Privacy Policy — jomain99

This Privacy Policy ("Policy") is issued by jomain99 ("jomain99", "we", "us", "our"), the operator of the online gaming platform accessible at jomain99.cam ("Platform"). This Policy governs the collection, processing, storage, and disclosure of personal data relating to players, prospective players, and visitors to the Platform ("you", "your", "User").

jomain99 serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We are committed to handling your personal data responsibly and in compliance with applicable data protection laws and regulations.

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, which are incorporated by reference.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Subject" means any identified or identifiable natural person whose Personal Data is processed by jomain99 — in the context of this Policy, this primarily means registered Players.
• "KYC Data" means identity and address verification documents collected as part of the Know Your Customer process, including copies of government-issued identification, proof of address, and selfie photographs.
• "Cookies" means small text files placed on a User's device by the Platform for the purpose of recognising the device, maintaining session state, and analysing usage patterns.
• "Third Parties" means entities other than jomain99 and the Data Subject, including payment processors, game software providers, and analytics service providers.

jomain99 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Registration Data

When you create an Account, we collect:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Malaysian mobile phone number
• Residential address (including city: e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Username and encrypted password
• Preferred currency (Malaysian Ringgit / MYR)

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) and Know Your Customer (KYC) obligations, we collect:

• Copy of government-issued photo identification (Malaysian MyKad, Driver's Licence, or valid Passport)
• Proof of residential address (utility bill, bank statement, or telecommunications bill dated within 3 months)
• Selfie photograph of the Player holding their identity document
• Proof of ownership of the payment method used to fund the Account

3.3 Financial Data

We collect transaction records associated with your Account, including:

• Deposit and withdrawal amounts and dates
• Payment method identifiers (e.g., masked bank account numbers, e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, DuitNow, FPX)
• Cryptocurrency wallet addresses (for BTC and USDT transactions)
• Account balance history

3.4 Gaming & Betting Activity Data

• Bet history, game session logs, and wagering records
• Sports betting selections (including Liga Super Malaysia, EPL, UFC, and other markets)
• Bonus and promotional activity records
• Responsible gambling tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited, time spent on the Platform, and navigation patterns
• Login timestamps and session duration

3.6 Communications Data

• Records of live chat conversations with our support team
• Email correspondence relating to your Account
• Marketing communication preferences

jomain99 collects personal data through the following channels:

jomain99 processes your personal data for the following purposes:

5.1 Account Management and Service Delivery

We process your Registration Data and Financial Data to create and maintain your Account, verify your identity, process deposits and withdrawals via Malaysian payment methods (DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency), deliver gaming and sports betting services, and provide customer support.

5.2 Regulatory Compliance

We are required to process KYC Data and Financial Data to fulfil our anti-money laundering (AML) obligations, verify the age and identity of all Players (21+ requirement), detect and prevent fraud and account abuse, and comply with applicable reporting requirements.

5.3 Responsible Gambling

We process Gaming Activity Data and Account settings to operate responsible gambling tools including deposit limits, session time controls, reality check alerts, and self-exclusion. This processing is in the interest of player wellbeing and is a core part of our responsible gambling commitment.

5.4 Platform Improvement and Analytics

We process Technical and Usage Data in aggregated and anonymised form to analyse Platform performance, understand player behaviour, improve the user interface, and optimise our game library and sports betting markets.

5.5 Marketing Communications

Where you have opted in to receive marketing communications, we may use your email address and contact details to send you information about promotions, bonuses, and new features on jomain99. You may withdraw this consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing email.

jomain99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable AML regulations, KYC requirements, and other statutory obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling enforcement, and analytics where such interests are not overridden by your rights.
• Consent: Processing of data for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

jomain99 does not share your personal data with third parties except in the following limited and controlled circumstances:

• Payment Processors: We share necessary transaction data with our payment processing partners (including providers supporting DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency networks) solely for the purpose of processing your deposits and withdrawals.
• Game Software Providers: Game session data may be shared with our licensed game software providers for the purpose of delivering gameplay, resolving disputes, and auditing game outcomes. These providers operate under strict data processing agreements.
• Identity Verification Services: KYC documents may be shared with third-party identity verification service providers for the purpose of verifying your identity and age. Such providers are contractually bound to process your data solely for verification purposes.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulators, or courts where required by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of jomain99, its players, or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third-party processors engaged by jomain99 are subject to contractual data processing obligations that require them to maintain the confidentiality and security of your data and to process it only in accordance with our documented instructions.

The jomain99 Platform uses cookies and similar tracking technologies to operate the Platform effectively, enhance your user experience, and analyse site usage. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core functionality of the jomain99 Platform. However, some features such as personalised recommendations may be limited.

jomain99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your active Account, plus a minimum of 5 years following Account closure, to fulfil AML and regulatory reporting obligations.
• KYC Documents: Retained for a minimum of 5 years following Account closure or the completion of the business relationship, in compliance with applicable AML requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Customer Support Records: Retained for 3 years from the date of each interaction.
• Marketing Consent Records: Retained for the duration of your marketing subscription plus 2 years following withdrawal of consent.
• Technical and Usage Data: Retained in anonymised, aggregated form indefinitely for analytics purposes. Identifiable usage logs are deleted after 12 months.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our internal data destruction procedures.

jomain99 implements a comprehensive suite of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between the Platform and your browser is encrypted using industry-standard SSL/TLS protocols — the same technology used by major Malaysian financial institutions.
• Password Hashing: Account passwords are stored as one-way cryptographic hashes. jomain99 staff cannot retrieve your plaintext password.
• Access Controls: Access to personal data within jomain99's systems is restricted on a strictly need-to-know basis. All staff with data access are subject to confidentiality obligations.
• Multi-Factor Authentication: Internal systems containing personal data require multi-factor authentication for staff access.
• Fraud Detection Systems: Automated fraud detection systems monitor account activity around the clock to identify and respond to suspicious activity.
• KYC Document Security: Identity documents are stored in encrypted, access-controlled document management systems separate from general operational databases.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. We encourage Players to use strong, unique passwords for their jomain99 Account and to contact our support team immediately if they suspect their Account has been compromised.

Subject to applicable law, you have the following rights in respect of your personal data held by jomain99. To exercise any of these rights, please contact us at [email protected] with your Account username and a description of your request.

We will respond to all verifiable data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, notifying you of the extension and the reason within the initial 30-day period.

The jomain99 Platform is strictly for use by adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21, and we do not permit persons under 21 to register an Account or access our gaming services.

Age verification is a mandatory component of our KYC process. Every Account undergoes age confirmation prior to withdrawal access being granted. Where jomain99 discovers that personal data has been collected from a person under the age of 21, we will take immediate steps to close the Account, void any transactions, and securely delete the associated data.

If you have reason to believe that a person under the age of 21 has registered an Account on jomain99, please contact us immediately at [email protected]. We take all such reports seriously and will act promptly.

jomain99 reserves the right to amend this Privacy Policy at any time. Where a material change is made — for example, a change to the categories of data we collect, how we share data, or your rights — we will notify registered Players by posting the updated Policy on the Platform with a revised "Last Updated" date.

We encourage you to review this Policy periodically. Your continued use of the Platform following any amendment constitutes your acceptance of the revised Policy. If you do not agree to the amended Policy, you must cease using the Platform and may request Account closure by contacting our support team.

This Policy was last reviewed and updated on 1 January 2026. Previous versions are available upon request.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by jomain99, please contact our Data Protection team through the following channels:

We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a substantive response to verified data rights requests within 30 calendar days.