Privacy Policy

1.Introduction

jp9 ("jp9", "we", "us", or "our") operates the online gaming and sports betting platform accessible at jp9.app ("Platform"). This Privacy Policy ("Policy") applies to all personal data processed in connection with your use of the Platform, including data collected during account registration, identity verification, payment processing, customer support interactions, and general Platform use.

By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

jp9 takes the privacy of Malaysian players seriously. The Platform is designed and operated for adult users aged 21 and above, and the personal data we collect reflects the legal and regulatory obligations associated with operating a licensed online gaming service.

2.Personal Data We Collect

jp9 collects personal data in the following categories depending on how you interact with the Platform:

jp9 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless such information is voluntarily provided by a Player in the context of a responsible gaming interaction (for example, disclosing a gambling-related health concern to the support team).

3.How We Use Your Personal Data

jp9 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your jp9 account, including authentication, account settings management, and account communications;
• Transaction processing: To process MYR deposits, withdrawals, and bonus transactions through integrated Malaysian payment channels including Touch n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB, and Public Bank;
• Identity verification (KYC/AML): To verify your identity and age in compliance with anti-money laundering obligations and our internal responsible gaming policies, including confirming that all players are aged 21 or above;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other violations of jp9's Terms & Conditions;
• Legal compliance: To comply with applicable laws, regulations, court orders, and requests from competent regulatory or law enforcement authorities;
• Customer support: To respond to your queries, complaints, and responsible gaming requests submitted via Live Chat, WhatsApp, or email;
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the functionality, performance, and content of the jp9 Platform;
• Responsible gaming: To monitor gaming behaviour for patterns consistent with problem gambling and to administer self-imposed responsible gaming tools (deposit limits, self-exclusion, cooling-off periods);
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have consented to receive such communications. You may opt out at any time by contacting [email protected].

4.Legal Basis for Processing

jp9 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and provision of Games — is necessary for the performance of the Player Account agreement;
• Legal obligation: Processing required to comply with anti-money laundering laws, age verification obligations, and requests from competent authorities;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and Platform improvement — where these interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications, where jp9 has obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.Data Sharing & Disclosure

jp9 does not sell your personal data to third parties. jp9 may share your personal data with the following categories of recipients where necessary:

• Payment processors and e-wallet providers: Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank (FPX), and other payment service providers, for the purpose of processing your transactions;
• Game content providers: Certified game studios (such as Evolution Gaming, Pragmatic Play, PG Soft, Habanero) receive limited technical session data necessary to deliver game content — they do not receive your identity or financial data;
• Identity verification services: Third-party KYC and AML screening providers used to verify your identity and conduct required due diligence checks;
• Fraud detection services: Third-party fraud and risk analytics providers who process technical and behavioural data to assist jp9 in identifying suspicious activity;
• Legal and regulatory authorities: Courts, law enforcement agencies, financial intelligence units, and regulatory bodies, where jp9 is required by law or court order to disclose data;
• Professional advisers: Lawyers, auditors, and compliance consultants, subject to confidentiality obligations, where necessary for jp9's legitimate business operations.

All third-party service providers engaged by jp9 are contractually required to process personal data only on jp9's instructions and to maintain appropriate technical and organisational security measures.

6.Cookies & Tracking Technologies

jp9 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help jp9 operate the Platform correctly and analyse usage patterns.

jp9 uses the following types of cookies:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality;
• Functional cookies: Store your preferences such as language settings and "Remember me" login state;
• Analytics cookies: Collect anonymised information about how visitors use the Platform (pages visited, session duration, error reports) to help jp9 improve the user experience;
• Fraud prevention cookies: Assist in identifying and blocking suspicious login and transaction patterns.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect Platform functionality. jp9 does not use third-party advertising cookies or retargeting pixels.

7.Data Retention

jp9 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal minimum retention requirements:

• Account data and transaction records: Retained for a minimum of 5 years from the date of the last transaction or account closure, in compliance with anti-money laundering and financial record-keeping obligations;
• KYC documentation: Retained for a minimum of 5 years from account closure or the completion of the relevant transaction;
• Customer support records: Retained for 3 years from the date of the interaction;
• Technical and log data: Retained for 12 months and then aggregated or deleted;
• Marketing consent records: Retained until consent is withdrawn and for a further 12 months thereafter as evidence of consent.

