Summary: jum99 collects only the personal data necessary to operate a safe, compliant online gaming platform for Malaysian members. We do not sell your personal data to third parties. We retain your data for the minimum period required by law and our compliance obligations. You have the right to access, correct, and request deletion of your data at any time by contacting us at [email protected].
1 About This Policy
This Privacy Policy ("Policy") is issued by jum99 ("jum99", "we", "us", "our"), the operator of the online gaming platform accessible at jum99.app. It describes how jum99 collects, uses, discloses, and safeguards personal data relating to members and visitors ("you", "your") in connection with the jum99 platform and associated services.
By registering an account, accessing the jum99 platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy. This Policy forms part of jum99's Terms & Conditions and should be read in conjunction with them.
jum99 is committed to handling personal data responsibly and in accordance with applicable data protection laws and principles, including obligations relevant to the collection and processing of personal data in the Malaysian market context.
2 Personal Data We Collect
2.1 Registration & Account Data
When you register an account with jum99, we collect the information you provide directly, which may include:
- Full legal name as it appears on your identity document;
- Date of birth (used to verify that you are 21 years of age or older);
- Malaysian identity card number (MyKad) or passport number;
- Registered mobile number (Malaysian format);
- Email address (if provided);
- Residential address.
2.2 Identity Verification Data
As part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, we may collect copies of government-issued identity documents, selfies or liveness-check images for biometric verification, and proof of residential address documents such as utility bills or bank statements.
2.3 Financial Data
To process deposits and withdrawals, jum99 collects information relating to your payment methods, which may include e-wallet identifiers (Touch 'n Go, Boost), bank account details for FPX transactions, and transaction records including amounts, timestamps, and method identifiers. jum99 does not store full payment card numbers where card payment is processed through a third-party payment gateway.
2.4 Gaming & Activity Data
jum99 collects data relating to your gaming activity on the platform, including game sessions played, wagers placed, outcomes, balances, bonus usage, and responsible gaming settings. This data is used to operate the gaming service, detect fraud, and fulfil regulatory obligations.
2.5 Technical & Device Data
When you access jum99, we automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, session timestamps, and general geographic location inferred from your IP address.
2.6 Communications Data
When you contact jum99 customer support, we retain records of those communications including the content of messages, timestamps, and the nature of any complaint or query raised.
3 How We Use Your Personal Data
| Purpose | Data Used |
|---|---|
| Account registration and authentication | Registration data, device data |
| Identity verification (KYC / AML compliance) | Identity documents, biometric data, financial data |
| Processing deposits and withdrawals | Financial data, identity data |
| Providing gaming services | Account data, gaming & activity data |
| Detecting and preventing fraud, abuse, and prohibited conduct | All data categories |
| Responsible gaming monitoring and intervention | Gaming & activity data, account data |
| Customer support and complaint resolution | Communications data, account data |
| Platform performance and security monitoring | Technical & device data |
| Regulatory reporting and legal compliance | Identity data, financial data, gaming data |
| Marketing communications (where consented) | Registration data, activity data |
jum99 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except as part of automated fraud detection systems that are subject to manual escalation and override procedures.
4 Legal Basis for Processing
jum99 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to perform the agreement between you and jum99 — including account management, gaming services, and payment processing;
- Legal obligation: Processing required to comply with applicable AML, KYC, and other regulatory obligations — including identity verification and transaction record-keeping;
- Legitimate interests: Processing necessary for jum99's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and responsible gaming monitoring;
- Consent: Where we rely on your consent as the legal basis for processing (for example, for direct marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
5 Disclosure & Sharing of Personal Data
jum99 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:
- Payment service providers: Including Touch 'n Go, Boost, and Malaysian bank FPX partners, for the purpose of processing deposits and withdrawals;
- Identity verification providers: Third-party KYC service providers engaged to assist with document and biometric verification;
- Game content providers: Game software licensors may receive session data necessary to operate the game — they do not receive your identity or financial data beyond what is technically necessary;
- IT and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance providers operating under contractual data processing agreements with jum99;
- Regulatory and law enforcement authorities: Where jum99 is required by law, court order, or regulatory direction to disclose personal data;
- Professional advisors: Lawyers, auditors, and compliance consultants under appropriate confidentiality obligations.
Where personal data is transferred to service providers operating outside Malaysia, jum99 ensures that appropriate safeguards are in place, including contractual data protection obligations that provide a standard of protection equivalent to that applying within Malaysia.
6 Cookies & Tracking Technologies
jum99 uses cookies and similar tracking technologies on the jum99.app website for the following purposes:
- Strictly necessary cookies: Required for the platform to function, including authentication session management and security tokens. These cannot be disabled.
- Performance cookies: Used to collect anonymised statistics about how visitors use the platform, enabling jum99 to improve performance and identify technical issues.
