9win Privacy Policy — How We Handle Your Personal Information

01What Personal Data 9win Collects from Pakistani Players

9win collects personal data through two channels: information you provide directly when registering and using the platform, and information collected automatically as you browse and play. Here is a precise breakdown of each category.

Information you provide directly:

• Registration data: Your name, Pakistani mobile number, date of birth, and any password you create.
• Identity verification documents: Where required, a copy of your CNIC (Computerised National Identity Card) or other government-issued identification. This is collected solely to confirm your identity and age in compliance with anti-fraud requirements.
• Payment information: Your Easypaisa or JazzCash mobile wallet number, NayaPay or SadaPay account details, bank account information for IBFT transfers, or Visa/Mastercard card details. See Section 7 for specific details on how payment data is handled.
• Support communications: When you contact 9win support via live chat or email, the content of those communications is logged for quality assurance and to enable follow-up where needed.
• Responsible gaming declarations: If you set deposit limits, loss limits, or request self-exclusion, the details of those settings are recorded against your account.

Information collected automatically:

• Device data: Device type, operating system, and browser version — used to optimise platform performance across different Pakistani devices.
• IP address and location data: Your IP address is logged at login for security purposes. We do not track your physical location beyond what is implied by your IP address.
• Session data: Login timestamps, session duration, games played, bets placed, and transaction history. This data forms your account record and is used for support, account management, and responsible gaming monitoring.
• Cookies and similar technologies: See Section 6 for a full explanation of the cookies 9win uses.

02Why 9win Collects Personal Data — Legal Basis and Purpose

Every piece of personal data 9win collects has a specific, documented purpose. We do not collect data speculatively or on the basis that it might be useful one day. The primary legal bases on which 9win processes personal data are:

• Contract performance: Most of the data we collect is necessary to fulfil our agreement with you — operating your account, processing deposits and withdrawals, settling bets, and providing customer support.
• Legal obligation: Identity verification, age verification, anti-money-laundering checks, and certain record-keeping requirements are legal obligations rather than optional practices. This data is collected because we are required to collect it.
• Legitimate interests: Fraud detection, security monitoring, responsible gaming oversight, and platform improvement are pursued under the legitimate interests basis, where our interest in protecting players and the platform does not override your privacy rights.
• Consent: Marketing communications — where applicable — are sent only with your explicit consent and can be withdrawn at any time.

03Who 9win Shares Your Data With

9win shares personal data with third parties only in limited and specific circumstances. We do not sell, rent, or provide player data to advertisers or data brokers. The categories of third parties who may receive your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors receive the minimum data necessary to process your transaction — typically account identifiers and transaction amounts. These parties operate under their own privacy policies and are independently regulated.
• Identity verification providers: Third-party KYC (Know Your Customer) services may receive copies of your CNIC or other ID documents for automated verification purposes. These providers operate under strict data processing agreements with 9win.
• Technology partners: Game providers and platform infrastructure providers may receive anonymised or pseudonymised technical data for operational purposes. They do not receive identifiable player data beyond what is required to resolve technical issues.
• Regulatory and law enforcement authorities: 9win will disclose player data to competent authorities where legally required — for example, in response to a valid court order or regulatory request related to anti-money-laundering investigations.
• Fraud prevention agencies: Where we identify or suspect fraudulent activity, relevant information may be shared with fraud prevention agencies to protect 9win and other players from harm.

All third parties who handle data on 9win's behalf are bound by data processing agreements that restrict how they use your data and require them to maintain appropriate security standards.

04How 9win Stores and Secures Your Personal Data

The security of your personal data is something 9win invests in continuously. The following measures are in place to protect player data at all times:

• SSL/TLS encryption in transit: All data transmitted between your device and 9win's servers is encrypted using TLS 1.2 or higher. This includes login credentials, payment data, and all other personal information transmitted during account use.
• AES-256 encryption at rest: Stored personal data — including identity documents, payment records, and account history — is encrypted at rest using AES-256, the same standard used by major international financial institutions.
• Access controls: Internal access to player data is restricted by role. Staff cannot access data beyond what their specific function requires. All internal data access is logged and subject to periodic audit.
• Two-factor authentication: 9win's internal systems require multi-factor authentication for any access to player data environments. This applies to both the platform's operational staff and technical administrators.
• Regular security testing: 9win conducts periodic penetration testing and vulnerability scanning on all systems that handle personal data. Critical vulnerabilities are remediated on priority timelines.
• Incident response: 9win maintains a documented incident response plan that is reviewed and tested regularly. In the event of a security incident, the plan ensures rapid containment, investigation, and notification.

