Legal Document

o9n Privacy Policy

o9n handles players' personal data securely and responsibly. This policy clearly sets out what data is collected, why it is collected, and how it is retained.

Last updated: 30 October 2026

This Privacy Policy applies to anyone who accesses the o9n platform. By accessing or using the platform, you are considered to have agreed to the terms in this policy, so please read it carefully.

01

Introduction

o9n is an online casino platform built for players in Myanmar. We treat the protection of our players' personal information as a top priority and responsibility.

This Privacy Policy ("Policy") explains what personal information we collect, how we use it, and how we protect it when you access the o9n platform, website, and related services ("Services").

This Policy should be read together with o9n's Terms & Conditions and Responsible Gaming Policy. If anything is unclear or incorrect, you can contact us at [email protected].

02

Types of Data We Collect

Data Collected Directly from You

When you register an account, log in, or contact us directly, we may collect the following data —

  • Full name (first and last name)
  • Date of birth (to verify you are 21+)
  • Email address
  • Phone number (for verification)
  • Payment details (KBZPay / Wave Money / AYA Pay / bank transfer)
  • National ID card / passport copy for KYC (Know Your Customer) verification

Data Collected Automatically

When you visit the website, we automatically record certain technical data —

  • IP address and estimated country / region
  • Browser type, version, and language settings
  • Device type and operating system
  • Pages visited and referring URLs
  • Gaming history (games played, bet amounts, winnings)
  • Cookies and similar tracking technologies (see Section 6 for details)

KYC Verification and Submitted Data

We may carry out KYC checks to ensure payment security and prevent fraud. During such checks, we may receive photo ID images and digital copies of national registration card data. This data is stored with strong encryption.

Note — We do not store sensitive financial data such as full card numbers, CVV codes, or ATM PINs directly on our servers. These are handled exclusively through banking and payment services (KBZPay, Wave Money, AYA Pay).

03

Purpose of Data Use

Collected data is used only for the following purposes —

  • Account Management — Creating player accounts, verifying identity, and keeping accounts secure
  • Service Delivery — Enabling gameplay and processing deposits and withdrawals
  • Legal Compliance — KYC registration, anti-money laundering (AML) measures, and responsible gaming practices
  • Communication — Sending service-related notifications (not promotional emails)
  • Security — Detecting fraud, unauthorised access, and errors
  • Service Improvement — Analysing player behaviour to develop and improve the platform
  • Issue Resolution — Referencing gaming history when handling customer support requests

Our commitment — We will not sell or rent players' data to advertising companies or third parties for marketing purposes.

04

Data Sharing Policy

We limit players' personal information as much as possible. However, when strictly necessary to deliver our services, we may share data with the following parties —

Payment Services

Payment and transaction-related information is shared with the relevant financial service companies to process payment verification for KBZPay, Wave Money, AYA Pay, and bank transfers.

Technology Service Providers

Third-party services that handle platform operations, hosting, data analytics, and cybersecurity. These parties are bound to us by dedicated data processing agreements and may not use the collected data for their own purposes.

Legal Requirements

We will comply with requests from legal authorities for court orders, lawful complaint investigations, or AML checks only where they are consistent with applicable local law.

Business Transfers

In the event of a merger, transfer, or acquisition involving o9n, players' data may be transferred to the receiving organisation along with all of these policies. Players will be notified in advance if this occurs.

05

Data Security Measures

o9n applies a range of technical and organisational security measures to protect players' data —

  • SSL/TLS Encryption — All data transmitted between the website and our servers is protected with SSL encryption
  • Database Encryption — Stored data is encrypted at the database level before being saved
  • Access Controls — Staff who can access player data are restricted through role-based access permissions
  • Regular Security Audits — Server and application vulnerability checks are carried out on a regular basis
  • Two-Factor Authentication (2FA) — 2FA is mandatory on all admin and service provider accounts
  • Data Breach Monitoring — 24/7 security monitoring technology is in place

We honestly acknowledge that no technology can guarantee 100% protection. In the event of a personal data breach, we will notify the affected players without delay and take remedial action.

For every player — Never share your password with anyone. If you notice any suspicious access, contact [email protected] immediately.

