Privacy Policy

This Privacy Policy ("Policy") is issued by jp99a ("we", "us", "our", "the Platform") and applies to all personal data collected through the jp99a website at https://jp99a.cam, any associated mobile interfaces, live chat, email communications, and all other interactions between you and jp99a.

jp99a operates as an online casino and sports betting platform serving Malaysian players and other permitted users. We take our obligations under applicable data protection legislation seriously. This Policy is designed to be transparent, plain-language, and comprehensive — we do not bury data practices in fine print.

By registering an Account with jp99a, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to request Account closure.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably identify you as a natural person, including your name, email address, phone number, date of birth, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means jp99a in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of jp99a under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC Data" means identity and address documentation collected for Know Your Customer verification purposes, including copies of government-issued identification and proof of address.
• "Cookies" means small data files placed on your device by the Platform to enable functionality, analytics, and session management.
• "Platform" means the jp99a website, all sub-pages, APIs, and associated digital services accessible at https://jp99a.cam.

jp99a collects Personal Data through multiple channels. The categories and specific data points collected are set out below.

3.1 Registration Data

When you create an Account, we collect:

• Full legal name
• Date of birth (to verify you meet the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address and country
• Username and encrypted password

3.2 KYC Verification Data

To comply with anti-money laundering (AML) obligations and to verify your identity before processing withdrawals, we may collect:

• Copy of government-issued photo identification (MyKad, passport, or driver's licence)
• Proof of residential address (utility bill or bank statement issued within the last three months)
• Proof of payment method ownership (screenshot or statement from your Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, or other registered payment account)
• Source of funds declaration (where required for higher transaction volumes)

3.3 Transaction Data

All financial interactions with the Platform generate transaction records, including:

• Deposit amounts, dates, and payment method identifiers
• Withdrawal requests and processing status
• Bonus credits, redemptions, and wagering history
• Cryptocurrency wallet addresses used for USDT deposits or withdrawals

3.4 Gameplay Data

jp99a records gameplay activity for the purposes of account integrity, dispute resolution, and responsible gambling monitoring, including:

• Games played, bet sizes, and game outcomes
• Session start and end times
• Sports betting markets accessed, odds accepted, and settlement outcomes
• Usage of responsible gambling tools (deposit limits set, self-exclusion requests)

3.5 Technical & Device Data

Automatically collected when you access the Platform:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Pages visited, click paths, and time spent on Platform sections
• Referral source (how you arrived at the Platform)

3.6 Communications Data

Records of any communications you initiate with jp99a, including live chat transcripts, support email correspondence, and feedback submissions.

jp99a processes your Personal Data on one or more of the following legal grounds, depending on the nature of the processing activity:

Where jp99a relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing already carried out prior to withdrawal.

jp99a uses the Personal Data we collect for the following purposes:

• Account Services: To create, maintain, and manage your Account; to process deposits and withdrawals via methods such as Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, and USDT; and to provide access to all Platform features.
• Identity Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity for KYC and AML compliance purposes.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat and email, 24 hours a day, 7 days a week.
• Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, duplicate accounts, bonus abuse, and other prohibited activity as described in our Terms & Conditions.
• Responsible Gambling: To monitor gameplay patterns for signs of problem gambling behaviour, to implement self-imposed limits you have configured, and to facilitate self-exclusion requests.
• Platform Improvement: To analyse usage data and improve the performance, functionality, and user experience of the jp99a Platform.
• Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and relevant gaming content by email or in-platform notification. You may opt out at any time.
• Legal Compliance: To meet obligations imposed by applicable laws and regulations, including responding to lawful requests from regulatory bodies or law enforcement authorities.

jp99a does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Payment Processors

To process your deposits and withdrawals, we share transaction data with our payment processing partners, including e-wallet operators (Touch 'n Go, Boost, GrabPay), bank transfer gateways supporting FPX, DuitNow, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect, and cryptocurrency settlement services for USDT (TRC20 / ERC20) transactions. These processors are bound by contractual data protection obligations and may only use shared data for transaction processing.

6.2 Identity Verification Providers

KYC documentation submitted by you is processed by authorised third-party identity verification service providers. These providers confirm the authenticity of documents and perform checks against relevant sanctions and watchlists. They are bound by confidentiality agreements and applicable data protection law.

6.3 Fraud & AML Service Providers

jp99a uses specialist fraud detection and anti-money laundering screening tools. These services may receive limited transactional and device data to perform risk scoring. No sensitive identity documents are shared with fraud service providers beyond what is necessary for the specific check being performed.

6.4 Regulatory & Law Enforcement Authorities

jp99a may be required to disclose Personal Data to regulatory bodies, licensing authorities, or law enforcement agencies where required by applicable law, regulation, court order, or legal process. jp99a will endeavour to notify affected players of any such disclosure where legally permitted to do so.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of substantially all of jp99a's assets, your Personal Data may be transferred to the acquiring entity as part of the transaction. jp99a will notify affected players of any such transfer and ensure that the acquiring entity agrees to honour this Privacy Policy.

jp99a uses cookies and similar tracking technologies to enable essential Platform functionality, analyse usage patterns, and improve user experience. The categories of cookies we use are described below.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will significantly impair your ability to use the Platform, including logging into your Account and processing payments.

jp99a retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, to comply with applicable legal obligations, and to resolve any disputes that may arise.

After the applicable retention period expires, Personal Data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

jp99a implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS / SSL): All data transmitted between your device and the jp99a Platform is encrypted using 256-bit TLS encryption. You should always verify that your browser shows a secure connection (https://) when using the Platform.
• Encryption at Rest: Sensitive data fields, including KYC documents and payment method details, are encrypted in our database storage systems using AES-256 or equivalent encryption standards.
• Access Controls: Access to Personal Data is restricted to authorised jp99a personnel on a need-to-know basis. All staff with access to Personal Data are required to complete data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): jp99a systems and internal administrative access are protected by multi-factor authentication.
• Regular Security Audits: jp99a undergoes periodic penetration testing and security audits conducted by qualified third-party cybersecurity professionals.
• Data Breach Response: jp99a maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify affected individuals and relevant regulatory authorities within the time frames required by applicable law.

jp99a operates internationally, and your Personal Data may be transferred to and processed in countries outside of Malaysia for the purposes described in this Policy. This may include transfers to countries where jp99a's servers, data processors, or KYC service providers are located.

Where Personal Data is transferred internationally, jp99a ensures that appropriate safeguards are in place, including contractual clauses between jp99a and its data processors that require equivalent data protection standards to those applied within jp99a's operating jurisdiction.

Malaysian players should note that Malaysia has its own data protection framework under the Personal Data Protection Act 2010 (PDPA). jp99a respects the principles of the PDPA to the extent applicable to its operations serving Malaysian users, including the principles of general consent, use limitation, and disclosure limitation.

Subject to applicable law and certain limited exceptions (such as ongoing legal obligations that require us to retain specific data), you hold the following rights with respect to your Personal Data held by jp99a:

To exercise any of the above rights, please submit a written request to [email protected] with "Data Rights Request" in the subject line. jp99a will acknowledge your request within 5 business days and respond substantively within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days with prior written notice.

jp99a may need to verify your identity before processing a data rights request. We will ask you to provide information sufficient to confirm you are the account holder before taking any action.

jp99a strictly prohibits the use of its Platform by any person under the age of 21. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under 21 years of age.

jp99a implements age verification checks during the Account registration process and as part of KYC verification. If jp99a discovers or is notified that Personal Data has been collected from a person under 21 years of age, it will immediately take steps to close that Account, return any deposited funds, and delete all associated Personal Data as soon as practicable.

The jp99a Platform may contain references to third-party payment providers and services (such as Touch 'n Go, Boost, GrabPay, Maybank2u, and CIMB Clicks) that operate under their own independent privacy policies. jp99a is not responsible for the data practices of these third parties.

When you are redirected to a payment gateway or e-wallet application to complete a transaction, that interaction is governed by the privacy policy of the respective service provider. We encourage you to review the privacy policies of all third-party services you interact with. jp99a's responsibility for data protection ends at the point of handover to a third-party service.

jp99a reserves the right to update or revise this Privacy Policy at any time. When we make material changes to this Policy — such as changes to how we share data or introduce new data processing activities — we will provide advance notice via a Platform notification and/or email to your registered address.

For non-material changes (such as typographical corrections or clarifications that do not alter data processing practices), the updated Policy will take effect upon publication with the updated date noted at the top of this page.

Your continued use of the jp99a Platform following any revision to this Policy constitutes your acceptance of the revised terms. If you do not agree to any revised Policy, you have the right to request Account closure and data deletion as described in Section 11.

For any privacy-related questions, data rights requests, or concerns regarding this Privacy Policy, please contact jp99a's Data Protection team through the channels below. Our team handles all privacy enquiries with confidentiality and responds within the time frames stated in Section 11.

jp99a serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. All privacy requests are handled with equal priority regardless of the player's location within Malaysia.