Privacy Policy

This Privacy Policy ("Policy") sets out how pb9 ("pb9", "we", "us", "the Company"), operator of the online gaming and sports betting platform at pb9.cam ("the Platform"), collects, uses, stores, and protects the personal information of individuals who access or use the Platform ("User", "you", "Player").

pb9 is committed to protecting your privacy in accordance with applicable data protection legislation and internationally recognised privacy principles. This Policy applies to all personal data collected through the Platform, our customer support channels, and any other means of interaction between you and pb9.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your use of pb9.

The following terms shall have the meanings set out below throughout this Policy:

pb9 collects personal data in several categories, each with a specific and documented lawful purpose. The following table summarises the categories of personal data we hold:

pb9 collects personal data through the following channels:

• Direct Registration: Information you provide when creating an Account, including your name, date of birth, email address, Malaysian contact number, and city of residence.
• KYC Submission: Identity documents (e.g., Malaysian MyKad, passport) submitted voluntarily through the Platform's verification process prior to withdrawal approval.
• Transaction Processing: Data generated automatically when you make a deposit or withdrawal via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or any approved Malaysian bank.
• Platform Activity: Technical and behavioural data collected automatically as you navigate the Platform — including games played, betting history, session times, and device information.
• Customer Support Interactions: Information shared when you contact pb9 via live chat, email ([email protected]), or any other support channel.
• Cookies and Similar Technologies: Data collected via cookies and tracking pixels embedded in the Platform, as detailed in Section 8 of this Policy.

pb9 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and closing your Account; processing your deposits and withdrawals in MYR; managing your bonus entitlements and VIP tier status.
• Identity & Age Verification: Conducting KYC checks to confirm your identity and ensure compliance with the minimum age requirement of 21 years.
• Fraud Prevention & Security: Detecting and preventing fraud, money laundering, multi-accounting, and unauthorised access. Transaction monitoring is conducted on an ongoing basis.
• Responsible Gambling: Monitoring your account activity to identify patterns associated with problem gambling. Applying deposit limits, cooling-off periods, or self-exclusion where requested or where required by our duty of care.
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Legal & Regulatory Compliance: Meeting our obligations under applicable anti-money laundering, financial crime prevention, and data protection legislation.
• Marketing Communications (Opt-In Only): Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may unsubscribe at any time via your account settings or by contacting support.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and the overall player experience.

pb9 does not use automated decision-making (including algorithmic profiling) for any purpose that produces a significant legal or similarly significant effect on individual players without human review.

pb9 processes your personal data only where a valid legal basis exists. The primary bases on which we rely are:

• Contractual Necessity: Processing required to perform the contract between you and pb9 — including registering your Account, processing transactions, and providing gaming services.
• Legal Obligation: Processing required to comply with applicable laws — including KYC, anti-money laundering obligations, and regulatory reporting requirements.
• Legitimate Interests: Processing necessary for pb9's legitimate business interests where these are not overridden by your rights — including fraud prevention, platform security, and responsible gambling monitoring.
• Consent: Processing for which you have provided clear, specific consent — including receiving marketing communications or certain optional analytical tracking. Consent may be withdrawn at any time without affecting prior processing.

pb9 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Personal data is shared with third parties only in the following limited circumstances:

• Payment Service Providers: Financial institutions and e-wallet operators (including but not limited to DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank) who process your MYR transactions. These providers are bound by their own regulatory frameworks and data protection obligations.
• Identity Verification Partners: Third-party KYC service providers engaged to verify your identity documents and age. All such providers operate under strict data processing agreements with pb9.
• Technology and Platform Vendors: Service providers who support the operation of the Platform, including cloud infrastructure providers, cybersecurity vendors, and game content providers. Access is restricted to what is strictly necessary for service delivery.
• Legal and Regulatory Authorities: Government agencies, law enforcement bodies, or regulators where we are legally required to disclose data, or where disclosure is necessary to protect the rights, property, or safety of pb9, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or transfer of pb9's business or assets, personal data may be transferred to the successor entity. We will notify you of any such transfer in advance where practicable.

pb9 uses cookies and similar technologies to operate the Platform effectively, ensure security, and understand how players interact with our services. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable account login, session management, and secure transaction processing. They cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: Store your preferences (e.g., language selection, game layout preferences) so you do not need to re-configure them on each visit.
• Analytical Cookies: Collect aggregated, anonymised data about how users navigate the Platform. This data helps pb9 identify areas for improvement and measure the effectiveness of our features.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair core Platform functionality. pb9 does not use third-party advertising cookies or cross-site tracking cookies.

pb9 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your browser or device and pb9 servers is encrypted using TLS 1.2/1.3 with 256-bit SSL certification.
• Encryption at Rest: Sensitive personal and financial data stored on pb9 servers is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within pb9's internal systems is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication enforced for all staff with data access privileges.
• Regular Security Audits: pb9 conducts periodic penetration testing, vulnerability assessments, and security reviews of all systems that store or process personal data.
• Incident Response: In the event of a data security incident that poses a risk to your rights, pb9 will notify affected users and relevant authorities within the timeframes required by applicable law.

While pb9 takes all reasonable precautions, no data transmission over the internet can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your Account credentials and for notifying pb9 immediately if you suspect unauthorised access to your Account.

pb9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Retained for the duration of your Account's active status, plus a post-closure period required by legal and regulatory obligations.
• Transaction Records: Financial transaction records (deposits, withdrawals, wagers) are retained for a minimum of five (5) years following the transaction date, in compliance with anti-money laundering and financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following Account closure or the end of your relationship with pb9.
• Support Records: Customer support interactions are retained for a maximum of three (3) years, or longer where a dispute or legal matter remains unresolved.
• Marketing Preferences: Retained until you withdraw consent or unsubscribe, after which they are updated within 30 days.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

As a user of pb9, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. pb9 will respond to all verified requests within 30 calendar days.

pb9 strictly prohibits participation by individuals under the age of 21 years. The Platform is not directed at, and does not knowingly collect personal data from, individuals under 21. Age verification is a mandatory step in the Account registration and withdrawal process.

Where pb9 becomes aware or has reasonable grounds to believe that personal data has been collected from an individual under 21 — whether through registration, KYC failure, or a third-party report — the relevant Account will be immediately suspended, all associated funds returned to the verified source of deposit, and personal data deleted or handled in accordance with legal requirements applicable to minors.

If you believe a minor may have accessed pb9 using your Account or another Account, please contact us immediately at [email protected].

pb9 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. The "Effective Date" at the top of this Policy indicates when the current version came into force.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a user — pb9 will notify registered users by email at least seven (7) days before the updated Policy takes effect. We will also display a prominent notice on the Platform during this period.

Your continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how pb9 protects your privacy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please reach out to the pb9 support team through the channels below. All privacy-related enquiries are handled with priority.