jum99 Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") is issued by jum99 ("jum99", "we", "us", "our") and applies to all individuals who register an account, visit, or otherwise interact with the jum99 platform at jum99.co ("Platform"). It sets out our practices with respect to the collection, use, storage, disclosure, and protection of personal data, and describes the rights available to you in relation to your personal data.

jum99 operates under international gaming licensing. As part of our licence obligations, we are required to maintain robust data processing practices in accordance with the standards of our licensing jurisdiction and, where applicable, to the principles of the Malaysian Personal Data Protection Act 2010 (PDPA) as relevant to our processing of Malaysian users' data.

By registering on jum99 or continuing to use the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside jum99's Terms and Conditions, which form part of the overall agreement between you and jum99.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register and use jum99, we collect personal data that you provide to us, including but not limited to:

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification purposes — jum99 is strictly 21+)
• Email address and chosen username
• Malaysian mobile telephone number
• Residential address
• MyKad number, passport number, or other government-issued identification document details (for KYC verification)
• Payment method information, including bank account details, e-wallet identifiers (Touch n Go, Boost, DuitNow), and FPX transaction references
• Communications you send to jum99 customer support

2.2 Data Collected Automatically

When you access jum99, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location (country, city region)
• Device type, operating system, and browser type and version
• Session data including login timestamps, session duration, and pages visited
• Betting and gaming activity records, including games played, wagers placed, and outcomes
• Deposit and withdrawal transaction logs
• Cookie identifiers and similar tracking data (see Section 6)

2.3 Data from Third Parties

We may receive additional data about you from third-party service providers engaged to support our operations, including identity verification agencies, fraud prevention services, payment processors, and our game content providers. This data is used solely in connection with our obligations as a licensed gaming operator.

3. How jum99 Uses Your Personal Data

jum99 uses the personal data we collect for the following purposes:

4. Legal Basis for Processing

jum99 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our agreement with you, including operating your account, processing your bets, and managing payments.
• Legal obligation: Processing required to comply with our licensing conditions, anti-money laundering regulations, age verification requirements, and other applicable legal duties.
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Where you have given explicit consent, such as for receiving marketing communications. You may withdraw consent for marketing at any time by contacting our support team.

5. Disclosure of Your Personal Data

jum99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only where necessary and for the purposes described in this Policy:

• Payment processors and financial institutions: To facilitate deposits and withdrawals via Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost, DuitNow, and FPX.
• Identity verification and KYC service providers: To fulfil our age verification and anti-money laundering obligations under our gaming licence.
• Game content providers and studio partners: Where necessary to deliver gaming services; these providers receive only the data required for game delivery and operate under data processing agreements.
• Fraud prevention and cybersecurity services: To protect the integrity and security of the jum99 platform and its users.
• Regulatory and licensing authorities: Where required by our gaming licence or by applicable law, including responses to lawful requests from law enforcement agencies.
• Professional advisers: Including legal, compliance, and audit advisers, under obligations of confidentiality.

6. Cookies and Tracking Technologies

jum99 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The categories of cookies used by jum99 are as follows:

• Strictly Necessary Cookies: Essential for the operation of the jum99 platform, including session management, login authentication, and security functions. These cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how users interact with jum99 — pages visited, time spent, features used — to inform platform improvements. No personally identifiable data is transmitted via these cookies.
• Functional Cookies: Used to remember your preferences, such as language settings, and to personalise your jum99 experience between sessions.
• Marketing Cookies: Used, where you have provided consent, to deliver relevant promotional content. You may withdraw consent for marketing cookies at any time via your browser settings or by contacting jum99 support.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the jum99 platform.

7. Data Retention

jum99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering and gaming licence record-keeping requirements.
• Transaction and betting records are retained for a minimum of five (5) years.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Cookie and session data is retained for the duration of the session or for the period specified in the cookie settings applicable to each cookie type.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8. Data Security

jum99 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jum99 platform
• Encryption of sensitive data fields at rest within jum99's infrastructure
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Continuous monitoring of platform systems for suspicious activity and potential intrusions
• Regular security assessments and penetration testing conducted by independent specialists
• Formal incident response procedures in the event of a data security incident

While jum99 takes all reasonable steps to secure your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your jum99 login credentials.

9. Your Data Rights

Subject to applicable law and our legitimate processing grounds, you have the following rights in relation to the personal data jum99 holds about you:

• Right of Access: You may request a copy of the personal data jum99 holds about you.
• Right of Rectification: You may request the correction of inaccurate or incomplete personal data.
• Right of Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jum99's legal and regulatory retention obligations.
• Right to Restrict Processing: You may request that jum99 restricts the processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a machine-readable copy of your data.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including the use of your data for direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact jum99 support. We will respond to all verified requests within 30 days. Some requests may be subject to identity verification before they can be actioned.

10. Children and Minors

The jum99 platform is strictly prohibited for use by any person under the age of 21 years. jum99 does not knowingly collect personal data from individuals under the age of 21. If jum99 discovers that personal data from a person under 21 has been collected, that data will be immediately deleted and the account will be permanently closed.

If you are a parent or guardian and believe that your child has provided personal data to jum99 without your knowledge or consent, please contact our support team immediately so we can take appropriate action.

11. International Data Transfers

jum99 operates under international gaming licensing and some of the third-party service providers we engage — including game content studios and platform infrastructure providers — may be located outside Malaysia. Where personal data is transferred internationally, jum99 ensures that appropriate safeguards are in place, including data processing agreements incorporating applicable data transfer clauses, to protect your data to an equivalent standard as required under jum99's licensing obligations.

12. Changes to This Privacy Policy

jum99 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, jum99 will notify registered users by email to their registered address and/or via a notice posted prominently on the Platform before the changes take effect. The date of the most recent revision is displayed at the top of this Policy. Your continued use of the jum99 platform following the effective date of any changes constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed of how jum99 manages your personal data.

13. Contact jum99 on Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by jum99, please contact our support team. All privacy-related enquiries are handled by our compliance team and will be responded to within 30 days.