Privacy Policy

This Privacy Policy ("Policy") describes how jom99 ("jom99", "we", "us", "our"), the operator of the website accessible at jom99.cam (the "Platform"), collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("Players", "Users", "you") who register for or access the Platform.

jom99 is committed to protecting the privacy and personal data of all individuals who interact with our Platform, including players based in Malaysia across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We process personal data in accordance with applicable data protection legislation, including the principles governing the collection and use of personal data under internationally recognised data protection frameworks.

By registering an Account on jom99, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data in the manner described herein. If you do not agree with the terms of this Policy, please do not register or continue to use the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, jom99.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of jom99 under a binding data processing agreement.
• "KYC" means Know Your Customer — the regulatory process by which jom99 verifies the identity, age, and source of funds of Players.
• "Cookies" means small text files placed on your device by our Platform to store session data, preferences, and analytics information.
• "Account" means the registered Player profile on the jom99 Platform.
• "Sensitive Personal Data" means personal data that warrants heightened protection, including identity document data, financial account details, and source-of-funds documentation.

The Data Controller responsible for your Personal Data in connection with your use of the jom99 Platform is the legal entity operating jom99 under its international online gambling licence. jom99 operates under an international licensing framework (such as the Curaçao regulatory model), which requires compliance with data protection standards applicable to internationally licensed online gambling operators.

jom99 does not claim to be regulated by any Malaysian government authority in respect of data protection. Malaysian players are encouraged to be aware of their rights and obligations under applicable Malaysian legislation, including the Personal Data Protection Act 2010 (PDPA), to the extent that it applies to their interaction with internationally licensed online platforms.

jom99 collects Personal Data from Players across the following categories, depending on the stage of the player relationship:

4.1 Registration Data

When you create an Account, we collect: full legal name, date of birth, nationality, residential address (including city, state, postcode, and country), email address, and contact telephone number. This data is required to establish and maintain your Account.

4.2 KYC & Verification Data

In fulfilment of our compliance obligations, we collect and process identity verification documents, which may include:

• Malaysian National Identity Card (MyKad), passport, or driving licence image.
• Recent proof of residential address (e.g., utility bill, bank statement issued within 90 days).
• Payment method ownership documentation (e.g., a bank statement showing name and account number consistent with the deposit source for methods such as Maybank, CIMB, or Public Bank).
• Source of funds documentation where applicable regulatory thresholds are reached.

4.3 Financial Transaction Data

We collect records of all deposits, withdrawals, and wagers made on the Platform, including payment method details (e.g., partial payment card numbers, e-wallet account identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX transactions), transaction amounts in MYR, and timestamps.

4.4 Technical & Usage Data

We automatically collect certain technical data when you access the Platform, including: IP address, browser type and version, operating system, device identifiers, session duration, pages visited, game history, and click-stream data.

4.5 Communications Data

We retain records of your communications with our support team via live chat and email, including the content of those communications and any attachments provided.

jom99 processes Personal Data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered Player, including Account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable regulatory requirements, including KYC/AML verification obligations under our international operating licence.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, such as the use of non-essential cookies or the sending of optional promotional communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

jom99 uses your Personal Data for the following purposes:

• Account creation and management: To register your Account, verify your eligibility, maintain your profile, and provide access to Platform features.
• Identity and age verification (KYC): To confirm that you are at least 21 years of age and to satisfy our compliance obligations under our international operating licence. For players aged 21 and above only.
• Transaction processing: To process deposits made via Malaysian payment methods (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major bank transfers via Maybank, CIMB, Public Bank, and Hong Leong) and to facilitate withdrawals in MYR.
• Customer support: To respond to enquiries, resolve disputes, and provide multilingual assistance in English, Bahasa Melayu, and Chinese.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, collusion, money laundering, and other prohibited conduct on the Platform.
• Responsible gambling: To monitor for indicators of problem gambling behaviour, enforce self-exclusion requests, and administer deposit and loss limits set by Players.
• Platform improvement: To analyse usage data and feedback for the purpose of improving Platform features, user experience, and game content.
• Legal compliance: To fulfil our obligations under applicable law and to respond to lawful requests from competent authorities.
• Promotional communications: To send you relevant promotional offers, VIP programme updates, and platform news — only where you have not opted out of such communications.

jom99 does not sell, rent, or trade your Personal Data to third parties for their own independent commercial purposes. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality or data processing obligations:

• KYC and identity verification providers: Third-party identity verification services that assist us in fulfilling our KYC and AML obligations. These providers process identity document data solely for verification purposes.
• Payment processing partners: Payment gateways and financial institutions that process your MYR deposits and withdrawals, including connections to Malaysian e-wallet providers and banking systems via DuitNow, FPX, and associated channels.
• Game content providers: Licensed international game studios that supply game content to the Platform. These partners may receive anonymised session and wager data for game performance and audit purposes.
• IT and hosting service providers: Cloud infrastructure and data hosting providers that store and process Platform data under binding data processing agreements.
• Professional advisors: Legal, audit, and compliance advisors who may access Personal Data to the extent necessary to provide their professional services to jom99.
• Regulatory and law enforcement authorities: Where required by applicable law or a lawful order from a competent authority, jom99 may disclose Personal Data to regulatory bodies, law enforcement agencies, or other governmental authorities. jom99 will seek to notify affected Players of such disclosures where legally permitted to do so.

jom99 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The categories of cookies we use are as follows:

jom99 does not use third-party advertising cookies, behavioural tracking cookies, or any cookies that track your activity across websites other than jom99.cam. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from accessing your Account.

jom99 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to applicable regulatory retention obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, it may be retained in aggregated form for statistical or research purposes.

jom99 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our Platform.
• Encryption at rest for all sensitive Personal Data and Sensitive Personal Data stored on our systems.
• Access controls: Role-based access control (RBAC) ensuring that only authorised personnel with a defined need can access specific categories of Personal Data.
• Two-Factor Authentication (2FA) available to all registered Players as an additional layer of Account security.
• Regular security audits and penetration testing conducted by independent security professionals.
• Incident response procedures designed to detect, contain, and respond to data security incidents in a timely manner.

While jom99 takes data security extremely seriously, no system is entirely immune to risk. In the unlikely event of a data breach that is likely to result in a high risk to your rights and freedoms, jom99 will notify affected Players in accordance with applicable regulatory obligations.

Subject to applicable data protection law and certain conditions, you hold the following rights in respect of your Personal Data processed by jom99:

• Right of Access: You have the right to request a copy of the Personal Data jom99 holds about you, together with information about how it is being used.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete Personal Data. For registration data, you may also update certain information directly via your Account profile settings.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations that require us to retain certain data (e.g., KYC and financial records under AML regulations).
• Right to Restriction of Processing: You may request that jom99 restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
• Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to have it transmitted to another controller, where technically feasible.
• Right to Object: You may object to the processing of your Personal Data where jom99 relies on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where jom99 processes your Personal Data on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

As jom99 operates under an international licensing framework, your Personal Data may be transferred to, stored in, or processed by systems located in countries other than Malaysia. These countries may have data protection laws that differ from those applicable in Malaysia.

Where such international transfers occur, jom99 takes reasonable steps to ensure that your Personal Data is afforded a level of protection commensurate with the standards described in this Policy. This may include the use of standard contractual clauses, binding corporate rules, or other legally recognised safeguard mechanisms with third-party recipients.

By registering an Account on jom99 and accepting this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia for the purposes described in this Policy.

The jom99 Platform is strictly intended for use by individuals who are 21 years of age or above. jom99 does not knowingly collect, store, or process Personal Data from individuals under the age of 21.

In the event that jom99 becomes aware that Personal Data has been submitted by an individual under the minimum age, we will take immediate steps to delete such data and close the associated Account. Any balances associated with an underage Account may be withheld pending investigation.

jom99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform features. Where amendments are material, we will notify registered Players by email or by displaying a prominent notice on the Platform.

The "Last Updated" date displayed at the top of this Policy will be revised each time a material amendment is made. We encourage you to review this Policy periodically to remain informed of how we handle your Personal Data. Your continued use of the Platform following the publication of any amended Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise any of your rights described in Section 11, please contact the jom99 Data Protection team through the following channels:

• Email: [email protected] — Subject line: "Privacy Policy Query" or "Data Rights Request" (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the live chat feature on the Platform. Average response time via live chat: 3–5 minutes.
• Languages Supported: English, Bahasa Melayu, and Chinese.

We are committed to addressing all privacy-related queries promptly and transparently. Where a query relates to a formal data rights request, we will acknowledge receipt within 5 business days and provide a substantive response within 30 days.

For additional information on your rights as a Player, including responsible gambling controls such as deposit limits and self-exclusion, please visit our Responsible Gambling page or our FAQ page.