Jom 99 Privacy Policy — Our Commitment to Protecting the Personal Data of Malaysian Members

1Personal Data We Collect from jom 99 Members

To provide a complete, secure, and responsible betting platform experience, jom 99 collect various types of personal data from our members. Below are full details of the data we collect and the purposes for which it is used:

Jom 99 only collects data necessary for the stated purposes. We do not collect sensitive data such as health information, religious beliefs, or political views unless required by applicable Malaysian law.

2How jom 99 Uses Your Personal Data

Personal data collected by jom 99 used solely for the following purposes that are lawful under Malaysian law:

• Account Management: Creating, verifying, and maintaining your jom 99 member account.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX securely and efficiently.
• Platform Security: Detecting and preventing fraud, hacking, multiple account usage, and other unlawful activities.
• Customer Support: Handling enquiries, complaints, and support requests from members.
• Legal Compliance: Meeting legal obligations including anti-money laundering (AML) and know your customer (KYC) requirements.
• Service Improvement: Analysing platform usage patterns to improve the gaming experience for jom 99 members.
• Responsible Gambling: Monitors betting patterns to identify members who may benefit from responsible gambling support.
• Marketing Communications: Sending promotional information, bonus offers, and platform updates — only if you have consented to receive them at registration or at a later date.

Jom 99 will not use your data for any purpose beyond those listed above without first obtaining your consent. All data processing is carried out on a valid legal basis, such as your consent, contractual necessity, or a legal obligation.

3Data Sharing & Disclosure to Third Parties

jom 99 does not sell or transfer your personal data to third parties for commercial purposes. However, in certain limited circumstances, we may need to share your data with the following parties:

• Payment Service Providers: Providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX receive only the transaction information necessary to process your payment. They are bound by their own strict privacy policies.
• Game Software Providers: Third-party gaming companies that provide slots, live casino, poker, and blackjack games on the jom 99 platform may receive game session data necessary for the legitimate operation of those games.
• Legal Authorities: jom 99 will disclose personal data to Malaysian authorities — including the police, courts, or regulatory bodies — when required by law, court order, or in the course of a legitimate criminal investigation.
• Audit & Compliance: Independent audit firms or legal advisors assisting jom 99 in ensuring compliance with Malaysian law may access necessary data under strict confidentiality agreements.

4jom 99 Data Security Measures

jom 99 invests seriously in data security infrastructure to protect the personal information of every member. The technical and organisational measures we implement include:

• SSL/TLS 256-bit Encryption for all communications between users and jom 99 servers.
• Encrypted password storage using one-way hashing algorithms that cannot be decrypted.
• Two-Factor Authentication (2FA) available to all member accounts as an added layer of protection.
• 24/7 security monitoring by the jom 99 IT security team to detect threats in real time.
• Internal access control strictly enforced — only authorised staff may access sensitive member data, and all access is logged for audit purposes.
• Penetration testing periodically by independent third parties to identify and patch system vulnerabilities.
• Secure data backups with full encryption to ensure service continuity and disaster recovery.

While we take all reasonable precautions, no system can guarantee 100% security. If you suspect your jom 99 account has been compromised, please contact our support team immediately.

5Cookies & Tracking Technologies on the jom 99 Platform

Platform jom 99 uses cookies and similar tracking technologies to enhance the user experience. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, account security, and transaction processing. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Helps us understand how members use the jom 99 platform — most visited pages, time spent, and navigation patterns — so we can continually improve the user experience.
• Preference Cookies: Saves your personal settings such as your preferred language (Bahasa Melayu), display format, and game preferences so you don't have to reconfigure them each time you log in.
• Session Cookies: Temporary cookies that are automatically deleted when you close your web browser.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the jom 99 platform.

6Your Rights as a jom 99 Member Under PDPA 2010

As a member jom 99 and data subjects in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA):

To exercise any of the rights above, please contact the jom 99 Privacy Officer team via email at support@jom99.wine by specifying the right you wish to exercise. We will process your request within 21 working days in accordance with PDPA requirements.

7Data Retention & Deletion

jom 99 retains members' personal data only for as long as necessary to fulfil the purpose of collection or to meet legal obligations. Our data retention policy is as follows:

• Active Account Data: Retained for the entire duration that your jom 99 account remains active and in use.
• Transaction & Financial Data: Retained for a minimum of seven (7) years in compliance with Malaysia's Anti-Money Laundering Act (AMLA).
• KYC & Identity Verification Records: Retained for a minimum of five (5) years after account closure in accordance with compliance requirements.
• Support Communication Logs: Retained for three (3) years for reference and service improvement purposes.
• Platform Analytics Data: Anonymised data used for analytics may be retained for longer periods as it contains no personally identifiable information.

Once the retention period expires or you request erasure (subject to legal obligations), jom 99 will delete or destroy your data in a secure and irreversible manner.

8Changes to the jom 99 Privacy Policy

jom 99 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. When we make material changes to this Privacy Policy:

• We will update the "Last Updated" date at the top of this document.
• We will send a notification to all active members via their registered email address at least seven (7) days before the changes take effect.
• In-platform notifications will be displayed to members upon their next login.
• For minor changes that do not affect your fundamental privacy rights, we may update this document without issuing a specific notification.

Continued use of the jom 99 platform after any changes to the Privacy Policy take effect will be considered acceptance of the updated privacy terms. If you do not agree with any changes, you have the right to close your jom 99 account by contacting our support team.

9Contact the jom 99 Privacy Officer

If you have any questions, concerns, or complaints regarding the Privacy Policy jom 99 or how we handle your personal data, please contact our Privacy Officer through the following channels:

• Privacy Email: support@jom99.wine (please state "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 directly on the jom 99 platform — select the "Privacy & Data" category
• WhatsApp: Support number available after logging in under the Support section of the platform

We are committed to responding to all privacy-related enquiries within three (3) business days. For more complex cases involving data access or deletion requests, the processing period is up to 21 business days in accordance with the provisions of PDPA 2010. This Privacy Policy is governed by the laws of Malaysia, and any disputes shall be resolved under the jurisdiction of Malaysian courts.