At 9 years old, the cousin should know better. The parents definitely need to know, and you need to keep your daughter away from him.
Sounds like the cousin needs some help. (FYI - I have a 10 and 7 year old, they know that those areas are private and should never be shown or exposed to other kids, or adults. Except in the case of doctors if they need a checkup)