Privacy Policy

WellPlayed NV (San Victor Street, Orange Walk Town, Belize) is the controller of the personal data processed on 9TO5. For any question about your data, write to privacy@9to5.com.

• Account: username, email address, password (stored only as a one-way hash), date of your age and Terms confirmation, marketing preference, two-factor settings.
• Identity checks: when required, the documents and information you send us (ID, proof of address, source of funds).
• Payments and play: deposit and withdrawal addresses, transactions, balances, bets and results, bonuses and rewards.
• Technical: IP address, browser and device information, login history, security events.
• Support: the messages you send to our team.
• Responsible gaming: the limits, breaks and self-exclusions you set.

• To run your account and the games (performance of our contract with you): registration, login, deposits, withdrawals, bets, rewards, support.
• To meet our legal duties: age and identity checks, anti-money-laundering, fraud prevention, responsible gaming, answers to the authorities.
• To keep the site secure (legitimate interest): detecting abuse, multiple accounts and account takeovers, security alerts by email.
• To send you offers about our own casino (bonuses, promotions, news). They are included when you create your account, unless you tick "I don't want to receive offers" on the sign-up form. You can unsubscribe at any time, free of charge, in Settings or with the link in each promotional email. We never send offers to self-excluded players.

We never sell your data. We share only what is needed with:

• our payment infrastructure, which generates deposit addresses and sends withdrawals;
• our hosting, email and security providers, bound by confidentiality and data protection terms;
• our affiliate partner, when you joined through a partner link: it receives a pseudonymous player ID and activity totals, never your email or identity;
• identity verification providers, when checks are needed;
• regulators, courts and law enforcement, when the law requires it.

Some providers may be located outside your country. We make sure appropriate safeguards are in place for these transfers.

• Account, transaction and identity data: for as long as your account is open, then 5 years (anti-money-laundering duties).
• Self-exclusion records: for the duration of the exclusion and at least 5 years, so it can be enforced.
• Security logs: up to 12 months. Email delivery logs: up to 24 months.
• Marketing preference: until you change it, plus the time needed to prove your consent.

We only use cookies that the site needs to work:

• a session cookie that keeps you logged in;
• preference cookies (selected currency, display settings);
• a referral cookie that remembers which partner link you came from, for up to 30 days.

We do not use advertising cookies. If we add analytics or advertising cookies in the future, we will ask for your consent first.

Passwords are hashed with a slow, salted algorithm, connections are encrypted, and staff access is limited, logged and protected by two-factor authentication. You can protect your own account with two-factor authentication in Settings.

Depending on where you live, you can ask to access, correct or delete your data, to receive a copy of it, to restrict or object to its use, and to withdraw your consent. Some data must be kept by law even if you ask for deletion (see above).

Write to privacy@9to5.com. We answer within one month. You may also complain to the data protection authority of your country.

9TO5 is strictly for adults. We do not knowingly collect data from anyone under 18 and close any such account we find.