Privacy Policy joy9 – Member Personal Data Protection

1 Introduction

Joy9 ("we", "Platform") values the privacy of every member and visitor who uses our platform. This Privacy Policy has been drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices.

We understand that when you trust us with your personal information, it is not something we take lightly. Every data-related decision is made with our members' best interests in mind. Our goal is simple — store only what is necessary, use it only for legitimate purposes, and protect it to the highest available standards.

This document transparently explains the types of data we collect, why we need it, who can access it, and your rights regarding that data. If any section is unclear, our support team is available via the platform's Live Chat.

2 Data We Collect

Joy9 collects personal data in three main categories, depending on how you interact with our platform:

A. Data You Provide Directly:

• Registration information — full name, date of birth, email address, mobile phone number.
• Address information — residential address, city, state, and postcode.
• Identity verification documents (KYC) — copy of national ID or passport, utility bill as proof of address.
• Payment method information — bank account details and e-wallet account numbers registered for deposit and withdrawal purposes.
• Communications with the support team — live chat recordings, emails, and any written correspondence.

B. Data Collected Automatically:

• Technical data — IP address, web browser type, device operating system, screen resolution.
• Usage data — pages visited, visit duration, and navigation patterns within the platform.
• Game activity data — wagering history, total deposits and withdrawals, bonus activity.
• Location data — general location based on IP address for geographic verification purposes.
• Cookie and session data — login session details, language preferences, and account settings.

C. Data from Third-Party Sources:

• Identity verification information from our KYC service providers.
• Payment verification data from financial service providers and payment gateways.
• Fraud prevention information from trusted third-party risk monitoring systems.

3 How We Use Your Data

Every piece of data we collect is used for a specific, legitimate purpose. We do not use your data for any other purpose without informing you first. The following are the primary purposes for which your personal data is used:

• Account management: Creating, verifying, and maintaining your member account, including the KYC process required by law.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions on the joy9 platform securely and accurately.
• Security & fraud prevention: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and platform abuse.
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance required by members.
• Legal compliance: Fulfilling obligations under Malaysian law, including anti-money laundering (AML) requirements and reporting to authorities when legally required.
• Platform improvements: Analysing usage patterns to improve user experience, technical performance, and gaming offerings.
• Account-related communications: Sending important notifications related to your account, security, policy changes, and service updates.
• Responsible gaming: Monitoring wagering patterns to identify members who may need responsible gaming support and taking appropriate preventive action.

We do not use your data to make automated decisions that significantly affect you without human involvement in the process.

4 Data Sharing with Third Parties

Joy9 does not sell, rent, or disclose your personal data to any third party for marketing purposes without your explicit consent. However, there are certain situations where we may need to share your data with trusted parties:

• Payment service providers: Payment gateways, banks, and e-wallet providers that process your financial transactions. They receive only the data necessary to complete the transaction.
• KYC service providers: The third-party identity verification company we use to verify member identification documents as required by law.
• Game provider: Third-party game developers who provide gaming content on the joy9 platform may receive session data required to run games correctly.
• Authority: We will disclose data when required by court order, direction from a competent authority, or applicable legal obligations.
• Fraud prevention system: Security and risk monitoring service providers that help us detect and prevent illicit activity on the platform.

All third parties we work with are bound by strict confidentiality agreements and are only permitted to use your data for the purposes specified in those agreements. We continually reassess these third parties to ensure their data protection standards are on par with our own.

5 Data Security

Protecting your personal data is a responsibility we take seriously. joy9 implements multiple layers of technical and organisational security to keep your data safe at all times:

• 256-bit SSL encryption: All communications between your browser and our servers are encrypted using the latest TLS protocols, ensuring data cannot be intercepted in transit.
• Secure storage: Data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and strict access controls.
• Internal access controls: Only staff who require access to specific data to perform their duties are permitted, with all access logged and monitored.
• Regular security testing: Our platform undergoes regular penetration testing and security audits conducted by accredited independent parties.
• Data backup: Data is automatically backed up and encrypted across multiple storage locations to ensure service continuity.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA on their account as an important additional layer of security.

6 Cookies & Tracking Technologies

Joy9 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification, session management, and security settings. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how visitors use the platform — most frequently visited pages, error messages received — to help us improve performance.
• Functional Cookies: Saving your preferences such as language, account settings, and display options for a more personalised experience on future visits.
• Analytics Cookies: Helping us understand usage patterns in aggregate and anonymised form for platform improvement and service planning.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect platform functionality and your overall user experience.

7 Data Storage & Retention Period

Joy9 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are general guidelines for our data retention periods:

• Active account data: Retained for the duration your account remains active and in use.
• KYC and identity verification data: Retained for a minimum of 5 years after account closure, in compliance with Malaysia's anti-money laundering legislation.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable tax and accounting legal requirements.
• Support communication logs: Retained for 2 years after case resolution for reference and service improvement purposes.
• Technical log data: Retained for 90 days for security purposes and technical issue diagnostics.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be personally associated with you.

8 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by joy9. We respect and facilitate the exercise of each of these rights:

To exercise any of the above rights, please contact our support team via the platform's Live Chat. We will process your request within 30 calendar days. Some requests may require identity verification first to ensure we are speaking with the legitimate account owner.

9 Children's Privacy

The joy9 platform is intended for users aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on our platform are encouraged to contact our support team immediately.

10 Privacy Policy Amendments

Joy9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data.

Members will be notified of any significant changes via in-platform notifications or email to their registered address at least 14 days before the changes take effect. For minor changes, we will update the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Your continued use of the joy9 platform after any changes are published constitutes your acceptance of the updated terms.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

For formal complaints related to data privacy, please clearly state that your complaint concerns "Data Privacy" so it can be promptly routed to our data protection officer. All complaints will be thoroughly investigated and you will receive a response within 14 business days.

You may also refer to the FAQ us or read Terms and Conditions for a more comprehensive understanding of your rights and responsibilities as a joy9 member.