Privacy Policy – jp9p

1. Introduction

This Privacy Policy ("Policy") is issued by jp9p ("jp9p", "we", "us", "our") and applies to all personal data collected in connection with your use of the jp9p website at jp9p.com and all associated services, including jp9p Casino, the jp9p Sportsbook, jp9p Slots, Betting, Esports Betting, and the jp9p Login and account management system (collectively, the "Platform").

jp9p is committed to handling personal data responsibly and in compliance with applicable data protection legislation, including the obligations imposed under jp9p's international gaming authority licensing framework. This Policy is designed to be transparent, specific, and written in plain language so that jp9p Players can clearly understand how their information is used.

This Privacy Policy should be read alongside the jp9p Terms & Conditions and the jp9p Responsible Gaming Policy. Capitalised terms not defined in this Policy carry the meanings assigned to them in the jp9p Terms & Conditions.

2. Data Controller

jp9p is the data controller in respect of personal data collected through the Platform. As data controller, jp9p determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully and fairly.

Where jp9p engages third-party processors to process personal data on its behalf — such as payment processors, KYC verification providers, and game content providers — jp9p ensures that appropriate contractual safeguards are in place to govern the processing activities of those processors.

3. Personal Data We Collect

jp9p collects personal data from you through multiple channels in connection with your use of the Platform. The categories of personal data we collect include:

3.1 Registration Data

When you register a jp9p account via the jp9p Login registration process, we collect: full legal name, date of birth, email address, mobile phone number, residential address, and your chosen username and password (stored in hashed, non-readable form).

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and anti-money laundering requirements, jp9p may collect copies of identity documents (e.g., MyKad, passport), proof of address documents, and payment method verification documents. This data is collected at the point of first withdrawal or earlier at jp9p's discretion.

3.3 Financial Data

jp9p collects transaction data including deposit amounts, withdrawal requests, payment method identifiers (e.g., Touch n Go eWallet reference, bank account details), and MYR balance history. jp9p does not store full payment card numbers or CVV codes.

3.4 Gaming Activity Data

jp9p records all betting and gaming activity on the Platform, including game sessions, bet amounts, outcomes, and timestamps. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

3.5 Technical Data

jp9p automatically collects technical data when you access the Platform, including IP address, device type, browser type and version, operating system, session timestamps, and page interaction data.

3.6 Communications Data

jp9p retains records of communications between you and jp9p's support team, including live chat transcripts and email correspondence.

4. How We Use Your Personal Data

jp9p uses the personal data we collect for the following purposes:

• Account Administration: Creating and maintaining your jp9p account, enabling the jp9p Login process, and managing account settings and preferences.
• Platform Provision: Delivering the gaming and betting services you access through the Platform, processing deposits and withdrawals, and settling bets and game outcomes.
• Identity Verification: Conducting Know Your Customer (KYC) checks as required by our licensing obligations, including age verification (21+ enforcement), identity confirmation, and anti-money laundering screening.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and multi-accounting. Monitoring login anomalies and transaction patterns for security purposes.
• Responsible Gaming: Monitoring gaming activity to identify patterns indicative of problem gambling. Administering deposit limits, loss limits, self-exclusion requests, and cool-off periods.
• Regulatory Compliance: Meeting reporting, record-keeping, and disclosure obligations under jp9p's international gaming authority licensing framework and applicable anti-money laundering legislation.
• Customer Support: Responding to account queries, complaints, dispute submissions, and general support requests submitted to the jp9p support team.
• Communications: Sending account-related notifications, transaction confirmations, security alerts, and — where you have opted in — promotional communications about jp9p products, bonuses, and events.
• Platform Improvement: Analysing aggregated technical and usage data to improve the performance, reliability, and user experience of the jp9p Platform.

5. Legal Basis for Processing

jp9p processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of the contract between you and jp9p (the Terms & Conditions), including account administration, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with legal obligations under jp9p's licensing framework, anti-money laundering regulations, and applicable data protection laws.
• Legitimate Interests: Processing carried out in pursuit of jp9p's legitimate interests in operating a secure, compliant, and commercially viable gaming platform — including fraud prevention, security monitoring, and platform analytics — where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your explicit consent, including the sending of marketing and promotional communications. You may withdraw consent at any time by contacting jp9p's support team or using the unsubscribe mechanism in any marketing email.

