jp99a Privacy Policy

This Privacy Policy ("Policy") is issued by jp99a ("jp99a", "we", "us", "our") and describes how jp99a collects, processes, stores, discloses, and protects the personal data of individuals who register for a jp99a account, access the jp99a website at jp99a.net, or otherwise interact with jp99a Services ("Members", "Users", "you").

jp99a is committed to handling personal data responsibly, in accordance with applicable data protection principles including those reflected in international frameworks relevant to the jurisdictions in which jp99a operates. This Policy applies to all personal data processed by jp99a in connection with the jp99a platform, including data collected via the website, mobile browser, and any related communications channels.

By registering a jp99a account or continuing to use jp99a Services following the publication of this Policy, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, you should cease using jp99a and contact customer support to request account closure.

For the purposes of this Policy, the data controller responsible for the personal data of jp99a members is jp99a, operating the platform at jp99a.net. jp99a operates under international gaming authority licensing. Queries regarding data controller details may be directed to the jp99a support team via the contact details set out in Section 13 of this Policy.

jp99a collects personal data in the following categories:

jp99a does not knowingly collect personal data from persons under the age of 21. If jp99a becomes aware that personal data has been collected from a person under 21, such data will be deleted promptly and the associated account will be closed.

jp99a processes your personal data for the following purposes:

1. Account Administration: To create, maintain, and manage your jp99a account, verify your identity, and process your login credentials securely;
2. Service Delivery: To provide you with access to the jp99a sportsbook, live casino, slots, lottery, and VIP programme, and to process your deposits, bets, and withdrawals in Malaysian Ringgit (MYR);
3. KYC & AML Compliance: To verify your identity and age (21+) in accordance with jp99a's Know Your Customer obligations and anti-money laundering requirements imposed by international gaming regulators;
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and abuse of jp99a Services;
5. Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and administer responsible gaming tools including deposit limits, self-exclusion, and cool-off periods;
6. Communications: To send you transactional communications (deposit confirmations, withdrawal notifications, security alerts) and, where you have consented, promotional communications about jp99a offers and promotions;
7. Legal & Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.

jp99a processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and jp99a (your account Terms & Conditions), including account management and payment processing;
• Legal Obligation: Processing required for jp99a to comply with applicable laws, including KYC, AML, and gaming licence conditions;
• Legitimate Interests: Processing necessary for jp99a's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Where jp99a relies on your consent for processing (e.g., marketing communications), you may withdraw consent at any time by updating your account preferences or contacting support.

jp99a does not sell, rent, or trade your personal data to third parties for their own marketing purposes. jp99a may share your personal data with the following categories of third party, strictly to the extent necessary:

1. Payment Processors: Touch 'n Go eWallet, Boost, DuitNow, FPX banking partners (Maybank, CIMB, Public Bank, RHB, and others) — to process your deposits and withdrawals;
2. Game Providers: Licensed game studios (e.g., Evolution Gaming, Pragmatic Play, PG Soft, SA Gaming) — limited technical data necessary to deliver game sessions;
3. Identity Verification Providers: Third-party KYC service providers used to verify your identity and age in accordance with regulatory requirements;
4. Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or the conditions of jp99a's international gaming licence;
5. Service Providers: Cloud hosting, cybersecurity, analytics, and customer support platform providers who process data on jp99a's behalf under data processing agreements with appropriate security obligations.

All third-party service providers engaged by jp99a are contractually required to maintain the confidentiality and security of personal data they process on jp99a's behalf.

jp99a uses cookies and similar tracking technologies on the jp99a website. These technologies serve the following functions:

• Strictly Necessary Cookies: Essential for platform operation — session management, authentication, and security. These cannot be disabled without materially impairing your use of jp99a;
• Functional Cookies: Remember your preferences, language settings, and recent activity to personalise your jp99a experience;
• Analytics Cookies: Collect anonymised usage data to help jp99a understand how members navigate the platform and identify performance improvement opportunities;
• Security Cookies: Support fraud detection and security monitoring, including device fingerprinting to identify unusual login patterns.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use jp99a Services.

jp99a retains personal data for as long as your jp99a account is active and for such further period as is necessary to comply with legal and regulatory obligations. Specific retention periods include:

• Account and identity data: retained for a minimum of five (5) years following account closure, in accordance with AML and gaming licence requirements;
• Transaction records: retained for a minimum of five (5) years following the date of the transaction;
• Customer support communications: retained for two (2) years from the date of the communication;
• Marketing preferences: retained until you withdraw consent or request deletion.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jp99a's data destruction procedures.

1. Right of Access: Request a copy of the personal data jp99a holds about you;
2. Right to Rectification: Request correction of inaccurate or incomplete personal data;
3. Right to Erasure: Request deletion of your personal data, subject to legal retention requirements;
4. Right to Restrict Processing: Request that jp99a limits processing of your data in certain circumstances;
5. Right to Data Portability: Request your personal data in a structured, commonly used format where processing is based on consent or contractual necessity;
6. Right to Object: Object to processing based on legitimate interests, including for direct marketing purposes;
7. Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Requests are responded to within thirty (30) days. jp99a reserves the right to verify your identity before processing a data rights request to prevent unauthorised disclosure.

jp99a implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

1. 256-bit SSL/TLS encryption of all data in transit between your device and jp99a servers;
2. Encryption of sensitive data fields (including passwords and financial data) at rest;
3. Role-based access controls limiting staff access to personal data on a need-to-know basis;
4. Regular security assessments and penetration testing of the jp99a platform;
5. Incident response procedures including member notification obligations in the event of a data breach affecting your rights and interests.

Notwithstanding these measures, no transmission of data over the internet is entirely secure. jp99a cannot guarantee absolute security but is committed to maintaining best-practice standards. You are responsible for maintaining the security of your jp99a account credentials in accordance with the account security requirements set out in the jp99a Terms & Conditions.

jp99a's servers and third-party service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, jp99a ensures that appropriate safeguards are in place — including contractual protections consistent with recognised international data protection standards — to provide a level of protection equivalent to that described in this Policy.

By using jp99a, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where jp99a's operational and service infrastructure requires it.

jp99a reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered members via email or in-platform notification prior to the effective date. The date of the most recent update is displayed at the top of this page.

Your continued use of jp99a Services following the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept a revised Policy, you must cease using jp99a and may request account closure.

For all data protection enquiries, rights requests, or complaints regarding jp99a's handling of your personal data, please contact the jp99a Data Protection team via the customer support live chat available 24/7 on the jp99a platform, or by email to the address listed in the jp99a platform footer.

jp99a will acknowledge your enquiry within 5 business days and provide a substantive response within 30 days. If you are unsatisfied with jp99a's response to a data protection complaint, you may refer the matter to the relevant data protection supervisory authority in the jurisdiction applicable to your circumstances.