Privacy Policy

W9CCC ("We", "Us"Our", or the "Platform") is committed to protecting and respecting your privacy. This Privacy Policy (the "Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This Policy applies to all users of the W9CCC online sports betting and live casino platform accessible at https://w9ccc.cam and all associated sub-domains, mobile applications, and services (collectively, the "Services"). It applies to all registered users and visitors to the Platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations across Malaysia and internationally.

Please read this Policy carefully to understand our practices regarding your personal data and how we will treat it. By accessing or using the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" Any information relating to an identified or identifiable natural person, including name, identification number, email address, IP address, financial data, and device identifiers.
• "Processing" Any operation performed on personal data, whether automated or manual, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" W9CCC, which determines the purposes and means of processing your personal data.
• "Data Processor" A third party that processes personal data on behalf of W9CCC, such as payment service providers, KYC verification vendors, and cloud infrastructure providers.
• "Sensitive Data" A subset of personal data that warants additional protection, including government-issued identification numbers, financial account details, and documentation submitted for KYC verification.
• "Cookies" Small text files placed on your device by the Platform that enable certain functionality, record preferences, and support analytics and security operations.
• "KYC" Know Your Customer — the identity and address verification process required of all W9CCC account holders under applicable anti-money laundering and regulatory obligations.

W9CCC collects the following categories of personal data in connection with your use of the Platform:

W9CCC does not intentionally collect special category data (such as health, biometric, or political data) unless specifically required by applicable law or voluntary disclosure is made by the User in the context of a responsible gambling assessment.

W9CCC collects personal data through the following methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotions.
• Automated Collection: Technical data collected automatically as you interact with the Platform, including via cookies, web beacons, log files, and analytics tools.
• Payment Providers: Transaction data shared by your payment service provider (e.g., DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong) when you deposit or withdraw funds.
• KYC Verification Partners: Results and risk scores generated by third-party identity verification vendors engaged by W9CCC to support our KYC obligations.
• Fraud Prevention Services: Information from fraud detection and anti-money laundering screening services that may flag suspicious activity associated with your account or payment method.
• Publicly Available Sources: In limited circumstances, W9CCC may supplement account data with information from publicly available sources to assist with verification or fraud investigation.

W9CCC processes your personal data for the following purposes:

1. Account Management: To create, maintain, and administer your W9CCC account, including authentication, password resets, and account security monitoring.
2. Service Delivery: To process bets, settle markets, credit winings, handle deposits and withdrawals via local Malaysian payment methods, and deliver live casino and sports betting services.
3. Identity Verification (KYC): To verify your identity, age, and residency in compliance with our anti-money laundering obligations and to prevent underage gambling.
4. Fraud & Security: To detect, prevent, and investigate fraudulent activity, bonus abuse, match-fixing, money laundering, and other prohibited conduct, including through automated risk-scoring systems.
5. Regulatory Compliance: To fulfil our obligations under applicable gaming regulations, tax reporting requirements, and court or law enforcement orders.
6. Customer Support: To respond to enquiries, resolve disputes, handle complaints, and improve support quality through analysis of interaction records.
7. Responsible Gambling: To monitor betting patterns for signs of problem gambling, enforce self-exclusion and deposit limit settings, and contact users where there is a duty of care concern.
8. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications or where we have a legitimate interest in doing so. You may opt out at any time.
9. Platform Improvement: To analyse usage data and improve the performance, features, and user experience of the W9CCC Platform.
10. Legal Proceedings: To establish, exercise, or defend legal claims arising in connection with your use of the Platform.

W9CCC processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil our obligations to you under the Terms & Conditions — including account operation, bet settlement, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML regulations, tax reporting obligations, and responses to regulatory or law enforcement requests.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and business analytics, where our interests are balanced against your privacy rights and do not override them.
• Consent: Where you have freely given specific, informed, and unambiguous consent — for example, to receive marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

W9CCC does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following limited circumstances:

• Payment Processors: Financial data is shared with your chosen payment provider (e.g., DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency processors) to the extent necessary to execute your deposit or withdrawal.
• KYC & AML Vendors: Identity documents and verification data are shared with contracted third-party KYC verification providers solely for the purpose of identity and age verification.
• Cloud & IT Infrastructure: Your data is stored on secure cloud servers managed by contracted infrastructure providers under strict data processing agreements that prohibit independent use of your data.
• Fraud & Security Services: Technical and transactional data may be shared with fraud detection, cybersecurity, and anti-money laundering screening services to protect the Platform and its users.
• Regulatory Authorities: W9CCC may disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where required by applicable law or court order.
• Professional Advisors: Legal, accounting, and auditing professionals retained by W9CCC may access personal data subject to strict professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Users will be notified of any such transfer.

