bet9ja Privacy Policy
Your privacy is a fundamental right, and bet9ja takes it seriously. This Privacy Policy explains exactly what personal data we collect from Malaysian players, why we collect it, how we use it, who we may share it with, and the rights you have over your own information.
Privacy at a Glance
Key principles of how bet9ja handles your personal data — plain English, no jargon.
No excessive data collection — only what is necessary to operate your account.
Your personal data is never sold, rented, or traded to external marketing companies.
All data in transit is protected by industry-standard encryption protocols.
Access, correct, export, or request deletion of your data at any time.
Data is retained only for as long as legally required or operationally necessary.
In the unlikely event of a data breach, affected players are notified promptly.
- 01Introduction
- 02Definitions
- 03Data Controller
- 04Data We Collect
- 05Purposes of Processing
- 06Legal Basis for Processing
- 07Data Sharing & Disclosure
- 08International Transfers
- 09Data Retention
- 10Cookies & Tracking
- 11Security Measures
- 12Your Data Rights
- 13Protection of Minors
- 14Policy Changes
- 15Contact Us
01.Introduction
This Privacy Policy (hereinafter "Policy" or "Privacy Notice") issued by bet9ja, operating through the domainbet9ja.casa (hereinafter "bet9ja", "we", "us", or "our"). This Policy applies to all individuals who access or use the bet9ja platform, including registered members, visitors, and any persons interacting with our customer support channels (collectively referred to as "you", "your", or "Data Subject").
At bet9ja, the protection of your personal data is not merely a compliance obligation — it is a core aspect of the trust relationship we maintain with every Malaysian player on our platform. We are committed to processing your personal information fairly, lawfully, and transparently, in accordance with applicable data protection legislation.
This Policy describes in detail: the categories of personal data we collect; the specific purposes for which that data is processed; the legal bases that legitimise our processing activities; the circumstances under which data may be shared with third parties; the security measures in place to protect your information; the duration for which data is retained; and the rights you may exercise in relation to your personal data.
02.Definitions
The following terms bear the meanings set out below wherever they appear in this Policy:
- "Personal Data" — any information that relates to an identified or identifiable natural person, including name, identification number, email address, IP address, financial information, and behavioural data.
- "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transmission, alteration, or deletion.
- "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is bet9ja.
- "Data Processor" — a third party that processes personal data on behalf of the Data Controller pursuant to written instructions.
- "Consent" — freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose.
- "KYC" — Know Your Customer; the identity verification process required for regulatory compliance and account security.
- "Cookies" — small text files stored on your device by our platform to enable functionality, personalisation, and analytics.
03.Data Controller
bet9ja acts as the Data Controller for all personal data collected through the bet9ja.casa platform and associated services. As Data Controller, bet9ja is responsible for determining the purposes and means by which your personal information is processed.
For all data protection enquiries, requests to exercise your rights, or complaints relating to the handling of your personal data, you may contact our Data Protection team using the contact details provided in Section 15 of this Policy.
04.Data We Collect
bet9ja collects personal data through several channels: directly from you when you register, deposit, or interact with the platform; automatically through technical systems when you use the website; and, in limited circumstances, from verified third-party sources for compliance purposes.
- Full legal name
- Date of birth
- National ID / MyKad / Passport number
- Selfie / identity photograph
- Gender (optional)
- Email address
- Mobile phone number
- Residential address
- City / state (e.g., Kuala Lumpur, Penang)
- Payment method details
- Deposit and withdrawal history
- Account balance records
- Transaction reference numbers
- IP address
- Device identifiers
- Browser type and version
- Operating system
- Session timestamps
- Betting and gaming history
- Pages visited on the platform
- Feature interaction logs
- Bonus claims and promotional activity
- Live chat transcripts
- Email correspondence records
- Support ticket history
- Marketing preference settings
bet9ja does not collect sensitive special-category personal data such as racial or ethnic origin, religious beliefs, health data, or sexual orientation unless directly relevant to a legal obligation (for example, self-exclusion requests relating to problem gambling support).
05.Purposes of Processing
Your personal data is processed by bet9ja for the following defined purposes, each corresponding to an identified legal basis set out in Section 6:
5.1 Account Registration and Management
To create, verify, and maintain your player account; to authenticate your login sessions; to communicate account-related notifications (password resets, security alerts, deposit confirmations).
5.2 Identity Verification (KYC)
To conduct mandatory Know Your Customer checks required for anti-money laundering (AML) compliance; to verify your age (21+ requirement); and to prevent fraudulent account creation. This involves processing identity documents such as your Malaysian MyKad, passport, or driver's licence, along with proof of residential address.
