JD99 Privacy Policy – Player Data Protection Malaysia

JD99 collects personal information only when necessary for legitimate purposes related to the operation of our platform and the services we offer. The following are the types of information we may collect from you:

• We only collect information that is necessary for the stated purposes. The principle of data minimisation is observed across all collection processes.
• For players using Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay as a payment method, we only receive transaction confirmations from the respective providers — not your full account details.
• The information you provide during registration must be accurate and up to date. You are responsible for updating your details should any changes occur.

JD99 uses the personal data collected solely for legitimate and transparent purposes, as follows:

• Account management: Creating and managing your player account, processing registration, identity verification, and password management.
• Transaction processing: Processes deposits, withdrawals, and all financial transactions in MYR via your chosen Malaysian payment method.
• Platform security: Detecting and preventing fraud, money laundering, account misuse, and other security threats to the platform and its players.
• Customer support: Providing technical assistance and responsive customer service whenever you reach out to the JD99 support team.
• Platform improvements: Analysing aggregated and anonymised usage patterns to improve the user experience, platform performance, and game variety.
• Legal compliance: Complying with legal obligations including the Malaysia PDPA 2010, anti-money laundering (AML) requirements, and any other applicable regulatory requirements.
• Marketing communications: Sends information about promotions, bonuses, and new offers — but only where you have given your consent, and you may opt out of such communications at any time.
• Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to players who may need support through our responsible gaming programme.

JD99 does not sell, rent, or trade your personal data. However, in very limited circumstances, we may share certain information with the following parties:

• Payment service providers: Third-party payment gateways that process your transactions via Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and ShopeePay. They receive only the minimum information required to complete each transaction.
• Technology service providers: Companies that assist us in managing the platform's technical infrastructure, including server hosting and cybersecurity services. All such parties are bound by strict confidentiality agreements.
• Malaysian statutory authorities: In cases where we are legally required to disclose information to authorities such as Bank Negara Malaysia, the PDRM, or other statutory bodies in the course of a lawful investigation, we will comply with such directives.
• Game providers: Anonymous game data (not personal identity) may be shared with slots, Live Casino, and other game providers for fairness and game audit purposes.

JD99 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse:

• Data encryption in transit: All communications between your device and JD99's servers are encrypted using TLS 1.3 protocol with valid 256-bit SSL certificates that are regularly updated.
• Encryption of stored data: Sensitive data such as passwords is stored in an irreversible hashed format. Financial information is encrypted at the database level.
• Multi-layered access controls: Only authorised staff with a legitimate operational need may access player data. Access is governed by the principle of least privilege.
• 24/7 monitoring: A 24-hour security monitoring system detects any suspicious activity, with immediate action taken whenever a threat is identified.
• Regular penetration testing: JD99 undergoes regular security testing and audits by independent third parties to identify and address any vulnerabilities in the system.
• Incident response procedure: In the event of any data breach, JD99 has a clear response procedure to notify affected players and the relevant authorities within the timeframe stipulated by the PDPA.

The JD99 platform uses cookies and similar tracking technologies to enhance your user experience. Below is a detailed explanation of how we use cookies:

• Essential session cookies (Required): Required to enable core platform functions such as staying logged in, retaining your betting cart contents, and maintaining session security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies (Analytics): Collects anonymous information about how visitors use the platform — which pages are visited most, how long sessions last, and where traffic comes from. This data is used to improve the platform.
• Functional cookies (Optional): Saves your preferences such as selected language, display settings, and login information so you do not have to re-enter them each time.
• Managing cookies: You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and your experience on the JD99 platform.

Under the Malaysia Personal Data Protection Act (PDPA) 2010 and JD99's policies, you have the following important rights regarding your personal data:

JD99 does not retain your personal data for longer than is necessary for legitimate purposes. The following outlines our data retention guidelines:

• Active account data: Retained for as long as your account remains active on the JD99 platform. This data is required for account management, transaction processing, and legal compliance.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's anti-money laundering and tax-related legal requirements.
• Support communication logs: Customer support conversation records are kept for 2 years for reference and service improvement purposes.
• Closed account data: After account closure, personal information will be deleted within 90 days, except for data that must be retained to fulfil legal obligations such as financial records.
• Cookies and analytics data: Anonymous tracking data is stored for a maximum of 2 years before being automatically deleted.
• Early deletion request: If you request data deletion before the normal retention period has ended, we will honour that request except where retention is required by law.

JD99 takes the protection of children and minors extremely seriously:

• The JD99 platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.
• If we discover that personal data belonging to an individual under the age of 18 has been collected, we will take immediate steps to delete that data and close the account in question.
• If you are a parent or guardian and believe your child has registered or is using the JD99 platform, please contact us immediately at support@jd99.online and we will take prompt action.
• JD99 uses an age verification system during registration to ensure only individuals who meet the minimum age requirement are able to sign up.

• JD99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or platform operations.
• When material changes are made, we will notify players via in-platform notifications or email to the registered address. The "Last Updated" date at the top of this document will be updated to reflect the latest version.
• Continued use of the JD99 platform following any changes to this Privacy Policy constitutes acceptance of the revised policy.
• We recommend checking this page periodically to stay informed about how we protect your information. This Privacy Policy was last updated in January 2026.
• Previous versions of this Privacy Policy are available upon request by contacting our support team.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, there are several ways to reach the JD99 privacy team:

• Privacy Email: Send your request to support@jd99.online with the subject line "Data Privacy Request", along with your JD99 account username and the type of request being made.
• 24/7 Live Chat: Use the live chat function within the JD99 platform when you are logged in. Our team is available at all times, including weekends and Malaysian public holidays.
• Response time: We aim to respond to all privacy-related enquiries within 14 working days. For more complex matters such as data deletion requests, this period may be extended, but you will be kept informed of progress throughout.
• Identity verification: For requests involving access to, transfer of, or deletion of data, we may need you to verify your identity first in order to protect the security of your account and data.