Privacy Policy — jp9w

jp9w ("the Company", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our online gaming platform at https://jp9w.cam ("the Platform"). This Privacy Policy ("Policy") describes in clear and accessible terms how we collect, use, store, share, and protect personal data relating to registered players and website visitors ("you", "your", "the Data Subject").

This Policy applies to all personal data processed by jp9w in connection with the provision of our gaming services, including sports betting, live casino, slots, lottery, and arcade products, as well as all related customer support, account management, and promotional activities.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your relationship with jp9w.

The following definitions apply throughout this Privacy Policy:

jp9w collects and processes the following categories of personal data in connection with the operation of the Platform:

3.1 Identity & Registration Data

• Full legal name;
• Date of birth;
• Gender (where voluntarily provided);
• Username and account credentials (passwords are stored in hashed form only);
• Government-issued identification document numbers (MyKad, passport).

3.2 Contact Data

• Email address;
• Mobile telephone number;
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya).

3.3 Financial & Payment Data

• Bank account details (for FPX and direct bank transfer channels including Maybank, CIMB, Public Bank, Hong Leong);
• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay) — account identifiers only, not full credentials;
• Cryptocurrency wallet addresses (where applicable);
• Deposit, withdrawal, and transaction history.

3.4 Gaming & Behavioural Data

• Betting history, game sessions, and wagering patterns;
• Bonus claims and promotional interactions;
• Session duration, login times, and device type;
• Responsible gambling tool usage (deposit limits, self-exclusion requests).

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom;
• Browser type and version;
• Operating system;
• Device identifiers;
• Platform interaction logs.

3.6 Communications Data

• Records of Live Chat, email, and support ticket communications;
• Complaints and dispute records.

4.1 Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.

4.2 Automatically: Through cookies, server logs, and similar technologies when you access and interact with the Platform. See Section 11 for full details of our cookie practices.

4.3 From third parties: From KYC verification service providers, fraud prevention databases, payment processors, and — where applicable — publicly available sources such as sanctions screening lists and politically exposed person (PEP) databases as required by our licensing obligations.

jp9w processes personal data for the following specific and documented purposes:

jp9w processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the gaming services contract with you, including account creation, transaction processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and our international gaming licence obligations, including KYC, anti-money laundering, and sanctions screening.
• Legitimate interests: Processing necessary for our legitimate business interests — principally fraud prevention, security, responsible gambling monitoring, and platform improvement — where such interests are not overridden by your fundamental rights.
• Consent: Where you have given explicit, freely given consent — primarily for direct marketing communications. You may withdraw consent at any time without prejudice to your account.

7.1 jp9w does not sell, rent, or trade your personal data to any third party. Data is shared only where strictly necessary for the following categories of recipient:

• Payment processors: DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing partners — solely to process your transactions.
• KYC and identity verification providers: Third-party services used to verify your identity and age in accordance with licensing requirements.
• Fraud prevention and AML screening services: Services used to detect, investigate, and prevent fraud, money laundering, and sanctions violations.
• IT and infrastructure providers: Cloud hosting, database, and security services that operate on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by a valid legal obligation, court order, or regulatory requirement under applicable law.
• Professional advisers: Legal, accounting, and audit professionals bound by professional confidentiality obligations.

7.2 All third-party Data Processors are contractually required to process personal data only on jp9w's documented instructions, to implement appropriate technical and organisational security measures, and to notify jp9w without undue delay of any personal data breach.

8.1 As an internationally operating platform, jp9w may transfer personal data to countries outside Malaysia in connection with the operation of our services and the engagement of third-party processors.

8.2 Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, jp9w implements appropriate safeguards, which may include standard contractual clauses, binding corporate rules, or other lawful transfer mechanisms as applicable.

8.3 You may request information about the specific safeguards applied to any international transfer of your personal data by contacting us at the details provided in Section 15.

9.1 jp9w retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or licensing obligations.

9.2 Our standard retention periods are as follows:

9.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10.1 jp9w implements a range of technical and organisational security measures commensurate with the risk associated with the categories of personal data we process. These include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data at rest using industry-standard algorithms;
• Salted cryptographic hashing of all account passwords — plain-text passwords are never stored;
• Multi-factor authentication available and encouraged for all player accounts;
• Role-based access controls limiting internal data access to employees with a documented need;
• Regular penetration testing and security assessments by qualified third-party specialists;
• Segregation of player funds from operational accounts;
• Incident response procedures including breach notification protocols.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jp9w will notify you without undue delay via your registered email address with details of the nature of the breach and the steps you should take.

11.1 The jp9w Platform uses cookies and similar technologies to function securely and to provide you with a consistent user experience. The following categories of cookie are in use:

11.2 jp9w does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies on the Platform.

11.3 You may manage or delete cookies through your browser settings. Disabling strictly necessary cookies will impair or prevent your access to the Platform. Disabling functional or analytics cookies will not affect your ability to play.

Subject to applicable law and our licensing obligations, you hold the following rights with respect to your personal data processed by jp9w:

• Right of Access: You may request a copy of the personal data jp9w holds about you, together with information about how and why it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to our legal retention obligations — data held for AML or licensing compliance purposes cannot be deleted on request.
• Right to Restrict Processing: You may request that we limit the way we use your personal data in certain defined circumstances.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of your data.
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw it at any time without penalty by contacting our support team.

To exercise any of the above rights, please contact us via Live Chat or at [email protected] with the subject line "Privacy Request". We will respond within 30 calendar days.

13.1 jp9w does not knowingly collect or process personal data relating to persons under the age of 21. Our Platform is strictly intended for adult users who are 21 years of age or older.

13.2 Age verification is conducted as part of the mandatory KYC process. If jp9w discovers that personal data has been collected from a person under 21, the Account will be immediately closed, all data will be deleted (subject to any overriding legal obligations), and any funds will be handled in accordance with applicable law.

13.3 If you believe a person under 21 has registered an account with jp9w, please contact us immediately at [email protected].

14.1 jp9w reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. The current version of the Policy will always be accessible at https://jp9w.cam/privacy-policy with a revised "Last updated" date.

14.2 Where changes are material, jp9w will endeavour to notify registered players via email or a prominent on-site notification prior to the changes taking effect.

14.3 Continued use of the Platform following the effective date of a revised Policy constitutes your acknowledgement of the updated terms. If you do not agree with any revision, you should cease using the Platform and request Account closure.

For any privacy-related questions, data subject requests, or complaints regarding the processing of your personal data, please contact the jp9w Data Protection team through the following channels:

• Live Chat: Available 24/7 on the Platform. Please state "Privacy Request" at the start of your message.
• Email: [email protected] — use the subject line "Privacy Request" or "Data Subject Request".

We will acknowledge your request within 5 business days and aim to provide a substantive response within 30 calendar days. Where a request is particularly complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the data protection supervisory authority applicable in your jurisdiction. For Malaysian residents, the relevant authority is the Personal Data Protection Department (PDPD) of Malaysia.