gk9 Privacy Policy

1. Scope & Data Controller

1.1 This Privacy Policy applies to all personal data processed by gk9 in connection with the gk9.asia platform, including the website, any mobile-optimised interface, customer support channels, and all related services.

1.2 gk9, the operator of gk9.asia, acts as the data controller in respect of all personal data collected and processed under this Policy. As data controller, gk9 determines the purposes for which and the manner in which your personal data is processed.

1.3 This Policy is aligned with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards applicable to gk9's licensed operations.

2. Personal Data We Collect

gk9 collects the following categories of personal data in connection with your use of the Platform:

2.1 Identity & Contact Data

• Full legal name (as per MyKad, passport, or equivalent government-issued ID);
• Date of birth and age verification information;
• Malaysian mobile number or international phone number;
• Email address (where provided);
• Correspondence address (required for certain verification purposes).

2.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• Payment instrument details (e.g., Touch 'n Go eWallet account identifier, DuitNow proxy, bank account last four digits) — note that gk9 does not store full payment instrument credentials;
• Account balance history and bonus credit records.

2.3 Gaming Activity Data

• Bet history, wager amounts, game selections, and settlement outcomes across Sportsbook, Casino, and Slots;
• Session duration, login timestamps, and platform usage patterns;
• Responsible gaming tool settings, including deposit limits, session reminders, and self-exclusion status.

2.4 Technical & Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, browser type and version;
• Cookie identifiers and session tokens (see Section 5);
• Platform access logs, error logs, and performance diagnostic data.

2.5 Communications Data

• Records of communications between you and gk9's customer support team via live chat or email, including the content of those communications and their timestamps.

3. How We Collect Your Data

gk9 collects personal data through the following channels:

• Direct Registration: Data provided by you when registering an Account on gk9, including name, mobile number, and date of birth;
• Account Activity: Data generated automatically when you log in, deposit, play games, place bets, or withdraw funds;
• Identity Verification: Documents submitted by you in response to a verification request, such as MyKad or passport scans;
• Customer Support: Information you provide when contacting our support team via live chat or email;
• Technical Collection: Data collected automatically via cookies, server logs, and similar tracking technologies as described in Section 5;
• Payment Processors: Transaction confirmation and instrument identifier data passed to gk9 by our integrated payment service providers, including Touch 'n Go eWallet, Boost, DuitNow, and FPX operators.

4. Purposes & Legal Basis for Processing

The following table sets out the purposes for which gk9 processes your personal data and the applicable legal basis:

5. Cookies & Tracking Technologies

5.1 gk9 uses cookies and similar technologies to operate the Platform, maintain session security, and improve user experience. Cookies are small text files stored on your device by your browser at the direction of the gk9 website.

Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function, including authentication session tokens, CSRF protection tokens, and login state management. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Used to remember your preferences such as display language settings and responsible gaming reminder configurations.
• Analytics Cookies: Used to understand aggregate Platform usage patterns to improve performance and user experience. Analytics data is anonymised or pseudonymised.

5.2 You may control non-essential cookies through your browser settings. Note that disabling certain functional cookies may affect the Platform experience. gk9 does not deploy third-party advertising or behavioural tracking cookies.

6. Data Sharing & Disclosure

gk9 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Personal data may be shared only in the following circumstances:

• Payment Service Providers: Transaction data is shared with integrated payment processors (including Touch 'n Go, Boost, DuitNow, and FPX network operators) solely to the extent necessary to process your deposit or withdrawal;
• Game Providers: Limited technical data (such as session tokens and game result data) is transmitted to certified game studios whose products are hosted on the gk9 Platform, for the purpose of delivering the game and recording outcomes;
• Identity Verification Services: Where third-party KYC or AML screening services are used to verify member identity, relevant identity data is transmitted to those services under data processing agreements;
• Licensing Authority: gk9 may be required to disclose member data to its international gaming licensing authority for regulatory compliance, audit, or investigative purposes;
• Law Enforcement: gk9 will disclose personal data to law enforcement, courts, or government agencies where required by law or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity;
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of the business operating gk9, member data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party service providers who process personal data on behalf of gk9 are bound by data processing agreements requiring them to process such data only in accordance with gk9's instructions and applicable data protection law.

