JC99 Privacy Policy

This Privacy Policy ("Policy") describes how jc99, operating at jc99.cam ("Platform", "we", "us", or "our"), collects, uses, processes, stores, and protects the personal data of individuals who register for, access, or use the jc99 online gaming and sports betting platform.

jc99 is an international online gaming platform serving players globally, including a significant base of users in Malaysia. We are committed to handling your personal data with transparency, integrity, and in compliance with applicable data protection principles. This Policy applies to all current and former account holders, as well as visitors to the jc99 website.

By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial details, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means jc99, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of jc99 under a data processing agreement.
• "KYC" means Know Your Customer verification, the process by which jc99 verifies user identity, age, and payment method ownership.
• "Cookies" means small text files placed on your device by the Platform to store user preferences and session data.
• "Third Party" means any individual or organisation that is not jc99 or the data subject.

jc99 collects the following categories of personal data from its users:

jc99 collects personal data through the following means:

• Direct collection: Information you provide during account registration, KYC submission, deposit or withdrawal requests, support interactions, and completion of promotional forms.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, log files, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; transaction data from payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank; fraud screening data from anti-fraud intelligence services.
• Public sources: Publicly available information used to fulfil AML (Anti-Money Laundering) or sanctions screening obligations.

jc99 processes your personal data for the following purposes:

1. Account Management: Creating, operating, and administering your jc99 account, including processing deposits and withdrawals in MYR and managing bonus entitlements.
2. Identity Verification (KYC): Verifying your identity, age (21+ requirement), and payment method ownership in accordance with our licensing obligations and AML regulations.
3. Payment Processing: Facilitating secure deposits and withdrawals via Malaysian payment methods and cryptocurrency channels (BTC, USDT).
4. Fraud Prevention & Security: Detecting, investigating, and preventing fraud, money laundering, underage gambling, account sharing, and other prohibited conduct.
5. Responsible Gambling: Monitoring your usage patterns to identify potential problem gambling behaviour and to enable the operation of self-exclusion, deposit limit, and session reminder tools.
6. Customer Support: Responding to your enquiries, complaints, and disputes via live chat and email.
7. Platform Improvement: Analysing aggregated usage data to improve Platform performance, content, and the overall user experience for Malaysian players.
8. Marketing Communications: Sending you relevant promotional offers and updates where you have opted in to receive such communications. You may opt out at any time.
9. Legal Compliance: Fulfilling obligations under applicable gaming licensing conditions, AML laws, and other regulatory requirements.

jc99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with our licensing conditions, AML obligations, and other applicable regulatory requirements.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gambling monitoring, and improvement of our services — where such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent for processing, such as sending marketing communications. You may withdraw consent at any time by contacting us or adjusting your account communication preferences.

jc99 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: Malaysian banks, e-wallet operators (Touch 'n Go, Boost, GrabPay), DuitNow, FPX, and cryptocurrency processing partners, as required to process your transactions.
• KYC & Identity Verification Providers: Third-party services engaged to verify your identity and age as required by our licensing obligations.
• Fraud & AML Screening Services: External services that help us identify and prevent financial crime, including sanctions screening tools.
• Gaming Software Providers: Licensed game studios whose products are hosted on the jc99 Platform may receive anonymised or pseudonymised session data for auditing and technical purposes.
• Customer Support Platforms: Third-party live chat and ticketing systems used to operate our support function.
• Regulatory Authorities: Licensing authorities, law enforcement agencies, and courts where disclosure is required by law or legal process.
• Professional Advisers: Legal counsel, auditors, and insurers acting under professional confidentiality obligations.

jc99 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law, whichever is longer. The following retention periods apply as a general guide:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by AML regulatory obligations.
• Financial transaction records: Retained for a minimum of seven (7) years following each transaction, in accordance with standard accounting and regulatory requirements.
• Customer support communications: Retained for three (3) years following resolution of the relevant enquiry or dispute.
• Technical and usage data: Retained for up to two (2) years from collection, unless required for ongoing fraud investigations.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for audit purposes.

Upon expiry of the relevant retention period, personal data will be securely deleted or anonymised in a manner that makes re-identification impossible.

jc99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jc99 Platform.
• Encryption of personal data stored on our servers at rest.
• Role-based access controls restricting staff access to personal data to those with a legitimate operational need.
• Multi-factor authentication requirements for internal administrative systems.
• Regular security audits, penetration testing, and vulnerability assessments.
• Firewall protection and intrusion detection systems.
• Staff training on data security and privacy obligations.

While jc99 takes all reasonable precautions to protect your personal data, no method of electronic transmission or storage is entirely secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of any suspected unauthorised access to your account.

jc99 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your login session, prevent fraud, and analyse Platform performance. The following categories of cookies are used:

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect your account. These cannot be disabled without affecting core Platform functionality.
• Analytics Cookies: Used to collect anonymised data on how users interact with the Platform, including pages visited and session duration. This data helps us improve the Platform experience for Malaysian users.
• Functional Cookies: Used to remember your preferences, such as language settings and notification preferences.
• Fraud Prevention Cookies: Used to detect suspicious activity, account sharing, and multi-accounting — a requirement under our responsible gambling and AML obligations.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the jc99 Platform.

Subject to applicable law and certain exemptions, you have the following rights with respect to your personal data held by jc99:

• Right of Access: You may request a copy of the personal data jc99 holds about you, along with information about how it is being processed.
• Right of Rectification: You may request that inaccurate or incomplete personal data be corrected. You can update basic account information directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where data is no longer necessary for the purposes for which it was collected. This right is subject to our legal retention obligations (see Clause 8).
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances, such as while the accuracy of data is disputed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, or to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection team at the details in Clause 15. We will respond to all requests within a reasonable timeframe, generally within 30 days of receipt. We may need to verify your identity before processing your request.

The jc99 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and all accounts are required to pass age verification before being fully activated.

If jc99 becomes aware that personal data has been collected from an individual under the age of 21 — whether as a result of a false age declaration or otherwise — the account will be immediately suspended, all personal data associated with that account will be deleted in accordance with applicable law, and any funds held in the account will be managed in accordance with our regulatory obligations.

If you believe that a minor has created an account on the jc99 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

As an internationally operated platform, jc99 may transfer your personal data to countries outside Malaysia, including to jurisdictions where our servers, licensing authority, or third-party service providers are based. Such transfers may include countries that do not have data protection laws equivalent to Malaysia's Personal Data Protection Act 2010.

Where personal data is transferred internationally, jc99 takes steps to ensure that appropriate safeguards are in place to protect your data, including through the use of contractual data protection clauses with receiving parties and through the selection of processors who maintain internationally recognised security standards.

jc99 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, new processing purposes, or new categories of recipients — we will notify registered users via email and/or a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you may exercise your right to close your account and request deletion of your personal data, subject to the retention obligations described in Clause 8.

We recommend that you review this Privacy Policy periodically to stay informed about how jc99 protects and uses your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by jc99, please contact us using the details below. We take all privacy enquiries seriously and will respond within 30 days of receiving your request.

• Data Protection Contact — Email: [email protected]
• Live Chat: Available 24/7 on the jc99 Platform
• Subject line (for email): "Privacy Policy Enquiry" or "Data Subject Request"

When submitting a data subject request (access, rectification, erasure, etc.), please include your registered email address and a description of your request. We may require identity verification before processing your request to protect the security of your personal data.

For responsible gambling enquiries, please visit our dedicated Responsible Gambling page, which includes details of self-exclusion tools, deposit limits, and third-party support organisations.