At 9 Win, your personal information is treated with the same care as your money. This Privacy Policy explains exactly what data we collect when you use the 9 Win platform, why we need it, who we might share it with, and — most importantly — what rights you have over your own information. We've written this in plain English so it's actually readable.
Before you read the full policy, here's the short version of how 9 Win approaches your personal data. These aren't aspirational — they're operational principles embedded in how the platform actually works.
9 Win does not sell, rent or trade your personal information to third parties for marketing purposes. Your name, CNIC number, contact details and financial information belong to you — 9 Win uses them to operate your account and for nothing else outside of what this policy describes.
9 Win applies a minimum-necessary approach to data collection. If a piece of information isn't required to operate your account, verify your identity, process your PKR payments or meet our legal obligations, we don't collect it. We regularly audit our data collection to remove anything that's no longer serving a clear purpose.
All data transmitted between your device and 9 Win is encrypted using TLS. Stored personal data is encrypted at rest. Access to player data within 9 Win is restricted on a strict need-to-know basis — the vast majority of 9 Win staff have no access to personal player information beyond what's needed for their specific role.
9 Win provides clear mechanisms to access, correct and request deletion of your personal data. You can request a full copy of everything 9 Win holds about you, ask us to correct anything that's wrong, and in many cases ask us to delete data we no longer need. These rights are explained in full later in this policy.
9 Win retains personal data only for as long as it's needed for the purpose it was collected, or as required by law. KYC documents are retained for regulatory compliance periods. Marketing preferences are updated in real time. When data is no longer needed and no legal obligation requires retention, it is securely deleted.
In the unlikely event of a data breach affecting your personal information, 9 Win commits to notifying affected players within 72 hours of becoming aware of the breach. The notification will explain what happened, what data was involved, what 9 Win has done to contain it and what steps you should take to protect yourself.
This Privacy Policy applies to all individuals who interact with 9 Win — whether you're a registered player with an active account, someone who has visited the website without registering, a person who has contacted 9 Win support, or someone whose information has been provided to 9 Win as part of a referral or third-party process. If you're using the 9 Win platform in any capacity, this policy applies to you.
Data Controller: The entity responsible for your personal data under this policy is 9 Win, operating the platform at 9win-taka.com. All data-related enquiries and requests should be directed to our Privacy team at support@9win-taka.com. We will respond to all privacy requests within 30 days of receipt. For urgent matters, our live chat team can log your request and escalate it immediately.
The data 9 Win collects falls into several categories depending on how you interact with the platform. We've set these out clearly below so you know exactly what information we hold about you.
| Category | Specific Data Points | Collected When |
|---|---|---|
| Identity | Full name, date of birth, CNIC number, CNIC scan (front/back), selfie photograph | Registration and KYC verification |
| Contact | Mobile number, email address, city/district of residence | Registration |
| Financial | Easypaisa/JazzCash account numbers, IBFT bank account details, card last four digits, transaction history, deposit and withdrawal amounts | When payment methods are added or transactions are made |
| Betting & Gaming | Bet history, game play records, win/loss records, session duration, responsible gaming tool usage | During platform use |
| Technical | IP address, device type, browser type and version, operating system, mobile network provider | Automatically on each session |
| Behavioural | Pages visited, features used, clicks, session timestamps, referral source | Automatically via cookies and analytics |
| Communications | Support chat transcripts, email correspondence, feedback submissions | When you contact 9 Win |
9 Win does not intentionally collect special category personal data (such as health information, religious beliefs or political views). If you voluntarily provide such information — for example, disclosing a health condition when requesting a self-exclusion — it is processed only for the specific purpose you shared it for and is not used for any other purpose.
9 Win collects and uses personal data for specific, legitimate purposes. For each type of data processing, there is a defined legal basis. We do not process personal data "just in case" it might be useful later — every data collection and use at 9 Win has a documented justification.
The most common basis for data processing at 9 Win. Processing your identity information, payment details, betting history and account records is necessary to provide you with the services you've signed up for. Without this data processing, 9 Win cannot operate your account, process your PKR deposits and withdrawals or settle your bets correctly.
