Privacy Policy GJ99 – Malaysian Player Data Protection

This Privacy Policy is published by GJ99 ("Platform", "We") and applies to all personal information collected through gj99.my, the GJ99 mobile app, and all services associated with the GJ99 platform. It has been drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and aims to clearly explain to all Malaysian users how their personal data is managed by GJ99.

GJ99 is an online entertainment platform offering a wide range of games including slots, Live Casino, Sports Betting on the Malaysia Super League and EPL, e-sports, and more. In operating this platform, GJ99 needs to collect and process certain personal data from its users to ensure every GJ99 member across Malaysia enjoys a safe, fair, and high-quality experience.

• This policy applies to all registered GJ99 members, users browsing the GJ99 platform without an account, and any individual who contacts GJ99 through customer support channels.
• By using GJ99's services, you agree that GJ99 may collect and process your personal data in the manner described in this privacy policy.
• This policy does not apply to third-party websites or services that may be accessible via links within the GJ99 platform. GJ99 is not responsible for the privacy practices of those parties.

GJ99 collects various categories of personal data from members and platform users to ensure safe, high-quality services can be delivered. Below are the key categories of data GJ99 collects, along with the reasons each is required.

GJ99 uses the personal data collected solely for the following legitimate and clearly stated purposes. We will not use your data for any other purpose without first obtaining your additional consent.

• GJ99 Account Setup & Management: Your data is used to create, verify, and manage your GJ99 account — including processing your registration, authenticating your logins, and maintaining the security of your account at all times.
• Financial Transaction Processing: Your financial and identity data is used to process deposits via DuitNow, Touch 'n Go, GrabPay, and other methods, as well as to verify and execute withdrawals to your bank account or e-wallet in MYR.
• Identity Verification & Fraud Prevention: GJ99 uses identity data and technical information to verify that each member is a genuine, eligible individual, and to detect and prevent fraudulent activity, money laundering, or any misuse of the platform.
• Legal Compliance: GJ99 is required under Malaysian law to retain certain records relating to financial transactions and user identity for prescribed periods. Your data may be shared with the relevant authorities where required by law.
• Service Communications: GJ99 uses your phone number and email address to send important account notifications, such as deposit confirmations, security alerts, and key updates relating to the GJ99 platform.
• GJ99 Platform Improvements: Usage and technical data are analysed in aggregate (without identifying individuals) to understand how users interact with GJ99 and to drive continuous improvements to the user experience.
• Responsible Gaming: Your gaming history and betting patterns are analysed by GJ99's system to identify behaviour that may indicate a gambling problem, enabling GJ99 to proactively offer appropriate support to members who may need it.

GJ99 does not sell, rent, or trade members' personal data to any third party for marketing or advertising purposes. However, in the course of operating the GJ99 platform, there are limited situations where your personal data may be shared with certain parties, as described below.

• Payment Service Providers: Details required to process your deposits and withdrawals are shared with approved payment gateway providers, including DuitNow, Touch 'n Go eWallet, GrabPay, ShopeePay, Boost, and FPX processors. All such providers are bound by strict confidentiality agreements with GJ99.
• Game Providers: Certain game session data may be shared with GJ99's game providers such as Pragmatic Play and others for the purposes of win verification, technical dispute resolution, and maintaining game integrity.
• Legal Authorities: GJ99 will disclose personal data to Malaysian authorities or law enforcement bodies when required to do so by court order, regulatory directive, or applicable law — this is not GJ99's choice, but a legal obligation that must be fulfilled.
• Technical Service Providers: Companies providing GJ99 with technical infrastructure, server hosting, and cybersecurity services may have limited access to data in order to perform their technical functions. All such providers are bound by strict data protection agreements.

The security of your personal data is a responsibility GJ99 takes very seriously. We continuously invest in the latest security technologies and processes to ensure your data remains protected against cyber threats, unauthorised access, and all forms of misuse.

