jp99a Privacy Policy

1. Who We Are and How to Contact Us

jp99a is the operator of the online gaming platform accessible at jp99a.app, including all casino, slot, live dealer, and sportsbook services offered thereon ("the Platform"). In the context of this Privacy Policy, "jp99a", "we", "us", and "our" refer to the entity operating the Platform under its international online gaming licence.

jp99a acts as the data controller in respect of personal data collected from players and visitors to the Platform. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by jp99a, you may contact our Data Protection team by email at [email protected]. Please include "Privacy" in your subject line so that your enquiry is routed to the appropriate team.

jp99a is committed to handling your personal data with the care, transparency, and integrity expected of a licensed online gaming operator. We do not sell your personal data to third parties for their independent marketing purposes.

2. Personal Data We Collect

jp99a collects the following categories of personal data in connection with your use of the Platform:

2.1 Identity and Contact Data

• Full legal name, date of birth, and nationality.
• Government-issued identification document details (e.g., MyKad number, passport number) collected during Know Your Customer (KYC) verification.
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar), state, and postcode.
• Email address and mobile phone number registered to your jp99a account.

2.2 Financial Data

• Payment method identifiers, including e-wallet account references (Touch n Go eWallet, Boost, GrabPay), bank account details (Maybank, CIMB, Public Bank, Hong Leong Bank), and card information (last four digits and card type only — full card numbers are not stored by jp99a).
• Deposit history, withdrawal history, and transaction amounts in Malaysian Ringgit (MYR).
• Wallet balance information and bonus balance details.

2.3 Gaming and Usage Data

• Bet history, game session data, win and loss records, and wagering patterns across all jp99a products including slots, live casino, and sportsbook.
• Login timestamps, session durations, device information, IP address, and geolocation data (country and region level).
• Customer support interaction records, including live chat transcripts and email correspondence.
• Responsible gaming tool settings, including any deposit limits, loss limits, session time limits, or self-exclusion requests you have made.

2.4 Technical Data

• Browser type and version, operating system, device type, and screen resolution.
• Referring URL, pages visited within the Platform, and click-path data.
• Cookie identifiers and similar tracking technology data, as further described in Section 8.

3. How We Collect Your Data

jp99a collects personal data through the following channels:

• Direct collection: Information you provide when registering a jp99a account, completing KYC verification, making deposits or withdrawals, contacting customer support, or completing responsible gaming self-assessment tools.
• Automated collection: Technical and usage data collected automatically when you access and interact with the Platform, including through cookies, web beacons, and server log files.
• Third-party sources: Identity verification and fraud prevention agencies; payment service providers; and marketing attribution partners where applicable. jp99a only obtains data from third parties where a lawful basis exists for doing so.

4. Purposes and Legal Bases for Processing

jp99a processes your personal data for the following purposes, each supported by a corresponding legal basis:

• Account creation and service delivery — Processing is necessary for the performance of the contract between you and jp99a, including registering your account, processing transactions, and delivering gaming services.
• Identity verification and KYC compliance — Processing is necessary to comply with legal and regulatory obligations under jp99a's international gaming licence, including anti-money laundering (AML) and counter-terrorist financing (CTF) requirements.
• Fraud detection and platform security — Processing is necessary for the purposes of jp99a's legitimate interests in preventing fraud, protecting player accounts, and maintaining platform integrity.
• Responsible gaming monitoring — Processing is necessary to comply with jp99a's regulatory obligations regarding player protection, including age verification, self-exclusion enforcement, and problem gambling detection.
• Customer support — Processing is necessary for the performance of the contract and for jp99a's legitimate interests in providing effective player assistance.
• Marketing communications — Where you have provided explicit consent, jp99a may use your contact details to send you promotional offers, bonus notifications, and platform updates. You may withdraw this consent at any time by contacting support or adjusting your account notification preferences.
• Legal compliance and dispute resolution — Processing is necessary to comply with applicable laws, regulatory requirements, and to establish, exercise, or defend legal claims.