Certain data processing is required by law. KYC verification, anti-money laundering record-keeping, transaction reporting above certain thresholds and cooperation with law enforcement requests are all legal obligations that 9 Win must fulfil regardless of player consent. This includes retaining KYC documents and transaction records for the legally mandated periods.
Some data processing at 9 Win is based on legitimate business interests — fraud detection, platform security monitoring, responsible gaming analytics, and platform improvement based on usage patterns. These interests are assessed to ensure they don't override the rights and interests of individual players. You have the right to object to this type of processing.
Where 9 Win relies on your consent — primarily for marketing communications such as promotional emails, SMS notifications about bonuses and PSL special offers — that consent is always explicit, recorded and revocable. You can withdraw your consent to marketing communications at any time through your account settings or by contacting support, and this will not affect your ability to use 9 Win.
9 Win shares your personal data with third parties only where necessary, only to the extent required, and only with parties who have contractual obligations to protect that data to the same standard we do. The categories of recipients are as follows.
To process your PKR deposits and withdrawals, 9 Win must share your account details and transaction information with the relevant payment service provider. This sharing is limited to what each payment provider requires to process the specific transaction. Payment providers have their own data protection policies governing how they handle this information.
9 Win uses third-party identity verification providers to verify CNIC documents and confirm player identities. These providers process your identity documents and return a verification decision — they do not retain your documents beyond what's necessary for the verification itself.
Casino and live casino games are provided by third-party software providers. When you play a game, your gameplay data (bets placed, game outcomes, session length) is processed by the game provider's systems. Game providers receive pseudonymised player identifiers rather than your full personal details where technically possible.
9 Win uses industry-standard fraud detection and anti-money laundering screening services. These services receive transaction data and behavioural signals to identify suspicious patterns. Data shared with these services is protected under strict processing agreements and may not be used for any purpose other than fraud and AML analysis.
Where legally required, 9 Win will share personal data with regulatory authorities and law enforcement. This is not discretionary — if 9 Win receives a legally valid request for information, we are obligated to comply. Where possible and legally permitted, 9 Win will notify affected players of such requests.
Who we absolutely do not share your data with: Advertisers, data brokers, social media platforms (for targeting purposes), third-party marketing companies, or any organisation whose purpose is to market non-9 Win products to you. 9 Win does not sell player data. If you receive marketing from a third party claiming to be associated with 9 Win, please contact us immediately as this is not authorised.
9 Win uses cookies and similar tracking technologies on the platform. This section explains what they are, what 9 Win uses them for, and how you can manage your cookie preferences.
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Essential | Session management, login authentication, security tokens — required for the platform to function | Session / 30 days | No — platform cannot function without these |
| Functional | Language preferences, display settings, last-visited game categories, betslip contents | 90 days | Yes — disabling reduces convenience |
| Analytics | Page views, feature usage, error tracking — used to improve 9 Win's platform performance and user experience | 12 months | Yes — via cookie settings |
| Responsible Gaming | Session time tracking, spending display — supports the responsible gaming tools 9 Win provides to players | Session | No — required for player protection |
You can manage cookie preferences through your browser settings. Disabling analytics cookies will not affect your ability to use 9 Win but may mean some features don't work exactly as intended. 9 Win does not use advertising tracking cookies or third-party remarketing pixels.
Data security is one of the areas where 9 Win invests most heavily. Pakistani players — particularly those undergoing CNIC verification and sharing financial account details — deserve a platform that takes the responsibility of holding that data seriously. Here's what we do.
All data transmitted between your device and 9 Win's servers uses TLS 1.3 encryption — the current industry standard. Data stored on 9 Win's servers, including personal information and payment details, is encrypted at rest using AES-256 encryption. Even in the event of a server-level breach, encrypted data cannot be read without the decryption keys, which are stored separately.
Access to personal player data within 9 Win is strictly role-based. Support agents can see only the account information needed to resolve the specific query they're handling. Financial data is accessible only to the payments team. KYC documents are accessible only to compliance staff. All access is logged and regularly audited.
9 Win's platform undergoes regular penetration testing by independent security firms. Identified vulnerabilities are triaged and addressed according to severity — critical issues are patched within 24 hours. The platform also runs continuous automated security monitoring to detect and respond to anomalous activity in real time.
