GJ99 Privacy Policy – Data Protection & Privacy for Malaysian Members

01Introduction & gj99's Commitment

gj99 takes our responsibility to protect every member's privacy seriously. This Privacy Policy has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

We understand that when you register an account gj99, make a deposit via Touch 'n Go eWallet, GrabPay, or DuitNow, or play your favourite games — you are trusting us with highly valuable personal information. We treat that trust as a responsibility we do not take lightly.

This Privacy Policy governs all personal data processing carried out by gj99 through our official website and all associated mobile applications. This covers all information you provide to us directly, as well as data collected automatically during your use of the platform.

02Types of Personal Data We Collect

gj99 collects several categories of personal data across different contexts. Below is a detailed explanation of the types of data we collect and their sources:

A. Data You Provide Directly

• Registration information: Full name, national identity card number (MyKad), date of birth, Malaysian mobile number, and email address.
• Financial information: Payment account details used — such as your Touch 'n Go eWallet account number, GrabPay, Boost, ShopeePay, DuitNow, or FPX account (Maybank2u, CIMB Clicks, and so on). We do not store full debit/credit card numbers.
• Identity verification documents: A copy of your MyKad or other identity document requested during the KYC verification process prior to large withdrawals.
• Communications with us: Any messages or information you send to the GJ99 customer support team via live chat or email.

B. Automatically Collected Data

• Platform usage data: Games played, total bets placed, winnings and losses, session duration, bonuses claimed.
• Technical data: IP address, device type (Android/iOS), phone model, operating system, web browser used, and language settings.
• Location data: General location based on IP address for security and compliance purposes (we do not continuously track your GPS location).
• Cookie data: Login session information and user preferences stored in your browser (see Section 6 for more details on cookies).

03How gj99 Uses Your Data

gj99 uses collected personal data solely for legitimate and necessary purposes. We do not use your data for anything unrelated to delivering our services to you.

Your personal data is used for the following purposes:

• Service provision: Managing your account, processing deposits and withdrawals via Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX, and ensuring your access to all games and promotions at gj99.
• Identity verification (KYC): Ensures every member is a real individual aged 18 and above, and meets all legal requirements for anti-money laundering compliance.
• Account security: Detecting and preventing unauthorised access, fraud, or suspicious activity on your account.
• Platform improvements: Analysing usage patterns in aggregate (not at the individual level) to improve the platform's user experience gj99.
• Service communications: Sending important notifications related to your account, such as deposit confirmations, withdrawal status updates, and security alerts.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.
• Promotions & personalised offers: If you have agreed to receive marketing communications, we will use your data to send you relevant promotional offers from gj99.
• Legal compliance: To fulfil the reporting and compliance obligations required under applicable Malaysian law.

04Sharing Data with Third Parties

gj99 does not sell, rent, or share your personal data with third parties for their own marketing purposes. This is our unconditional commitment.

However, there are limited circumstances in which your data may be shared with trusted third parties, solely for legitimate purposes:

• Payment service providers: The transaction information required is shared with eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks (for FPX and DuitNow processing) to facilitate deposits and withdrawals.
• Game providers: The minimum technical data required is shared with licensed game providers to ensure games function correctly within the gj99.
• Cybersecurity providers: Third-party security firms we engage to detect and prevent fraud and cyberattacks may receive the necessary technical data.
• Legal authorities: gj99 will disclose personal data when required by Malaysian law, court order, or directive from a relevant government agency.

05Data Security at gj99

gj99 continuously invests in best-in-class security infrastructure to ensure your personal data remains protected against cyber threats, unauthorised access, and data breaches at all times.

Key security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your browser/app and the gj99 is encrypted using the latest TLS protocol — the same standard used by Malaysian banking institutions.
• Sensitive data segregation: Payment information is stored separately from your gaming account data with an additional layer of security.
• Two-factor authentication (2FA): Every login requires OTP verification via your Malaysian mobile number.
• 24/7 Monitoring: Our intrusion detection system monitors for suspicious activity around the clock and alerts our security team immediately.
• Regular penetration testing: GJ99's infrastructure undergoes regular security audits and penetration testing conducted by independent security experts.

06Cookies & Tracking Technologies

Platform gj99 uses cookies and similar tracking technologies to enhance your user experience. Cookies are small text files stored in your web browser when you visit our website.

Types of cookies used by gj99:

• Essential cookies: Required for core platform functions such as maintaining login sessions and ensuring session security. These cookies cannot be disabled.
• Performance cookies: Collects statistical information on how you use the platform gj99 to help us improve our services. This data is collected in aggregate and does not identify individuals.
• Preference cookies: Remembers your settings and preferences — such as your chosen language and display settings — for a more convenient experience.
• Gaming session cookies: Tracks your active gaming session to ensure continuity and the accuracy of your game records.

You can manage or disable cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the gj99.

07Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles adopted by gj99, you have the following rights with respect to your personal data:

08Children's Data

Platform gj99 is a service intended exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from children under the age of 18.

Should we discover that personal data belonging to someone under the age of 18 has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

09Data Retention Period

gj99 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data: Retained for the duration that your account remains active on gj99.
• Transaction record data: Retained for a minimum of 7 years following account closure to meet financial reporting and legal compliance requirements.
• Security log data: Retained for 1 to 3 years for security investigation and fraud prevention purposes.
• Support communication data: Retained for 2 years from the date of interaction for reference and service improvement purposes.

Once the relevant retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to you personally.

10Amendments to the Privacy Policy

gj99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any amendments will take effect immediately upon being published on our official website.

For significant and material amendments that substantially affect how we process your data, we will notify you via an in-platform notification or email before the changes take effect, giving you sufficient time to review them.

The "Updated" date shown at the top of this page reflects when this Privacy Policy was last reviewed. Your continued use of the gj99 following any amendments shall be considered your acceptance of the updated policy.

11Contact Us – Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gj99 handling your personal data, please do not hesitate to reach us through the following channels:

• Email: support@gj99.click (response within 1–2 business days)
• Live Chat: Available 24 hours a day, 7 days a week through the gj99 platform
• Frequently Asked Questions: Visit gj99 FAQ page for answers to our most frequently asked questions

We are committed to providing a thorough and satisfactory response to every privacy-related enquiry within a reasonable timeframe. Your satisfaction and peace of mind are our top priority.