9kboss Privacy Policy — How We Handle Your Personal Data

This Privacy Policy describes how 9kboss — Pakistan's premier online gaming and sports betting platform accessible at 9kboss.ws — collects, uses, stores, and protects the personal information of its registered players and website visitors. It has been written in plain English so that you can genuinely understand what happens with your data, rather than having to parse through dense legal text.

9kboss operates as a platform focused exclusively on the Pakistani market. Every data practice described in this policy is shaped by that focus — we are not a global platform trying to serve dozens of markets simultaneously, which means our data handling is specifically designed around the needs and expectations of Pakistani players. We collect what we need to run your account and nothing more. We do not sell your data. We do not share it with advertisers. We hold it securely and for as long as is necessary.

This Privacy Policy should be read alongside the 9kboss Terms and Conditions and our Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with the 9kboss platform. Throughout this document, "9kboss," "we," "us," and "our" refer to the 9kboss platform and its operators. "You" and "player" refer to any registered user or visitor to 9kboss.ws.

If at any point you have a question about how 9kboss handles your personal information that is not answered in this policy, please contact our support team at support@9kboss.ws. We aim to respond to all privacy-related queries within 48 hours.

9kboss collects personal data through three main channels: information you provide directly when registering or contacting us, information generated automatically by your use of the platform, and information provided by payment processors when you make deposits or withdrawals.

Information you provide directly:

• Full name as it appears on your CNIC or official identification
• Mobile phone number — this is your primary account identifier on 9kboss
• Email address (if provided during registration or KYC)
• Date of birth — collected to verify that you meet the minimum age requirement of 18 years
• CNIC number — collected during identity verification (KYC) processes when required
• Payment method details — account numbers for Easypaisa, JazzCash, NayaPay, SadaPay, or bank account details for IBFT transfers. Card details are processed by our PCI-compliant payment gateway and are never stored by 9kboss directly.
• Support correspondence — any messages you send to the 9kboss support team, including the content of your query and your contact details

Information collected automatically:

• Device information — device type, operating system version, browser type and version
• IP address — used for fraud prevention, geolocation verification, and platform security
• Session data — pages visited, time spent on each section, navigation patterns
• Betting and gaming history — every bet placed, game session initiated, and outcome recorded. This data is essential for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Deposit and withdrawal transaction records — amounts, timestamps, payment methods, and processing status
• Login timestamps and session activity — used to detect unusual account access patterns that may indicate unauthorised use

Information from third-party payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, the payment processor confirms the transaction to 9kboss. The information we receive from them is limited to what is necessary to process and record your transaction — we do not receive your full payment account credentials from these processors.

9kboss uses the personal data it collects only for specific, defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary uses of your personal data on the 9kboss platform are as follows:

Operating your account: Your name, mobile number, and authentication credentials are used to create, maintain, and secure your 9kboss account. Without this data, we cannot provide the platform services you have registered for.

Processing financial transactions: Your payment method details and transaction history are used to process deposits and withdrawals. This is the core commercial function of the platform and cannot be performed without the financial data associated with your account.

Age verification and KYC: 9kboss is legally and ethically obligated to verify that all players are at least 18 years old and that funds on the platform are not derived from illegal activity. We use identity data — including CNIC details where required — to fulfil these obligations.

Fraud prevention and account security: IP addresses, device fingerprints, login patterns, and transaction behaviour are monitored continuously by 9kboss's security systems to detect and prevent fraud, account takeover attempts, money laundering, and other prohibited activities.

Responsible gaming monitoring: 9kboss monitors player gaming patterns — including session length, deposit frequency, and bet sizing — to identify indicators of problem gambling. This monitoring is conducted in service of player welfare and is a core part of our responsible gaming commitments. Data used for this purpose is never shared externally.

Customer support: Support correspondence is retained so that our team can resolve queries efficiently and refer back to previous interactions when relevant. Support transcripts may also be reviewed for quality assurance and staff training purposes.

Platform improvement: Aggregated, anonymised usage data — from which no individual player can be identified — is used to understand how the 9kboss platform is used and to inform decisions about new features, performance improvements, and content priorities. This is analytical work only; individual player profiles are not used for product development decisions.

Account communications: 9kboss sends account-related communications including transaction confirmations, security alerts, and service notifications. These communications are necessary for the operation of your account. Promotional communications are sent only to players who have opted in.

Every data processing activity at 9kboss is conducted on one of the following legal bases. Understanding this helps you know why 9kboss holds your data and under what circumstances you can ask us to stop processing it.

Contract performance: The majority of 9kboss's data processing is necessary to perform the contract between 9kboss and you — that is, to run your gaming account, process your bets, and pay out your winnings. Without this processing, 9kboss cannot deliver the service you have registered for. You cannot opt out of contract-performance processing while remaining a registered player.

Legal obligation: Some processing is required by law — specifically anti-money-laundering regulations and age verification requirements. 9kboss must collect and retain certain data to comply with these obligations regardless of your personal preferences. This includes KYC identity verification and transaction monitoring.

Legitimate interest: 9kboss processes some data — primarily technical and security data — on the basis of legitimate interest. This means we have a genuine business reason to process the data (for example, protecting the platform from fraud) that is proportionate and does not override your rights. Where 9kboss relies on legitimate interest, you have the right to object to that processing.

Consent: For optional processing — such as receiving promotional communications or participating in player surveys — 9kboss relies on your explicit consent. You can withdraw consent for optional processing at any time through your account settings or by contacting support@9kboss.ws.

9kboss does not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or unrelated commercial organisations. The sharing of your data is limited to the following categories of recipient, all of whom are bound by confidentiality obligations:

Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-connected banks, and Visa/Mastercard processing partners receive only the transaction data necessary to process your deposits and withdrawals. These organisations have their own privacy policies governing how they handle financial data.

Identity verification providers: When 9kboss conducts KYC checks, identity documents may be processed by specialist verification service providers who operate under strict data confidentiality agreements with 9kboss. These providers are used solely for identity and age verification purposes.

Fraud prevention services: 9kboss uses specialised fraud detection systems that may process IP addresses and device data to identify suspicious activity patterns. These systems do not receive your full personal profile — only the technical data relevant to fraud risk assessment.

Legal and regulatory authorities: 9kboss is required by law to report certain suspicious transaction patterns to relevant financial authorities as part of anti-money-laundering compliance. We may also be required to disclose account information in response to valid legal orders. 9kboss will notify you of any such disclosure unless prohibited from doing so by the relevant legal order.

Internal operations: Your data may be accessed by 9kboss staff in the course of their legitimate work — including support agents resolving your queries, security analysts monitoring for fraud, and senior staff reviewing escalated complaints. Access is limited to what each role requires.

9kboss retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data — retained for the lifetime of your account plus five years following account closure. This extended retention is required for anti-money-laundering compliance and potential legal dispute resolution.
• Financial transaction records — retained for seven years from the date of each transaction, as required by financial record-keeping obligations applicable to payment processing.
• KYC and identity documents — retained for five years following account closure or the date of last transaction, whichever is later.
• Support correspondence — retained for three years from the date of the last communication in each thread, then deleted unless the correspondence relates to an unresolved dispute.
• Technical and session data — retained for 12 months from collection, then either deleted or anonymised for aggregated analytical purposes.
• Self-exclusion records — retained for the duration of the exclusion period plus five years. This is necessary to ensure that self-excluded players cannot be re-registered under different details.

When the retention period for any category of data expires, 9kboss securely deletes or anonymises the data so that it can no longer be linked to your identity. If you request deletion of your personal data before the applicable retention period has expired, 9kboss will comply with the request except where retention is required by law or legitimate interest. In such cases, we will inform you of the specific reason we cannot fully comply.

9kboss uses cookies and similar tracking technologies on 9kboss.ws to provide core platform functionality, improve security, and understand how the platform is used. A cookie is a small data file stored in your browser that allows a website to recognise your device across sessions.

The 9kboss platform uses the following types of cookies:

Essential and security cookies cannot be disabled without preventing the platform from functioning correctly. Functional and analytics cookies can be managed through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific sites — consult your browser's help documentation for instructions.

9kboss does not use third-party advertising cookies. The analytics data collected through 9kb_analytics is used internally only and is not shared with advertising networks or data brokers.

9kboss takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information against unauthorised access, accidental loss, and malicious attack.

Encryption in transit: All data transmitted between your browser and the 9kboss platform is encrypted using 256-bit SSL/TLS. This ensures that any data intercepted in transit cannot be read. You can verify the SSL certificate on 9kboss.ws by checking for the padlock icon in your browser's address bar.

Encrypted data at rest: Sensitive personal data — including identity documents and payment method identifiers — is encrypted when stored in 9kboss databases. Even in the unlikely event of a database breach, encrypted data cannot be used without the corresponding encryption keys, which are stored separately.

PCI-compliant payment processing: Card payment details are never stored on 9kboss servers. All card transactions are processed through PCI-DSS Level 1 compliant payment gateways. Mobile wallet transactions are processed through the APIs provided by the respective wallet operators under their own security frameworks.

Access controls: Internal access to player data at 9kboss is restricted by role — staff members can only access the data they need for their specific job function. All internal access is logged and audited. Administrative access to production systems requires multi-factor authentication.

Security monitoring: 9kboss operates continuous security monitoring across its infrastructure. Intrusion detection systems, anomaly detection, and regular penetration testing are part of our ongoing security programme.

Incident response: In the event of a data security incident that affects your personal information, 9kboss will notify affected players as quickly as practicable and take immediate steps to contain and remediate the breach. We will also report to relevant authorities where required.

As a 9kboss player, you have the following rights over the personal data we hold about you. To exercise any of these rights, contact support@9kboss.ws with the subject line "Data Rights Request" and your registered mobile number. We will respond within 30 days.

The 9kboss platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18 years of age. Age verification is a core step in the 9kboss registration and KYC process, and any account identified as belonging to a minor is immediately closed and all associated data deleted.

If you are a parent or guardian and believe a minor has registered an account on 9kboss using false age information, please contact support@9kboss.ws immediately. Include any details you have about the account in question. 9kboss will investigate and, if confirmed, close the account and delete the associated data.

We strongly encourage parents and guardians to use parental control software to restrict access to online gaming platforms. There are a number of free and paid tools available that can block access to gambling-related websites on shared devices.

9kboss may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made — those that significantly affect how your data is used or the rights you have — we will notify registered players via the mobile number or email address on their account before the changes take effect.

The current version of this Privacy Policy is always accessible at 9kboss.ws/privacy-policy and is dated at the top of the document. Minor updates — such as correction of typographical errors or clarification of existing provisions without substantive change — may be made without advance notice. Continued use of the 9kboss platform after the effective date of any update constitutes acceptance of the revised policy.

If you disagree with any change to this Privacy Policy, you have the right to request deletion of your account and personal data before the new version takes effect. Contact support@9kboss.ws to initiate this process.

For any questions, requests, or concerns related to this Privacy Policy or the way 9kboss handles your personal data, please contact us through the following channel:

• Email: support@9kboss.ws — Please use the subject line "Privacy Policy Query" or "Data Rights Request" as appropriate so your message reaches the correct team.
• Response time: We aim to acknowledge all privacy-related communications within 48 hours and to provide a substantive response within 30 days of receipt.

If you are not satisfied with the response you receive from 9kboss to a privacy-related query, you have the right to escalate by requesting a formal review. Please email support@9kboss.ws with your original query reference number and request escalation to our data protection lead. All escalations are reviewed by a senior member of our operations team independently of the original response.