Privacy Policy — 9mad

1 Introduction

9mad ("we", "us", "our", "the Platform") operates the online casino and sports betting website accessible at https://9mad.cam ("the Website"). This Privacy Policy ("Policy") describes how we collect, process, store and protect personal data relating to users ("you", "User", "Player") of the Website and our related services.

9mad is an English-language platform designed for adult players, with particular focus on users in Pakistan and other permitted jurisdictions. This Policy applies to all personal data we process in connection with your use of the Website, whether you are a registered account holder, a visitor browsing the Website, or a person who contacts our support team.

By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not agree, please discontinue use of the Website.

2 Definitions

• "Personal Data" — any information relating to an identified or identifiable natural person.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. 9mad acts as data controller in respect of player data.
• "Data Processor" — a third party that processes data on behalf of 9mad under a data processing agreement.
• "KYC" — Know Your Customer verification documents and procedures.
• "Cookies" — small text files placed on your device by the Website to store session and preference information.
• "Special Category Data" — sensitive personal data such as health, financial vulnerability or criminal record information, which receives heightened protection.
• "Consent" — a freely given, specific, informed and unambiguous indication of your agreement to data processing.

3 Data Controller

9mad is the data controller for all personal data collected through the Website. As data controller, we determine why and how your personal data is processed. We are responsible for ensuring that processing activities comply with applicable data protection laws in the jurisdiction in which we are registered and licensed.

Where we engage third-party service providers to process data on our behalf — such as payment processors, identity verification vendors, cloud hosting providers or customer support platforms — those parties act as data processors and are bound by contractual obligations that restrict their use of your data to the purposes we specify.

4 Data We Collect

We collect personal data from you through several channels. The categories of data we collect include:

4.1 Registration Data

• Full name, date of birth, gender
• Email address, phone number
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — and country)
• Username and encrypted password
• Currency preference (e.g., PKR)

4.2 KYC & Identity Verification Data

• Government-issued photo identification (CNIC, passport, driving licence)
• Proof of address documentation (utility bill, bank statement)
• Source of funds or source of wealth documentation where required
• Selfie or liveness-check images for identity matching

4.3 Financial & Transaction Data

• Deposit and withdrawal history, amounts and methods
• Payment instrument identifiers (partial card numbers, mobile wallet references)
• Transaction timestamps and processing status

4.4 Usage & Behavioural Data

• Games played, bets placed, session durations and activity timestamps
• Responsible gambling tool settings (deposit limits, self-exclusion status)
• Customer support interactions and correspondence

4.5 Technical & Device Data

• IP address, browser type and version, operating system
• Device type, screen resolution and language settings
• Cookie identifiers and session tokens
• Referring URLs and page navigation paths

5 Legal Basis for Processing

We process your personal data only where a valid legal basis exists. The applicable bases are:

• Contractual Necessity: Processing required to perform our contract with you — account creation, payment processing, game delivery and withdrawal settlement.
• Legal Obligation: Processing required to comply with applicable laws — KYC/AML obligations, regulatory reporting, fraud prevention and age verification.
• Legitimate Interests: Processing necessary for our legitimate business interests — platform security, fraud detection, responsible gambling monitoring and service improvement — where those interests are not overridden by your rights.
• Consent: Processing for marketing communications or optional analytics where you have given explicit consent. You may withdraw consent at any time by contacting support or updating your account preferences.

6 How We Use Your Data

We use personal data collected from you for the following specific purposes:

• To create, manage and secure your 9mad account
• To process deposits, withdrawals and account transactions denominated in PKR or other supported currencies
• To verify your identity and age in accordance with KYC requirements before approving withdrawals
• To detect, investigate and prevent fraudulent activity, money laundering and other financial crime
• To enforce our Terms & Conditions and investigate suspected breaches
• To provide and improve responsible gambling tools — including deposit limit tracking, session monitoring and self-exclusion enforcement
• To personalise your platform experience (e.g., displaying relevant game categories, cricket and PSL market suggestions where preferences indicate interest)
• To send transactional communications such as withdrawal confirmations, account alerts and security notifications
• To send promotional communications where you have opted in — you may opt out at any time
• To comply with applicable legal and regulatory obligations, including reporting requirements
• To conduct internal analytics and service quality reviews
• To respond to customer support queries and resolve complaints

7 Data Sharing & Disclosure

9mad does not sell your personal data to third parties. We do not share your data for third-party marketing purposes without your explicit consent. We may share your data with the following categories of recipient only where necessary and under appropriate safeguards:

