MM9 Privacy Policy — How We Protect Your Personal Data

1 Who This Policy Applies To

This Privacy Policy applies to all individuals who visit, register on or use any service on the mm9 platform at mm9.bz. This includes registered players, visitors who browse without creating an account, and anyone who contacts mm9 support via any channel.

By using mm9, you confirm that you have read and understood this Privacy Policy. If you do not agree with how your data is collected and used as described here, you should not create an account or use the platform.

This policy should be read alongside our Terms and Conditions, which set out the broader rules governing your use of mm9. Where the Terms and Conditions and this Privacy Policy conflict on a data-related matter, this Privacy Policy takes precedence on that specific point.

2 Data We Collect

mm9 collects personal data in several ways — directly from you when you register or contact support, automatically through your use of the platform, and from third-party service providers such as payment processors and identity verification services. Below is a clear breakdown of the categories of data we collect.

Registration and Account Data

• Full name as it appears on your government-issued ID
• Date of birth (used to verify you are 18 or above)
• Mobile number registered in Pakistan
• Email address
• Username and encrypted password
• Preferred language and currency (PKR)

Identity Verification Data

When mm9 requests KYC (Know Your Customer) verification — which may happen before processing a withdrawal or at any point deemed necessary — you may be asked to provide:

• A copy of your CNIC (Computerised National Identity Card) or valid passport
• Proof of address (utility bill, bank statement dated within 90 days)
• Proof of payment method ownership (screenshot or statement showing your name linked to your JazzCash, Easypaisa, Raast or bank account)

Financial Transaction Data

• Deposit and withdrawal amounts in PKR
• Payment method type (JazzCash, Easypaisa, Raast, bank transfer, card, or mobile wallet)
• Transaction timestamps and reference numbers
• Account balance history

Betting and Gaming Activity Data

• Bets placed, games played, stakes, odds and outcomes
• Sports markets accessed (cricket, PSL, T20, football, esports etc.)
• Session durations, login and logout timestamps
• Bonus and promotion usage history

Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system and browser version
• Cookies and similar tracking identifiers (see Section 6)
• Pages visited, links clicked and features used within the platform

Communications Data

• Records of live chat conversations with support
• Emails sent to and received from mm9 support addresses
• Details of any complaints or disputes raised

3 How We Use Your Data

mm9 uses the data it collects for specific, clearly defined purposes. We do not use your data for anything not listed here without first updating this policy and, where required, obtaining your consent.

mm9 does not use your personal data to send unsolicited marketing communications via SMS or email without your explicit opt-in. If you have opted in to receive promotional messages and wish to stop receiving them, you can update your communication preferences in your account settings at any time.

4 Legal Basis for Processing

mm9 processes your personal data only when it has a valid legal basis for doing so. The main legal bases we rely on are as follows:

• Contract performance — Processing that is necessary to deliver the services described in our Terms and Conditions. This covers account management, payment processing and game service delivery.
• Legal obligation — Processing required to comply with applicable legal duties, including identity verification, anti-money laundering checks and financial record-keeping requirements.
• Legitimate interests — Processing that mm9 has a genuine, proportionate business reason to carry out, such as fraud prevention, platform security, responsible gaming monitoring and improving our services. We balance these interests against your rights before relying on this basis.
• Consent — Where we send you optional marketing communications or use non-essential cookies, we rely on your explicit consent. You can withdraw consent at any time without affecting the services provided to you.

5 Sharing Your Data

mm9 shares your personal data only with parties who have a genuine need to receive it in order to help us deliver, secure and improve our platform. We do not sell your data. The categories of third parties who may receive your data are listed below.

Payment Processors

To process your PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, cards or mobile wallets, mm9 shares necessary transaction data with the relevant payment service providers. These providers are contractually bound to use your data only for payment processing purposes.

Identity Verification Providers

mm9 uses third-party identity verification services to confirm the authenticity of documents submitted during KYC checks. These providers process your ID documents in a secure environment and return a verification result to mm9. They do not retain your documents beyond what is necessary for the verification process.

Technology and Platform Providers

Game content on mm9 is supplied by third-party game studios and providers. These providers may receive limited session data (such as player ID and bet amounts) as required to run the games you play. They operate under data processing agreements with mm9 and may not use this data for their own independent purposes.

Analytics and Security Providers

mm9 uses analytics tools to understand how players use the platform and to detect unusual or suspicious behaviour. Where possible, data shared with analytics providers is anonymised or pseudonymised.

Legal and Regulatory Disclosure

mm9 may disclose your personal data to relevant authorities where required to do so by applicable law, a valid court order, or a formal investigation into suspected financial crime or other illegal activity. In such cases, mm9 will comply with the disclosure request while seeking to protect your interests where legally permissible.

