Privacy Policy

1. Introduction

Welcome to 9n9m's Privacy Policy. This document describes how 9n9m ("we," "us," or "our") collects, uses, stores, shares, and protects personal information obtained from users ("you" or "your") who access or use our online betting platform at https://9n9m.cam.

By creating an account with 9n9m, placing bets, or using any of our services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

9n9m operates as an international online betting platform licensed offshore and targeting Indonesian players who prefer English-language gambling experiences. We handle personal data in accordance with international data protection standards and applicable Indonesian privacy regulations where relevant.

This Privacy Policy applies to all 9n9m services including sports betting (covering BRI Liga 1, EPL, La Liga, Champions League, and other competitions), live casino games, video slots, togel (Indonesian numbers lottery), sabung ayam (cockfighting betting), and all related customer support, payment processing, and promotional activities.

2. Information We Collect

9n9m collects several types of information to provide, maintain, and improve our services, process transactions, verify identities, prevent fraud, and comply with legal obligations.

2.1 Information You Provide Directly

When you register an account or use 9n9m's services, you voluntarily provide the following personal information:

• Account Registration Data: Full legal name (as shown on Indonesian ID), date of birth, gender, email address, mobile phone number, residential address (street, city, postal code, province), and chosen username and password.
• Identity Verification (KYC) Documents: Scanned copy or photograph of your Indonesian ID card (KTP) showing your photo, full name, date of birth, ID number, and address. In some cases, we may request additional proof of address (utility bill or bank statement dated within the last 3 months) and a selfie photograph holding your KTP for enhanced verification.
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals. If you use e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), we collect your registered e-wallet phone number or account ID.
• Communication Data: Any information you provide when contacting our customer support team via live chat, WhatsApp, email, or phone, including the content of your messages, complaint details, and support ticket history.
• Survey and Feedback Responses: If you participate in voluntary surveys or provide feedback about our services, we collect your responses and opinions.

2.2 Information Collected Automatically

When you access or use 9n9m's platform, we automatically collect certain technical and behavioral information:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system (Android, iOS, Windows, MacOS), browser type and version, screen resolution, and device identifiers.
• Connection Data: IP address, internet service provider (ISP), geographic location (country, city derived from IP address), time zone setting, and connection timestamps.
• Usage Data: Pages visited, features used, time spent on each page, click patterns, game history, betting history, deposit and withdrawal history, login/logout times, and session durations.
• Cookies and Similar Technologies: We use cookies, web beacons, pixel tags, and local storage to track user preferences, maintain login sessions, analyze site traffic, and deliver personalized content. See Section 8 (Cookies & Tracking) for details.

2.3 Information from Third Parties

9n9m may receive limited information from trusted third-party partners:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) confirm transaction success or failure but do not share your full banking credentials with us.
• Identity Verification Services: We may use third-party KYC verification providers to validate the authenticity of submitted Indonesian ID cards (KTP) against government databases, but these services operate under strict data protection agreements.
• Fraud Prevention Services: We use external fraud detection tools to screen for duplicate accounts, stolen payment methods, and suspicious betting patterns. These services provide risk scores but do not receive unnecessary personal details.

Data Category	Examples	Collection Method
Personal Identifiers	Name, date of birth, KTP number, email, phone	User-provided during registration
Financial Data	Bank account details, transaction history	User-provided for deposits/withdrawals
Technical Data	IP address, device type, browser, OS	Automatically collected via cookies/logs
Behavioral Data	Betting patterns, game preferences, session times	Automatically tracked during platform use

3. How We Use Your Information

9n9m uses collected personal information for the following legitimate business purposes:

3.1 Account Management & Service Delivery

• Creating and maintaining your betting account.
• Processing deposits, withdrawals, and internal account transfers.
• Enabling you to place bets on sports events, play casino games, slots, togel, and sabung ayam.
• Calculating winnings, settling bets, and updating account balances in real-time.
• Managing bonus offers, promotions, and loyalty reward programs.

