Privacy Policy JOM9 — Data Protection & Information Security

1Introduction

JOM9 ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy transparently explains how we collect, use, store, and protect your personal information when you use the JOM9 platform at jom9.pro, including our official website and mobile application.

This policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. By using the JOM9 platform, you acknowledge that you have read and understood this policy.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material updates will be communicated to you via an in-platform notice or email, and the "Last Updated" date above will be revised accordingly.

2Information We Collect

JOM9 only collects information necessary to provide you with a safe, efficient, and responsible service. The following are the categories of information we collect:

3How We Use Your Data

Every piece of information we collect is used for clear and legitimate purposes. jom9 processes your personal data for the following purposes:

• Account Management: Creating, verifying, and maintaining your member account, including the KYC process and identity verification required by law.
• Transaction Processing: Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and other local payment methods, and handling your withdrawal of winnings securely and promptly.
• Service Provision: Enabling you to access all slot games, sports betting, live casino, and other products offered by jom9.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, money laundering, identity fraud, and any suspicious activity on our platform.
• Responsible Gaming: Monitoring play patterns to identify signs of problem gambling and providing appropriate assistance when needed.
• Service Communications: Sending important account notices, security updates, transaction confirmations, and promotional information you have opted to receive.
• Platform Improvements: Analysing aggregated and anonymised usage data to improve the performance, interface, and overall experience of the jom9 platform.
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA 2010 and other applicable regulations, and cooperating with authorities when required by law.

JOM9 will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

4Information Sharing with Third Parties

JOM9 does not sell, rent, or trade your personal information to any third party for marketing purposes. However, in the course of operating the platform, we may share your data with a limited set of third-party categories as follows:

• Payment Providers: Financial institutions, payment processors, and e-wallet providers such as DuitNow, FPX, and Touch 'n Go eWallet that facilitate your financial transactions. They receive only the information required to process the relevant transaction.
• KYC Verification Providers: Registered and licensed third-party identity verification companies that help us verify the identity of new members in compliance with anti-money laundering legal requirements.
• Technology Providers: Cloud infrastructure and technology companies that support our platform operations, all bound by strict data confidentiality agreements with jom9.
• Regulatory Authority: When required by law or court order, we will disclose the necessary information to the relevant Malaysian authorities.
• Game Software Providers: Licensed game providers that require limited access to game data for compliance and game fairness audit purposes.

5Data Security

Protecting your data is jom9's top priority. We continuously invest in the latest security technologies and processes to keep your information safe at all times. The protection measures we implement include:

• Data encryption in transit using TLS 1.3 protocol and 256-bit SSL certificates for all communications between your device and our servers.
• Data encryption at rest using AES-256 algorithm for all sensitive information stored in our database.
• Strict role-based access controls ensure that only authorised staff can access member data, and only to the extent required for their specific duties.
• Round-the-clock real-time security monitoring using advanced intrusion detection systems that identify and respond to threats immediately.
• Regular security audits and penetration testing conducted by independent third-party security experts.
• Two-factor authentication (2FA) is available for all member accounts to provide an extra layer of protection.
• A tested incident response plan ensures we can respond efficiently in the event of any data breach.

While no security system is ever entirely perfect, jom9 continuously strives to stay one step ahead in protecting your information. If you suspect any suspicious activity on your account, please contact our support team immediately.

6Cookies & Tracking Technologies

JOM9 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login, session security, and verification. They cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Helping us understand how users interact with our platform through anonymously collected analytics data, enabling us to make meaningful improvements.
• Functional Cookies: Saving your preferences such as display language, account settings, and game preferences to deliver a more personalised experience on future visits.
• Session Cookies: Temporary cookies that expire automatically when you close your browser, used to maintain your login status during an active session.

You can control and manage cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect platform functionality and your experience at JOM9.

7Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal information held by jom9:

To exercise any of the above rights, please contact us via email at [email protected] or via live chat within the platform. We will process your request within 21 business days in accordance with PDPA requirements.

8Data Retention Period

JOM9 does not retain your personal information longer than necessary for the stated purposes or as required by law. The following are our data retention guidelines:

• Active Account Data: Retained throughout the period your account is active and up to 7 years after account closure to fulfil financial and anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with the requirements of the Companies Act and applicable Malaysian financial regulations.
• KYC Documents: Retained for 5 years after the business relationship ends, in accordance with Malaysia's anti-money laundering legal requirements.
• Security & Access Logs: Retained for 12 months for security incident investigation and fraud detection purposes.
• Customer Support Communications: Retained for 3 years to facilitate reference should any disputes arise in the future.
• Cookie & Analytics Data: Anonymously collected analytics data is retained for 24 months for platform improvement purposes.

Once the applicable retention period has expired, your data will be securely deleted or anonymised in accordance with jom9's approved data disposal procedures.

9Changes to This Privacy Policy

JOM9 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, technological developments, or new legal requirements.

When we make material changes to this policy, we will notify you through the following means:

• A clear in-platform notice on jom9 when you log in for the first time after changes have been made.
• Email notification to your registered address at least 14 days before material changes take effect.
• The date shown in the "Last Updated" section at the top of this page.

Continued use of the jom9 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before the effective date.

10Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us via:

• Email: [email protected]
• Live Chat: Available 24/7 directly within the jom9 platform
• FAQ: Visit our FAQ section for answers to frequently asked questions about privacy

Our dedicated privacy team will respond to every enquiry within 3 business days. For formal data rights requests under PDPA, please clearly state the type of request and include a copy of your identification document for identity verification purposes.