• Identity Verification Providers: Third-party KYC vendors who process identity documents and perform age and identity checks on our behalf.
• Payment Processors: Services that facilitate deposits and withdrawals. These processors handle payment data directly and are bound by their own compliance frameworks.
• Cloud & Hosting Providers: Infrastructure providers on whose systems account and transactional data is stored and processed.
• Fraud Prevention Services: Providers of risk-scoring and fraud-detection tools that help us identify suspicious activity.
• Customer Support Platforms: Helpdesk and live-chat services through which support interactions are managed.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, regulatory direction or to prevent or report suspected financial crime, we may disclose data to relevant authorities without prior notice to you.
• Corporate Transactions: In the event of a merger, acquisition or asset sale, your data may be transferred to the successor entity, subject to equivalent data protection obligations.

8 Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. General retention principles applied by 9mad are as follows:

• Active Account Data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC Documents: Retained for at least five (5) years from the date of the last transaction or account closure, whichever is later, to satisfy regulatory requirements.
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years from the date of each transaction.
• Support Correspondence: Retained for up to three (3) years from the date of last contact, unless a longer period is required in connection with an unresolved dispute or investigation.
• Marketing Consent Records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent given.
• Technical Logs: Server and access logs are typically retained for ninety (90) days unless required for longer as part of a security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9 Security Measures

9mad implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser and our servers
• Encryption of sensitive data fields at rest within our databases
• Strict access controls — platform staff access personal data only on a need-to-know basis
• Multi-factor authentication requirements for internal system access
• Regular security assessments, penetration testing and vulnerability scanning
• Incident response procedures, including breach notification protocols

While we take all reasonable precautions, no system can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact our support team immediately.

10 Cookies & Tracking Technologies

9mad uses cookies and similar tracking technologies to operate the Website, maintain session state, detect fraud and improve user experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Website to function. They enable login sessions, security tokens and basic navigation. These cannot be disabled without impairing site functionality.
• Functional Cookies: Remember your preferences such as language, currency display (PKR) and responsible gambling tool settings.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Website to help us improve performance and content. Used only with your consent where required.
• Security Cookies: Assist in detecting fraudulent activity, bot traffic and session hijacking attempts.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Website functionality. Note that strictly necessary and security cookies cannot be opted out of without ceasing use of the platform.

11 International Data Transfers

9mad's servers and some of our third-party service providers may be located in jurisdictions outside your country of residence, including outside Pakistan. When personal data is transferred internationally, we take appropriate steps to ensure that it receives a level of protection equivalent to that required under the data protection laws applicable to our operations.

Appropriate safeguards for international transfers may include contractual clauses, standard data protection agreements or reliance on adequacy determinations, as applicable under the governing legal framework. By using 9mad, you acknowledge that your data may be transferred to, stored and processed in jurisdictions other than your own.

12 Your Data Rights

Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by 9mad. Requests may be submitted to our support team using the contact details in Section 16.

We will respond to verified data rights requests within thirty (30) days. We may request proof of identity before processing a request to protect against unauthorised disclosure. In some cases, the exercise of a right may not be possible due to conflicting legal obligations — we will explain this clearly if it applies.

13 Minors

9mad is strictly for adults aged 18 or older, or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect or process personal data from individuals under the applicable minimum age. Age verification procedures are applied during registration and before withdrawal processing.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor may have registered on 9mad, please contact our support team immediately.

14 Third-Party Links & Services

The 9mad Website may reference third-party services by name — for example, payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — as contextual information for Pakistani users. These references do not constitute links to or endorsements of those third parties. None of these institutions is affiliated with or endorses 9mad or gambling activities.

9mad is not responsible for the privacy practices or content of any third-party services. If you follow a link to a third-party website, we recommend reviewing its privacy policy before providing any personal data.

15 Policy Amendments

9mad reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or platform features. When we make material changes, we will notify you via a prominent notice on the Website and/or by email to your registered address. The effective date at the top of this Policy will be updated accordingly.

Your continued use of the Website after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you must cease using the platform and contact support to request account closure.

16 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a complaint about how we handle your personal data, please contact our support team. We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve them within 30 days.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction in which 9mad is registered or licensed. We will provide the contact details of the applicable authority upon request.

For questions about responsible gambling tools, account restrictions or self-exclusion, please also visit our Responsible Gambling page. For general questions, see our FAQ page.