5.3 Payment Processing
To process deposits via FPX, DuitNow, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency payment channels; to process withdrawal requests; to maintain transaction records for accounting and audit purposes.
5.4 Platform Operations and Service Delivery
To deliver sports betting, live casino, and all other services on the platform; to personalise your experience based on your activity history; to maintain platform security and prevent cheating, fraud, and multi-accounting.
5.5 Customer Support
To respond to your enquiries, complaints, and support requests through live chat, email, and other support channels; to maintain records of your support interactions for quality assurance and dispute resolution purposes.
5.6 Legal and Regulatory Compliance
To fulfil obligations imposed by applicable laws, including AML regulations, financial crime prevention requirements, and any lawful requests from regulatory authorities or law enforcement agencies with jurisdiction over our operations.
5.7 Marketing Communications (with Consent)
Where you have explicitly opted in, to send you promotional emails, platform update notifications, and personalised betting or bonus offers. You may withdraw this consent at any time by updating your communication preferences in your account settings.
06.Legal Basis for Processing
All processing of personal data by bet9ja is grounded in one or more of the following recognised legal bases:
- Contractual Necessity: Processing required to enter into or perform the contract established when you register an account and accept our Terms & Conditions — including account creation, identity verification, payment processing, and service delivery.
- Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering requirements, record-keeping obligations, and responses to lawful regulatory requests.
- Legitimate Interests: Processing where bet9ja has a legitimate interest that is not overridden by your rights — including fraud prevention, platform security, responsible gambling monitoring, and service quality improvement.
- Consent: Processing based on your freely given, informed, and specific consent — principally for marketing communications and certain optional cookie categories. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
07.Data Sharing & Disclosure
bet9ja does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Data is shared only in the limited circumstances described below:
7.1 Payment Service Providers
Personal and transaction data is shared with payment processors — including FPX gateway providers, DuitNow operators, e-wallet platforms (Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency processing services — strictly to the extent necessary to process your transactions.
7.2 Identity Verification Partners
For KYC processing, we may engage third-party identity verification service providers who process your identity documents on our behalf under strict data processing agreements. These providers are bound by confidentiality and data security obligations.
7.3 Game Studio Partners
Limited technical data (such as anonymised player identifier) is shared with our licensed game studio partners to enable game session management. No personally identifiable information beyond what is technically necessary for session continuity is disclosed.
7.4 Legal and Regulatory Authorities
Where required by applicable law, court order, or lawful request from a competent regulatory or law enforcement authority, bet9ja will disclose personal data to the extent mandated. We will notify you of such disclosures where permitted to do so by law.
7.5 Business Transfers
In the event of a merger, acquisition, or sale of substantially all assets of bet9ja, your personal data may be transferred to the acquiring entity, subject to that entity honouring the commitments set out in this Privacy Policy or providing equivalent protections.
08.International Data Transfers
Where the delivery of our services requires personal data to be transferred to or processed by entities located outside Malaysia, bet9ja ensures that appropriate safeguards are in place to protect your data throughout any such transfer. These safeguards may include:
- Contractual data protection clauses binding the recipient to equivalent standards;
- Transfers exclusively to jurisdictions recognised as providing an adequate level of data protection;
- Technical and organisational security measures proportionate to the sensitivity of the data transferred.
09.Data Retention
bet9ja retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention schedule applies as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 7 years post-closure | AML regulatory requirement |
| Transaction & Financial Records | 7 years from transaction date | Financial record-keeping obligations |
| KYC Documents | 5 years from account closure | AML / KYC compliance |
| Customer Support Records | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical & Usage Logs | 12 months on a rolling basis | Platform security and fraud detection |
| Marketing Consent Records | Until consent withdrawn + 1 year | Consent management compliance |
| Self-Exclusion Records | Duration of exclusion + 5 years | Responsible gambling obligations |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Backups may be retained for a short additional period pending scheduled deletion cycles.
10.Cookies & Tracking Technologies
bet9ja uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. The following categories of cookies are used:
10.1 Strictly Necessary Cookies
These cookies are essential for the platform to function. They enable core features such as session authentication, security tokens, load balancing, and betting cart functionality. These cookies cannot be disabled without impairing platform function and do not require consent.
10.2 Functional Cookies
These cookies remember your preferences and settings — such as your preferred language, display options, and previously entered form data — to provide a more personalised experience.
