JK9 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy is issued by JK9 and applies to all personal information collected, processed, and stored by JK9 in connection with the provision of our online entertainment platform services to members in Malaysia. It covers all ways in which you interact with the JK9 platform — from account registration and daily use to financial transactions and communications with our support team.

JK9 is the data controller responsible for all personal data you provide to us or that we collect when you use this platform. We operate in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how companies handle users' personal data in Malaysia.

This policy does not apply to third-party websites or platforms that may be linked from the JK9 platform. We encourage you to read the privacy policies of those platforms separately, as we are not responsible for the privacy practices of any third party.

As an online entertainment platform involving financial transactions, JK9 is also subject to Anti-Money Laundering and Counter Financing of Terrorism (AML/CFT) compliance requirements, which may require us to collect additional information or share certain information with the relevant competent authorities when directed by law.

JK9 collects various types of personal data when you use our platform. Every piece of data collected has a clear purpose and is necessary for delivering our services to you safely and effectively.

Data We Do Not Collect: JK9 does not collect sensitive data such as medical information, religious beliefs, political views, or members' sexual orientation. We also do not directly store credit or debit card numbers — card transactions are handled by PCI-DSS certified third-party payment providers.

You are not required to provide all the data we request, but certain data is necessary for us to deliver specific services. For example, without a valid Malaysian phone number, we are unable to process your account registration or send OTP codes to secure your login.

The personal data you provide to JK9 is used for specific, legitimate purposes. We do not use your data in ways you would not expect or that are unrelated to JK9's services.

Primary Purposes for Data Use:

• Account Management: Creating and maintaining your JK9 account, verifying your identity, processing logins, and ensuring only you can access your account.
• Transaction Processing: Processing your deposits and withdrawals securely and accurately through Malaysian local payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Service Delivery: Providing access to games, Sports Betting, promotions, and all JK9 platform features you use every day.
• Security & Fraud Prevention: To detect and prevent unauthorised access, fraudulent activity, money laundering and platform abuse, including the use of multiple accounts or automated bots.
• Customer Support: To handle enquiries, complaints and support requests you submit to the JK9 support team efficiently and promptly.
• Platform Improvement: Analysing aggregated usage patterns to better understand the needs of Malaysian players and continuously improve JK9's features, layout and platform performance.
• Service Communications: Sending important notifications about your account, changes to terms, system outages, or security issues that require your immediate attention.
• Responsible Gaming: Monitoring gaming patterns to identify potential gambling issues and providing appropriate tools or interventions in line with JK9's responsible gaming commitment.
• Legal Compliance: To fulfil JK9's legal obligations, including AML/CFT requirements and directives issued by competent authorities in Malaysia.

JK9 does not sell, rent, or transfer members' personal data to any third party for their own marketing purposes. However, in the course of operating the platform, there are limited situations where data may be shared with certain parties — and we want to be fully transparent about those situations.

Parties That May Receive Your Data and Why:

• Payment Providers: Transaction information that must be shared with payment service providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay processors for the purpose of handling your deposits and withdrawals. These providers are bound by strict confidentiality agreements and Bank Negara Malaysia regulations.
• Game Providers: Minimum technical data required by third-party game providers (such as Pragmatic Play and PG Soft) to ensure games function correctly within your account. These providers do not receive your financial information or full identity details.
• Analytics Services: Aggregated and anonymised usage data is shared with analytics platforms to help JK9 understand usage patterns and improve the platform. This data contains no information that can identify you personally.
• Legal Authorities: JK9 is legally required to disclose certain information to legitimate Malaysian authorities upon receipt of a valid official request — including criminal investigations or AML/CFT compliance requirements.
• Security Services: Fraud detection and cybersecurity systems that help JK9 protect the platform and member accounts from external threats. These services operate under strict data processing agreements.

In all of the data-sharing scenarios above, JK9 ensures that recipients are bound by adequate data protection agreements and use the data solely for the stated purposes. JK9 does not permit third parties to use your data for their own purposes unrelated to delivering services to you.

Protecting members' personal data is among JK9's highest priorities. We continually invest in both technical and operational security infrastructure to keep your data safe at all times.

JK9's Technical Security Measures:

• Encryption in Transit: All communications between your device and JK9's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate. This means that even if transmitted data were intercepted, it would be unreadable to any third party.
• Data-at-Rest Encryption: Sensitive data stored in JK9's databases — including account verification information and financial details — is encrypted using the industry-standard AES-256 algorithm.
• Layered Access Control: Access to member data within JK9's systems is restricted to employees who require it to perform their job functions. All access is logged and monitored.
• Continuous Monitoring: JK9's security team monitors the platform 24/7 using automated threat detection systems that identify and respond to suspicious activity before it can affect member data.
• Security Auditing: JK9 conducts regular independent security audits to identify and address system vulnerabilities before they can be exploited.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for members who want to add an extra layer of security to their login process.