W9CCC operates in an international context, and your personal data may be transferred to, stored in, or processed in countries outside of Malaysia. Where such transfers occur, W9CCC ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries deemed to provide an adequate level of data protection by relevant regulatory authorities;
• Use of contractual clauses that impose data protection obligations on the recipient of the data;
• Implementation of supplementary technical and organisational measures where required to address any identified transfer risks.

If you have questions about any specific international transfer of your personal data, please contact using the details in Section16 of this Policy.

W9CCC retains your personal data for the following periods, after which data is securely deleted or fully anonymised:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with applicable AML regulations.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years to support tax reporting and regulatory audit obligations.
• Customer Support Records: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction.
• Technical & Log Data: Server logs and technical data are retained for a rolling period of twelve (12) months for security and fraud investigation purposes.
• Marketing Consent Records: Records of your marketing preferences and opt-in or opt-out decisions are retained for the duration of your account and for three (3) years thereafter.

Where retention for a longer period is required by applicable law or regulatory obligation, W9CCC will retain data for that extended period and inform you accordingly where required.

W9CCC uses cookies and similar tracking technologies to operate the Platform effectively and to understand how users interact with our services. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without affecting Platform functionality.
• Analytical / Performance Cookies: Used to collect anonymous data about how visitors use the Platform — pages visited, time spent, error messages, and navigation paths. This data is used solely to improve the Platform.
• Functional Cookies: Enable the Platform to remember your preferences, such as preferred language, currency display, and responsible gambling settings.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and other security threats.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the W9CCC Platform. W9CCC does not use third-party advertising or tracking cookies that share your data with external marketing platforms.

W9CCC implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser or app and our servers;
• Encryption of sensitive data at rest, including financial records and KYC documentation;
• Role-based access controls ensuring that only authorised W9CCC personnel can access personal data, and only to the extent required for their specific role;
• Regular third-party security audits and penetration testing of the Platform's infrastructure;
• Two-factor authentication options for all account holders;
• Real-time intrusion detection systems and automated threat monitoring;
• Formal data breach response procedures, including notification obligations to affected users and relevant authorities where required by law.

Subject to applicable law, you have the following rights in respect of your personal data held by W9CCC. To exercise any of these rights, please contact us using the details in Section 16. W9CCC will respond to all verified requests within 30 calendar days.

W9CCC's Services are strictly restricted to individuals aged21 years and above. W9CCC does not knowingly collect personal data from persons under the age of 21. We employ age verification checks during account registration to enforce this requirement.

If W9CCC becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete or quarantine the collected data, and return any net deposits (excluding bonuses) to the original payment method.

If you have reason to believe that a person under the age of 21 has registered an account on W9CCC, please notify us immediately via our support team so that appropriate action can be taken promptly.

The W9CCC Platform may reference or link to services operated by third parties, including payment providers, game content providers, and live streaming services. This Privacy Policy applies only to data processed by W9CCC directly. It does not govern the privacy practices of third-party providers.

Third-party service providers integrated with W9CCC — including payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay), live casino game providers, and KYC vendors — operate under their own privacy policies. W9CCC is not responsible for the data practices of these third parties beyond the contractual obligations imposed through Data Processing Agreements.

We encourage you to review the privacy notices of any third-party services you interact with in connection with your W9CCC account, particularly in relation to your payment method provider.

W9CCC reserves the right to amend this Privacy Policy at any time. We will notify registered users of material changes via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect, where reasonably practicable.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the effective date of any amendments constitutes your acceptance of the revised Policy. If you do not agree to the amended Policy, you must stop using the Platform and may request account closure.

The current version of this Privacy Policy is always available at https://w9ccc.cam/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by W9CCC, please contact us through the following channels:

When submitting a data rights request, please include your full name, the email address associated with your W9CCC account, and a clear description of your request so that we can verify your identity and process your request efficiently.

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.