1. Introduction and Scope of the Privacy Policy
This Privacy Policy is published by JOM99 and applies to all users who access or use our platform, whether through the official website at jom99.top, mobile app, or any other digital channel we operate. By registering as a member or continuing to use JOM99 services, you acknowledge that you have read, understood, and agreed to the terms outlined in this Privacy Policy.
This document aims to provide full transparency on how we handle your personal information — from the moment it is collected to when it is deleted from our systems. We believe that member trust is JOM99's most valuable asset, and one of the best ways to build that trust is to be honest and open about our privacy practices.
Note: This Privacy Policy should be read together with the Terms and Conditions and Responsible Gaming Policy jom99 for a comprehensive overview of your rights and responsibilities as a member.
2. Information We Collect
JOM99 only collects personal data that is genuinely necessary to provide quality, secure, and legally compliant services. In general, the information we collect can be divided into several main categories:
A) Registration and Identity Information
When you register a new account at jom99, we will request basic information such as your full name, date of birth, email address, mobile number and password. This information is required to create and manage your account securely.
B) Identity Verification Documents (KYC)
As part of the Know Your Customer (KYC) process, we may require copies of verification documents such as your national ID or passport, proof of current residential address, and proof of ownership of the payment method used. These documents are used solely for identity verification and anti-money laundering compliance purposes.
C) Financial and Transaction Information
Every transaction carried out on the jom99 platform — including deposits, withdrawals and wagering history — is recorded and retained to enable us to provide accurate account statements, resolve any disputes, and meet mandatory financial reporting obligations.
D) Technical and Usage Information
Automatically, the jom99 system also records certain technical information including your device's IP address, browser type, operating system, pages visited within the platform, session duration and navigation patterns. This data is used for security purposes, performance analysis and user experience improvement.
| Data Category | Example Information | Purpose of Collection |
|---|---|---|
| Identity | Name, date of birth, email, phone | Account management, KYC |
| Financial | Deposit history, withdrawals, payment methods | Transaction processing, auditing |
| Technical | IP address, device type, activity logs | Security, analytics, improvement |
| Communications | Support chat logs, emails, complaints | Customer service, complaint records |
| Cookies & Tracking | Session cookies, language preferences, analytics data | Personalised experience, site performance |
3. How We Use Your Data
Jom99 uses collected personal data for legitimate purposes directly related to the provision of our services. The following is a detailed description of how your data is used:
- Account Management and Verification: Enables you to log in, access your account, and verify your identity to ensure your account's security.
- Transaction Processing: Handles deposits, withdrawals, and all financial transactions on the platform quickly and accurately.
- Legal Compliance: Fulfils reporting obligations to relevant authorities, including anti-money laundering (AML) and Know Your Customer (KYC) requirements.
- Platform Security: Detects and prevents fraudulent activity, unauthorised account access, and any hacking attempts or system interference.
- Service Communications: Sends important notifications related to your account, transactions, changes to terms, and relevant security information.
- User Experience Enhancement: Analyses usage patterns to improve the design, performance, and features of the jom99 platform over time.
- Customer Support: Enables our support team to assist you more efficiently when you contact us through available channels.
- Marketing Communications (with consent): If you have provided your consent, we may send you information about promotions, offers and platform updates that may be of interest to you.
Important: jom99 will not use your personal data for any purpose other than those stated in this Privacy Policy without first obtaining your additional consent.
4. Legal Basis for Data Processing
Jom99 processes your personal data based on one or more lawful legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). These bases are as follows:
- Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered member, including the provision of gaming services and payment processing.
- Legal Compliance: Processing required under applicable Malaysian law, including KYC and AML requirements and reporting to competent authorities.
- Legitimate Interest: Processing we consider necessary for legitimate business interests, such as fraud detection, platform security and analytics for service improvement, provided these interests do not override your privacy rights.
- Consent: For certain activities such as direct marketing communications, we will obtain your explicit consent in advance. You are free to withdraw this consent at any time.
5. Data Sharing and Disclosure to Third Parties
JOM99 takes great care when sharing members' personal data with external parties. We do not sell or rent your data to any third party for marketing purposes. However, in certain limited circumstances, we may need to share data with the following parties:
- Payment Service Providers: Required transaction information is shared with providers such as DuitNow, FPX, and e-wallets to securely process your deposits and withdrawals.
- Technology and Infrastructure Providers: Third-party companies that provide cloud computing, cybersecurity and data hosting services which we use to operate the platform.
- Legal Authorities: When required by law, court order, or an official request from a law enforcement agency, we will disclose the necessary information.
- Auditors and Professional Consultants: Legal advisors, accountants and external auditors bound by strict confidentiality obligations in the performance of their duties.
All third parties we engage are required to comply with security and privacy standards equivalent to those we uphold at jom99. Formal data processing agreements are executed with all our service provider partners.