• 256-bit SSL Encryption: All data transmitted between your device and GJ99's servers is encrypted using TLS protocol with 256-bit keys — the same standard used by Malaysia's leading banks, including Maybank and CIMB, to secure online banking transactions.
• Two-Factor Authentication (2FA): GJ99 offers and actively encourages the use of two-factor authentication for all accounts. This additional security layer ensures that even if your password is compromised, unauthorised parties still cannot access your GJ99 account without the OTP sent to your registered phone number.
• 24/7 Security Monitoring: GJ99's security systems continuously monitor all activity on the platform to detect suspicious patterns, unauthorised access attempts, and any anomalies that may indicate a security threat. Any detected threats are addressed immediately by GJ99's security team.
• Restricted Internal Data Access: Within GJ99, access to members' personal data is restricted to staff who require it to carry out their job responsibilities. All access is logged and audited on a regular basis to ensure no internal misuse occurs.
• Secure Data Backup: GJ99 maintains regular encrypted data backups to ensure rapid data recovery in the event of a technical emergency, with backup data protected to the same high security standards.

GJ99 uses cookies and similar tracking technologies to enhance the user experience on the platform, ensure security features function correctly, and analyse how the platform is used for continuous improvement.

• Functional Cookies (Required): These cookies are essential for the basic operation of the GJ99 platform, including maintaining your login session, remembering language settings, and ensuring session security. The GJ99 platform cannot function properly without them and they cannot be disabled.
• Analytics Cookies: GJ99 uses analytics cookies to understand how users interact with the platform — which pages are visited most frequently, how long sessions last, and where users encounter difficulties. This data is collected in aggregate and does not directly identify individuals. It is used solely to improve the experience on GJ99.
• Preference Cookies: These cookies allow GJ99 to remember your preferences and personal settings within the platform — such as your favourite games and display settings — providing a more personalised and comfortable experience each time you log in to your GJ99 account.
• Cookie Controls: You can manage cookie settings through your web browser. Please be aware, however, that disabling certain cookies may affect the functionality of some features on the GJ99 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and GJ99's Privacy Policy, you hold several important rights regarding the personal data GJ99 holds about you. GJ99 is committed to respecting and facilitating the exercise of these rights for every member.

GJ99 retains your personal data only for as long as it is needed for the purposes stated in this privacy policy, or as required by applicable Malaysian law. Once the relevant retention period has lapsed and there is no valid reason to continue holding the data, GJ99 will securely delete or destroy it.

• Active Account Data: For as long as your GJ99 account remains active, all related data will be stored and processed to support the platform's services to you. You may request account closure at any time through GJ99 customer support.
• Data After Account Closure: Following the closure of a GJ99 account, GJ99 may retain certain data for a period stipulated by Malaysian law — typically between 5 and 7 years for financial records, in line with applicable legal compliance requirements.
• Financial Transaction Data: All records of deposits and withdrawals made in MYR via DuitNow, Touch 'n Go, GrabPay, and other methods are retained for a minimum of 7 years, as required under Malaysian financial and taxation laws.
• Security Data: Security logs and data relating to unauthorised access attempts are retained for a period of 12 months to facilitate investigations should a security incident involving your GJ99 account occur.
• Cookie Data: Session cookies are deleted automatically when you close your web browser. Persistent cookies have a set expiry date and are deleted automatically once that date is reached, typically within a period of 30 days to 12 months depending on the cookie type.

GJ99 reserves the right to amend, update, or modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or improvements to GJ99's services. We are committed to informing you of any material changes to the way we process your personal data.

• The "updated" date displayed at the top of this document indicates when this Privacy Policy was last reviewed. We encourage you to check this page periodically to stay informed of GJ99's latest privacy practices.
• For amendments that GJ99 considers material — such as changes to how we use your data or new categories of data we collect — GJ99 will endeavour to notify members via their registered email address or an in-platform notification at least 14 days before the changes take effect.
• Your continued use of the GJ99 platform following the publication of any amendments to this Privacy Policy will be considered your acceptance of the updated privacy terms. If you do not agree with the changes made, please contact GJ99 to discuss your options, including account closure.

If you have any questions, concerns, or complaints regarding GJ99's Privacy Policy or how we handle your personal data, GJ99's support team is available to assist you at any time. We take every privacy-related enquiry seriously and will provide clear, timely responses.