MoonCity9 Privacy Policy

This Privacy Policy ("Policy") is issued by MoonCity9 ("MoonCity9", "the Company", "we", "us", "our"), the operator of the online gambling platform accessible at mooncity9.cam and its associated mobile applications and services (collectively, "the Platform").

This Policy describes how MoonCity9 collects, receives, stores, uses, transfers, and discloses personal data relating to individuals who register for or access the Platform ("Players", "Users", "you"). It applies to all personal data collected through the Platform, including during account registration, KYC verification, payment processing, customer support interactions, and general use of the Platform.

By registering an account or using any part of the MoonCity9 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data in accordance with the terms set out herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, or online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means MoonCity9, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means a third party that processes personal data on behalf of MoonCity9, under a contractual obligation to comply with applicable data protection standards.
• "KYC" means Know Your Customer — the identity verification process required by anti-money laundering and counter-terrorism financing regulations.
• "Cookies" means small text files placed on a user's device by the Platform for the purposes of functionality, analytics, and personalisation.
• "MYR" means Malaysian Ringgit, the primary transactional currency of the Platform.
• "Sensitive Data" means a subset of personal data that warrants enhanced protection, including identity document numbers, financial information, and data relating to health or well-being.

MoonCity9 collects the following categories of personal data from users of the Platform:

MoonCity9 collects personal data through the following means:

4.1 Direct Collection

Information you provide directly when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or respond to surveys and promotions.

4.2 Automated Collection

Technical data collected automatically as you interact with the Platform, including through cookies, web beacons, server logs, and device fingerprinting technologies. This data helps us maintain platform security and optimise your experience.

4.3 Third-Party Sources

Data received from third parties in connection with the legitimate operation of the Platform, including:

• Identity verification agencies that assist with KYC processing;
• Payment partners including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, and cryptocurrency processors — who share transaction confirmation data necessary for crediting player accounts;
• Fraud detection and anti-money laundering screening providers;
• Analytics partners who provide aggregated, anonymised platform usage insights.

MoonCity9 uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and administering your player account, including processing deposits and withdrawals in MYR.
• Identity Verification: Conducting KYC checks to verify your identity, confirm your age (21+), and comply with anti-money laundering obligations.
• Service Delivery: Providing access to sports betting markets (EPL, Liga Super Malaysia, UFC, and more), live casino games, slots, and all other Platform services.
• Security & Fraud Prevention: Monitoring accounts and transactions for suspicious activity, detecting cheating or bonus abuse, and preventing unauthorised access.
• Regulatory Compliance: Meeting obligations imposed by our licensing authority and applicable international regulations including AML and CTF requirements.
• Responsible Gambling: Monitoring wagering behaviour to identify signs of problem gambling and administering self-exclusion, deposit limits, and cooling-off tools.
• Customer Support: Handling enquiries, resolving disputes, and managing account-related requests from players in Malaysia and internationally.
• Platform Improvement: Analysing anonymised usage data to improve platform performance, usability, and the range of products offered.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

MoonCity9 processes your personal data on the following legal bases, as applicable under internationally recognised data protection frameworks:

• Contractual Necessity: Processing required to perform our contract with you as set out in the Terms & Conditions — including account administration, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC, AML, and CTF obligations.
• Legitimate Interests: Processing for purposes that are in our legitimate interests (or those of a third party), where those interests are not overridden by your data protection rights — including fraud prevention, platform security, and improving our services.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

MoonCity9 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with the following categories of recipients only where strictly necessary for the purposes described in this Policy:

7.1 Payment Service Providers

Transaction data is shared with our licensed payment partners — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and cryptocurrency processors — to the extent necessary to process your deposits and withdrawals in MYR and USDT.

7.2 KYC and Compliance Providers

Identity documentation and verification data may be shared with specialist KYC and AML screening service providers who assist in fulfilling our regulatory obligations. All such providers are bound by contractual data processing agreements.

7.3 Regulatory and Law Enforcement Authorities

MoonCity9 may disclose personal data to our licensing authority, financial intelligence units, law enforcement agencies, or other public authorities where required or permitted by law, or where we have a good-faith belief that such disclosure is necessary to prevent or investigate illegal activity.

7.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of MoonCity9's assets, personal data held by the Company may be transferred to the acquiring entity, subject to equivalent data protection obligations.

The MoonCity9 Platform uses cookies and similar tracking technologies to deliver core functionality, maintain session security, and improve user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings, display options, and responsible gambling limit configurations.
• Analytics Cookies: Used to understand how players interact with the Platform — including which pages are visited most frequently and how sessions progress. Data is aggregated and anonymised.
• Marketing Cookies: Used to deliver personalised promotional content relevant to your activity on the Platform. These are only activated with your explicit consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Your consent to non-essential cookies is requested upon first visiting the Platform and can be updated at any time via your account settings.

MoonCity9 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce agreements.

The following general retention periods apply:

• Account Data: Retained for the duration of your active account, and for a period of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission, as required by applicable anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction for financial and regulatory compliance purposes.
• Customer Support Records: Retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained until consent is withdrawn, and for one (1) year thereafter as evidence of consent status.
• Technical / Log Data: Retained for a maximum of twelve (12) months for security monitoring purposes, then deleted or anonymised.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

MoonCity9 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored at rest on our secure server infrastructure;
• Multi-factor authentication requirements for account access and administrative systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Strict role-based access controls ensuring that staff can only access personal data to the extent required for their specific function;
• Continuous monitoring and automated alerting for suspicious account activity or attempted unauthorised access;
• Segregation of player funds from operational funds to protect account balances at all times.

While MoonCity9 employs industry-leading security practices, no data transmission over the internet can be guaranteed to be completely secure. Players are encouraged to maintain the confidentiality of their account credentials and to notify us immediately at [email protected] if they suspect any unauthorised account activity.

Subject to applicable law and certain limited exceptions (such as data retained for mandatory regulatory compliance), you have the following rights in relation to your personal data held by MoonCity9:

To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) days of receipt. Where a request is complex or numerous, this period may be extended by a further sixty (60) days, of which we will notify you.

MoonCity9 is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data relating to persons under the age of 21. The Platform employs mandatory KYC age verification to enforce this restriction.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate verification having been completed, we will take immediate steps to delete that data and permanently close the associated account. Any deposits or balances held in the account of an underage user will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child may have registered on the MoonCity9 Platform, please contact us immediately at [email protected].

MoonCity9's operations and data infrastructure are distributed across multiple jurisdictions. As a result, your personal data may be transferred to, stored in, or processed by systems located in countries outside Malaysia. Where such transfers occur, MoonCity9 takes appropriate measures to ensure that your personal data receives a level of protection equivalent to that provided under this Policy.

Such measures include entering into data processing agreements with recipients that incorporate internationally recognised data transfer mechanisms, and requiring all service providers handling personal data on our behalf to adhere to equivalent security standards.

MoonCity9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or regulatory requirements. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where we make material changes to this Policy — including changes to the categories of data collected, the purposes for which it is used, or the rights available to you — we will notify registered players by email and/or by prominent notice on the Platform prior to the changes taking effect.

Your continued use of the MoonCity9 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree to the updated Policy, you should cease using the Platform and contact us to close your account.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how your personal data is being handled, please contact the MoonCity9 Data Protection team:

For further information on your account, betting rules, or responsible gambling tools, please refer to our Terms & Conditions or Responsible Gambling pages.