Privacy Policy jom9 – Personal Data Protection for Malaysian Members

1Introduction and Scope of This Privacy Policy

This Privacy Policy is issued by jom9, the operator of an online betting and entertainment platform accessible at jom9.click. This document outlines our practices regarding the personal data of members and prospective members of our platform in Malaysia.

We take your privacy seriously. This policy is designed to provide full transparency about what information we collect, why we need it, how we use it and what rights you have over that data. This is not a document written merely to fulfil a regulatory requirement — it reflects how we actually operate and think about our users' data.

This Privacy Policy applies to all your interactions with jom9, including account registration, use of Live Casino services, slots, Sports Betting on Malaysia Super League and EPL football, badminton, lottery, poker, as well as any communications with our customer support team. It also applies to visits to our website even if you have not yet registered as a member.

By registering an account with jom9 or continuing to use the platform after reading this policy, you confirm your consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

2Types of Personal Data We Collect

Jom9 only collects personal information that is strictly necessary to provide the platform's services safely and effectively. We do not collect data beyond what legitimate operations require. The following are the categories of data we collect:

Jom9 does not directly collect or store credit or debit card information. All payment transactions are processed through approved and certified payment providers, and card details are handled by them in strict accordance with PCI-DSS security standards.

3How jom9 Uses Your Personal Data

Jom9 uses collected personal data solely for legitimate, necessary purposes that are directly related to delivering platform services. We do not use your data for any other purpose without your prior consent.

The main purposes for which jom9 uses your personal data are as follows:

• Account Management: Creating, verifying, and managing your member account, including processing registration, identity verification (KYC), and password resets.
• Service Provision: Enables you to access and use all jom9 services including Live Casino, Sports Betting, lottery, badminton, Poker and slots.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawal of winnings to your bank account or digital wallet.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account abuse and suspicious behaviour through continuous automated monitoring.
• Legal Compliance: Meeting legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification and reporting to relevant authorities.
• Service Communication: Sending you important notifications regarding your account, transactions, policy updates, and security information via email or SMS.
• Platform Improvements: Analysing usage data in aggregate and anonymised form to understand how members use the platform and make relevant improvements.
• Customer Support: Processing enquiries, complaints and support requests you submit to the jom9 customer service team.

4Data Sharing with Third Parties

Jom9 does not sell, rent or disclose members' personal data to third parties for marketing or commercial purposes without your explicit consent. However, in the course of running the platform's legitimate operations, there are limited situations where sharing data with certain parties is necessary:

1. Payment Service Provider: Required transaction information is shared with approved payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX-supporting banks solely for the purpose of processing your deposits and withdrawals.
2. Game Software Provider: Minimum technical data required to operate games may be shared with approved game platform providers that have strict contractual confidentiality obligations with jom9.
3. Regulatory Authority: jom9 is legally required to disclose certain information to regulatory bodies, tax authorities or law enforcement agencies where there is a valid legal directive or obligation to do so.
4. Technical Support Service Provider: IT infrastructure and cloud service providers that help operate the platform may have limited access to data in the course of carrying out their technical functions, and are bound by strict confidentiality agreements.
5. Independent Fraud Investigator: In cases of suspected serious fraud, jom9 may engage independent digital forensics firms, who are also bound by contractual confidentiality obligations.

In all of the data-sharing situations described above, jom9 shares only the minimum information necessary for the specific purpose in question. All our third-party service partners are required to meet data protection standards equivalent to or exceeding those we uphold ourselves.

5jom9 Data Security Measures

Protecting members' personal data from unauthorised access, loss, misuse or disclosure is one of jom9's most critical operational priorities. We implement multiple layers of technical and procedural security to this end.

The key technical security measures we employ are as follows:

• 256-bit SSL/TLS Encryption: All communication between your device and jom9's servers is fully encrypted, making data unreadable to unauthorised parties even if they manage to intercept the communication channel.
• Stored Data Encryption: Sensitive data stored in our databases, including bank account numbers and payment information, is encrypted using AES-256 standards.
• Layered Access Controls: Access to jom9's internal systems and member data is strictly controlled under a "minimum necessary access" principle — staff may only access data required to carry out their specific duties.
• Two-Factor Authentication (2FA): All member accounts support 2FA as an additional security layer. We encourage all members to enable this feature in their account settings.
• 24/7 Automated Monitoring: An automated security monitoring system operates around the clock to detect unusual activity, suspicious login attempts, and potential security threats.
• Independent Third-Party Audit: Our security infrastructure undergoes regular audits by independent cybersecurity firms to ensure our security standards remain current against evolving threats.

6Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and jom9's voluntary commitment to best-practice privacy standards, you have the following rights regarding your personal data held by jom9:

To exercise any of the rights above, please contact the jom9 privacy team by email at support@jom9.click, clearly stating your request and providing sufficient identifying information so we can verify your identity before processing the request. jom9 does not charge any fee for reasonable data rights requests.

7Cookies and Tracking Technologies

Jom9 uses cookies and similar technologies to enhance the user experience, ensure platform security, and understand how the platform is used. Cookies are small text files stored on your device when you visit our website.

Below are the types of cookies we use and their purposes:

You can manage cookie usage through your browser settings. Please note, however, that disabling essential cookies may affect key functions of the jom9 platform, including the ability to log in to your account. Analytics cookies are optional and do not affect core platform functionality if you choose to disable them.

8Data Retention Period

Jom9 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or to comply with applicable legal and regulatory obligations.

The general guidelines for data retention periods at jom9 are as follows:

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure to meet Malaysian legal and tax compliance requirements.
• Financial Transaction Records: All deposit, withdrawal and betting transaction records are retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Communication Records (Live Chat, Email): Retained for 2 years for complaint resolution, training and service quality assurance purposes.
• Security Log Data: Security activity logs and fraud detection records are retained for 5 years for investigation purposes if required.
• Analytics Cookie Data: Deleted in accordance with the retention periods stated in the cookie table above, generally not exceeding 6 months.

9Links to Third-Party Services

The jom9 platform may contain links or integrations with third-party services necessary for its operation, such as payment providers Touch 'n Go, GrabPay and Malaysian banks supporting FPX. When you use these third-party services, their own separate privacy policies apply, independent of jom9's Privacy Policy.

Jom9 is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policy of each third-party service provider you use when transacting with jom9. This includes:

• Touch 'n Go eWallet operator's privacy policy relating to your payment processing
• The privacy policies of GrabPay, Boost and ShopeePay as the digital wallets you use
• Your bank's privacy policy (Maybank, CIMB, Public Bank and others) relating to FPX transactions
• Privacy policies of third-party game providers that may have their own interfaces

Jom9 only works with third-party providers that meet high standards of data security and privacy, and we ensure our contracts with them include adequate data protection clauses to safeguard our members' interests.

10Child Protection

The jom9 platform is an adult service intended exclusively for individuals aged 18 and above. jom9 does not knowingly collect, process, or store the personal data of individuals under the age of 18.

We implement age verification procedures during registration to prevent minors from accessing the platform. If we become aware that personal data belonging to an individual under 18 has been collected inadvertently, we will immediately take the following steps:

• Suspending the relevant account immediately while an investigation is carried out.
• Permanently deleting all associated personal data from our systems.
• Returning any remaining account balance via the original payment channel where applicable.
• Reporting the incident to the relevant authorities where required.

11Amendments to This Privacy Policy

Jom9 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements or platform improvements. All changes take effect upon publication on jom9.click, with a clear updated date indicated.

For material amendments — that is, changes that significantly affect how we use or share your personal data — jom9 will endeavour to provide members with at least 7 days' notice before the amendment takes effect, via:

• Email notifications to your registered email address
• A prominent notice in your account upon your next login
• Announcement on the jom9.click homepage

Your continued use of the jom9 platform after the effective date of any Privacy Policy amendment constitutes your acceptance of those changes. We encourage you to review this page periodically. The date of the most recent update is always displayed at the top of this document for your reference.

12Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or the way jom9 handles your personal data, we encourage you to contact us directly. Our privacy team is ready to assist and will respond within a reasonable timeframe.

You can reach us through the following channels:

• Email: support@jom9.click (email subject: "Privacy Policy Enquiry")
• Live Chat: Available 24/7 within the jom9 platform after logging in
• Target Response Time: 24 hours for general enquiries; 72 hours for data rights requests requiring processing

For formal data rights requests (access, correction, deletion, etc.), please provide sufficient identifying information so we can securely verify your identity before processing the request. This is a protective measure to ensure no unauthorised third party can access or modify your data on your behalf.