JOM99 Privacy Policy – Our Commitment to Protecting Your Personal Data

This Privacy Policy ("Policy") describes how jom99 ("we", "Platform" or "jom99") collects, uses, stores, discloses and protects your personal information when you use the jom99.world website and all services provided under it.

Jom99 is committed to protecting the privacy of all members and users in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable industry best practices. We believe that transparency about how we handle your data is the foundation of the trust you place in the jom99 platform.

By registering a jom99 account or using any part of our platform, you confirm that you have read and understood this Privacy Policy and agree to the data processing practices described herein. This Policy should be read together with the Terms & Conditions jom99, which constitutes the entire agreement between you and our platform.

Jom99 collects two main categories of data: information you provide directly, and information collected automatically as you use the platform.

Data you provide directly:

• Registration information: Malaysian phone number, password (stored in encrypted form and unreadable by our staff).
• Identity verification information: Full name, MyKad or passport number, date of birth — requested for account verification or large withdrawals.
• Financial information: Bank account numbers or eWallet details you register for deposits and withdrawals via FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow.
• Communications: Your conversation records with the jom99 support team via Live Chat or email.

Automatically collected data:

• Platform usage data: Betting records, game history, deposit and withdrawal records, login and logout timestamps.
• Technical data: IP address, device type, operating system, browser type, screen resolution, and connection performance data.
• Cookies data: Session information, language preferences, and analytics data that help us understand how users interact with the jom99 platform.

Jom99 uses collected personal data solely for legitimate, clearly stated purposes. Below is a summary of how your data is used and the legal basis for each use:

Jom99 will not use your personal data for any purpose beyond those stated above without first obtaining your consent. Whenever we wish to use your data for a new purpose that differs from the original, we will notify you and seek the necessary consent.

Jom99 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, there are limited circumstances in which jom99 needs to share data with certain parties for legitimate operational reasons:

• Payment service providers: Financial institutions and eWallet providers that process your deposits and withdrawals — including FPX banks, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and DuitNow. This sharing is strictly limited to the information necessary to process transactions.
• Game providers: Companies such as Evolution Gaming, Pragmatic Play, SA Gaming, and other providers that supply live casino and slots games need to receive limited session data in order for gameplay to function. These providers are bound by strict data protection agreements with jom99.
• Legal authorities: jom99 fully complies with court orders, warrants, and lawful requests from Malaysian authorities such as Bank Negara Malaysia, PDRM, or other relevant enforcement bodies. Data is disclosed only to the extent required by law.
• Fraud prevention: Where necessary to investigate and prevent fraud, money laundering or other unlawful activities, jom99 may share data with relevant parties in accordance with Malaysian law.

All third parties that receive data from jom99 are required to uphold data protection standards no less stringent than our own, and to use that data only for the purposes specified in their agreement with jom99.

Protecting your personal data from unauthorised access, loss, misuse or alteration is an absolute priority for jom99. We implement multiple layers of technical and organisational security to ensure your data remains safe at all times:

• Data encryption in transit: All communications between your browser and jom99's servers are secured with TLS 1.3 / SSL 256-bit encryption.
• Data encryption at rest: Sensitive data stored in jom99's databases is encrypted using industry-recognised encryption algorithms.
• Access controls: Only jom99 staff who require access to specific data in order to carry out their duties are permitted to access that data — the principle of least privilege is strictly enforced.
• Two-factor authentication (2FA): jom99's internal systems require 2FA for all administrative access. jom99 members are also encouraged to enable 2FA on their accounts.
• Regular security audits: jom99 conducts regular security assessments and penetration testing to identify and address any vulnerabilities.
• Incident response plan: jom99 has clear procedures in place to detect, assess, and respond promptly to any data breach, including notifying affected parties and the relevant authorities where required.

