Your privacy matters to super9. This policy is written in plain English so that Malaysian players can understand exactly what personal data we hold, why we hold it, and what rights you have in relation to it. This policy applies to all users of the super9 Platform at super9.co, including registered account holders, visitors, and anyone who contacts super9 customer support.
1. Who We Are
For the purposes of this Privacy Policy, "super9", "we", "us", and "our" refers to the operator of the super9.co online casino and sportsbook platform. super9 is the data controller responsible for the personal data of users who access or register on the Platform. Our designated point of contact for all data privacy matters is reachable at [email protected].
super9 operates under licensing requirements that impose specific obligations relating to the collection, retention, and security of player data, including Know Your Customer ("KYC") and Anti-Money Laundering ("AML") compliance requirements. This Privacy Policy reflects those obligations in addition to our general commitment to responsible data handling.
2. Personal Data We Collect
super9 collects personal data through a number of channels, including account registration, identity verification, payment processing, customer support interactions, and your use of the Platform. The categories of data we may collect include:
- Identity Data: Full legal name, date of birth, MyKad or passport number, selfie or photograph where required for KYC.
- Contact Data: Email address, Malaysian mobile number, and residential address.
- Financial Data: Payment method details (where collected for verification purposes), deposit and withdrawal history, MYR wallet balance and transaction logs.
- Account Data: Username, hashed password, account preferences, bonus and promotion history, self-exclusion status, and responsible gaming settings.
- Gameplay Data: Betting history across all super9 products (sportsbook, live casino, slots, poker), game session durations, wagering amounts, and outcomes.
- Technical Data: IP address, browser type and version, device identifiers, operating system, referring URL, and session logs.
- Communications Data: Records of any interactions with the super9 customer support team via live chat or email.
We do not collect or store full payment card numbers. Where card-based payments are supported, card processing is handled by our licensed payment service providers in a PCI-DSS-compliant environment. super9 only retains the last four digits and card type for account verification purposes.
3. How We Use Your Personal Data
super9 uses the personal data collected from Malaysian players and other users for the following purposes:
- Account Management: To create and maintain your super9 account, authenticate logins, and provide access to the Platform.
- Identity Verification: To complete KYC checks required by our licensing obligations before enabling withdrawals or processing large transactions.
- Payment Processing: To facilitate deposits, withdrawals, and wallet management in MYR via supported payment methods including Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and FPX.
- Regulatory Compliance: To meet AML obligations, detect and prevent fraud, and report to relevant authorities as required by applicable law.
- Responsible Gaming: To monitor for indicators of problem gambling, apply self-exclusion restrictions, and enforce deposit and session limits set by the account holder or by super9 under its safer gambling obligations.
- Customer Support: To investigate and resolve queries, disputes, and complaints raised by users via live chat or email.
- Platform Improvement: To analyse aggregated, anonymised usage data to improve the super9 Platform, fix technical issues, and develop new features relevant to Malaysian players.
- Marketing Communications: Where you have given explicit consent, to send you information about super9 promotions, bonuses, and platform updates. You may withdraw this consent at any time via your account settings.
4. Legal Basis for Processing
super9 processes your personal data on the following legal bases, depending on the nature and purpose of the processing:
- Contractual Necessity: Processing required to fulfil our obligations under the account agreement, including enabling access to the Platform, processing transactions, and settling bets.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gambling requirements imposed by our licensing authority.
- Legitimate Interests: Processing necessary for the legitimate interests of super9, including fraud prevention, security monitoring, and product analytics, where those interests are not overridden by your rights and interests.
- Consent: Processing based on your explicit consent, including the sending of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
5. Data Sharing and Third Parties
super9 does not sell your personal data to any third party. We may share your data with third parties only in the following circumstances:
- Payment Service Providers: To process MYR deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and FPX. These providers are contractually required to process your data in accordance with applicable data protection standards.
- Identity Verification Services: To perform KYC checks using government-issued identification documents. These providers operate under strict confidentiality and data security requirements.
- Game Software Providers: Certain game providers may receive gameplay session data to provide their games and detect irregularities. Data shared for this purpose does not include full identity information unless required for specific licensing compliance.
