Privacy Policy for Personal Data in India

Users should read the 9KBoss privacy policy before registering. Site staff may update the policy, so users are advised to review it after any changes. The policy outlines how staff gather, use, share, safeguard, and retain personal information. Staff require account data for registration, KYC procedures, payments, customer support, security, gaming controls, and verification checks. Technical records are maintained for defined purposes, including securing logins, detecting fraud, managing the site and app, and identifying errors.

Information Collected

The table below shows the types of personal data that 9KBoss collects. Staff collect this data when users register, use accounts, interact with devices, make payments, verify identity, or request support.

Data CategoryExamples
Registration dataName, date of birth, mobile number, email address, country, language and account ID
Identity recordsAadhaar, PAN, passport, driving licence, proof of address, selfie and verification results
Payment dataUPI ID, bank details, transaction references, cryptocurrency wallet addresses, deposits and withdrawals
Account activityLogin history, bonuses, limits, casino rounds, sports bets, wins, losses and balance changes
Device informationIP address, device type, operating system, browser, app version, language and approximate location
Support recordsChat messages, contact forms, complaints, attachments, case references and responsible gaming requests
Preference dataLanguage, notifications, marketing consent, cookie settings, limits and self-exclusion status

Users enter their information and update contact details as necessary. To request verification, they attach the documents listed in the account section.

Do not share passwords, OTPs, UPI PINs, authenticator keys, or wallet seed phrases, include them in support messages, or upload documents containing these details.

Purposes of Data Processing

Staff handle personal data to manage accounts. They oversee security, process payments, facilitate communication, establish user controls, and comply with legal requirements. 9KBoss manages this information in line with the Privacy Policy and related notices.

The main processing purposes are outlined in the following list.

Marketing communication uses consent or another legal basis, as the Privacy Policy explains. Users can change their promotional preferences in their account settings. Each message includes an unsubscribe option.

If you opt out of marketing messages, you will still receive security, payment, account, legal, and other messages.

Cookies and Third-Party Services

Cookies and similar technologies store session data, remember preferences, support logins, protect accounts, and help companies measure traffic and track marketing. Developers use them for navigation and payment processing, while security teams rely on them to enhance security.

Site managers use preference and analytics cookies to set language options, measure site performance, and identify errors; users can manage these cookies through browser settings or cookie management tools.

Blocking cookies prevents users from logging in or accessing the Cashier and account settings. Deleting cookies removes saved preferences, so the site starts a new session on the user's next visit.

Certain external organizations use information to provide services. Recipients include external organizations.

Data sharing fulfills its purpose while complying with legal, security, and contractual requirements; the Privacy Policy identifies recipient groups and explains processing reasons.

Users should review the privacy notice of an external payment service or an external identity service before submitting information to the provider.

Security, Retention and International Transfers

9KBoss protects account data with encrypted connections, access restrictions, and authentication controls. Staff oversee activity, adjust permissions, perform regular backups, and follow incident response procedures.

Users create passwords, lock devices, update software, choose communication channels, and log out after using shared devices.

Users report unknown sessions, changed account details, and unauthorized payments promptly through the current support channel.

Data retention periods vary based on several factors: account activity, KYC verification, payment checks, fraud tracking, tax regulations, ongoing legal cases, gaming records, and dispute resolution. When staff close an account, certain records remain in the system for a defined period.

The service removes or anonymises the information once processing is complete and the retention period has expired.

External providers handle data beyond India's borders and must comply with all legal, contractual, and security obligations described in the Privacy Policy. Indian privacy laws govern this data. The Digital Personal Data Protection Act, 2023, sets out these requirements, and the Digital Personal Data Protection Rules, 2025, also apply.

User Rights, Updates and Contact

Privacy rights depend on the relevant law, data use, and identity verification method. Requests can be made via the Contact section, while signed-in users may also use the support channel.

Support staff use the account ID and registered contact details to find records, determine the type of request to select relevant information, and provide a list of available privacy controls.

Identity verification prevents unauthorized users from accessing account information. If a deletion request is made, staff must continue to meet requirements for KYC, AML, payment, tax, security, self-exclusion, and dispute retention.

Support staff use the policy and rules to make decisions. They explain the reason when they limit or reject a request.

The service revises its Privacy Policy due to legal, operational, security, or technical changes. The updated text and its effective date are displayed on the page. Users are encouraged to review the terms and can adjust their consent or marketing preferences if they choose.

Frequently Asked Questions

What personal information does 9KBoss collect?

The data includes registration details, KYC records, payment history, account activity, device information, support messages, user preferences, security records, and gaming controls.

Does account closure delete every record immediately?

No. Operators retain records as required by law, documenting information for payment, KYC, tax, security, dispute resolution, and self-exclusion, with retention periods varying by rule.

How to submit a privacy request?

Use the current Contact section. If you need more help, sign in, contact support, and include your account ID, request type, and the contact details registered with your account to confirm your identity.