Everyone at 9 Win who handles personal data receives mandatory data protection training before they are permitted to access player information. This training covers the legal requirements, 9 Win's internal data handling policies, what constitutes a data breach, and how to respond to player data requests. Refresher training is conducted annually.
Data retention at 9 Win is governed by a formal retention schedule. Data is not kept indefinitely — there is a defined retention period for each category of data, after which it is securely deleted or anonymised.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | Legal and regulatory compliance |
| KYC documents (CNIC, selfie) | Duration of account + 5 years | Anti-money laundering regulations |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Betting and gaming history | Duration of account + 3 years | Dispute resolution, responsible gaming oversight |
| Support communications | 3 years from last contact | Quality assurance and dispute evidence |
| Technical/server logs | 12 months | Security monitoring and fraud investigation |
| Marketing preferences | Until withdrawn or account closure | Consent management |
| Analytics data (anonymised) | 36 months | Platform improvement — no personal identifiers retained |
You have a range of rights over your personal data held by 9 Win. These rights are real and actionable — not theoretical. Here's what you can ask for, how to ask, and what to expect in terms of response time.
To exercise any of these rights, email support@9win-taka.com with the subject line "Privacy Rights Request — [type of request]". Include your registered mobile number and account ID. 9 Win will acknowledge your request within 48 hours and provide a full response within 30 days. For complex requests, this may be extended to 60 days with advance notice. Exercising privacy rights is free of charge and will not affect your ability to use 9 Win.
9 Win may send you promotional communications about bonuses, PSL special offers, new games, reload promotions and other platform news — but only if you've given us consent to do so. Here's how it works and how you stay in control.
If you opted in to marketing communications during registration (or subsequently updated your preferences), 9 Win will send you emails and SMS messages about relevant offers. You can unsubscribe at any time by clicking the unsubscribe link in any email, by replying STOP to any SMS, or by updating your notification preferences in your 9 Win account settings. Unsubscription is immediate.
If you're using 9 Win via a mobile browser and have allowed push notifications, 9 Win may send notifications about live cricket match starts, PSL results affecting your bets, withdrawal completions and promotional offers. You can disable push notifications at any time through your device's notification settings or via your account preferences.
Some communications from 9 Win are transactional — deposit confirmations, withdrawal notifications, bet settlement receipts, KYC verification status updates and security alerts. These are not marketing communications and will be sent regardless of your marketing preferences because they are necessary for operating your account and are covered by the contract basis rather than consent. You cannot opt out of transactional communications while maintaining an active account at 9 Win, but you can always opt out of promotional messaging independently.
9 Win is strictly an adults-only platform — you must be 18 years or older to register and play. 9 Win does not knowingly collect personal data from anyone under 18 years of age. If we discover that an account has been registered by someone under 18, we will immediately close the account, delete the personal data where legally possible and return any real-money balance to the payment source it came from.
For parents and guardians: If you believe a minor has registered an account at 9 Win using your personal or financial details, please contact us immediately at support@9win-taka.com. We will investigate and take immediate action to close the account and return any funds. 9 Win's responsible gaming page also provides guidance on parental controls and internet filtering tools that can help prevent underage access to gambling websites. See our Responsible Gaming page for details.
9 Win may update this Privacy Policy from time to time as the platform evolves, as we add new payment methods or game categories, or as legal requirements change. When we make material changes — changes that meaningfully affect how we collect, use or share your personal data — we will notify you by email to your registered address and display a prominent notice on the 9 Win platform at least 14 days before the changes take effect. Minor clarifications or corrections that do not change the substance of the policy may be made without advance notice. The date at the top of this page reflects when the policy was most recently updated. We recommend reviewing this policy periodically, particularly before sharing new types of information with 9 Win.
If you have a question about this Privacy Policy, want to exercise any of your data rights, or want to raise a concern about how 9 Win has handled your personal information, here's how to reach us.
Available 24/7 in your account. For privacy questions, ask to be connected to the Privacy team. Average response under 5 minutes.
support@9win-taka.com — use subject line "Privacy Request" for data rights requests. Response within 30 days guaranteed.
If you're unhappy with 9 Win's response to a privacy request, use subject "Formal Privacy Complaint" — escalated review within 10 business days.