Privacy Policy jom99win — Member Data Protection

This Privacy Policy applies to all registered members, prospective members, and visitors who access the jom99win via our official website at jom99win.net, our mobile app, or any other official channel. This covers all activities you carry out on our platform, including account registration, login, deposits, withdrawals, playing games, and interactions with our customer support team.

This policy does not cover third-party websites or services that may be linked from our platform. We encourage you to read the privacy policies of other websites separately, as we are not responsible for their privacy practices.

As the data controller, jom99win is responsible for ensuring that all personal data processing is carried out in accordance with the principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA), including the principles of consent, purpose, data minimisation, accuracy, retention, integrity, security, and access.

Jom99win collects your personal data from various sources as you interact with our platform. The data we collect falls into three main categories:

Data you provide directly:

• Full name as per official identification document
• Date of birth and gender
• Email address and mobile phone number
• Current residential address
• Bank account and e-wallet details for deposit and withdrawal purposes
• Copies of KYC documents such as identity card, bank statement, or utility bill
• Communication history with our support team

Data collected automatically:

• IP address and approximate location information
• Device type, operating system, and web browser used
• Platform activity logs including login and logout timestamps
• Game history, deposits, withdrawals, and bonus transactions
• Cookie data and similar tracking technologies

Data from third parties:

• Identity verification information from licensed KYC service providers
• Payment verification data from approved payment processors
• Blacklist information from anti-money laundering (AML) bodies

Every piece of data we collect has a clear and lawful purpose. jom99win will not process your data for any purpose other than those stated below:

If you have previously given consent to receive marketing communications and later wish to withdraw that consent, you may do so at any time by contacting our support team. Withdrawal of consent will not affect the validity of any processing carried out prior to that withdrawal.

Jom99win adopts the principle of minimum compliance in data sharing. We do not share your personal information with external parties except in the following circumstances:

• Authorised Service Providers: Including payment processors, KYC service providers, gaming technology providers, and cloud infrastructure providers bound by strict data confidentiality agreements.
• Legal Authorities: When required by court order, official investigation, or applicable regulatory obligation.
• Anti-Fraud Body: Industry organisations dedicated to preventing fraud, money laundering, and other illegal activities.
• Business Transfers: In the event of a merger, acquisition, or asset transfer, your data may be transferred, subject to equivalent privacy protections.

Jom99win continually invests in cybersecurity infrastructure to ensure your personal data is always protected against unauthorised access, loss, destruction, or improper disclosure. The technical and organisational security measures we implement include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols
• Data encryption at rest for sensitive information
• Two-factor authentication (2FA) for internal system access
• Role-based access control — only staff who require it can access data
• Regular security audits by independent third parties
• 24/7 system monitoring to detect suspicious activity
• Data protection training programme for all staff
• Tested security incident response plan

While no security system can be guaranteed 100% safe, jom99win takes all reasonable steps possible to minimise risk. You also play an important role in keeping your account secure by using a strong password and not sharing your login details with anyone.

Jom99win retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. Once the retention period expires, data will be securely deleted or anonymised.

After the retention period ends, your data will be deleted from all our active systems and backups within a reasonable timeframe, unless a continuing legal obligation requires otherwise.

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by jom99win:

To submit any request relating to the rights above, please contact our Data Protection Officer team at [email protected]. We will process your request within 21 working days. We may require identity verification before processing your request to ensure the security of your data.

The jom99win platform uses cookies and similar tracking technologies to enhance user experience, ensure security, and analyse platform usage. The cookies we use fall into several categories:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Preference Cookies: Store your preferences such as language and time zone to personalise your experience.
• Analytics Cookies: Help us understand how members use our platform so we can make continuous improvements. This data is collected in aggregate and does not identify individuals.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorized access.

You can manage cookie settings through your web browser settings. However, disabling mandatory cookies may affect platform functionality. For more information on managing cookies in popular browsers, please refer to your browser's official documentation.

Our account registration process includes strict age verification steps. Every prospective member is required to submit a valid identification document to confirm they are at least 18 years old before being granted access to any services on our platform.

If we find that personal data of an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question without delay. Parents or guardians who suspect their child has registered on our platform are encouraged to contact us immediately at [email protected].

In operating the jom99win platform, your personal data may be transferred to and processed in countries other than Malaysia, primarily for data storage at international data centers and the use of accredited third-party services.

When your personal data is transferred outside Malaysia, jom99win ensures that:

• The recipient country provides an adequate level of data protection, or
• Appropriate data transfer agreements are in place, such as approved Standard Contractual Clauses, or
• The transfer is necessary for the performance of a contract between you and jom99win, or to fulfil a legal obligation

All international service providers we engage have been thoroughly vetted and are required to meet data protection standards equivalent to Malaysia's PDPA requirements.

Jom99win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technology used, legal requirements, or other legitimate operational reasons. The latest version of this Privacy Policy will always be available on this page.

In the event of changes that are material or significant to how we use your personal data, we will notify you via:

• A prominent notice on our platform's home page
• Notification email to your registered email address
• A pop-up notice when you first log in to the platform after changes take effect

The effective date of the latest version of this Privacy Policy will always be stated at the top of this page. Your continued use of the jom99win platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the Malaysia Department of Personal Data Protection if you believe your personal data has been handled in a manner that does not comply with applicable law. We do, however, encourage you to contact us first so we have the opportunity to address your concerns directly.