacy policy. 9kwin shares only the minimum necessary data with providers to deliver games in your session.

Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank — are independent data controllers for the transaction data processed on their own platforms. Their handling of your financial data is governed by their respective privacy policies, and 9kwin is not responsible for their data practices.

9kwin recommends that you review the privacy policies of all third-party services with which you interact, including payment providers you use for deposits and withdrawals, as an informed user practice.

9kwin reserves the right to update or amend this Privacy Policy at any time. Changes will be published on the Platform at 9kwin.bio/privacy-policy with the updated effective date clearly stated. Significant changes — defined as changes that materially affect how we use your personal data or your rights as a data subject — will be communicated to registered users through an in-Platform notification or a message to your registered mobile number, with a minimum of 14 days' advance notice before the changes take effect.

Non-material changes — such as formatting improvements, clarifications of existing practices, or updates to contact information — may take effect upon publication without advance individual notification, though the updated date on the Policy will always reflect the most recent revision.

Your continued use of the 9kwin Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept the changes, you must cease using the Platform and contact support to close your account. Your data will continue to be handled under the terms of the Policy version in effect at the time it was collected until deleted or anonymised.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 9kwin, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week — including all Pakistani public holidays such as Eid ul-Fitr, Eid ul-Adha, and Independence Day (14th August). Accessible from any page on the Platform after logging in.
• Email: [email protected] — for formal written privacy requests, data subject access requests, and complaints. Please mark the subject line "Privacy Request" or "Data Subject Request" for priority routing. Response within 30 days for formal data subject requests.

When submitting a privacy-related request, please include your full name as registered on your 9kwin account, your registered mobile number, the nature of your request or complaint, and any relevant reference numbers or dates. This information allows us to identify your account and process your request accurately and promptly.

If you are not satisfied with 9kwin's response to your privacy complaint, you have the right to escalate the matter to the data protection authority in our licensing jurisdiction, whose contact details are available through our licensing authority's official communications. 9kwin is committed to cooperating with any such supervisory authority investigation in good faith.