06

Cookies and Tracking Technology

What Are Cookies

A cookie is a small text file stored in your browser. The website uses cookies to remember players' preferences and provide a better gaming experience.

Types of Cookies We Use

  • Essential Cookies — Required to maintain login sessions and carry out security checks
  • Preference Cookies — Used to remember language settings and website display preferences
  • Analytics Cookies — Used to understand how players browse the website and to help improve the platform
  • Session Cookies — Temporary cookies that are deleted automatically when the browser is closed

How to Control Cookies

You can disable or delete cookies from your browser settings. However, if you disable essential cookies, some features of the website may not work correctly. For more information, contact our support team.

07

Data Retention Period

We retain players' data only for as long as necessary to provide our services. Retention periods vary by data type —

  • Account data — retained from account closure until the legally required retention period ends
  • Financial records — 5 years or longer as required by banking and AML regulations
  • KYC data — retained after KYC verification is complete, in line with legal retention requirements
  • Gaming history — retained for dispute resolution, responsible gaming reviews, and legal requirements
  • Customer support records — retained for a reasonable period to maintain decision records
  • Analytics data — anonymized when no longer needed

Once the retention period ends, we will securely delete the data or convert it into a form that can no longer identify any individual.

08

Players' Rights

Every player on the o9n platform has the following rights regarding their personal data —

  • Right of access — you can request to know what data we hold about you and how much
  • Right to rectification — you can request corrections if your data is inaccurate
  • Right to erasure — you can request deletion of data that is not legally required to be retained
  • Right to data portability — you can request your data in a readable format
  • Right to object — you can object to certain types of data processing if you have valid grounds
  • Right to opt out of marketing — you can opt out of your data being used for promotional purposes (this does not affect data used for service operations)

To exercise any of these rights, email us at [email protected]. You can also reach us via 24/7 live chat. Once your identity is verified, we will process your request if it is valid.

09

Protection of Under-21s

o9n services are for users aged 21 and above only. Children and anyone under 21 are not permitted to use this platform.

We verify date of birth at registration. Age is also re-confirmed during KYC checks.

If you become aware that someone under 21 is accessing this platform, please notify us immediately at [email protected]. Any data and records related to that player will be handled in accordance with the law.

If we discover that data from an under-21 user has been collected, we will delete that data immediately and close the associated account.

10

Policy Updates

o9n may update this Privacy Policy from time to time in response to service expansions, legal changes, or technology changes.

When the policy is updated —

  • The "last updated date" on this page will be revised
  • Players will be notified by email if there are significant changes
  • Major changes will be announced in a prominent location on the platform

Continuing to use the platform after changes are published will be taken as acceptance of the updated policy. If you do not agree, you may close your account and let us know.

11

Contact Us

For questions, objections, or to exercise your data rights regarding this Privacy Policy, you may contact o9n's data protection team —

Contact via Email

[email protected]

Contact via Live Chat

Reach us anytime via 24/7 Live Chat on the website in Myanmar language

Privacy Protection FAQ

o9n does not sell or rent players' personal data to third-party advertising companies or any company for marketing purposes. Data is shared with designated parties only when strictly necessary to provide services or to comply with legal requirements.

To access your data, email us at [email protected] or use the 24/7 live chat on the website. After verifying your identity, we will send you a summary of the data we hold on you.

When making payments via KBZPay, Wave Money, or AYA Pay, sensitive banking data such as card numbers and PINs are not stored directly on o9n servers. All transactions are processed exclusively through the respective payment provider's encrypted gateway.

After account closure, we retain financial records and KYC data for as long as legally required (approximately 5 years under banking / AML regulations). Once that period expires, the data will be deleted or anonymised.

If essential cookies are disabled, session management and login functions may not work properly. Disabling only preference and analytics cookies will not affect the main features of the website.

If a data security breach occurs and player data may be at risk, o9n will immediately notify affected players at their registered email address, and will openly communicate the remediation steps taken and the protective measures put in place.

Yes, you have the right to request deletion. However, data that must be retained for legal compliance — such as financial records and KYC records — cannot be deleted until the retention period expires. Once that period ends, we will action your request accordingly.