Privacy Policy JP999 — Personal Data Protection for Malaysian Players

1 Introduction

JP999 ("we", "platform", "company") operates the website jp999.my and all related services. We recognise that privacy is a fundamental right of every individual, and we take this responsibility seriously. This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, and protection of your personal data.

This JP999 Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to ensuring that every Malaysian player on the JP999 platform — whether playing Baccarat, Roulette, Malaysia Super League Sports Betting, E-Sports, or any other game — can do so with full confidence that their personal data is always in safe hands.

If you have any questions about this Privacy Policy or how JP999 handles your data, please contact us at support@jp999.my. We are happy to address any queries you may have.

2 Types of Personal Data We Collect

JP999 only collects personal data that is necessary to provide platform services to you. The categories of data we collect are as follows:

JP999 does not collect sensitive data such as medical information, religious beliefs, or political opinions. We also do not knowingly collect data from individuals under 18 years of age.

3 How We Collect Your Personal Data

JP999 collects your personal data through a number of legitimate channels. Here are the main ways we obtain your information:

• Account registration — information you fill in during the JP999 registration form, including your name, phone number, and email.
• Identity verification (KYC) — documents such as your MyKad and bank statements submitted for verification purposes.
• Financial transactions — details related to deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, as well as withdrawal of winnings.
• Platform usage — data generated automatically when you use the JP999 platform, including activity logs, game history, and device technical data.
• Customer support interactions — communication records when you contact the JP999 support team via live chat or email.
• Cookies and tracking technologies — information collected automatically via browser cookies while you browse the JP999 platform.

4 Purposes for Using Your Personal Data

JP999 uses collected personal data solely for legitimate and necessary purposes. We will not use your data for any other purpose without obtaining your additional consent. The purposes for which we use your data are as follows:

• Account management — to create, verify, and manage your JP999 account.
• Transaction processing — to process deposits and withdrawals via supported Malaysian payment methods.
• Identity verification — complying with KYC requirements and anti-money laundering (AML) obligations.
• Platform security — to detect and prevent fraud, unauthorised access, and suspicious activity.
• Service provision — ensuring a seamless gaming experience across all JP999 products, including live casino, slots, and sports betting.
• Service communications — to send important notifications relating to your account, transactions, and security.
• Platform improvements — analysing usage data to improve the features and performance of the JP999 platform.
• Legal compliance — to comply with applicable legal and regulatory requirements in Malaysia.

Should JP999 wish to use your data for direct marketing purposes, we will obtain your explicit consent beforehand. You may withdraw your marketing consent at any time by contacting our support team.

5 Sharing Data with Third Parties

JP999 does not sell, rent, or trade your personal data to third parties. However, there are limited circumstances in which we may need to share your data with certain parties:

• Payment service providers — payment processors that assist us in handling transactions via Touch 'n Go, GrabPay, DuitNow, FPX, and other methods. They receive only the minimum data necessary for transaction processing purposes.
• Technology service providers — companies that provide JP999 with technical infrastructure, server hosting, and cybersecurity services. All such parties are bound by strict confidentiality agreements.
• Regulatory authorities — Malaysian government agencies or law enforcement bodies where required by law or court order.
• Auditors and legal advisors — professionals involved in internal audits or legal advisory, subject to professional confidentiality obligations.

6 JP999 Data Security Measures

JP999 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse:

• Data encryption in transit — 256-bit TLS/SSL protocol secures all communication between your device and JP999 servers.
• Data encryption at rest — sensitive data is stored in encrypted format using the latest industry standards.
• Strict access controls — only authorised JP999 staff with a legitimate business need are permitted to access user data.
• 24/7 security monitoring — continuous monitoring systems to detect suspicious activity or intrusion attempts.
• Regular security audits — JP999 conducts regular penetration testing and security audits by independent third parties.
• Two-factor authentication (2FA) — an additional security layer available to protect your account from unauthorised access.

While JP999 employs robust security measures, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe — avoid sharing your password and always log out after using the platform on a public device.

7 Data Retention Period

JP999 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. In general:

• Active account data — retained for the duration your account is active and for 7 years after account closure for legal compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian financial regulations.
• Technical log data — retained for no more than 12 months unless required for security investigations.
• Customer support communication records — retained for 3 years for reference and service improvement purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you. You may request early deletion subject to any legal requirements that may prevent such a request.

8 Your Rights Regarding Personal Data

As a JP999 player in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010:

To submit any request related to the rights above, please contact the JP999 customer support team at support@jp999.my. We will process your request within 14 business days. Some requests may require identity verification beforehand.

9 Cookies & Tracking Technologies

The JP999 platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. Cookies are small text files stored on your device when you browse a website.

• Essential Cookies — required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies — helps us understand how players use the platform for improvement purposes. Data is collected anonymously.
• Functional Cookies — to remember your preferences such as language and settings, providing a more personalised experience.
• Analytics Cookies — used to analyse platform traffic and usage patterns to help us make better-informed improvement decisions.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the JP999 platform. For more information on managing cookies, please refer to your web browser's help guide.

10 Links to Third-Party Sites

The JP999 platform may from time to time contain links to third-party websites or services for informational purposes. This JP999 Privacy Policy does not apply to those third-party websites. JP999 is not responsible for the privacy practices or content of external sites.

11 Changes to This Privacy Policy

JP999 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational reasons. Any material changes to this Privacy Policy will be communicated to you through:

• A clear notice displayed on the JP999 platform homepage.
• Notification emails sent to the email address registered on your account.
• The "Last Updated" date at the top of this page will be updated to reflect the date of the latest changes.

We encourage you to review this Privacy Policy periodically. Continued use of the JP999 platform following any changes to the Privacy Policy will be considered acceptance of the updated terms.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding JP999's Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

• Privacy Email: support@jp999.my
• Live Chat: Available 24/7 via the chat icon on the JP999 platform.
• Response Time: Under 2 minutes for live chat; within 24 hours for email.

For more information about your rights under the Personal Data Protection Act 2010, you may visit the official website of the Department of Personal Data Protection Malaysia. If you are dissatisfied with JP999's response to your privacy complaint, you have the right to file a formal complaint with the Personal Data Protection Commissioner of Malaysia.