Rujukan Laman

How 9loto Handles Your Personal Data

At 9loto, we are transparent about what personal data we collect, why we collect it, and how long we keep it — so you always know where you…

Data collected only as neededYour access and correction rightsMalaysia-based account data handlingSecure storage practicesClear retention periods
Explore lobby Read FAQ
9loto How 9loto Handles Your Personal Data
PRIVACY CONTACT

Reach Us About Your Data

Team online

Email Our Data Team

Send your data access, correction or deletion requests directly to our privacy inbox. We aim to respond within five working days and will confirm receipt of your request by return email.

Live Chat Support

Our live chat team is available around the clock. For privacy questions that need a quick answer — such as what data fields we hold on your account — chat is the fastest path to a response.

Formal Written Request

If you need a formal record of your data request, submit it through our on-site contact form and we will issue a written acknowledgement with a reference number for follow-up.

HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

We apply a layered approach to protecting the data associated with your 9loto account — from the moment you log in to the moment a withdrawal clears back to your Touch 'n…

Cookies and Tracking

We use session cookies to keep your account login active and analytics cookies to understand how pages are used. You can manage cookie preferences in your browser settings at any time without losing your account access.

Account Security Layers

Your account is protected by password hashing and optional two-factor authentication. We log login attempts and flag unusual access patterns so our security team can act before your account is affected.

Data Retention Schedule

Active account data is retained while your account remains open. Once you close your account, we keep records only for the period required under applicable Malaysian financial regulations, then permanently delete or anonymise them.

Third-Party Data Sharing

We share data with payment partners — Touch 'n Go, GrabPay, Boost dan FPX — solely to process your transactions. We do not share data with advertising networks or data brokers, and we contractually require all partners to handle your data securely.

Your Right to Access

You can request a copy of all personal data we hold on your account at any time. We will compile and deliver your data package within the timeframe required by applicable law, usually within 30 calendar days of receiving your request.

Correction and Deletion Requests

If any data on your account is inaccurate, contact us and we will correct it promptly. Deletion requests are processed after we confirm that no outstanding regulatory hold applies to your account records.

Frequently Asked Questions About Your Privacy

These questions cover the data rights and privacy practices that we hear about most from our account holders in Malaysia. If your question is not answered here, reach us via live chat or our privacy email.

We collect your name, email address, phone number, and the payment identifier linked to your chosen method — such as your Touch 'n Go or GrabPay account reference. We collect only what is needed to verify your identity and process your transactions.

Payment data is passed directly to the relevant payment processor — Touch 'n Go, GrabPay, Boost dan FPX — using encrypted connections. We store only a transaction reference on our side; we do not retain your full payment credentials on our servers.

Yes. Submit a data access request through our contact form or privacy email. We will compile your data and deliver it within 30 calendar days, in line with applicable Malaysian data protection requirements.

Contact our data team by email or live chat. For corrections, we will update your record within five working days. Deletion requests are assessed against any regulatory hold on your account before being actioned.

No. We do not share your data with advertising networks, data brokers, or any third party for marketing. Data is shared only with payment processors and, where required, with regulatory authorities under Malaysian law.

After account closure, we retain records for the period required by applicable financial and anti-money-laundering regulations in Malaysia. Once that period ends, your data is permanently deleted or anonymised so it can no longer be linked back to you.

We use session cookies for login continuity and analytics cookies to measure page usage. You can disable non-essential cookies through your browser settings at any time; doing so will not affect your ability to log in or use your account.

Related Pages

9loto App About Us Ring of Odin FAQ