3.2 Identity Verification & Fraud Prevention

• Verifying that you are at least 21 years of age and a resident of Indonesia as required by our Terms & Conditions.
• Preventing underage gambling, identity theft, multiple account creation, and account sharing.
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Detecting and preventing fraudulent deposits, chargebacks, bonus abuse, and coordinated betting schemes.
• Monitoring for unusual betting patterns that may indicate match-fixing or insider trading.

3.3 Customer Support & Communication

• Responding to your inquiries via live chat, WhatsApp, email, or phone.
• Sending transactional notifications (deposit confirmations, withdrawal approvals, bet settlements, bonus credits).
• Notifying you of account security alerts, password changes, or suspicious login attempts.
• Providing updates on service maintenance, system upgrades, or temporary outages.
• Sending promotional emails about new games, bonus offers, or special events (you can opt out via email preferences).

3.4 Platform Improvement & Analytics

• Analyzing user behavior to improve website navigation, game selection, and user interface design.
• Conducting A/B testing to optimize landing pages, promotional banners, and checkout flows.
• Generating aggregated, anonymized statistics about popular games, peak traffic hours, and user demographics for internal business reporting.
• Identifying technical issues, bugs, or performance bottlenecks to enhance platform stability.

3.5 Legal Compliance & Safety

• Complying with legal obligations under our international gaming license and Indonesian regulations where applicable.
• Responding to court orders, subpoenas, or requests from law enforcement agencies.
• Enforcing our Terms & Conditions and investigating violations such as bonus abuse or collusion.
• Protecting 9n9m's legal rights in disputes or litigation.
• Implementing responsible gaming measures including self-exclusion, deposit limits, and session time restrictions.

4. Information Sharing & Disclosure

9n9m shares your personal information only in the following limited circumstances:

4.1 Service Providers & Business Partners

We engage trusted third-party companies to perform functions on our behalf. These service providers have access to personal information only as necessary to perform their specific tasks and are contractually obligated to maintain confidentiality:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) process deposits and withdrawals. They receive your bank account number or e-wallet ID to complete transactions.
• KYC Verification Services: Third-party identity verification providers validate your Indonesian ID (KTP) authenticity and cross-check against watchlists.
• Cloud Hosting Providers: We use secure cloud infrastructure to host our website and store encrypted data backups.
• Customer Support Tools: Live chat software and ticketing systems help us manage support inquiries efficiently.
• Email Service Providers: Email delivery platforms send transactional and promotional messages on our behalf.
• Analytics Platforms: Web analytics tools (Google Analytics, etc.) help us understand user behavior through anonymized aggregate data.

4.2 Legal Requirements & Law Enforcement

We may disclose your personal information if required by law or in good faith belief that such action is necessary to:

• Comply with legal processes, court orders, subpoenas, or governmental requests.
• Respond to requests from Indonesian or international law enforcement agencies investigating suspected illegal activity.
• Enforce our Terms & Conditions and investigate violations.
• Protect the rights, property, or safety of 9n9m, our users, or the public.
• Prevent or detect fraud, security breaches, or technical issues.

4.3 Business Transfers

If 9n9m undergoes a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and website notice before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, for example, when you opt in to receive offers from promotional partners or participate in co-branded events.

4.5 Aggregated & Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. For example, we might publish statistics like "50,000 Indonesian players placed over 2 million bets on EPL matches last month" for marketing or industry analysis purposes.

5. Data Security Measures

9n9m employs industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology. Look for the padlock icon in your browser's address bar.
• Encrypted Data Storage: Sensitive personal information (passwords, KTP numbers, bank account details) is encrypted at rest using AES-256 encryption.
• Password Security: Passwords are hashed using bcrypt or similar one-way cryptographic algorithms. Even 9n9m staff cannot view your plaintext password.
• Two-Factor Authentication (2FA): Optional 2FA via SMS or authenticator app adds an extra layer of account security.
• Firewalls & Intrusion Detection: Network firewalls, intrusion detection systems, and DDoS protection defend against cyberattacks.

