Ninelotto Privacy Policy — How We Protect Your Data

1. Information We Collect

Ninelotto collects various types of information from users to keep the platform running safely and efficiently. The categories of information collected are as follows:

• Account information: Full name, email address, phone number, date of birth and encrypted password collected at registration.
• Device and browser information: IP address, device type, operating system, browser version, screen resolution and other technical data automatically transmitted when you access the ninelotto platform.
• Payment information: Transaction details in Malaysian Ringgit (RM / MYR), including the deposit method used (TNG eWallet, Maybank, CIMB, FPX, etc.), transaction amounts, and deposit and withdrawal history. ninelotto does not directly store full card numbers or bank account details — all processing is handled through secure payment providers.
• Cookies and session data: Login session information, language preferences, in-platform navigation history, and behavioural usage data collected via cookies.
• Usage data: Games played, session duration, bets placed and other platform activity, used for analytics and service improvement.

2. How We Use Your Information

All information collected by ninelotto is used strictly for legitimate and specific purposes. We do not use your data for anything beyond what is described here:

• Processing account registration, login, and user identity verification.
• Processing MYR deposits and withdrawals securely and accurately.
• Providing effective customer support whenever you reach out to us.
• Sending important notifications about your account, promotions and platform updates (subject to your consent).
• Detecting and preventing fraudulent activity, account abuse and security threats.
• Complying with all legal and regulatory requirements applicable to ninelotto's operations.
• Analysing usage patterns to improve the overall user experience and platform services.

3. Cookies and Session Tracking

Ninelotto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the ninelotto platform.

The types of cookies we use include:

• Essential cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance cookies: Collecting anonymised data on how users interact with the platform to help us understand and improve site performance.
• Functionality cookies: Saving user preferences such as language and display settings for a consistent browsing experience.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the ninelotto platform.

4. Data Storage, Security & Sharing

Ninelotto applies appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or disclosure. These safeguards include 256-bit SSL encryption for all data communications, strict internal access controls and continuous security monitoring.

Your data is stored on secure servers and is only accessible by authorised ninelotto staff for operational purposes. Data is retained for as long as your account remains active and for the period required by law following account closure.

Third-party sharing: ninelotto does not sell or rent your personal data to any third parties. We only share information as necessary with:

• Trusted payment service providers that securely process your MYR transactions.
• Third-party game providers that supply content within the platform, strictly to the extent required for game operations.
• Law enforcement authorities or regulatory bodies where required by applicable law.

All third parties we work with are required to uphold data protection standards equivalent to ninelotto's own policy.

5. User Rights Over Personal Data

As a ninelotto user, you have the following rights regarding your personal data:

• Right to access: You have the right to request a copy of the personal data we hold about you.
• Right to correction: You can update or correct inaccurate personal information through your account settings or by contacting ninelotto support.
• Right to erasure: You may request the deletion of your personal data, subject to applicable legal requirements and minimum data retention obligations.
• Right to withdraw consent: You can withdraw consent to receive marketing communications at any time through your account settings.

To exercise any of these rights or if you have questions about data privacy, please contact the ninelotto support team by email at [email protected]. You may also refer to our FAQ page for more information.

6. Policy Changes & How to Contact Us

Ninelotto reserves the right to update or amend this Privacy Policy at any time. Users will be notified of any material changes via in-platform notifications or their registered email. It is the user's responsibility to review this policy periodically.

Continued use of the ninelotto platform following any changes to this Privacy Policy will be considered acceptance of the updated version.

If you have any questions, concerns, or complaints about how we handle your personal data, please contact us via:

• Email: [email protected]
• The help section within the ninelotto platform after logging in

This Privacy Policy takes effect from January 2026 and supersedes all previous versions.