10.3 Analytics Cookies
With your consent, analytics cookies collect aggregate, anonymised data about how players interact with the platform — such as pages visited, session duration, and feature usage. This data is used solely to improve platform design and performance. No individual player is identified through analytics data.
10.4 Marketing Cookies
With your explicit consent, marketing cookies may be used to present you with relevant promotional offers based on your betting activity patterns. You can manage your cookie preferences at any time through your browser settings or by contacting our support team.
11.Security Measures
bet9ja implements a comprehensive framework of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or unlawful processing. These measures include:
- 256-bit TLS/SSL Encryption: All data transmitted between your browser and the bet9ja platform is encrypted using industry-standard Transport Layer Security (TLS) with 256-bit cipher strength.
- Two-Factor Authentication (2FA): Optional but strongly recommended 2FA for all player accounts, adding an additional authentication layer beyond the password.
- Intrusion Detection Systems: Real-time network monitoring and anomaly detection to identify and respond to unauthorised access attempts.
- Access Controls: Strict role-based access controls ensuring that personal data is accessible only to authorised personnel with a documented business need.
- Data Minimisation: Internal systems are designed to limit the personal data accessible by any given team or function to the minimum required for their specific tasks.
- Regular Security Audits: Periodic independent security assessments and penetration testing of platform infrastructure.
- Staff Training: All staff with access to personal data undergo mandatory data protection and security training.
12.Your Data Rights
As a data subject, you hold meaningful rights over your personal data held by bet9ja. The following rights are available to you and may be exercised by contacting our Data Protection team through the details provided in Section 15:
Request a copy of all personal data bet9ja holds about you, along with information about how it is used.
Request correction of any inaccurate or incomplete personal data held on your account.
Request deletion of your personal data where it is no longer necessary for the original collection purpose, subject to legal retention obligations.
Request that processing of your data be temporarily suspended in defined circumstances, such as while accuracy is contested.
Receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Object to processing carried out on the basis of legitimate interests, particularly in relation to direct marketing activities.
Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
If you believe your data rights have been infringed, you may lodge a complaint with the competent data protection supervisory authority in your jurisdiction.
Requests to exercise any of the above rights will be processed within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified accordingly. Identity verification may be required before requests are actioned to ensure the security of the data concerned.
13.Protection of Minors
The bet9ja platform is strictly intended for individuals aged21 years and above. We do not knowingly collect, store, or process personal data from persons under the age of 21.
If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account, delete all related personal data from our systems, and, where applicable, report the matter to relevant authorities.
Parents and guardians who believe that a minor has registered an account or submitted personal data to bet9ja should contact our Data Protection team immediately using the contact details in Section 15. We will act on all verified reports without delay.
14.Changes to This Privacy Policy
bet9ja reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or platform features. The current version of this Policy, including the effective date and version number, is always accessible at bet9ja.casa/privacy-policy.
Where changes are material — particularly where they affect the basis on which your personal data is processed or your rights in relation to it — we will notify you by email to your registered address and through a prominent notice on the platform at least fourteen (14) days before the revised Policy takes effect.
Your continued use of the bet9ja platform following the effective date of an amended Policy constitutes your acknowledgement of the revisions. We encourage you to review this page periodically to stay informed about how bet9ja protects your privacy.
15.Contact Us
For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the bet9ja Data Protection team through any of the following channels:
When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. Identity verification may be required before we can action requests relating to personal data.
Our Privacy Commitments to You
Privacy is not a checkbox at bet9ja. These are the practical, measurable commitments we hold ourselves to on behalf of every Malaysian player on our platform.
bet9ja does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or any external commercial entities. Full stop.
Every byte of data transmitted between your device and bet9ja is protected by 256-bit TLS encryption. Look for the padlock icon in your browser address bar — it will always be there.
Access, correct, export, or delete your personal data at any time by contacting our Data Protection team. Requests are handled within 30 calendar days.
We collect only the data strictly necessary to operate your account, process your transactions, and comply with applicable legal obligations. No fishing expeditions, no excessive profiling.
In the unlikely event of a data security breach affecting your personal information, bet9ja will notify affected players within 72 hours of becoming aware, consistent with responsible breach response standards.
Personal data is not stored indefinitely. Our retention schedule defines clear deletion timelines for each data category — and we honour them with automated and manual data lifecycle controls.
Trust bet9ja With Your Privacy
Your personal data is handled with the same care and rigour we apply to your funds. If you have any privacy questions, our team is available24/7. Ready to experience a platform built on genuine trust? Visit our homepage to get started.
🔞 For players aged 21 and above only. Play responsibly. Visit our Responsible Gambling page for support tools.