5.2 Administrative Safeguards

• Access Controls: Personal data is accessible only to authorized 9n9m employees and contractors who need it to perform their job functions.
• Employee Training: Staff receive regular training on data protection, privacy best practices, and recognizing phishing attempts.
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements prohibiting unauthorized disclosure of user data.
• Regular Security Audits: We conduct periodic internal security reviews and engage third-party penetration testers to identify vulnerabilities.

5.3 Your Responsibilities

While we implement strong security measures, your cooperation is essential:

• Choose a strong, unique password combining uppercase, lowercase, numbers, and symbols. Do not reuse passwords from other websites.
• Never share your password with anyone, including 9n9m support staff (we will never ask for it).
• Log out of your account when using shared or public computers.
• Enable two-factor authentication (2FA) when available for extra protection.
• Be cautious of phishing emails pretending to be from 9n9m. Verify sender addresses and never click suspicious links.
• Report any suspected unauthorized account access immediately to [email protected].

6. Data Retention

9n9m retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.

6.1 Active Accounts

While your account remains active, we retain all personal information, transaction history, betting records, and communication logs to provide ongoing service and comply with regulatory requirements.

6.2 Closed Accounts

If you voluntarily close your account or we terminate it for Terms & Conditions violations, we retain certain information for legal and operational reasons:

• Financial Records: Deposit, withdrawal, and betting transaction records are retained for 7 years to comply with anti-money laundering (AML) regulations and tax reporting requirements.
• Identity Documents: KYC verification documents (KTP scans, proof of address) are retained for 5 years after account closure as required by our gaming license.
• Fraud Prevention Data: Information related to account suspensions, bonus abuse investigations, or fraudulent activity is retained indefinitely to prevent repeat offenses.
• Customer Support Records: Support tickets, chat transcripts, and complaint histories are retained for 3 years for quality assurance and dispute resolution.

6.3 Inactive Accounts

If you do not log in or place bets for 12 consecutive months, your account is considered inactive. After 24 months of inactivity, we may delete non-essential personal information (email marketing preferences, browsing history) while retaining financial records and identity documents as described above.

6.4 Legal Holds

If your data is subject to a legal hold (pending litigation, government investigation, or regulatory audit), we will retain all relevant information until the hold is lifted, regardless of standard retention periods.

7. Your Privacy Rights

As a 9n9m user, you have certain rights regarding your personal information. These rights may vary depending on your jurisdiction, but generally include:

7.1 Right to Access

You can request a copy of all personal information we hold about you. To exercise this right, contact [email protected] with "Data Access Request" in the subject line. We will respond within 30 days with a digital copy of your data in a commonly used format (PDF or CSV).

7.2 Right to Rectification

If you believe any personal information we hold is inaccurate or incomplete, you can request corrections. Log in to your account to update your email, phone number, or address directly. For changes to your registered name or date of birth (as shown on KTP), contact customer support with updated documentation.

7.3 Right to Erasure ("Right to Be Forgotten")

You can request deletion of your personal information under certain circumstances. However, we may be legally required to retain some data (financial records, KYC documents) even after deletion requests. To request data deletion, close your account and contact [email protected]. We will delete all non-essential data within 60 days, subject to legal retention obligations.

7.4 Right to Restrict Processing

You can request that we temporarily limit how we use your personal information, for example, if you contest the accuracy of data or object to processing. Contact support to discuss restrictions.

7.5 Right to Data Portability

You can request a machine-readable copy of your personal information to transfer to another service provider. This applies to data you provided directly (registration info, betting history) but not to derived or analyzed data.

7.6 Right to Object

You can object to processing of your personal information for direct marketing purposes. To opt out of promotional emails, click the "unsubscribe" link in any marketing email or adjust your communication preferences in account settings. Note that you cannot opt out of transactional emails (deposit confirmations, withdrawal notifications, security alerts).