Jom99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the jom99 website. We use the following types of cookies:

• Essential Cookies (Required): These cookies are required for the jom99 platform to function properly. Without them, core features such as login, session management, and security functions will not work. These cookies cannot be disabled.
• Functional Cookies: Storing your preferences such as language settings, display preferences, and login information (if you select "Remember Me") for ease of use.
• Analytics Cookies: Helps us understand how users interact with the jom99 platform — which pages are visited most, how long sessions last, and where users encounter issues. This information is used in aggregated form without identifying any individual user.
• Security Cookies: Helps detect suspicious activity such as repeated login attempts or access from unusual locations, to keep your account protected.

You can manage your cookie settings through your web browser. Most modern browsers such as Chrome, Firefox, Edge, and Safari allow you to view, delete, and block cookies. However, disabling essential cookies may affect the functionality of the jom99 platform.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by jom99. All rights requests may be submitted by email to support@jom99.world, stating your account name and the details of your request:

• Right to Access: You have the right to know what personal data jom99 holds about you and to request a copy of that data. jom99 will respond to access requests within 21 business days.
• Right to Rectification: If personal data held by jom99 is inaccurate, incomplete or outdated, you have the right to request a correction. You may also update basic information such as your phone number directly through your account settings.
• Right to Restrict Processing: Under certain circumstances, you have the right to request that jom99 stop processing your personal data — for example, for direct marketing purposes. Such requests will be actioned immediately for marketing-related processing.
• Right to Erasure: You may request that jom99 delete your personal data. However, this right is not absolute — jom99 may need to retain certain data to comply with legal obligations, such as AML records required under Malaysian law.
• Data Portability Right: You have the right to receive your personal data in a commonly used, machine-readable format and to transfer it to another service provider where applicable.

Jom99 does not store your personal data indefinitely. We have a clear data retention policy based on operational needs and legal obligations:

• Active account data: Retained for the duration your jom99 account is active, plus any additional period required for audit and compliance purposes.
• Financial transaction records: Deposit, withdrawal, and betting records are retained for a minimum of 7 years in line with Malaysia's tax and AML legal requirements.
• Support communication logs: Customer support conversation records are retained for 2 years from the date of the last interaction, for reference and dispute resolution purposes.
• Cookies and analytics data: Session data is automatically cleared once a session ends. Aggregated analytics data may be retained longer, but only in anonymised form that cannot be linked to any individual.
• Closed account data: After account closure, personal data will be deleted or anonymised within 90 days, unless a longer retention period is required by law.

Once the applicable retention period has expired, data will be securely deleted using industry-recognised methods that ensure the data cannot be recovered.

The jom99 platform is strictly for individuals aged 18 and above. jom99 does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has registered a jom99 account or provided us with their personal data, please contact us immediately at support@jom99.world.

When jom99 discovers or is notified that personal data has been collected from a minor, we will:

• Suspending and closing the relevant account immediately.
• Delete all related personal data as promptly as possible.
• Returning any relevant balance to the original payment source where identifiable.

Jom99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or technological developments. When we make material changes to this Policy, we will:

• Updating the "Last Updated" date displayed at the top of this page.
• Displaying clear notifications within the jom99 platform to inform members of important changes.
• For significant amendments that affect how your data is used, we will send a notification directly to your registered phone number.

We encourage you to review this Privacy Policy periodically. Your continued use of the jom99 platform after any amendments are published constitutes your acceptance of the latest version of this Privacy Policy.

If you have any questions, concerns, or complaints regarding how jom99 handles your personal data, or if you wish to exercise any of the privacy rights set out in this Policy, please contact us via:

• Privacy Email: support@jom99.world – Please include "Privacy Enquiry" in the subject line of your email.
• Live Chat: Available 24/7 within the jom99 platform for general privacy and account-related queries.

The jom99 privacy team is committed to responding to all privacy-related enquiries within 3 to 7 business days. For formal requests under the PDPA, the maximum response time is 21 business days, in line with legal requirements.

If you are not satisfied with jom99's response to your privacy complaint, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia, established under the PDPA 2010.