05How Long 9win Keeps Your Personal Data

9win retains personal data only for as long as it is necessary for the purpose it was collected, or as required by applicable law and regulation. The retention periods for different categories of data are:

• Account and identity data: Retained for the duration of your account's active life plus a minimum of five years following account closure, as required for anti-money-laundering compliance and financial record-keeping.
• Transaction records: Deposit, withdrawal, and betting history is retained for a minimum of five years following the date of each transaction.
• Identity verification documents: CNIC copies and other identity documents are retained for five years following account closure or the date of last verification, whichever is later.
• Support communications: Chat logs and email correspondence are retained for two years from the date of the communication, unless the subject matter is related to a pending dispute in which case records are retained until resolution.
• Marketing consent records: Records of your marketing consent status are retained for the period you remain on our contact list plus two years.
• Technical and session logs: Anonymised technical logs are retained for up to 12 months for security and platform performance monitoring.

When retention periods expire, data is securely deleted using methods that prevent recovery. 9win does not retain personal data beyond what is required by law simply because it might be convenient to do so.

06Cookies and Similar Technologies at 9win

9win uses cookies — small text files stored on your device — and similar technologies to keep the platform working correctly, remember your preferences, and understand how players use the site. Here is a breakdown of the cookies 9win uses:

9win does not use third-party advertising cookies. No advertising network receives cookie data from your use of the 9win platform. You can manage your cookie preferences through your device's browser settings, but disabling essential or security cookies will affect how the platform functions.

07How 9win Handles Payment Data

Payment data receives a higher level of protection at 9win than standard personal data, given its sensitivity. The following practices apply specifically to financial information:

• Full Visa/Mastercard card numbers are never stored on 9win's servers. Card payments are processed through certified PCI-DSS compliant payment gateways. 9win stores only a tokenised reference to your card, not the card number itself.
• Easypaisa, JazzCash, NayaPay, and SadaPay wallet details are stored as account identifiers (mobile numbers) and are used exclusively for processing your deposits and withdrawals.
• Bank account details provided for IBFT transfers are encrypted at rest and accessed only when processing a specific transaction.
• Payment data is never shared with marketing partners, game providers, or any party whose function does not require access to financial information.
• 9win staff who handle support queries can see transaction references and amounts for the purpose of resolving payment issues, but cannot see full card numbers or mobile wallet PINs.

08Children and Minors — 9win's Strict Under-18 Policy

9win's platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. All new registrations require confirmation that the player meets the minimum age requirement, and 9win reserves the right to request identity documents to verify age at any time.

If 9win discovers that personal data has been collected from a player who is under 18, the account will be immediately closed, all data associated with the account will be deleted (except where retention is required for legal reasons), and any deposited funds will be returned to the payment source. The discovery of underage gambling will be reported to relevant authorities where legally required.

Parents and guardians concerned about a minor accessing 9win should use device-level parental controls and contact 9win support if they have reason to believe a minor has registered an account. 9win will investigate and act promptly on any credible report of underage account use.

09Your Data Rights as a 9win Player

As a player registered at 9win, you have the following rights in relation to your personal data. These rights can be exercised by contacting 9win support via live chat or email at support@9win-app.net.

10Marketing Communications from 9win

9win sends promotional communications — about new games, current offers, PSL betting promotions, and platform updates — to players who have opted in to receive them. Marketing communications are sent via SMS to your registered Pakistani mobile number.

• You are not required to accept marketing communications to use 9win. Opting out does not affect your account's functionality, access to games, or ability to claim standard promotions displayed on the platform.
• To opt out of marketing messages, update your preferences in your 9win account settings or reply STOP to any SMS received from 9win. Opt-out requests are processed within 48 hours.
• Transactional communications — deposit confirmations, withdrawal notifications, account security alerts, and support responses — are not affected by marketing opt-out preferences and will continue to be sent regardless of your marketing consent status.
• 9win does not send marketing communications on behalf of third parties. All marketing messages you receive from 9win relate exclusively to 9win's own products, games, and promotions.

11Changes to This Privacy Policy

9win may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, 9win will notify registered Pakistani players by displaying a prominent notice on login or sending a notification to the mobile number on your account.

The date of the most recent update is shown in the "Last Updated" field at the top of this page. We recommend reviewing this policy periodically, particularly if you are about to share additional personal information with 9win — for example, during an identity verification request or when adding a new payment method.

Continued use of 9win following notification of a policy update constitutes acceptance of the revised terms. If you do not accept the revised Privacy Policy, please stop using the platform and withdraw any remaining balance before the effective date of the changes.

12How to Contact 9win About Privacy

For any privacy-related question, data access request, or concern about how 9win handles your personal information, please use one of the following contact channels:

• Live Chat: Available 24/7 from within your 9win account. Privacy queries are handled by the support team and escalated to the data management team where required. Fastest channel for urgent matters.
• Email: support@9win-app.net — for formal data subject access requests, erasure requests, or detailed privacy enquiries. Include your registered mobile number and a description of your request. Responses provided within 30 days.