jp9p Privacy Policy

SECTION 01

1. Who We Are

jp9p ("we", "us", "our") is the operator of the online gaming platform accessible at jp9p.app. jp9p operates under an international gaming authority licence and is the data controller for the personal data collected through the Platform. This Privacy Policy applies to all current and former Members, as well as visitors who access jp9p.app without registering an account.

The jp9p Platform is intended for use by individuals located in Malaysia and other jurisdictions where access is not prohibited by applicable law. If you access jp9p from a jurisdiction where online gaming is illegal, you do so at your own risk and jp9p accepts no responsibility for any regulatory consequences arising from such access.

SECTION 02

2. Personal Data We Collect

jp9p collects personal data in the following categories, depending on the nature of your interaction with the Platform:

2.1 Registration Data

When you create a jp9p account, we collect: full legal name, date of birth, email address, mobile phone number, and preferred username. This data is mandatory for account creation and cannot be omitted.

2.2 Identity Verification (KYC) Data

To comply with gaming licence obligations and anti-money laundering requirements, jp9p may collect: copies of government-issued identification (MyKad, passport), proof of residential address, and proof of payment method ownership. KYC documents are reviewed by the jp9p compliance team and relevant third-party verification service providers.

2.3 Financial Data

jp9p collects data related to your deposits, withdrawals, and in-platform transactions including payment method identifiers (e.g., masked bank account numbers, Touch n Go or Boost wallet identifiers), transaction amounts, timestamps, and MYR balances. Full payment card numbers are never stored by jp9p — payment processing is handled by PCI-DSS compliant third-party payment providers.

2.4 Usage and Behavioural Data

jp9p automatically collects data about how you use the Platform: pages visited, bets placed, games played, session duration, device type, operating system, browser type, IP address, and approximate geolocation (derived from IP address). This data is used to improve Platform performance, detect fraud, and personalise your experience.

2.5 Communications Data

If you contact jp9p via live chat, email, or any other channel, we retain records of those communications for quality assurance, compliance, and dispute resolution purposes.

Data Category	Mandatory?	Primary Purpose
Registration data	Yes	Account creation & identity management
KYC documents	Conditional	Regulatory compliance & AML
Financial data	Yes	Payment processing & fraud prevention
Usage data	Automatic	Platform operation & security
Communications	When initiated	Support & dispute resolution

SECTION 03

3. How jp9p Uses Your Personal Data

jp9p uses the personal data collected for the following purposes:

• Creating and managing your jp9p account and verifying your identity.
• Processing deposits, withdrawals, and in-platform transactions in MYR.
• Complying with anti-money laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) obligations under our gaming licence.
• Detecting, investigating, and preventing fraud, collusion, and other prohibited conduct under the jp9p Terms and Conditions.
• Operating responsible gaming tools including deposit limit monitoring, self-exclusion enforcement, and session control features.
• Delivering customer support and resolving disputes arising from your use of the Platform.
• Sending transactional communications, including bet confirmations, deposit receipts, and withdrawal notifications.
• Sending promotional communications, where you have opted in to receive such communications from jp9p.
• Analysing aggregated, anonymised usage patterns to improve Platform features and performance.
• Meeting regulatory reporting obligations to the Gaming Authority.

jp9p does not use personal data for automated individual decision-making that produces legal effects on Members without human review.

SECTION 04

4. Legal Basis for Processing

jp9p processes personal data under the following legal bases:

• Contractual necessity: Processing required to provide the Platform services you have registered for, including account management, betting, and payment processing.
• Legal obligation: Processing required to comply with gaming licence conditions, AML/KYC requirements, and applicable law.
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement where our interests do not override your data rights.
• Consent: Processing for optional marketing communications, where you have provided explicit consent that you may withdraw at any time.

SECTION 05

5. Data Sharing and Disclosure

jp9p does not sell personal data to any third party. jp9p shares personal data only in the following limited circumstances:

• Service providers: KYC verification partners, payment processors, game software providers, and IT infrastructure providers — all engaged under data processing agreements requiring them to handle data only on jp9p's instructions.
• Gaming Authority: jp9p is required to submit certain Member records to the Gaming Authority as a condition of its licence. This includes data related to suspicious transactions, self-exclusion records, and large transaction reporting.
• Law enforcement: Where jp9p receives a lawful request from a competent law enforcement or regulatory authority, it will disclose the minimum personal data required to comply with that request.
• Business transfer: In the event of a merger, acquisition, or sale of substantially all of jp9p's assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third parties who receive jp9p Member data are contractually obligated to maintain the confidentiality and security of that data and to use it solely for the purposes for which it was disclosed.

SECTION 06

6. Cookies and Tracking Technologies

The jp9p Platform uses cookies and similar tracking technologies to support Platform functionality and improve user experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including session authentication and security tokens. These cannot be disabled without impacting Platform access.
• Functional cookies: Remember your preferences such as language settings, odds format, and session timeout preferences.
• Analytical cookies: Collect anonymised data about Platform usage patterns to support performance improvements. No personally identifiable information is included in analytical data sets.
• Security cookies: Used to detect and prevent fraudulent activity including bot access and credential stuffing attacks.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to access the jp9p Platform.

SECTION 07

7. Data Retention

jp9p retains personal data for the following minimum periods, as required by gaming licence obligations and applicable law:

• Account registration data: for the duration of the account relationship plus five (5) years following account closure.
• KYC and identity verification records: five (5) years from the date of verification or account closure, whichever is later.
• Financial transaction records: five (5) years from the date of the transaction.
• Betting and gaming records: three (3) years from the date of the relevant activity.
• Support communications: two (2) years from the date of the communication.

Following the expiry of the applicable retention period, jp9p will securely delete or anonymise personal data unless further retention is required by law or is necessary to defend against a pending legal claim.

SECTION 08

8. Security Measures

jp9p implements the following technical and organisational security measures to protect Member personal data:

• 256-bit TLS/SSL encryption for all data in transit between your browser and jp9p servers.
• Encryption of sensitive data fields at rest in jp9p's database infrastructure.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Multi-factor authentication for all internal system access by jp9p personnel.
• Regular third-party penetration testing and security audits.
• Automated intrusion detection and real-time alert systems for anomalous data access patterns.

Notwithstanding the measures above, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your jp9p account credentials and for securing the devices from which you access the Platform.

SECTION 09

9. Your Data Rights

Subject to applicable law and regulatory obligations, you have the following rights in respect of personal data jp9p holds about you:

• Right of access: Request a copy of the personal data jp9p holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of personal data, subject to retention obligations under gaming licence conditions and applicable law.
• Right to restrict processing: Request that jp9p limits the processing of your data in certain circumstances.
• Right to data portability: Request receipt of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Withdraw consent to marketing communications at any time via account settings or by contacting support.

To exercise any of these rights, contact jp9p at [email protected] (plain text — not a clickable link). jp9p will respond to verified requests within thirty (30) days. Some requests may be subject to identity verification before processing.

SECTION 10

10. Children's Privacy

The jp9p Platform is strictly for adults aged 21 years and above. jp9p does not knowingly collect personal data from individuals under the age of 21. If jp9p becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and all data deleted, except where retention is required to report the incident to the Gaming Authority. Parents or guardians who believe a minor has registered on jp9p should contact [email protected] immediately.

SECTION 11

11. International Data Transfers

jp9p may transfer personal data to service providers located outside Malaysia, including to the jurisdiction of the Gaming Authority. Where personal data is transferred internationally, jp9p ensures that appropriate safeguards are in place, including data processing agreements that incorporate standard contractual clauses or equivalent protections. Members located in Malaysia acknowledge that data protection standards in the destination jurisdiction may differ from those applicable in Malaysia.

SECTION 12

12. Changes to This Privacy Policy

jp9p reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Members via their registered email address or via a notice on the jp9p Platform. The "Last updated" date at the top of this Policy will be revised accordingly. Your continued use of the jp9p Platform following notice of any changes constitutes your acceptance of the revised Privacy Policy.

SECTION 13

13. Contact Us

For all data privacy queries, subject access requests, or complaints relating to jp9p's handling of your personal data, please contact us via the following channels:

• Live Chat: Available 24/7 on the jp9p Platform (GMT+8)
• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 30 days for formal data rights requests; under 2 minutes for live chat support queries

If you are not satisfied with jp9p's response to a data privacy complaint, you may escalate the matter to the relevant Gaming Authority in accordance with its published complaint procedures.