Your privacy is our priority. This document clearly explains how Mystic 9 collects, uses, stores, and protects your personal data as a member of our Malaysian online casino platform.
Six core principles that guide how Mystic 9 handles the personal data of every member.
This Privacy Policy describes the privacy practices of Mystic 9 ("we", "platform") regarding information collected from you ("member", "user") when using the mystic9.my website and all related services. Please read it carefully before using our platform.
Mystic 9 understands that your trust is our most valuable asset. As one of Malaysia's leading online casino and lottery platforms, we handle a significant amount of personal data every day and take this responsibility very seriously. This Privacy Policy is written in plain, straightforward language — not confusing legal jargon — so you always know exactly what happens with your data.
Mystic 9 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection principles. We only collect data we genuinely need, use it solely for the purposes we have stated, and we never sell your information to third parties for financial gain.
By registering an account with Mystic 9 or continuing to use our platform after this Privacy Policy has been updated, you acknowledge that you have read and fully understood this policy.
We collect various types of data depending on how you interact with the Mystic 9 platform. Here is a detailed breakdown:
We do not store credit or debit card information directly. All payment processing via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX is handled by licensed payment providers that maintain their own security standards.
Mystic 9 collects your personal data through the following methods:
When you complete a registration form, make a deposit or withdrawal, submit KYC documents, contact our customer support team, or fill in a promotion or competition form.
Through cookies, web beacons, analytics scripts, and other tracking technologies installed on the Mystic 9 website and mobile application. This information is collected automatically to ensure the platform functions properly and to improve the user experience.
In certain situations, we may receive information about you from licensed third parties such as payment providers (to verify transactions), identity verification bodies, or marketing partners who have obtained your prior consent to share that information.
We use your personal data only for lawful, stated purposes. The table below outlines the relationship between the data we collect and how it is used:
| Purpose of Use | Data Type | Legal Basis |
|---|---|---|
| Registration & account management | Identity, contact, account | Contract performance |
| Processing deposits & withdrawals | Financial, identity | Contract performance |
| Age verification & KYC | Identity, documents | Legal Requirements |
| Fraud prevention & anti-money laundering | All categories | Legal Requirements |
| Customer support | Contact, account, transactions | Legitimate interests |
| Platform improvement & analytics | Usage, technical | Legitimate interests |
| Marketing communications (with consent) | Contact, usage | Consent |
| Responsible Gambling | Gaming, transactions | Legal obligations & legitimate interests |
Mystic 9 does not sell your personal data. However, we may share your information with the following categories of third parties under limited and controlled circumstances:
Companies we engage to provide services on our behalf, such as payment providers (Touch 'n Go, GrabPay, DuitNow, FPX), server hosting companies, software developers, customer support service providers, and data analytics firms. All these service providers are bound by strict confidentiality agreements and are only permitted to use your data for purposes we have specified.
We may be required to disclose your personal data to Malaysian government authorities, law enforcement bodies, or gambling regulators when lawfully required to do so by law, court order, or official directive. This includes compliance with anti-money laundering laws (AMLA).
Live casino, slots, and poker game developers who supply gaming content to the Mystic 9 platform may receive technical and game session data necessary to ensure games function correctly. This data is strictly limited to technical information only.
Mystic 9 does not share sensitive financial information — such as your bank account details or MyKad number — with any third party for marketing purposes. Any such request that appears to come from a party claiming to represent Mystic 9 is fraudulent.
We retain your personal data for as long as your account is active or as needed to provide services to you. After account closure, we will retain certain records as required by applicable law — typically between 5 to 7 years for financial and transaction records to comply with audit and anti-money laundering requirements.
Mystic 9 implements multiple layers of security to protect your personal data:
In the event of a data breach affecting your personal information, Mystic 9 will notify you within 72 hours of becoming aware of the breach, in accordance with applicable legal requirements. We will also take immediate steps to contain and investigate any security incident.
Mystic 9 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the Mystic 9 platform. For more information on managing cookies in popular browsers such as Chrome, Safari, and Firefox, please refer to the respective browser's help documentation.
Under Malaysia's PDPA and the data protection principles we adhere to, you have the following rights regarding your personal data:
To exercise any of the rights above, please contact our Data Protection Officer at privacy@mystic9.my. We will verify your identity before processing any request to ensure the security of your data.
The Mystic 9 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that we have inadvertently collected personal data from a minor without proper age verification, we will take immediate steps to delete that data and close the relevant account.
Parents or guardians who believe their minor child has registered on the Mystic 9 platform are encouraged to contact us immediately at privacy@mystic9.my so that we may take appropriate action.
As a global platform, your personal data may be processed or stored on servers located outside Malaysia. When this occurs, Mystic 9 ensures that all such data transfers are safeguarded by adequate protections, including:
Mystic 9 does not transfer your personal data to any country or entity that does not offer privacy protections equivalent to or greater than the standards set by Malaysia's PDPA.
Mystic 9 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to the platform. When we make material changes, we will:
Your continued use of the Mystic 9 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account before they come into effect.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please reach out to us through the following channels:
We aim to respond to all privacy-related inquiries within 3 working days and resolve all formal requests within 14 working days from the date of receipt.
This Privacy Policy should be read together with Terms & Conditions Mystic 9. In the event of any conflict between the two documents in relation to data privacy, this Privacy Policy shall take precedence.