Warning: jom99 has never sold member personal data to advertisers or third-party marketing companies. If you receive unsolicited communications claiming to be from jom99, please report them to our support team immediately as they may be fraudulent attempts.
6. Use of Cookies and Tracking Technologies
The jom99 platform uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform operates at its best. There are several types of cookies we use:
- Essential Cookies: These cookies are required for basic platform functions such as login session authentication and security. They cannot be disabled without affecting platform functionality.
- Performance Cookies: Helps us understand how members use the platform, which pages are visited most frequently, and where users encounter issues — all of which helps us improve the user experience.
- Functional Cookies: Saves your preferences such as display language and interface settings so you do not need to reconfigure them each time you log in.
- Analytics Cookies: Used to collect aggregated data on platform usage patterns, helping us make data-driven decisions when planning service improvements.
You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the JOM99 platform.
7. International Data Transfers
In the course of its operations, JOM99 may store or process your personal data on servers located outside Malaysia. Any such data transfers will be carried out with adequate safeguards in place, including the use of standard data transfer agreements and ensuring that recipients maintain a level of privacy protection equivalent to or greater than what Malaysian law requires.
Jom99 takes this responsibility seriously and ensures that all cross-border data transfers comply with applicable legal requirements and are protected by robust contractual safeguards.
8. Data Retention Periods
Jom99 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by law. Our general data retention guidelines are as follows:
- Active Account Data: Retained for the duration your account remains active and for a reasonable period following account closure.
- Financial Transaction Records: Retained for at least seven (7) years in accordance with Malaysian accounting and financial law requirements.
- KYC Documents: Retained in accordance with applicable AML legal requirements, typically five (5) to seven (7) years after the business relationship ends.
- Technical and Security Logs: Retained for between 90 days and two (2) years depending on the type of log and security requirements.
- Support Communication Records: Retained for two (2) years to allow reference to customer service history.
When data is no longer needed and there is no legal requirement to retain it, JOM99 will delete or destroy that data in a secure and irreversible manner.
9. Your Rights as a Data Subject
Under the Personal Data Protection Act 2010 and related privacy legislation, you as a JOM99 member have certain rights regarding your personal data. We fully respect these rights and provide easy channels for you to exercise them.
Right to Access
You have the right to obtain a copy of the personal data we hold about you and information on how it is being used.
Right to Rectification
If your data is inaccurate or incomplete, you may request that we correct it within a reasonable timeframe.
Right to Erasure
In certain circumstances, you may request that we delete your personal data, subject to our legal obligations.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide any justification.
Right to Restriction of Processing
You may request that we restrict the processing of your data in certain situations, such as when the accuracy of the data is in dispute.
Right to Data Portability
You may request a copy of your data in a machine-readable format for transfer to another platform if needed.
To exercise any of the above rights, please contact the jom99 support team through our official channels. We will endeavour to process your request within 30 business days from the date of receipt.
10. Data Security and Protection Measures
The security of your personal data is a responsibility we take very seriously at jom99. We have implemented multiple layers of technical and organisational security controls to protect your information from unauthorised access, disclosure, alteration, or destruction:
- End-to-End Encryption: All data communications use the TLS/SSL 256-bit protocol, which represents the highest industry security standard.
- Strict Access Controls: Only JOM99 staff who genuinely require access to specific data are permitted to do so, based on the principle of least privilege.
- Continuous Monitoring: Security monitoring systems operate 24 hours a day, 7 days a week to detect any suspicious activity or cyber threats.
- Regular Security Testing: Penetration testing and security audits are conducted regularly by independent security experts to identify and address any vulnerabilities.
- Incident Response Plan: jom99 has rigorously tested incident response procedures in place to ensure any security breach is managed swiftly and effectively.
- Staff Training: All jom99 staff undergo regular information security and data privacy training as part of our organisation's security culture.
11. Minor Accounts and Protection of Vulnerable Groups
The jom99 platform is exclusively for individuals aged 21 and above. We do not knowingly collect or process personal data of anyone below the stipulated age limit. Should we discover that personal data of an underage individual has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question.
If you become aware that a minor or ineligible individual has registered an account at jom99, we encourage you to report it to our support team immediately so that appropriate action can be taken.
12. Changes to This Privacy Policy
JOM99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or to address feedback from members. The date of the most recent update will always be clearly displayed at the top of this document.
For amendments deemed material or significant, jom99 will endeavour to notify members via in-platform notifications or email. However, it remains your responsibility to review this page periodically. Continued use of the platform after any amendment is published constitutes acceptance of the updated terms.
13. How to Contact Us Regarding Privacy
If you have any questions, concerns or complaints regarding this Privacy Policy or how jom99 handles your personal data, please do not hesitate to contact our support team through the official channels available. You may also refer to our FAQ for answers to frequently asked questions regarding privacy and data security.
Our data protection team will endeavour to respond to every enquiry within a reasonable timeframe and provide clear, comprehensive information. We value all feedback that helps us improve our privacy practices for the benefit of all jom99 members.