Privacy Policy jom999 — Your Personal Data Protection

Jom999 (hereinafter referred to as "we", "our platform" or "jom999") takes the privacy and security of members' personal data extremely seriously. This Privacy Policy is drafted to transparently and clearly explain how we handle your personal information in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia.

This Privacy Policy applies to all users of the jom999 platform, including website visitors, mobile app users, and all registered members. By using the jom999 platform, you agree to the terms set out in this Privacy Policy.

We understand that your trust is our most valuable asset. Every decision involving the handling of your personal data is made with your interests and security as a jom999 member as our top priority. We never sell, rent, or disclose your personal data to third parties for marketing or commercial gain without your explicit consent.

Jom999 collects your personal information through several means, including during account registration, platform usage, financial transactions, and interactions with our customer support team. The following are categories of information we may collect:

We only collect information that is strictly necessary for the stated purposes. jom999 does not collect sensitive data such as health information, religious beliefs, or political views unless required by law.

When you use the jom999 mobile app, we may request permission to access your camera (for KYC document uploads) and push notifications. You can manage these permissions through your device settings at any time.

The personal data you provide to jom999 is used solely for purposes related to platform operations and delivering the best service to you. We do not use your data for unrelated purposes without your prior consent.

The following are the primary purposes for which jom999 uses your personal data:

• Account management: Creating, verifying, and managing your member account, including secure login and password recovery processes.
• Transaction processing: Processing deposits, withdrawals, and all other financial transactions quickly and securely using Malaysia's local payment network.
• Identity verification (KYC): Fulfilling legal obligations related to anti-money laundering (AML) and counter-financing of terrorism (CFT) as required under Malaysian law.
• Customer support: Providing technical support and resolving your complaints or enquiries via live chat and available support channels.
• Platform security: Detecting and preventing fraud, account misuse, illegal activity, and cybersecurity threats that may affect the platform or other members.
• Marketing communications: Sending information about jom999 promotions, bonuses, and exclusive offers — only to members who have consented to receive such communications.
• Responsible gaming: Monitoring gaming habits to identify signs of problem gambling and offering appropriate self-control tools.
• Service improvement: Analysing usage patterns in aggregate (not individually) to improve the user experience on the jom999 platform.

Jom999 does not sell, does not rent, and does not disclose your personal information to third parties for marketing or commercial gain. However, in certain limited situations, we may need to share your information with the following parties:

• Payment provider: Minimum necessary information shared with approved payment providers such as FPX, DuitNow, Touch 'n Go eWallet, and banking networks to securely process your financial transactions.
• Game software provider: Technical information required to allow you to access and play games from certified third-party providers on the jom999 platform.
• Cloud service provider: Data is stored on secure cloud servers under strict confidentiality agreements and in compliance with international security standards.
• Legal authority: jom999 will disclose required information when mandated by court order, police investigation, Bank Negara Malaysia directive, or other regulatory bodies in accordance with Malaysian law.
• Fraud detection service: Certain technical information (such as IP address and device ID) may be shared with anti-fraud systems to protect all jom999 members.

All third parties we work with are required to sign data protection agreements that set security and confidentiality standards at least equivalent to this jom999 Privacy Policy. We do not permit third parties to use your data for their own purposes.

Jom999 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, modification, loss, or destruction. Our security infrastructure is designed to provide banking-grade protection for all members.

• 256-bit SSL encryption: All data transmitted between your device and jom999 servers is encrypted using TLS 1.3 with AES 256-bit encryption, the highest industry standard.
• Encrypted database: Personal and financial data are stored in fully encrypted databases, with access restricted to authorised personnel only.
• Two-factor authentication (2FA): jom999's internal systems use multi-factor authentication for all administrative access to prevent unauthorised intrusion.
• Regular security audits: The jom999 platform undergoes regular penetration testing and independent security audits to identify and address any vulnerabilities.
• 24/7 monitoring: A continuously active real-time monitoring system detects any suspicious activity or security threats as they happen.

Data retention period: jom999 retains your personal data for as long as necessary to fulfil the purpose of collection or as required by Malaysian law. Financial transaction records are kept for a minimum of 7 years in accordance with anti-money laundering legal requirements. Once an account is closed and the mandatory retention period has elapsed, your data will be securely deleted or anonymised.

As a jom999 member and data subject under PDPA 2010, you have the following rights regarding your personal information. jom999 is committed to ensuring these rights can be exercised easily and without obstruction:

To exercise any of the above rights, please contact the jom999 customer support team via live chat on the platform. We will process your request promptly and notify you of the action taken within a reasonable timeframe.

Jom999 uses cookies and similar tracking technologies to enhance your user experience, ensure platform security, and understand how members use our services. Cookies are small text files stored on your device when you visit the jom999 platform.

• Essential cookies: Required for core platform functions such as login session authentication, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Helping us understand how members interact with the platform to identify technical issues and improve response times. Data is collected in aggregate and anonymised form.
• Functional cookies: Storing your preferences such as display settings, preferred language, and recent game history to provide a more personalised experience.
• Analytics cookies: Used to analyse overall platform usage patterns to help us make better development decisions for the benefit of all members.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the jom999 platform. Please refer to your browser's documentation for more information on managing cookies.

The jom999 platform is exclusively for users aged 18 and above. We do not intentionally collect, process, or store personal data from individuals under the age of 18. All members are required to verify their age during the registration and KYC verification process.

If we determine that personal data of an individual under the age of 18 has been collected without proper verification, we will immediately take the following steps:

• Suspending access to the relevant account immediately.
• Promptly deleting all related personal data.
• Returning any outstanding financial balance where applicable.
• Reporting the case to the relevant authorities if required under applicable law.

If you believe that someone under the age of 18 has registered or is using the jom999 platform, please contact our support team immediately so that appropriate action can be taken.

In the course of platform operations, your personal data may need to be transferred to and stored on servers located outside Malaysia, including in the Asia Pacific region and other locations. Such transfers are carried out solely for technical operational purposes such as cloud storage, data backup, and content delivery.

Jom999 ensures that every cross-border data transfer meets the following conditions:

• The recipient country or region provides a level of data protection comparable to or higher than that of Malaysia.
• Legally binding data transfer agreements are signed with all overseas data recipients.
• Technical protection measures such as end-to-end encryption are implemented during data transfers.
• Data transfers are only carried out when strictly necessary to deliver the service you requested.

Jom999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, the technologies we use, or applicable legal requirements. Any material amendments will be communicated to you via in-platform notification or email at least 14 days before those changes take effect.

The "Updated" date at the top of this page will always reflect the latest version of our Privacy Policy. We encourage you to review this page periodically. Continued use of the jom999 platform after the effective date of any changes constitutes your acceptance of the amended Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how jom999 handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.

• Live Chat: Available 24 hours a day, 7 days a week via the jom999 platform.
• Email: [email protected]
• Response time: Privacy-related inquiries will be responded to within 3 working days.

You also have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your privacy rights have been violated and jom999 has failed to address them satisfactorily. More information about JPDP is available on their official website.

Jom999 is committed to resolving every privacy-related complaint fairly, transparently, and within a reasonable timeframe. Your trust is our top priority.