This Privacy Policy ("Policy") applies to all personal data processed by jp9j ("we", "us", "the Platform") in connection with your use of jp9j.com and any associated services. By creating an account or using the jp9j platform, you acknowledge that you have read and understood this Policy. If you do not agree to the practices described herein, please do not use the platform.
1. Introduction
jp9j is committed to protecting the privacy and security of all personal data entrusted to us by players, visitors and prospective users of our platform. We understand that your personal information is sensitive, and we treat it with the seriousness it deserves. This Policy has been prepared to be clear, direct and readable — not to obscure our practices in legal boilerplate.
jp9j operates as a licensed online gaming platform serving Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar and beyond. This Policy governs all data we collect via jp9j.com, our mobile-optimised web interface, live chat tools, email correspondence, and through payment processing channels. It should be read in conjunction with our Terms & Conditions and Responsible Gaming policy.
2. Data We Collect
jp9j collects personal data in the following categories, depending on how you interact with the platform:
Registration & Account Data
- Full legal name as it appears on your MyKad or passport.
- Date of birth (used for age verification — jp9j enforces a strict 21+ requirement).
- Malaysian mobile phone number and email address.
- Residential address.
- Chosen username and hashed password credentials.
Identity Verification (KYC) Data
- Copies of government-issued identification documents (MyKad, passport).
- Proof of address documentation (utility bill, bank statement).
- Selfie or photographic verification where required by our compliance team.
Financial & Transaction Data
- Deposit and withdrawal transaction records, including amounts, timestamps and reference numbers.
- Payment method identifiers (e-wallet account numbers, bank account last digits) — jp9j does not store full payment credentials on its servers.
- Transaction history linked to your jp9j account wallet.
Gaming & Betting Activity Data
- Bet history, game session logs, win/loss records and wager amounts across all jp9j products.
- Bonus uptake, promotion eligibility history and reward redemptions.
Technical & Usage Data
- IP address and approximate geolocation data at time of login.
- Device type, operating system, browser type and version.
- Session duration, page interaction patterns and feature usage within the jp9j platform.
- Live chat transcripts and support ticket records.
3. How We Use Your Data
jp9j uses personal data for the following purposes:
- Account Management: Creating, maintaining and securing your jp9j account, including processing jp9j login requests and managing account preferences.
- Age & Identity Verification: Confirming that you meet the 21+ age requirement and that your identity matches the account holder on file, as required by our licensing obligations.
- Payment Processing: Facilitating deposits via Touch 'n Go eWallet, Boost, DuitNow, Maybank2u, CIMB and Public Bank, and processing withdrawal requests to your verified payment method.
- Anti-Money Laundering (AML) Compliance: Monitoring transactions and account activity for suspicious patterns as required by international gaming authority regulations and financial crime prevention obligations.
- Customer Support: Responding to enquiries submitted via live chat or email, investigating account issues and resolving disputes.
- Platform Improvement: Analysing anonymised and aggregated usage data to improve the jp9j product — including game performance, load times, payment flow and navigation.
- Responsible Gaming: Monitoring gaming patterns to identify indicators of problem gambling and, where appropriate, proactively reaching out to offer self-exclusion tools or support resources.
- Marketing Communications: Sending promotional offers, bonus alerts and platform updates to players who have opted in to receive them. You may opt out at any time via account settings or by contacting support.
- Legal & Regulatory Obligations: Retaining records and responding to lawful requests from regulatory or law enforcement authorities.
4. Legal Basis for Processing
jp9j processes your personal data on the following legal grounds:
- Contractual Necessity: Processing required to fulfil our obligations under the jp9j Terms & Conditions, including account management, payment processing and game delivery.
- Legal Obligation: Processing required to comply with AML legislation, KYC requirements, and directions from our licensing authority.
- Legitimate Interests: Processing for fraud prevention, platform security, abuse detection and internal analytics, where these interests are not overridden by your fundamental rights.
- Consent: Processing for optional marketing communications, where you have explicitly opted in. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
5. Data Sharing & Disclosure
jp9j does not sell, rent or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly for the purposes set out in this Policy:
- Payment Service Providers: Touch 'n Go, Boost, DuitNow gateway operators and Malaysian banking institutions, solely to process your deposit and withdrawal transactions.
- Game Content Providers: Licensed game studios (such as Pragmatic Play, PG Soft and similar) may receive anonymised session data as required for RNG certification and game performance auditing. These providers do not receive your identifiable personal data.
- KYC & Identity Verification Platforms: Third-party verification services contracted by jp9j to confirm identity documents. These services are bound by strict confidentiality and data processing agreements.
- Regulatory Authorities: jp9j may be required to disclose data to our licensing authority, law enforcement agencies or financial intelligence units in response to lawful orders or regulatory requirements.
