Privacy Policy — How jp99 Protects Your Data

1. Introduction

This Privacy Policy ("Policy") describes how jp99 ("jp99", "we", "us", or "our") collects, processes, stores, and protects personal data provided by users ("Member", "you", or "your") in connection with your use of the jp99 website at jp99.one and all associated services, products, and features (collectively, the "Platform").

By registering for an account on jp99, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the jp99 Terms & Conditions, which govern the overall terms of your use of the Platform.

jp99 is committed to handling your personal data with the utmost care and in accordance with applicable data protection principles, including those recognised under international privacy frameworks applicable to online gaming operators.

2. Data We Collect

jp99 collects personal data through various interactions with the Platform. The categories of data we collect include, but are not limited to, the following:

jp99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, health data, or biometric data, except where strictly required for identity verification and age compliance purposes, and only with your explicit consent or as required by law.

3. How We Use Your Data

jp99 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your jp99 member account, including identity verification, age verification (21+ compliance), and authentication of your jp99 login sessions.
• Service Delivery: To provide you with access to all jp99 Platform features, including live casino, slots, sportsbook, Lucky Bingo, and promotional offers.
• Transaction Processing: To process deposits via Touch n Go eWallet, Boost, FPX, Maybank2u, CIMB, and Public Bank, and to process withdrawal requests to your verified payment methods.
• Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements, including the verification and retention of identity documentation.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in the jp99 Terms & Conditions.
• Responsible Gaming: To monitor gaming activity for patterns consistent with problem gambling and to enforce any deposit limits, loss limits, or self-exclusion restrictions that you have applied to your account.
• Customer Support: To respond to your support requests, complaints, and account queries via live chat or email.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the jp99 Platform, optimise game performance, and inform product decisions.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or in-platform messaging, where you have provided consent to receive such communications. You may withdraw marketing consent at any time by contacting jp99 support.

4. Legal Basis for Processing

jp99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the member agreement with you, including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/KYC requirements and age verification obligations.
• Legitimate Interests: Processing carried out in pursuit of jp99's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, including marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

jp99 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

• Payment Processors: Touch n Go eWallet, Boost, FPX banking partners, and other payment service providers, to facilitate your deposits and withdrawals. These providers are contractually bound to handle your data securely and in accordance with applicable data protection requirements.
• Game Providers: Third-party game studios and live casino operators whose games are made available on the jp99 Platform, to the extent required for game delivery and dispute resolution.
• Identity Verification Services: KYC and age verification service providers engaged to verify the identity and eligibility of jp99 members.
• Regulatory Authorities: Law enforcement agencies, regulatory bodies, and other public authorities where jp99 is legally required to disclose personal data by applicable law, court order, or regulatory direction.
• Professional Advisers: Legal, accounting, and audit professionals engaged by jp99, subject to professional confidentiality obligations.

Where jp99 engages third-party processors, we require them to implement appropriate technical and organisational security measures and to process personal data only in accordance with jp99's documented instructions.

6. Cookies & Tracking Technologies

jp99 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you access jp99.one. jp99 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function, including maintaining your jp99 login session, remembering your language preference, and enabling secure transactions. These cannot be disabled.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how members use the Platform — which pages are visited most, how long sessions last, and where users navigate. This information helps jp99 improve platform performance and usability.
• Functional Cookies: Allow the Platform to remember your preferences, such as previously entered usernames (where "Remember me" is selected) and preferred display settings.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of parts of the jp99 Platform.

7. Data Retention

jp99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention principles apply:

• Account data and KYC documentation are retained for a minimum of five (5) years following account closure, in accordance with applicable anti-money laundering record-keeping requirements.
• Transaction records (deposits, withdrawals, gaming history) are retained for a minimum of five (5) years from the date of the transaction.
• Marketing consent records are retained for the duration of your membership and for a period following account closure sufficient to demonstrate compliance.
• Support communications are retained for a period of three (3) years from the date of the relevant interaction.

Where personal data is no longer required for any legitimate purpose and no legal retention obligation applies, jp99 will securely delete or anonymise it.

8. Data Security

jp99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jp99 Platform.
• Password hashing using one-way cryptographic algorithms. jp99 systems cannot retrieve your actual password — only you know it.
• Access controls limiting internal data access to authorised jp99 personnel with a legitimate operational need.
• Regular security assessments and penetration testing of platform infrastructure.
• Incident response procedures for detecting, reporting, and responding to personal data breaches in accordance with applicable regulatory requirements.

While jp99 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your jp99 login credentials and for using strong, unique passwords.

9. Your Rights

Subject to applicable data protection law, you have the following rights in respect of personal data that jp99 holds about you:

• Right of Access: You may request a copy of the personal data jp99 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update many account details directly through your jp99 account settings.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to jp99's legal obligation to retain certain records.
• Right to Restrict Processing: You may request that jp99 restrict the processing of your personal data in specified circumstances.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to jp99, where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect processing carried out prior to withdrawal.
• Right to Object: You may object to processing based on legitimate interests in certain circumstances.

To exercise any of the above rights, please contact jp99 via the 24/7 live chat or by emailing [email protected]. jp99 will respond to verified requests within 30 days. jp99 may request proof of identity before processing a data rights request.

10. Children & Minors

The jp99 Platform is strictly intended for users aged 21 years and above. jp99 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process, and jp99 reserves the right to request official identity documentation at any time to confirm a member's age.

If jp99 becomes aware that personal data has been collected from a person under the age of 21 without the appropriate verification having been completed, jp99 will take immediate steps to suspend the relevant account and delete or anonymise the associated personal data, subject to any applicable legal retention obligations.

If you are a parent or guardian and believe that a minor may have created a jp99 account, please contact our support team immediately via live chat.

11. International Data Transfers

jp99 may transfer your personal data to, or process it in, countries outside Malaysia in connection with the operation of the Platform — for example, to game providers or technology infrastructure partners based in other jurisdictions.

Where personal data is transferred internationally, jp99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards may include contractual data processing agreements incorporating internationally recognised data protection standards.

By using the jp99 Platform, you acknowledge and consent to the transfer of your personal data as described in this section.

12. Changes to This Privacy Policy

jp99 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, jp99 will provide reasonable prior notice to registered members via email or via a prominent notice on the Platform. The updated Policy will take effect from the date stated at the top of this document.

Your continued use of the jp99 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should cease using the Platform and may request account closure by contacting jp99 support.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or jp99's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the jp99 Platform — the fastest way to reach our support team for data rights requests and privacy queries.
• Email: [email protected] — please allow up to 30 days for formal data rights requests via email.

For responsible gaming inquiries, self-exclusion requests, or gaming limit adjustments, please visit the Responsible Gaming page or contact our support team directly.