- Regulatory and Law Enforcement Authorities: Where required by applicable law or valid legal process, super9 will disclose personal data to regulators, law enforcement agencies, or courts. We will notify you of such disclosures where legally permitted to do so.
- Responsible Gambling Organisations: Where a self-exclusion has been registered or where we are legally required to share data with inter-operator self-exclusion schemes.
6. Cookies and Tracking Technologies
super9 uses cookies and similar tracking technologies on the Platform for the following purposes:
- Strictly Necessary Cookies: Required for the Platform to function, including session authentication, account login persistence, and security tokens. These cannot be disabled.
- Analytics Cookies: Used to collect aggregated, anonymised data on how users navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data helps us improve the super9 experience for Malaysian players.
- Preference Cookies: Store your language, display, and notification preferences so you don't need to reconfigure them on each visit.
You may manage non-essential cookies via your browser settings. Please note that disabling certain cookies may affect the functionality of the super9 Platform. A full cookie list is available on request via [email protected].
7. Data Retention
super9 retains your personal data for as long as your account remains active and for a period thereafter as required by our licensing and regulatory obligations. Specifically:
- Account and transaction records are retained for a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements.
- KYC documentation is retained for a minimum of five (5) years following the end of the business relationship.
- Customer support communications are retained for three (3) years following the resolution of the relevant query.
- Marketing preference records are retained until you withdraw consent or request deletion.
After the applicable retention period expires, personal data is securely deleted or anonymised. You may request earlier deletion of certain data categories — see Section 9 for your rights in this regard.
8. Data Security
super9 implements technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:
- 128-bit SSL encryption for all data transmitted between your device and the super9 Platform.
- Hashed and salted storage of all account passwords — super9 never stores your password in plain text.
- Access controls limiting employee access to personal data on a strict need-to-know basis.
- Regular security assessments and penetration testing of Platform infrastructure.
- Optional two-factor authentication (2FA) available to all registered super9 account holders.
Notwithstanding these measures, no internet transmission is entirely secure. You are responsible for keeping your own super9 login credentials confidential. If you believe your account has been compromised, contact super9 support via live chat immediately.
9. Your Data Rights
As a registered user of the super9 Platform, you have the following rights with respect to your personal data, subject to applicable legal limitations:
- Right of Access: You may request a copy of the personal data super9 holds about you.
- Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your super9 account.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Restriction: You may request that we limit the processing of your personal data in certain circumstances, for example while a dispute is being resolved.
- Right to Data Portability: You may request a machine-readable copy of the personal data you provided to super9, where processing is based on consent or contract.
- Right to Object: You may object to processing based on legitimate interests, including direct marketing. Objection to marketing will be actioned immediately.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please contact the super9 data privacy team at [email protected] with "Data Rights Request" in the subject line. We will acknowledge your request within 5 business days and aim to respond in full within 30 days.
10. International Data Transfers
super9's primary server infrastructure is located in Southeast Asia to ensure the best performance for Malaysian players. In some circumstances, your personal data may be processed by third-party service providers located outside Malaysia — for example, cloud infrastructure, security, or analytics providers.
Where personal data is transferred internationally, super9 ensures that appropriate safeguards are in place, including contractual clauses that require recipients to handle your data to a standard equivalent to that required under applicable data protection law. If you wish to obtain details of the specific safeguards applicable to any international transfer, please contact [email protected].
11. Children's Privacy
The super9 Platform is strictly intended for users aged 21 and above. super9 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, return any funds after deducting any bonuses claimed, and securely delete the data concerned.
If you believe that a person under 21 has registered on the super9 Platform, please contact us immediately at [email protected].
12. Changes to This Privacy Policy
super9 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Where changes are material, registered users will be notified via their registered email address. The "Last Updated" date at the top of this page will always reflect the most recent revision.
We encourage you to review this Privacy Policy periodically. Continued use of the super9 Platform following notification of changes constitutes your acknowledgment of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way super9 handles your personal data, please contact our data privacy team through the following channels:
- Email: [email protected] — include "Privacy" or "Data Rights Request" in the subject line for fastest routing.
- Live Chat: Available 24/7 directly on the super9.co Platform — average response under 5 minutes.
super9 is committed to resolving privacy-related queries promptly and transparently. Malaysian players can communicate with our support team entirely in English. All privacy requests will be handled confidentially.