Privacy Policy

1. Introduction

jom9 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of all persons who access and use the online casino and sports betting services available atjom9.cam. This Privacy Policy sets out in clear terms how we handle the personal data of registered users and website visitors, including the types of data we collect, the purposes for which we use it, the circumstances under which we may share it, and the rights available to you as a data subject.

By registering an Account on jom9 or by continuing to use the Platform, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement between jom9 and the User.

jom9 is designed primarily for users located in Malaysia, including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian regions. We process personal data in a manner consistent with applicable data protection legislation and industry best practices for online gaming operators.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings stated below:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes name, identification number, contact details, financial information, and online identifiers.
• "Data Subject" — The natural person to whom Personal Data relates; in this context, a registered User or website visitor.
• "Data Controller" — jom9, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — A third party engaged by jom9 to process Personal Data on its behalf, such as payment gateway operators or KYC verification service providers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, and deletion.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement by the Data Subject to the processing of their Personal Data for a stated purpose.
• "KYC" — Know Your Customer; the identity and address verification process required by jom9 in compliance with anti-money laundering and fraud prevention obligations.
• "Cookies" — Small text files stored on a user's device by the Platform to enable functionality, session management, and analytics.

3. Data We Collect

jom9 collects personal data that is necessary for the operation of the Platform, the provision of gaming and betting services, regulatory compliance, and the delivery of customer support. The categories of data we collect are described below.

3.1 Registration Data

When you create a jom9 Account, we collect:

• Full legal name;
• Date of birth (for age verification —21+ requirement);
• Malaysian mobile telephone number or email address;
• Username and encrypted password;
• Preferred language.

3.2 KYC Verification Data

To comply with anti-money laundering obligations and to protect the integrity of the Platform, we collect the following verification documents:

• Copy of Malaysian government-issued identification (MyKad, Passport, or Driver's Licence);
• Proof of current residential address (utility bill, bank statement, or Telco statement dated within three months);
• Selfie photograph of the user holding their identification document.

3.3 Financial & Transaction Data

In connection with deposits and withdrawals processed via Malaysian payment channels (including Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency options including BTC, USDT, and ETH), we collect:

• Payment method identifiers (e.g., bank account last four digits, e-wallet account reference);
• Transaction amounts and timestamps;
• Deposit and withdrawal history;
• Cryptocurrency wallet addresses where applicable.

jom9 does not store full payment card numbers or complete bank account numbers. Full financial credentials are processed exclusively by our licensed payment service providers.

3.4 Gaming & Betting Activity Data

We record detailed data regarding your use of the Platform, including:

• Game sessions played, bet amounts placed, and outcomes;
• Sports betting market selections, odds accepted, and settlement results;
• Bonus and promotion uptake and wagering progress;
• Loyalty programme activity and tier status.

3.5 Technical & Device Data

Automatically collected when you access the Platform:

• IP address and approximate geographic location (country and region level);
• Browser type and version;
• Device type, operating system, and screen resolution;
• Session duration, pages visited, and navigation paths;
• Referring URL and search terms used to reach jom9.

3.6 Communications Data

Records of communications between you and jom9 support staff, including live chat transcripts, email correspondence, and notes made by support agents regarding queries or complaints submitted by you.

4. How We Collect Personal Data

jom9 collects personal data through the following channels and mechanisms:

5. Data Processing & Legal Basis

jom9 processes personal data only where a lawful basis exists for doing so. The legal bases on which we rely are as follows:

5.1 Contractual Necessity

Processing is necessary for the performance of the contract between jom9 and the User, including account registration, transaction processing, game result calculation, bonus administration, and customer support delivery.

5.2 Legal Obligation

Processing is required for compliance with applicable legal obligations, including anti-money laundering (AML) regulations, age verification requirements, fraud prevention obligations, and regulatory reporting duties imposed on licensed gaming operators.

5.3 Legitimate Interests

Processing is carried out in pursuit of jom9's legitimate interests in maintaining Platform security, preventing fraud and bonus abuse, improving the user experience, and conducting aggregate analytics — provided such interests are not overridden by the fundamental rights and freedoms of the Data Subject.

5.4 Consent

Where processing is not covered by the above bases, jom9 will seek your explicit consent prior to processing. You may withdraw consent at any time without prejudice to the lawfulness of processing carried out prior to withdrawal, by contacting our support team.

6. How We Use Your Personal Data

jom9 uses personal data collected from Users for the following purposes:

• Account management — Creating, maintaining, and securing your Account; processing login authentication; managing password resets.
• Identity verification — Conducting KYC checks to verify age (21+ requirement), identity, and address for regulatory compliance purposes.
• Payment processing — Facilitating MYR deposits and withdrawals through supported Malaysian payment methods; reconciling transaction records.
• Gaming and betting services — Delivering game sessions, calculating bet outcomes, applying bonus credits, and maintaining wagering records.
• Fraud prevention and security — Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other prohibited activities.
• Responsible gambling — Monitoring account activity for indicators of problem gambling; administering deposit limits, session alerts, and self-exclusion tools.
• Customer support — Responding to queries, resolving disputes, and maintaining records of communications.
• Marketing communications — Sending promotional offers, loyalty programme updates, and product notifications to Users who have not opted out of such communications.
• Platform improvement — Conducting aggregate, anonymised analysis of usage patterns to improve Platform performance, game selection, and user experience.
• Legal and regulatory compliance — Meeting reporting obligations to relevant regulatory authorities and responding to lawful requests from competent authorities.

