LottoNine is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we use and store it, and what rights you have as a Malaysian player under our platform's data practices.
LottoNine does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is used solely to operate and improve your account experience.
All data transmitted between your device and LottoNine's servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest is stored using industry-standard encryption protocols.
We collect only the personal data that is strictly necessary to provide our services, verify your identity, process transactions, and comply with legal obligations. Nothing more.
You have the right to access, correct, and request deletion of your personal data at any time. We honour these requests promptly and without unnecessary barriers.
We retain personal data only for as long as necessary for the purpose it was collected, or as required by applicable regulatory and legal obligations. Data is deleted or anonymised thereafter.
We are transparent about every category of data we collect and every purpose for which it is used. This policy is written in plain English so Malaysian players can understand it clearly.
This Privacy Policy ("Policy") describes how LottoNine ("Platform", "we", "us", "our"), the operator of the online casino and sports betting platform located at lotonine.cam, collects, processes, stores, and protects personal data relating to individuals ("you", "Account Holder", "Player") who access or use our services.
LottoNine is an English-language gaming platform serving players in Malaysia. We recognise that the privacy of our players' personal information is a matter of significant importance. The collection and handling of personal data on this Platform is conducted in accordance with applicable data protection principles and regulatory obligations incumbent on gaming operators.
By registering an account on LottoNine, accessing the Platform, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not consent to the terms of this Policy, you should not use the LottoNine Platform.
Summary: We collect your data to operate your account, process your transactions, verify your identity, and keep the platform secure. We do not sell your data to third parties, and we only share it where legally required or strictly necessary for service delivery.
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
LottoNine collects personal data in the following categories, collected at different stages of your interaction with the Platform:
LottoNine collects personal data through the following mechanisms:
The following table sets out the primary purposes for which LottoNine processes personal data and the corresponding data categories used for each purpose:
| Processing Purpose | Data Categories Used | Basis |
|---|---|---|
| Account creation and management | Registration data, technical data | Contract performance |
| Age and identity verification (KYC) | KYC verification data, registration data | Legal obligation |
| Processing deposits and withdrawals | Transaction data, KYC data | Contract performance |
| Fraud prevention and security | Technical data, transaction KYC data | Legitimate interest |
| Responsible gambling compliance | Transaction data, communications data | Legal obligation |
| Customer support delivery | Communications data, registration data | Contract performance |
| Platform analytics and improvement | Technical data (anonymised) | Legitimate interest |
| Regulatory and legal compliance | All categories as required | Legal obligation |
| Promotional communications (where opted in) | Registration data, transaction data | Consent |
LottoNine processes personal data on the following legal bases, which apply across the various processing activities described in this Policy:
The majority of personal data processing on LottoNine is necessary for the performance of the contract between LottoNine and the Account Holder — specifically, the provision of gaming, betting, account management, and payment services as agreed in the Terms and Conditions.
Certain processing activities — including age verification, identity verification, anti-money laundering checks, and the maintenance of transaction records — are required by applicable legal and regulatory obligations binding on gaming platform operators. LottoNine processes data for these purposes regardless of consent.
LotoNine processes certain data categories for the purposes of fraud prevention, platform security, system integrity, and aggregate analytics under the legal basis of legitimate interests. In each such case, LottoNine has assessed that its legitimate interests are not overridden by the data subject's rights and freedoms.
Where LottoNine processes personal data for optional purposes — such as sending promotional emails or SMS messages — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent for consent-based processing at any time by contacting our support team or adjusting your account communication preferences. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.
LottoNine does not sell, rent, or trade personal data with third parties for their own commercial purposes. We share personal data with third parties only in the following limited circumstances:
Transaction data is shared with the relevant payment processing providers — including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX-connected banking institutions (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency network validators — solely to the extent necessary to process the requested transaction. Each provider operates under its own privacy policy and applicable financial regulations.
KYC documentation is transmitted to third-party identity verification service providers under binding data processing agreements. These providers process submitted documents solely to return a verification result to LottoNine and are prohibited from using your data for any other purpose.
LottoNine may be required to disclose personal data to regulatory bodies, law enforcement agencies, or judicial authorities where such disclosure is compelled by applicable law, court order, or regulatory requirement. In such cases, LotoNine will disclose only the minimum data necessary to satisfy the legal obligation.
LottoNine's legal, accounting, audit, and insurance advisors may have access to personal data in the course of providing professional services to the Platform, subject to binding professional confidentiality obligations.