7.7 Right to Withdraw Consent

If we rely on your consent for certain data processing activities, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

7.8 How to Exercise Your Rights

To exercise any privacy rights, contact us at [email protected] with "Privacy Rights Request" in the subject line. Include your full name, account username, registered email, and specific request details. We may ask for identity verification (KTP scan) to protect against fraudulent requests. We respond to verified requests within 30 days.

8. Cookies & Tracking Technologies

9n9m uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They contain information like your login status, language preference, and browsing history.

8.2 Types of Cookies We Use

• Essential Cookies: Required for core website functionality like login sessions, shopping cart, and security features. These cannot be disabled without breaking the site.
• Performance Cookies: Collect anonymized data about how users interact with our site (pages visited, time spent, click patterns) to improve performance. Example: Google Analytics.
• Functional Cookies: Remember your preferences like language selection, currency display, and favorite games for a more personalized experience.
• Advertising Cookies: Track your browsing across websites to deliver targeted ads based on your interests. We use these to show relevant promotions to users who previously visited 9n9m.

8.3 Managing Cookies

Most browsers allow you to control cookies through settings. You can block all cookies, accept only first-party cookies, or delete existing cookies. However, disabling essential cookies will prevent you from logging in or placing bets. Refer to your browser's help documentation for cookie management instructions:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions > Manage cookies

8.4 Third-Party Cookies

We use third-party services (Google Analytics, Facebook Pixel, etc.) that may set their own cookies to track your activity across multiple websites. We do not control these third-party cookies. Review their privacy policies for details on how they handle data.

9. International Data Transfers

9n9m operates as an international platform with servers and service providers located in multiple countries. When you use our services, your personal information may be transferred to, stored, and processed in jurisdictions outside Indonesia, including but not limited to Singapore, the European Union, and the United States.

These jurisdictions may have different data protection laws than Indonesia. However, we ensure that all international data transfers comply with applicable legal requirements and are protected by appropriate safeguards such as:

• Standard Contractual Clauses (SCCs): EU-approved contract templates that require recipients to protect personal data according to European standards.
• Data Processing Agreements (DPAs): Binding contracts with all service providers specifying data protection obligations, security measures, and breach notification procedures.
• Encryption in Transit and at Rest: All cross-border data transfers use SSL/TLS encryption during transmission and AES-256 encryption for storage.

By using 9n9m's services, you acknowledge and consent to the international transfer of your personal information as described in this Privacy Policy.

10. Children's Privacy

9n9m's services are strictly intended for adults aged 21 years and older. We do not knowingly collect, use, or solicit personal information from anyone under the age of 21. If you are under 21, do not attempt to register an account, provide any personal information, or use our services.

If we discover that we have inadvertently collected personal information from someone under 21 years of age, we will immediately delete that information from our systems. All users must complete KYC verification with a valid Indonesian ID (KTP) proving they are at least 21 before placing bets or withdrawing funds.

If you believe a minor has provided personal information to 9n9m, please contact us immediately at [email protected] so we can investigate and take appropriate action.

11. Changes to This Privacy Policy

9n9m reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on our homepage and login screen at least 14 days before the changes take effect.
• Sending an email notification to your registered email address.
• Updating the "Last Updated" date at the top of this policy.

Your continued use of 9n9m's services after the effective date of the revised Privacy Policy constitutes acceptance of the changes. If you do not agree with the updated policy, you must cease using our services and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or 9n9m's data practices, please contact us using the following methods:

• Email: [email protected] (for general inquiries)
• Privacy-Specific Email: [email protected] (for data access, deletion, or correction requests)
• Live Chat: Available 24/7 on our website (click the chat icon in the bottom-right corner)
• WhatsApp: Contact via the number provided on our website
• Customer Support Hours: 24/7 with Indonesian-speaking and English-speaking agents

When contacting us about privacy matters, please include:

• Your full name and account username
• Registered email address
• Detailed description of your inquiry or request
• Any supporting documentation (for identity verification if requesting data access or deletion)

We aim to respond to all privacy inquiries within 5 business days and fulfill verified data requests within 30 days.