- Functional cookies: Used to remember your preferences — such as language settings and responsible gaming configurations — across sessions on recognised devices.
You may manage non-essential cookies through your browser settings. Disabling functional or performance cookies may affect the quality of your experience on the jum99 platform but will not prevent access to core gaming services.
jum99 does not use advertising cookies or sell cookie-derived data to advertising networks. No third-party advertising trackers are embedded on the jum99 platform.
7 Data Retention
jum99 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention standards:
- Account and identity data: Retained for the duration of your membership and for a minimum period of five (5) years following account closure, in compliance with applicable AML record-keeping requirements;
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
- Gaming activity data: Retained for a minimum of three (3) years from the date of the activity;
- Customer support communications: Retained for two (2) years from the date of the communication, unless the subject matter is subject to ongoing dispute or legal proceedings;
- Technical logs: Retained for ninety (90) days in the first instance, with selective archival of security-relevant logs for up to twelve (12) months.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jum99's data disposal procedures.
8 Data Security
jum99 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit TLS encryption for all data transmitted between your device and jum99's servers;
- Encryption of sensitive personal data at rest in jum99's database infrastructure;
- Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
- Multi-factor authentication for jum99 staff access to systems holding personal data;
- Regular security audits and penetration testing by independent security professionals;
- Incident response procedures that include notification to affected members in the event of a data breach affecting their personal data.
No data transmission over the internet or electronic storage method is completely secure. While jum99 takes every reasonable precaution to protect your personal data, we cannot guarantee absolute security. You are responsible for maintaining the security of your jum99 login credentials.
9 Your Data Rights
Subject to applicable law and jum99's compliance obligations, you have the following rights in respect of your personal data held by jum99:
- Right of access: Request a copy of the personal data jum99 holds about you;
- Right of correction: Request correction of inaccurate or incomplete personal data;
- Right of erasure: Request deletion of your personal data, subject to jum99's legal retention obligations — for example, we may be unable to delete transaction records during the mandatory AML retention period;
- Right to restrict processing: Request that jum99 restrict the processing of your personal data in certain circumstances;
- Right to data portability: Request a machine-readable copy of personal data you have provided to jum99, where technically feasible;
- Right to object: Object to the processing of your personal data where jum99 relies on legitimate interests as the legal basis, including for direct marketing.
To exercise any of the above rights, please submit a written request to [email protected]. jum99 will respond to verified requests within thirty (30) days. jum99 may request additional identification verification before processing access or deletion requests to protect against fraudulent claims.
Data Requests: Email [email protected] with the subject line "Data Request" and include your registered mobile number and the nature of your request. We will respond within 30 days.
10 Children's Privacy
jum99 is strictly restricted to persons aged 21 years and above. jum99 does not knowingly collect personal data from persons under the age of 21. If jum99 discovers that an account has been registered by or on behalf of a minor, that account will be immediately closed and all collected personal data deleted to the extent permitted by law, with any associated deposits returned to the source of payment.
If you believe that a minor has registered an account with jum99, please notify us immediately at [email protected] so that we may investigate and take appropriate action.
11 Marketing Communications
jum99 may send promotional communications — including information about bonuses, new games, sportsbook events, and platform updates — to members who have consented to receiving such communications at the time of registration or subsequently via their account notification preferences.
You may withdraw your consent to marketing communications at any time by updating your notification preferences in your jum99 account settings, or by contacting [email protected] with an opt-out request. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
jum99 does not send promotional communications to members who have activated a self-exclusion, cooling-off period, or who have otherwise indicated that they do not wish to receive promotional material.
12 Third-Party Links
The jum99 platform may contain links to third-party websites or services — for example, payment provider portals accessed during the deposit or withdrawal process. This Policy applies only to the jum99 platform. jum99 is not responsible for the privacy practices of third-party websites or services, and we encourage you to review the privacy policies of any third-party services you access in connection with your jum99 membership.
13 Changes to This Policy
jum99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. Where material changes are made, jum99 will provide advance notice by posting a prominent notice on the jum99 platform and/or notifying registered members via their registered contact details.
The effective date at the top of this Policy indicates when the current version took effect. Your continued use of jum99 following the effective date of any amended Policy constitutes your acknowledgement of the changes. The current version of this Policy is always accessible at jum99.app/privacy-policy.
14 Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or jum99's handling of your personal data, please contact us:
Data & Privacy Enquiries: [email protected]
Subject Line: "Privacy Enquiry" or "Data Request"
Response Time: Within 30 days for formal data requests; within 48 hours for general privacy queries
Please include your registered account mobile number, a clear description of your query or request, and any relevant reference numbers. jum99 will handle all privacy-related communications with strict confidentiality. Full Terms & Conditions are available at jum99.app/terms-conditions.