- Fraud Prevention Services: Industry-standard fraud detection platforms used to protect jp9j and its players from account takeover, payment fraud and bonus abuse.
Any third party with whom jp9j shares data is contractually required to handle that data in accordance with applicable data protection law and jp9j's data processing requirements.
6. Cookies & Tracking Technologies
jp9j uses cookies and similar tracking technologies on jp9j.com to support the operation of the platform. These include:
- Strictly Necessary Cookies: Required for core platform functionality — session authentication, jp9j login state persistence, and security tokens. These cannot be disabled without impairing your ability to use the platform.
- Performance Cookies: Anonymous analytics data used to measure page performance, identify technical errors and improve user experience. No personally identifiable information is included in these reports.
- Preference Cookies: Used to remember your language preferences and display settings within the jp9j platform.
You may configure your browser to refuse or delete cookies. Note that disabling strictly necessary cookies will affect core functionality, including the ability to stay logged in to your jp9j account.
7. Data Retention
jp9j retains personal data for as long as is necessary for the purposes for which it was collected, or as required by law. Specific retention periods include:
- Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, as required by our licensing authority for AML audit purposes.
- KYC & Verification Documents: Retained for a minimum of five (5) years following the end of the business relationship, in line with financial crime prevention requirements.
- Transaction Records: Retained for a minimum of seven (7) years in accordance with financial record-keeping obligations.
- Support Correspondence: Retained for up to three (3) years following the resolution of the relevant matter.
- Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period to evidence compliance.
8. Security Measures
jp9j implements technical and organisational security measures appropriate to the sensitivity of the data we hold. These include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and jp9j servers.
- Passwords stored using one-way cryptographic hashing — jp9j staff cannot access your password in plain text.
- Two-Factor Authentication (2FA) available to all registered players via account settings.
- Real-time session monitoring with automatic alerts for login activity from unrecognised devices or locations.
- Role-based internal access controls, ensuring that only authorised staff with a legitimate business need can access personal data.
- Regular security audits and penetration testing by independent third-party specialists.
No system is entirely immune from security risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jp9j will notify affected individuals in accordance with our obligations under applicable law.
9. Your Data Rights
Subject to applicable law, you have the following rights in relation to your personal data held by jp9j:
- Right of Access: Request a copy of the personal data jp9j holds about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data where there is no overriding legal ground for its continued retention.
- Right to Restriction: Request that jp9j temporarily suspends processing of your data in certain circumstances.
- Right to Data Portability: Request a structured, machine-readable copy of personal data you have provided to jp9j.
- Right to Object: Object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.
- Right to Withdraw Consent: Withdraw consent for optional marketing communications at any time, without affecting prior processing.
To exercise any of the above rights, contact the jp9j support team via live chat or by email at [email protected]. jp9j will respond to all verified data subject requests within thirty (30) days. Complex or multiple requests may require up to ninety (90) days, with prior notification.
10. Children & Minors
jp9j strictly prohibits access by persons under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. If jp9j becomes aware that a person under the age of 21 has registered an account or provided personal data, we will immediately suspend the account, delete the associated data and refund any deposits made, less any bonus funds already used. If you believe a minor has registered on jp9j, please contact our support team immediately.
11. International Data Transfers
jp9j may transfer personal data to service providers and infrastructure partners located outside Malaysia, including in jurisdictions where jp9j's licensing authority is based. All such transfers are conducted under appropriate data transfer safeguards, including contractual clauses that require recipient entities to protect your data to standards equivalent to those applied within Malaysia. jp9j does not transfer personal data to countries that do not provide adequate data protection standards without first implementing appropriate safeguards.
12. Third-Party Services & Links
The jp9j platform may contain references to third-party game providers, payment gateways and technology vendors. This Privacy Policy applies solely to data collected and processed by jp9j directly. Third-party services accessed through jp9j are governed by their own privacy policies, which jp9j does not control. We encourage you to review the privacy practices of any third-party service you interact with through the platform.
13. Updates to This Policy
jp9j reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or platform functionality. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect, where practicable. The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of jp9j following the effective date of any update constitutes your acceptance of the revised Policy.
14. Contact & Data Protection Enquiries
If you have questions, concerns or requests relating to this Privacy Policy or jp9j's data practices, please contact our support team:
- Live Chat: Available 24/7 in English and Bahasa Malaysia via the jp9j platform.
- Email: [email protected] (plain text — not a clickable link).
jp9j aims to acknowledge all data-related enquiries within two (2) business days and to resolve them within thirty (30) days of receipt.
21+
jp9j is strictly an adult platform for players aged 21 and above. Gambling carries real financial risk. Visit our Responsible Gaming page for self-exclusion tools and support resources. Play responsibly.