Privacy Policy g9k Malaysia —
Protection of Your Personal Data

Welcome to the g9k Privacy Policy. This document constitutes a written agreement between you as a registered member or visitor of the g9k platform ("you") and g9k ("we", "Platform", "g9k") regarding how we handle your personal information.

G9k operates as a trusted online betting and gaming platform in Malaysia. In delivering these services, we collect certain personal data necessary to ensure a smooth, secure user experience that complies with applicable legal requirements — including Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering and using the g9k platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you are advised not to continue using the platform. We encourage you to read this document carefully and contact our team if you have any questions.

G9k collects only the data genuinely required to provide services that are safe, seamless, and legally compliant. Below are the categories of data we collect and the purposes for their collection:

G9k does not collect sensitive data such as health information, religious beliefs, political opinions, or sexual orientation unless required by law under very specific circumstances. Any additional data collection beyond the list above will be communicated to you separately before collection takes place.

The data we collect is used solely for legitimate purposes directly related to the operation of the g9k platform. We will not use your data for purposes not stated in this policy without first obtaining your consent.

The primary purposes for which your personal data is used are as follows:

• Account management — creating, verifying, and maintaining your member account, including mandatory KYC processes.
• Transaction processing — processing deposits, withdrawals, and all financial activities related to your account securely and accurately.
• Platform security — detecting and preventing fraud, unauthorised access, money laundering, and platform abuse.
• Service communications — sending important account notifications such as login confirmations, transaction alerts, and security updates.
• Service improvement — analysing usage patterns on an aggregated, anonymised basis to improve platform performance and user experience.
• Legal compliance — fulfilling obligations under Malaysian law and the requirements of relevant regulatory bodies.
• Customer Support — resolving queries, complaints, and disputes more efficiently using relevant account information.

G9k does not sell, rent, or trade members' personal data to any party for commercial purposes. However, in the course of operating the platform, there are situations where we need to share certain information with trusted parties:

• Payment providers — financial institutions and payment processors including FPX, DuitNow, Touch 'n Go eWallet, and GrabPay that process your transactions. They receive only the data required for payment processing purposes.
• Game software providers — companies that supply casino, slot, and sports games to the g9k platform. Data sharing is limited to information required for game functionality.
• Cloud service providers — trusted server and data storage infrastructure to ensure platform reliability and security.
• Regulatory authorities — when required by law or court order, we will disclose the necessary information to the relevant authorities.
• Anti-fraud agency — in cases of suspected fraud or money laundering, relevant information may be shared with authorised financial crime prevention bodies.

All third parties working with g9k are subject to strict data processing agreements and must comply with security and privacy standards equal to or higher than those of g9k itself. g9k remains responsible for all data shared with these third parties.

G9k continuously invests in the latest cybersecurity infrastructure to ensure your personal data remains protected against both external and internal threats. Key security measures we employ include:

• End-to-end encryption applying TLS 1.3 standards for all data communications between your device and our servers.
• Two-factor authentication (2FA) available on all member accounts to add an extra layer of security at login.
• 24/7 security monitoring by a dedicated cybersecurity team that monitors suspicious activity in real time.
• Penetration testing conducted periodically by independent third parties to identify and patch security vulnerabilities before they can be exploited.
• Role-based access control ensuring that only staff who genuinely need access can view members' personal data, with every access recorded and audited.
• Automatic data backup encrypted and stored separately to ensure your data is not lost even in the event of an unexpected system failure.

The g9k platform uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and ensure that essential functions operate correctly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies — required for core platform functions such as maintaining your login session and language preferences. Without these, the platform will not function properly.
• Performance cookies — collecting anonymised information on how visitors use the platform, such as most-visited pages and time spent, to help us improve the platform.
• Functional cookies — storing your preferences such as display settings, game preferences, and saved login information for your convenience.
• Security cookies — used to detect suspicious activity and protect the platform against cyberattacks such as CSRF and session hijacking.

You can manage or delete cookies through your browser settings. However, deleting essential cookies may affect certain platform functions and your overall user experience. g9k does not use cookies to track your activity on websites outside the g9k platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the g9k privacy policy, you have the following rights regarding the personal data we hold:

G9k does not retain your personal data longer than necessary for the stated purposes or to fulfil our legal obligations. Retention periods vary by category:

• Active account data — retained for the entire duration your account remains active and valid on the g9k platform.
• Financial transaction data — retained for a minimum of 7 years after the transaction date, in accordance with Malaysia's tax and accounting legal requirements.
• KYC Documents — retained for 5 years after account closure or the date of last activity, whichever is later, in line with compliance requirements.
• Communication & support logs — retained for 2 years for reference and dispute resolution purposes.
• Marketing data — deleted immediately upon withdrawal of consent or when you request to unsubscribe from marketing communications.
• Technical & system log data — retained for 12 months for security and fraud detection purposes.

Once the retention period expires, data is securely deleted or anonymised using procedures that ensure it cannot be recovered. You may contact us at any time to find out the specific retention period for your category of personal data.

The g9k platform is exclusively for individuals who are of age 18 years and above. We do not intentionally collect or store any personal data from individuals under the age of 18.

If we discover or become aware that we have collected data from an individual under the age of 18, we will promptly take the following steps:

• Immediately close the account in question.
• Delete all personal data associated with the account as promptly as possible.
• Return any valid financial balance to the account holder or authorised guardian in accordance with established procedures.

Parents and guardians who suspect their child or ward has registered for or used the g9k platform without authorisation are advised to contact our support team immediately. g9k takes child protection responsibilities very seriously and will respond to such reports with the highest priority.

G9k reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, evolving legal requirements, or improvements in how we protect user data.

When there are material amendments to this policy, we will:

• Display an updated "Last Updated" date at the top of this page.
• Send notifications to all registered members via email or in-app notification before the amendments take effect.
• In the case of highly significant amendments, we may request re-confirmation of your consent before you can continue using the platform.

Your continued use of the g9k platform after the effective date of any amendments will be considered your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns, or complaints regarding how g9k handles your personal data, you are welcome to contact our Data Protection Officer (DPO) through the following channels:

We are committed to handling every privacy enquiry with seriousness and professionalism. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body under the PDPA 2010.