No Third-Party Advertising: LottoNine does not share personal data with advertising networks, data brokers, or social media platforms for targeting or profiling purposes. We do not engage in the sale of personal data in any form.
LottoNine uses cookies and similar tracking technologies on its Platform. Cookies are small text files stored on your device that enable the Platform to function correctly and efficiently.
These cookies are strictly necessary for the operation of the Platform, including maintaining your login session, processing transactions, and applying your account security settings. Essential cookies cannot be disabled without materially impairing your ability to use the Platform.
LottoNine uses anonymised analytics data to understand how players interact with the Platform — which features are most used, where users encounter difficulties, and how platform performance can be improved. Analytics data is aggregated and does not identify individual users.
These cookies store your Platform preferences — such as language settings and display preferences — so that they persist across sessions. You may clear these cookies through your browser settings at any time, though doing so will reset your saved preferences.
You may control cookie settings through your browser's privacy or security settings. Blocking all cookies may prevent certain Platform features from functioning as intended.
LottoNine retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or regulatory obligation.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal and regulatory obligation |
| KYC verification documents | Duration of account + 5 years post-closure | Anti-money laundering compliance |
| Transaction records | 7 years from transaction date | Financial record-keeping obligation |
| Support communications | 3 years from last interaction | Dispute resolution and audit trail |
| Technical/session log data | 90 days | Security monitoring and fraud detection |
| Anonymised analytics data | Indefinite (no personal identifiers retained) | Platform improvement |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in a manner that prevents any identification of the data subject.
LottoNine implements comprehensive technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes the following:
Notwithstanding these measures, no data transmission or storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials and for reporting any suspected unauthorised access to your account to LottoNine immediately.
As an Account Holder on LottoNine, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 15.
You may request a copy of all personal data LottoNine holds about you. We will respond within 30 days of receiving your request.
You may request correction of any inaccurate or incomplete personal data held about you, subject to identity verification requirements.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations.
You may object to the processing of your personal data where LottoNine relies on legitimate interests as the legal basis, subject to compelling legitimate grounds on our part.
You may request a structured, machine-readable export of personal data you have provided to LottoNine, where processing is carried out on the basis of consent or contract.
You may request restriction of processing of your personal data in certain circumstances, such as where accuracy is contested or where processing is unlawful.
LottoNine will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by up to a further 60 days, in which case you will be notified of the extension and the reason for it.
LottoNine's services are strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. The KYC verification process is designed to identify and reject registration attempts by underage individuals.
If LottoNine becomes aware that personal data has been collected from an individual under the age of 21 — whether through a failed age verification check or any other means — we will immediately close the relevant account, delete all associated personal data to the extent not required for legal compliance purposes, and ensure that any funds deposited by the underage individual are returned through appropriate channels.
If you are a parent or guardian and believe that a minor in your care has registered an account on LottoNine, please contact our support team immediately at the contact details provided in Section 15.
LotoNine's primary player base is in Malaysia. Where personal data is transferred to or processed by service providers located outside of Malaysia — including cloud infrastructure providers or KYC service vendors — LottoNine ensures that such transfers are conducted under appropriate contractual safeguards, including binding data processing agreements that impose obligations equivalent to those applicable under this Policy.
We will not transfer personal data to any jurisdiction or processor that does not provide an adequate level of data protection. Where required by applicable law, we will obtain your consent prior to any international transfer of your personal data.
LottoNine reserves the right to amend this Privacy Policy at any time. Where material changes are made to the Policy — particularly changes that affect the purposes for which we process your data, the categories of data we collect, or your rights — we will notify you via email or via a prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this page will always reflect the date on which the most recent revision was published. Your continued use of the LottoNine Platform following notification of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with the amended Policy, you should cease using the Platform and may request account closure.
Your Control: You are always in control of your data preferences. For consent-based processing such as marketing communications, you may withdraw consent at any time without affecting your account status or gaming access.
For any questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data by LottoNine, please contact us through the following channels. All contact information is provided as plain text — no clickable links are provided for these details.
For responsible gambling enquiries, self-exclusion requests, or concerns about underage use of the Platform, please visit our Responsible Gambling page or contact our support team directly.
If you have questions about how LottoNine handles your data, or if you wish to exercise any of your data rights, our support team is available24/7 and responds within 30 days for all formal data requests.