6. Data Sharing & Disclosure

jp9p does not sell your personal data to third parties. jp9p may share your personal data with the following categories of recipient in the circumstances described:

• Payment Processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers, as necessary to process your deposits and withdrawals in MYR.
• KYC and AML Verification Providers: Third-party identity verification services engaged to carry out document verification and sanctions screening in connection with jp9p's compliance obligations.
• Game Content Providers: Licensed game studios and platform providers whose content is available on jp9p. These providers may receive limited technical and session data as necessary to deliver their games to you.
• Regulatory Authorities: jp9p's licensing authority and other regulatory bodies where disclosure is required under jp9p's licensing conditions or applicable law.
• Law Enforcement: Government authorities, law enforcement agencies, or courts where jp9p is legally required to disclose personal data, or where disclosure is necessary to prevent fraud or other criminal activity.
• Group Companies: Other companies within the jp9p corporate group, where necessary for operational, compliance, or administrative purposes, subject to equivalent data protection safeguards.

7. International Data Transfers

As an internationally licensed gaming platform, jp9p may transfer your personal data to recipients located outside Malaysia. Where such transfers occur, jp9p implements appropriate safeguards to ensure that your personal data receives a level of protection equivalent to that provided under applicable Malaysian data protection requirements and the standards required by jp9p's licensing framework.

These safeguards may include standard contractual clauses, data processing agreements incorporating equivalent protection standards, or reliance on adequacy decisions applicable to the recipient jurisdiction.

8. Data Retention

jp9p retains personal data for the periods set out in the data retention table in Section 3 above, or for such longer periods as may be required by applicable law or jp9p's licensing obligations. The primary driver of extended retention periods for account, financial, and KYC data is jp9p's obligation to maintain records under anti-money laundering and gaming regulatory requirements.

Upon expiry of the applicable retention period, jp9p will securely delete or anonymise personal data in accordance with its data destruction procedures, unless retention is required for the purposes of ongoing legal proceedings or regulatory investigations.

9. Your Data Rights

Subject to applicable law and jp9p's legal obligations, you have the following rights in relation to your personal data held by jp9p:

• Right of Access: You may request a copy of the personal data jp9p holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by jp9p.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jp9p's legal and regulatory retention obligations.
• Right to Restriction: You may request that jp9p restricts processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: You may request that jp9p provide your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to Object: You may object to processing of your personal data based on legitimate interests, and to the sending of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact jp9p's Data Protection contact at: [email protected]. jp9p will respond to valid requests within 30 calendar days. jp9p may request proof of identity before processing data rights requests.

10. Cookies & Tracking Technologies

jp9p uses cookies and similar tracking technologies on the Platform to support essential Platform functionality (session management, jp9p Login authentication persistence), security monitoring, and aggregated platform analytics. Cookies used by jp9p fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that maintain your jp9p login state. These cookies cannot be disabled without preventing access to the Platform.
• Analytics Cookies: Used in aggregated, anonymised form to understand how Players interact with the Platform — page load times, feature usage, navigation paths. Individual players are not identified in this data.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and anomalous access patterns.

jp9p does not use third-party advertising or cross-site tracking cookies. You can manage cookie settings through your browser settings, though disabling strictly necessary cookies will impair Platform functionality.

11. Children's Privacy

The jp9p Platform is strictly intended for adults aged 21 and above. jp9p does not knowingly collect personal data from individuals under the age of 21. If jp9p becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated account closed immediately. jp9p's age verification procedures are designed to prevent under-age access at the point of registration and at first withdrawal.

If you believe that jp9p may have collected personal data from a minor, please contact jp9p's support team immediately at [email protected].

12. Data Security

jp9p implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the jp9p Platform;
• Password hashing using industry-standard algorithms — jp9p never stores passwords in plain text;
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis;
• Two-factor authentication availability for jp9p account login;
• Automated anomaly detection on login and transaction activity;
• Regular security assessments and penetration testing of the Platform infrastructure.

While jp9p takes all reasonable measures to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jp9p will notify affected individuals in accordance with applicable data protection requirements.

13. Third-Party Services

The jp9p Platform integrates services from third-party providers including game studios, payment processors, and KYC verification providers. These providers act as data processors on behalf of jp9p or as independent data controllers in respect of their own processing activities. jp9p is not responsible for the privacy practices of third-party services operating under their own privacy policies. jp9p conducts due diligence on all third-party data processors to ensure adequate data protection standards are maintained.

14. Changes to This Privacy Policy

jp9p reserves the right to update this Privacy Policy at any time. Where changes are material, jp9p will notify registered Players by email or via a prominent notice on the Platform prior to the changes taking effect. The version number and effective date at the top of this page indicate the current applicable version. Your continued use of the jp9p Platform after the effective date of any updated Policy constitutes your acknowledgement of the updated Policy.

15. Contact & Complaints

For any queries, concerns, or requests relating to this Privacy Policy or jp9p's handling of your personal data, please contact the jp9p Data Protection team:

Email: [email protected]
Live Chat: Available 24/7 from within your logged-in jp9p account

If you are not satisfied with jp9p's response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.