7. Data Retention

gk9 retains personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable legal, regulatory, or licensing obligations. The following retention guidelines apply:

• Account & Identity Data: Retained for the duration of the Account's existence plus a minimum of 5 years following Account closure, to meet AML record-keeping obligations;
• Transaction & Financial Records: Retained for a minimum of 7 years from the date of each transaction, in line with standard financial record-keeping requirements;
• Gaming Activity Logs: Retained for a minimum of 3 years from the date of each session or bet record;
• Customer Support Communications: Retained for 2 years from the date of the last communication in a support thread;
• Technical & Device Logs: Retained for up to 13 months from the date of collection;
• Responsible Gaming Records (including self-exclusion): Retained for the full duration of any active exclusion period plus 7 years thereafter.

Following the expiry of applicable retention periods, personal data is securely deleted or permanently anonymised.

8. International Data Transfers

8.1 gk9's Platform infrastructure and data processing systems may operate across multiple jurisdictions. Where personal data is transferred outside Malaysia, gk9 takes steps to ensure that appropriate safeguards are in place to protect the data to a standard equivalent to that required under Malaysian PDPA principles.

8.2 Such safeguards may include contractual clauses incorporating data protection obligations, transfers to jurisdictions with recognised adequate data protection frameworks, or other mechanisms as appropriate to the nature of the transfer.

9. Your Data Rights

As a gk9 member and data subject, you have the following rights in respect of your personal data:

To exercise any of the above rights, please contact our Data Privacy team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 3 business days.

10. Children's Privacy

10.1 gk9 is strictly intended for users aged 21 and above. We do not knowingly collect, process, or retain the personal data of persons under the age of 21. The Platform employs age verification measures during registration to prevent underage access.

10.2 If gk9 discovers or is notified that personal data has been collected from a person under the age of 21, we will promptly close the associated Account, delete the personal data to the extent permitted by applicable legal obligations, and take such other steps as may be required under our licensing obligations.

10.3 If you believe a minor has created a gk9 Account or that a minor's personal data has been submitted to gk9, please contact us immediately at [email protected].

11. Security Measures

gk9 employs a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gk9 platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for all internal administrative access to systems containing personal data;
• Regular third-party security audits and penetration testing;
• Intrusion detection systems and real-time security monitoring;
• Documented incident response procedures for managing potential data breaches.

Notwithstanding these measures, no data transmission over the internet or data storage system is fully secure. While gk9 takes all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, gk9 will notify affected Members in accordance with applicable legal obligations.

12. Third-Party Content

12.1 The gk9 Platform hosts games provided by third-party game studios under licensing arrangements. While gk9 ensures that game provider integrations are carried out under appropriate data processing agreements, gk9 is not responsible for the independent privacy practices of game studios in respect of any data they process in their own capacity.

12.2 This Privacy Policy applies solely to gk9's own data processing activities. It does not extend to the privacy practices of any third party whose services are integrated into or accessible from the Platform.

13. Policy Amendments

13.1 gk9 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to active members via email notification or a prominent notice on the Platform at least 14 days prior to the changes taking effect.

13.2 The "Last Updated" date at the top of this Policy will be revised each time an amendment is made. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

13.3 We encourage all gk9 members to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

14. Contact & Complaints

For any enquiries, data rights requests, or complaints regarding this Privacy Policy or gk9's data practices, please contact our Data Privacy team:

If you are not satisfied with our response to a privacy complaint, you may escalate your complaint to the relevant data protection authority in your jurisdiction or to the dispute resolution mechanism specified under gk9's gaming licence.