5. Sharing of Personal Data

jp99a does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Service providers and processors: Third parties who provide operational services to jp99a under contractual data processing agreements, including payment processors, identity verification providers, fraud prevention services, IT infrastructure providers, and customer support platform vendors. These parties are contractually obligated to process your data only on jp99a's instructions and to maintain appropriate security standards.
• Game software providers: Where gameplay data is transmitted to third-party game providers (e.g., JILI, PG Soft, Pragmatic Play, SA Gaming) for the purpose of delivering and logging game sessions, this is done under data processing agreements consistent with this Policy.
• Regulatory and licensing authorities: jp99a may be required to disclose player data to its licensing authority, financial intelligence units, or law enforcement agencies in response to lawful requests or as required under AML/CTF obligations.
• Business restructuring: In the event of a merger, acquisition, or sale of assets, player data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

6. International Data Transfers

jp99a operates internationally and may transfer your personal data to countries outside Malaysia in connection with the services described in this Policy. Where such transfers occur, jp99a implements appropriate safeguards to ensure that your data receives a level of protection consistent with applicable data protection standards, including contractual clauses, adequacy decisions, or other recognised transfer mechanisms.

For specific information about the international transfers applicable to your data, please contact our Data Protection team at [email protected].

7. Data Retention

jp99a retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention considerations:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in accordance with jp99a's AML compliance obligations and licensing requirements.
• KYC documentation is retained for the period required under applicable AML/CTF regulations, typically five years from the date the business relationship ends.
• Marketing consent records are retained for the duration of your marketing consent and for a reasonable period thereafter to evidence compliance with consent obligations.
• Technical and usage logs are retained for up to twenty-four (24) months for fraud detection, security, and platform improvement purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jp99a's data disposal procedures.

8. Cookies and Tracking Technologies

jp99a uses cookies and similar tracking technologies on the Platform to provide a functioning, personalised, and secure user experience. The categories of cookies used include:

• Strictly necessary cookies: Essential for basic Platform functionality, including session management, login authentication, and security features. These cannot be disabled without affecting core Platform operation.
• Performance and analytics cookies: Used to collect aggregated information about how players interact with the Platform, enabling jp99a to measure performance and improve the user experience.
• Functional cookies: Used to remember your preferences (such as language settings and responsible gaming limits) across sessions.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content and to measure the effectiveness of jp99a's marketing campaigns.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect Platform functionality. Your continued use of the Platform following acknowledgement of our cookie notice constitutes acceptance of our use of strictly necessary cookies.

9. Your Data Rights

Subject to applicable data protection law and the conditions under which those rights apply, you have the following rights in respect of your personal data held by jp99a:

• Right of access: You may request a copy of the personal data jp99a holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to jp99a's legal retention obligations.
• Right to restriction: You may request that jp99a restrict the processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of data you have provided.
• Right to object: You may object to processing based on jp99a's legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact jp99a's Data Protection team at [email protected] with the subject line "Data Rights Request". jp99a will respond to verified requests within the timeframe required under applicable law.

10. Security of Your Personal Data

jp99a implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, access controls restricting data access to authorised personnel on a need-to-know basis, regular security assessments and penetration testing, and incident response procedures for managing any suspected data breaches.

While jp99a employs industry-standard security practices, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jp99a will notify you and the relevant supervisory authority as required by applicable law.

11. Children and Minors

The jp99a platform is strictly intended for individuals aged 21 years and above. jp99a does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the KYC process before real-money gaming activity is permitted. If jp99a becomes aware that personal data has been collected from a minor, that data will be deleted promptly and the associated account suspended. Parents and guardians who believe that a minor may have registered on the jp99a platform are encouraged to contact [email protected] immediately.

12. Changes to This Privacy Policy

jp99a reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform functionality. Material updates will be communicated to registered players via the email address associated with their jp99a account and will be posted on the Platform with the updated effective date. We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of changes constitutes acceptance of those changes.