6 Cookies and Tracking

mm9 uses cookies and similar tracking technologies on mm9.bz to make the platform work correctly, keep you logged in securely, remember your preferences and understand how players navigate the site.

Types of Cookies We Use

• Essential cookies — Required for the platform to function. These include session cookies that keep you logged in and security tokens that protect your account from cross-site attacks. These cannot be disabled without breaking the platform.
• Functional cookies — Store your preferences such as preferred game category, language settings and notification preferences. Disabling these means your preferences will not be saved between sessions.
• Analytics cookies — Help mm9 understand which pages and features are most used, where players encounter problems and how the platform can be improved. Data collected via analytics cookies is aggregated and does not identify you personally.
• Security and fraud-detection cookies — Used to identify unusual login patterns and flag potentially fraudulent activity. These are part of our platform security infrastructure.

mm9 does not use advertising cookies or share cookie data with ad networks. You can manage your cookie preferences through the cookie consent settings available on the site. Note that disabling essential cookies will prevent you from logging in or using the platform.

7 Data Retention

mm9 retains your personal data for as long as your account is active and for a defined period after account closure, in accordance with our legal and business obligations. Below is a general guide to how long different categories of data are kept.

• Active account data — Retained for the lifetime of your account plus a period after closure to handle any outstanding disputes, chargebacks or legal matters.
• Financial transaction records — Retained for a minimum of five years from the date of the transaction in accordance with standard financial record-keeping practice.
• KYC and identity verification documents — Retained for the period required to satisfy applicable anti-money laundering and verification obligations, typically five years from the date of verification or account closure, whichever is later.
• Support communications — Retained for up to three years from the date of the last communication, to allow for follow-up and dispute resolution.
• Technical and device data — Retained in an identifiable form for up to 12 months, after which it is anonymised or deleted.
• Self-excluded accounts — If you use the self-exclusion tool, a record of your exclusion is retained for the full exclusion period and for a reasonable time afterwards to prevent re-registration during the exclusion window.

When data is no longer required for any of the purposes listed in this policy and no legal retention obligation applies, it is securely deleted or anonymised so that it can no longer be linked back to you.

8 Security Measures

Protecting your personal data is a core operational priority at mm9. We apply a combination of technical and organisational measures to keep your data safe from unauthorised access, alteration, disclosure or destruction.

• TLS encryption — All data in transit between your device and mm9 servers is encrypted using industry-standard TLS protocols.
• Password hashing — Your account password is never stored in plain text. It is processed through a one-way cryptographic hash so that even mm9's internal team cannot read it.
• Two-factor authentication — mm9 supports and encourages the use of two-factor authentication (2FA) on your account for an additional layer of login security.
• Access controls — Only authorised mm9 staff who need access to personal data as part of their specific role are permitted to view it. Access is logged and reviewed regularly.
• Fraud monitoring — Automated systems continuously monitor account activity for signs of fraud, unusual login locations, and irregular betting patterns that may indicate account compromise.
• Third-party security audits — mm9's platform and data handling practices are subject to periodic security reviews to identify and address potential vulnerabilities.

9 Your Rights

As a player on mm9, you have a number of rights in relation to the personal data we hold about you. These rights are meaningful and mm9 takes requests seriously. To exercise any of the rights listed below, contact our support team using the details in Section 12.

10 Children and Minors

mm9 is strictly an adult platform and is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. If you are under 18, you must not register an account, use any mm9 service or provide any personal data to mm9.

If mm9 discovers or has reason to believe that a registered account belongs to a person under 18, the account will be immediately suspended, all activity voided and any deposited funds returned to the source payment method after verification. The account will then be permanently closed.

Parents and guardians who are concerned that a minor in their household may be accessing online gaming platforms are encouraged to use device-level parental controls and to make use of the responsible gaming tools described on our Responsible Gaming page.

11 Policy Updates

mm9 reviews and updates this Privacy Policy periodically to reflect changes in how we operate, changes in the services we offer, and developments in applicable data protection practices. The "Last updated" date at the top of this page indicates when the most recent revision was made.

When we make material changes to this policy — changes that meaningfully affect how we collect or use your data — we will notify registered players via the email address on their account. For minor or clarifying changes, updating this page is considered sufficient notice.

Continued use of mm9 after a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should stop using the platform and contact support to request account closure and deletion of your personal data where applicable.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, our support team is available 24 hours a day, 7 days a week. We treat all data-related requests as a priority and handle them with full confidentiality.

You can reach us via live chat directly from any page on mm9.bz, or by emailing us at the address below. Please include your registered username or email address in your message so we can locate your account promptly and respond efficiently.

For general account support and questions unrelated to data rights, the main support email and live chat are always available as well.