Upon expiry of the relevant retention period, jp9 will securely delete or anonymise personal data such that it can no longer be attributed to an identifiable individual.

8.Data Security

jp9 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jp9's servers;
• Encryption of sensitive data fields (including passwords and financial identifiers) at rest using industry-standard algorithms;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Rate limiting and automated detection of suspicious login patterns;
• Two-factor authentication (2FA) available to all registered players;
• Regular security assessments and penetration testing by independent security specialists;
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach within the timeframe required by applicable law.

While jp9 takes data security seriously, no method of transmission over the internet or method of electronic storage is 100% secure. jp9 cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials.

9.Your Data Rights

Subject to applicable law and jp9's legitimate interests and legal obligations, you have the following rights in respect of the personal data jp9 holds about you:

• Right of access: Request a copy of the personal data jp9 holds about you (subject access request);
• Right to rectification: Request correction of inaccurate or incomplete personal data — note that corrections to identity data will require supporting verification documentation;
• Right to erasure: Request deletion of personal data where there is no legitimate reason for jp9 to continue processing it — note that jp9 may be required by law to retain certain data for minimum statutory periods, which supersede erasure requests;
• Right to restriction: Request that jp9 restrict processing of your data in certain circumstances (for example, while jp9 investigates an accuracy dispute);
• Right to data portability: Request a copy of your data in a structured, commonly used, machine-readable format where processing is based on consent or contract;
• Right to object: Object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent: Withdraw consent for marketing communications at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". jp9 will respond within 30 days of receipt of a valid, complete request. jp9 may require identity verification before processing data rights requests to ensure data is not disclosed to unauthorised persons.

10.Children & Minors

jp9 employs age verification procedures at registration and during KYC checks to prevent access by persons under 21 years of age. If jp9 discovers that personal data has been collected from a person under 21, that Account will be closed immediately, all associated data will be deleted to the extent permitted by applicable law, and any deposits will be returned to the verified payment method.

If you are a parent or guardian and believe a minor in your care has accessed jp9, please contact [email protected] immediately with the relevant Account details.

11.International Data Transfers

jp9's Platform is operated from servers that may be located in jurisdictions outside of Malaysia. Where personal data is transferred to jurisdictions that do not provide a level of data protection equivalent to Malaysia, jp9 will implement appropriate safeguards to ensure your data remains protected, including:

• Standard contractual clauses with data recipients requiring them to protect your data in accordance with this Policy;
• Adequacy determinations where applicable;
• Binding corporate rules for intra-group transfers, where applicable.

By using the jp9 Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards described above.

12.Third-Party Services & Links

The jp9 Platform may contain references to or integrations with third-party services (including payment gateways and game studio platforms). These third-party services operate under their own privacy policies, which jp9 does not control. jp9 is not responsible for the privacy practices of third-party services accessed in connection with using the Platform.

jp9 recommends that you review the privacy policies of any third-party service providers (including your payment provider) before submitting personal data to them.

13.Changes to This Privacy Policy

jp9 may update this Privacy Policy from time to time to reflect changes in its data processing practices, legal requirements, or Platform services. Material changes will be communicated via email to your registered address and/or via a prominent notice on the Platform, with a minimum of 7 days' advance notice before the amended Policy takes effect, except where immediate amendment is required by law.

The date at the top of this Policy reflects when it was last updated. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, you should close your Account and request withdrawal of any Wallet balance.

This Policy was last updated on 1 June 2026. A version history is available upon request to [email protected].

14.Contact Us

For data privacy queries, subject access requests, or concerns about how jp9 handles your personal data, please contact jp9's data team using the following details:

• Email: [email protected] (mark your email "Privacy / Data Request" for priority routing)
• Live Chat: Available 24/7 via the jp9 Platform
• WhatsApp: Available 24/7 — contact details provided in-platform post-login

jp9 will acknowledge data privacy requests within 5 business days and will provide a substantive response within 30 calendar days. Where a request is complex or jp9 receives a high volume of requests, this period may be extended by a further 60 days — in such cases, jp9 will notify you of the extension and the reasons for it.