Joom99 Privacy Policy – Malaysian User Data Protection

1Information We Collect

Joom99 collects various types of information to keep the platform running smoothly and securely. We only collect data necessary to provide you with the best service as a Malaysian user. No excessive or irrelevant data collection takes place.

Information you provide directly:

• Full name, date of birth, and gender provided during account registration.
• Email address and phone number for verification and communication purposes.
• Bank account details, e-wallet or other payment methods used for deposits and withdrawals.
• Identity verification documents (KYC) such as copies of national ID or passport, proof of address and bank statements.
• Any communications you send to our support team.

Information collected automatically:

• IP address, web browser type, device operating system and screen resolution.
• Login session times, durations, and in-platform activity records.
• Game data including betting history, wins and losses for account management purposes.
• Approximate location data based on IP address to ensure compliance with regional restrictions.
• Cookie and tracking technology information as described in Section 5.

2How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. joom99 uses your personal information exclusively for the following purposes:

We do not use your data to make automated decisions that could significantly affect you without human intervention. Any important decisions regarding your account will go through manual review by our team.

3Sharing Information with Third Parties

Joom99 takes the confidentiality of your data very seriously. We do not sell, rent, or disclose your personal information to third parties except in the following circumstances permitted by law:

• Payment service providers — Transaction information that must be shared with payment processors, banks, and e-wallet providers to facilitate your deposits and withdrawals.
• Technical service providers — Companies that assist us in operating the platform, including server hosting and cybersecurity services, are subject to strict confidentiality agreements.
• Legal compliance — When required by a court, regulatory body, or legitimate law enforcement agency in Malaysia.
• Fraud prevention — Sharing information with trusted industry bodies to detect and prevent cross-platform fraudulent activity.
• Business transfers — In the event of a company merger or acquisition, user data may be transferred as part of the business assets, with notice provided to you.

4Data Security

User data security is an absolute priority for joom99. We continuously invest in the latest security technologies and procedures to ensure your information is always protected against today's increasingly sophisticated threats.

• 256-bit SSL encryption is applied to all data transmitted between your device and our servers, ensuring no third party can intercept the communication.
• An intrusion detection system (IDS) operating 24 hours a day, 7 days a week to identify and respond to any security threats immediately.
• User passwords are stored in hashed form using strong cryptographic algorithms; no one at joom99 can read your password in its original form.
• Multi-layered access controls ensure that only specifically authorised personnel can access user data, and every such access is logged and audited.
• Regular security testing and audits by independent third parties to identify and address any vulnerabilities in our systems.
• A comprehensive incident response plan to address any data breach swiftly and transparently.

While we take all reasonable precautions, no online system can be guaranteed 100% secure. We therefore encourage users to also take personal steps such as using strong passwords, not sharing login credentials, and always logging out after using the platform.

5Cookies & Tracking Technologies

Joom99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies — Required for core platform functions such as login session management and security. Cannot be disabled without affecting platform functionality.
• Performance Cookies — Helps us understand how users interact with the platform for continuous improvement purposes, such as identifying the most frequently visited pages.
• Functional Cookies — Stores your preferences such as language, currency, and other settings so you do not need to reconfigure them each time you log in.
• Marketing Cookies — Used only with your consent to display relevant promotional content. You may withdraw this consent at any time.

You can manage cookie settings through your web browser. Please note that disabling essential cookies may affect your ability to use certain joom99 platform features properly.

6Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own privacy policy, you have the following rights regarding the personal data we hold about you:

• Right of Access — You may request a copy of all personal data we hold about you at any time.
• Right to Rectification — If any data we hold is inaccurate or out of date, you have the right to request prompt correction.
• Right to Erasure — You may request that your personal data be deleted, subject to record-keeping obligations prescribed by law.
• Right to Object — You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Restriction — In certain circumstances, you may request that we restrict how we process your data.
• Right to Data Portability — You may request a copy of your data in a machine-readable format for transfer to another service.

To exercise any of the above rights, please contact our privacy team via email at [email protected]. We will process your request within 30 working days. Identity verification may be required before processing to protect your account security.

7Data Retention Period

Joom99 does not retain your personal data longer than necessary for the purpose it was collected, or as required by applicable laws in Malaysia.

• Active account data is retained for as long as your account remains active and for a minimum of 5 years after account closure to meet financial audit and legal compliance requirements.
• Financial transaction records are retained for a minimum of 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Customer support communication data is retained for 2 years after case resolution for reference and service quality improvement purposes.
• Security logs and activity data are retained for 12 months to assist with security incident investigations when required.

8International Data Transfers

In operating the joom99 platform serving Malaysian users, some data may be processed or stored on servers located outside Malaysia. This occurs primarily when we use trusted cloud computing services or international infrastructure providers.

In all international data transfer cases, joom99 ensures:

• The destination country has a level of data protection equivalent to or higher than Malaysia.
• Appropriate data transfer agreements are finalised with the receiving party before any data is transferred.
• Encryption is applied during data transfers to protect your information throughout transit.
• Full compliance with Malaysia's PDPA is maintained even when data is processed overseas.

9Children's Privacy

The joom99 platform is intended solely for individuals aged 18 and above. We do not knowingly collect, store, or process personal data from anyone under the age of 18.

If we determine that a child's personal data has been collected without our knowledge through false information provided during registration, we will immediately delete that data and terminate the account without any compensation.

10Amendments to This Privacy Policy

Joom99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological requirements, or applicable laws. The "Updated" date at the top of this page indicates the date of the most recent version of this document.

For significant amendments, we will notify users via a prominent notice on the platform or by registered email at least 7 days before the changes take effect. Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to ensure you are always informed about how we protect your information.

11Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your rights regarding personal data, do not hesitate to contact the joom99 privacy team. We are committed to providing clear and accurate responses to every privacy-related enquiry.

• Privacy Email: [email protected]
• Response Time: Within 1 to 3 working days
• Support: 24 hours a day, 7 days a week including public holidays

For formal complaints regarding privacy violations, you also have the right to lodge a complaint directly with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights under the PDPA have been breached.