7. Data Sharing & Third Parties

jom9 does not sell, rent, or otherwise disclose personal data to third parties for their own independent marketing purposes. Personal data is shared only in the following circumstances:

7.1 Service Providers (Data Processors)

We engage third-party service providers who process personal data on our behalf and under our instructions. These include:

• Payment gateway providers — Licensed operators processing MYR transactions via Maybank, CIMB, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency networks;
• KYC and identity verification providers — Third-party services that assist with document authentication and age verification;
• Fraud detection and security services — Providers of real-time risk scoring and anomaly detection tools;
• Cloud infrastructure providers — Hosting and data storage providers operating under contractual data protection obligations;
• Customer support platform providers — Software platforms used to manage live chat, email, and communication records.

All Data Processors engaged by jom9 are contractually required to process personal data only for the purposes specified by jom9, to maintain appropriate security measures, and to delete or return personal data upon termination of the engagement.

7.2 Legal and Regulatory Disclosure

jom9 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction — including connection with anti-money laundering investigations, fraud inquiries, or other lawful legal proceedings.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving jom9, personal data held by jom9 may be transferred to the acquiring or successor entity, subject to equivalent privacy protections. Users will be notified of any such transfer affecting the processing of their personal data.

8. Cookies & Tracking Technologies

jom9 uses cookies and similar technologies to enable Platform functionality, manage user sessions, and gather aggregate analytics data. The types of cookies we deploy are as follows:

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to the Platform, but may affect the availability of certain personalisation features. jom9 does not deploy third-party advertising cookies or behavioural profiling trackers for cross-site advertising purposes.

9. Data Retention

jom9 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention requirements, or to resolve disputes and enforce agreements.

Indicative retention periods are as follows:

• Account and registration data — Retained for the duration of the active Account plus a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC verification documents — Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction and financial records — Retained for a minimum of seven (7) years from the date of each transaction.
• Gaming and betting activity logs — Retained for five (5) years or as required by the applicable licensing authority.
• Customer support communications — Retained for three (3) years from the date of each interaction.
• Marketing consent records — Retained until consent is withdrawn and for one (1) year thereafter.
• Analytics and session data — Aggregated and anonymised after 24 months; individual session logs retained for 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10. Data Security

jom9 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the jom9 Platform;
• Encrypted storage of sensitive data at rest, including passwords (hashed with industry-standard algorithms) and KYC documents;
• Two-factor authentication (2FA) available to all Account holders;
• Access controls restricting internal access to personal data to authorised personnel on a need-to-know basis;
• Continuous intrusion detection and anomaly monitoring on all Platform infrastructure;
• Regular security audits and vulnerability assessments conducted by independent specialists;
• Data breach response procedures including notification protocols for material security incidents.

Whilst jom9 takes all reasonable steps to protect personal data, no internet-based system can be guaranteed to be completely secure. Users are encouraged to maintain strong, unique passwords and to enable2FA on their Accounts to minimise the risk of unauthorised access.

11. Your Rights as a Data Subject

As a person whose personal data is processed by jom9, you have the following rights. To exercise any of these rights, please contact our support team using the details in Section 15. jom9 will respond to verified requests within 30 calendar days.

12. Protection of Minors

jom9 operates a strict minimum age requirement of21 years for all Account holders. We do not knowingly collect personal data from persons under the age of 21. All registrations are subject to age verification procedures, and jom9 reserves the right to request identity documentation at any stage to confirm compliance with this requirement.

If jom9 becomes aware that personal data has been collected from a person under the age of 21, that Account will be immediately suspended, the data will be deleted in accordance with our retention policies, and any remaining balance will be handled in accordance with our Terms & Conditions and applicable regulatory guidelines.

If you believe that a minor is using the jom9 Platform, please contact our support team immediately. We take underage gambling extremely seriously and will act promptly on all credible reports.

13. Cross-Border Data Transfers

jom9's infrastructure and service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred outside of Malaysia to countries that may not provide an equivalent level of data protection, jom9 ensures that appropriate safeguards are in place, including:

• Data processing agreements requiring the recipient to apply data protection standards equivalent to those observed by jom9;
• Standard contractual clauses or equivalent mechanisms recognised under applicable data protection law;
• Transfer only to service providers that demonstrate compliance with recognised international security frameworks.

14. Policy Amendments

jom9 reserves the right to update or amend this Privacy Policy at any time. Material changes to the way in which we process personal data will be communicated to registered Users via email to their registered address and/or via a prominent notice on the Platform, at least 14 days before the amended Policy takes effect, except where immediate amendment is required by applicable law.

The date on which this Privacy Policy was last updated is indicated at the top of this page. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of any changes.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have concerns about the way in which jom9 handles your personal data, please contact us through the following channels: