This Privacy Policy explains how vr9 collects, uses, stores, and protects your personal data. Your privacy is a fundamental part of how we operate — not an afterthought.
All personal data is encrypted in transit and at rest. We apply 256-bit SSL across all Platform communications.
We do not sell, rent, or trade your personal data to third-party marketers under any circumstances.
You may access, correct, export, or request deletion of your personal data at any time by contacting our support team.
Data is collected only for specific, legitimate purposes — account management, payments, KYC compliance, and responsible gambling monitoring.
vr9 ("we", "us", "the Platform", "the Operator") is committed to protecting the privacy and personal data of every individual who accesses or registers on the vr9 online gaming platform at https://vr9.cam. This Privacy Policy ("Policy") sets out, in clear and accessible terms, what personal data we collect, why we collect it, how it is used and stored, with whom it may be shared, and what rights you hold in relation to your data.
This Policy applies to all users of the vr9 Platform, including registered Players, prospective members browsing the Site, and any individual whose personal data is submitted in connection with a vr9 account or service request. It applies to data collected through the Site, live chat support interactions, email correspondence, and associated mobile-optimised interfaces.
By using the vr9 Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform and may request account closure in accordance with the procedures set out in our Terms & Conditions.
vr9 operates under internationally recognised gaming licensing standards and applies data handling practices consistent with internationally accepted data protection principles, including those reflected in frameworks such as the General Data Protection Regulation (GDPR) and the Malaysian Personal Data Protection Act 2010 (PDPA), where applicable.
In this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could reasonably identify a living individual, directly or in combination with other data. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or any other handling. |
| Data Controller | vr9, the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | A third party that processes personal data on behalf of vr9 under a contractual data processing agreement. |
| Data Subject | The identified or identifiable natural person to whom personal data relates — in most cases, the registered Player. |
| Consent | A freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their personal data. |
| KYC | Know Your Customer — the identity and address verification process required under our licensing obligations and AML compliance framework. |
| AML | Anti-Money Laundering — the regulatory framework requiring vr9 to monitor and report suspicious financial activity. |
vr9 collects only the categories of personal data that are necessary for the specific purposes described in this Policy. The categories of data we collect include:
vr9 collects personal data through the following channels:
vr9 processes personal data only where a lawful basis for processing exists. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis for each:
| Purpose of Processing | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity, Contact, Account | Contractual necessity |
| Identity verification (KYC) | Identity, Financial | Legal obligation; contractual necessity |
| Processing deposits and withdrawals | Financial, Identity | Contractual necessity |
| Anti-money laundering (AML) monitoring | Financial, Gameplay, Identity | Legal obligation |
| Responsible gambling monitoring | Gameplay, Behavioural | Legal obligation; legitimate interest |
| Fraud prevention and platform security | Technical, Financial, Identity | Legitimate interest |
| Customer support and dispute resolution | Identity, Communications | Contractual necessity; legitimate interest |
| Promotional communications (opted-in only) | Contact, Gameplay | Consent |
| Platform analytics and improvement | Technical, Gameplay (anonymised) | Legitimate interest |
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.
vr9 does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:
Third-party companies engaged by vr9 to provide services that require access to personal data, including:
vr9 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, licensing conditions, or lawful court order. Such disclosures are made only to the minimum extent necessary to fulfil the legal obligation.
Our international gaming licensing authority may require access to Player data as part of ongoing compliance audits or investigations. Such access is governed by the terms of our licensing agreement.
Important: All third-party service providers engaged by vr9 are contractually bound to process personal data only for the specific purposes for which it was shared, to maintain appropriate security measures, and not to disclose it to any further parties without vr9's written consent.
vr9 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or our licensing obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of account plus 5 years following account closure |
| KYC documents | 5 years from date of submission or account closure, whichever is later |
| Financial transaction records | 7 years from date of transaction (AML compliance requirement) |
| Gameplay and bet history | Duration of account plus 3 years following account closure |
| Customer support communications | 3 years from date of interaction |
| Technical and device data (logs) | 12 months from date of collection |
| Marketing consent records | Until consent is withdrawn, plus 1 year thereafter |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.
vr9 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
Notwithstanding these measures, no data transmission over the internet is completely secure. You are responsible for maintaining the security of your own account credentials. vr9 will never ask you for your password via email, live chat, or telephone.
The vr9 Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. Cookies are small text files stored on your device when you visit the Platform.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Essential for login sessions, account authentication, and security functions. The Platform cannot function without these. | No — required for operation |
| Functional | Remember your language preferences, display settings, and responsible gambling configuration. | Yes — some features may be limited |
| Analytics | Anonymised data on how users navigate the Platform, used to improve user experience and identify performance issues. | Yes — via cookie preferences |
| Security | Fraud detection signals and bot prevention mechanisms tied to session integrity. | No — required for security |
You may control and delete cookies through your browser settings. Instructions for managing cookies are available in your browser's help documentation. Note that disabling certain cookies may affect the functionality and security of your vr9 account. vr9 does not support "Do Not Track" browser signals at this time.
Subject to applicable law and our obligations under international licensing and AML regulations, you hold the following rights in respect of your personal data held by vr9. To exercise any of these rights, contact us at the details provided in Section 14.
You may request a copy of all personal data vr9 holds about you. We will respond within 30 days of receiving a verifiable request, at no charge for standard requests.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. For account details, some corrections can be made directly in your account dashboard.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that AML and licensing regulations require us to retain certain data for defined periods regardless of an erasure request.
You may request that we limit the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction to erasure.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
You may object to processing carried out on the basis of our legitimate interests, including profiling for responsible gambling monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on your consent — such as receipt of promotional communications — you may withdraw that consent at any time by updating your account preferences or contacting support. Withdrawal does not affect the lawfulness of processing before withdrawal.
The vr9 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is applied at the point of account registration and enforced again during KYC review.
If we become aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the personal data in question to the extent permissible under our legal obligations, and investigate how the underage registration occurred.
If you are a parent or guardian and believe that a person under 21 in your care has created a vr9 account, please contact us immediately at [email protected] (plain text — do not click). We will investigate and take appropriate action promptly.
As an internationally licensed gaming operator, vr9 may transfer personal data to, and process it in, jurisdictions outside Malaysia. This may occur when data is processed by our hosting providers, KYC service providers, or payment processors who operate in other countries.
Where personal data is transferred outside of Malaysia, vr9 takes steps to ensure that appropriate safeguards are in place to protect your data, including requiring recipients to be bound by data processing agreements that impose obligations equivalent to those described in this Policy.
By using the vr9 Platform, you acknowledge and consent to such international transfers where necessary for the performance of services under your account agreement.
vr9 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last updated" date at the top of this page will be revised accordingly.
Where a material change is made to this Policy — for example, a new category of personal data is collected or a new purpose of processing is introduced — vr9 will notify registered Players by email to the address held on account prior to the change taking effect. Continued use of the Platform following notification of a material amendment constitutes acceptance of the revised Policy.
We encourage you to review this Policy periodically. If you have any questions about a specific change, contact our support team using the details in Section 14.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how vr9 handles your personal data, please contact our Privacy team:
Privacy enquiries: [email protected] Please include "Privacy Request" in the subject line of your email.
Live Chat: Available via the Platform, 8am–2am Malaysian time daily.
We aim to acknowledge all data rights requests within 5 business days and to fulfil them within 30 calendar days. Where additional time is required due to complexity, we will notify you of the extended timeline.
If you are unsatisfied with how vr9 handles your data rights request, you may have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction. In Malaysia, the relevant authority is the Personal Data Protection Commissioner under the Personal Data Protection Act 2010.
Six core commitments that underpin our approach to data privacy across every part of the vr9 Platform.
Your personal data is never sold, rented, or traded to third-party advertisers, marketers, or data brokers. It is used only for the purposes listed in this Policy — nothing else.
Data collected for one purpose — such as KYC identity verification — is not repurposed for unrelated activities such as marketing profiling without your explicit consent.
All data in transit between your device and vr9 servers is protected by 256-bit SSL/TLS. Sensitive stored data — including identity documents and financial records — is encrypted at rest.
We collect only the data we actually need. Registration requires only what is essential to create and verify your account. We do not ask for data we have no use for.
Promotional communications are only sent to Players who have explicitly opted in. You can withdraw this consent at any time from your account preferences panel or by contacting support.
We do not keep your data indefinitely. Clear retention schedules apply to every category of personal data, with secure deletion or anonymisation at the end of each period.
Our support team handles all privacy enquiries with care. If you want to access, correct, or delete your data — or simply have a question about this Policy — get in touch.
For players aged 21 and above only. By using vr9, you agree to this Privacy Policy and our Terms & Conditions.