JK9 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once data is no longer needed, it will be securely deleted or anonymised in accordance with our established procedures.

Retention Periods by Data Type:

• Active Account Data: Retained for the duration of your active JK9 account, plus any minimum retention period required by law.
• Financial Transaction Data: Deposit and withdrawal transaction history is retained for a minimum of 7 years, in compliance with Malaysia's financial regulations and AML/CFT requirements.
• Communications Data: Customer support conversation records and related communications are retained for 3 years from the date of the communication.
• Technical Data & Logs: System logs and technical data are retained for 12 months before being automatically deleted.
• Closed Account Data: When an account is closed at a member's request, personal data no longer required for legal purposes will be deleted within 90 days. Data that must be retained for legal compliance will be kept for the minimum prescribed period before deletion.

You may request to view your data, correct inaccurate information, or request deletion of data that is no longer required for legal purposes. JK9 will process such requests within 30 days of receiving a valid submission.

JK9 uses cookies and similar tracking technologies to keep the platform running properly, enhance user experience, and monitor account security. Cookies are small text files stored on your device when you visit the JK9 platform.

Types of Cookies Used by JK9:

• Mandatory Cookies (Functional): Required for core platform operations — including maintaining your login session, saving language preferences, and ensuring deposits process smoothly. These cookies cannot be disabled as they are essential to platform functionality.
• Security Cookies: Used to detect and prevent suspicious activity, verify your identity during login, and protect your account from unauthorised access. These cookies cannot be disabled.
• Analytics Cookies: Collects information on how you use the JK9 platform — pages visited, time spent, and navigation paths — to help us improve the platform's layout and features. This data is aggregated and does not identify you individually.
• Preference Cookies: Saving your personal preferences — such as text size, favourite game selections, and display settings — to deliver a more personalised experience during your gaming sessions.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the JK9 platform. For guidance on managing cookies in major browsers such as Chrome, Firefox, Safari, or Edge, refer to the help section of the respective browser.

As a JK9 member based in Malaysia, you have specific rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). JK9 fully respects and supports the exercise of these rights.

As JK9 involves real financial transactions, data security in the context of payments receives special attention in this privacy policy. All deposit and withdrawal transactions on JK9 use legitimate local Malaysian payment methods recognised by Bank Negara Malaysia.

When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX — including Maybank2u and CIMB Clicks — your financial information is processed directly by the respective payment provider and is not stored on JK9's servers. JK9 only receives the transaction confirmation details needed to credit the deposit to your account.

Transaction data retained by JK9 is limited to what is necessary for audit purposes, AML/CFT compliance, and the handling of any disputes that may arise. This data is protected to the same security standards as all other personal data and is retained for the period required under Malaysian financial regulations.

The JK9 platform is strictly for adults aged 18 and above. JK9 does not knowingly collect, store or process personal data belonging to minors. This is a firm, non-negotiable policy.

During registration, every prospective member must confirm they are 18 years of age or older. JK9 reserves the right to request proof of age at any time and will immediately close any account found to belong to a minor, returning any available balance in full.

If a parent or guardian discovers that their minor child has registered a JK9 account without authorisation, please contact us immediately at support@jk9-jit.com. We will act promptly to close the account and remove all associated data from our systems.

JK9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or developments in the technologies we use. We are committed to keeping you informed of any material changes.

When significant changes are made to this Privacy Policy, JK9 will:

• Updating the "Last updated" date at the top of this document
• Displaying a prominent change notice on the JK9 homepage for a reasonable period
• For highly material changes, contacting you directly via your registered phone number with an in-platform notification

Continued use of the JK9 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated policy. If you do not agree with the changes made, you have the right to stop using the platform and request account closure with a refund of any available balance.

This version of JK9's Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions. For any questions or concerns regarding this Privacy Policy, please contact us at support@jk9-jit.com.

If you have any questions, concerns, or complaints regarding how JK9 handles your personal data, we encourage you to reach out to us directly. Our team is ready to assist and committed to addressing every privacy inquiry seriously and thoroughly.

Contact Channels for Privacy Inquiries:

• Live Chat 24/7: The fastest way to reach us — click the live chat icon within the JK9 platform to connect with a Bahasa Malaysia-speaking support agent available anytime.
• Email: support@jk9-jit.com — for more detailed privacy enquiries or those requiring documentation, email is the appropriate channel. We aim to respond to all emails within 24 hours.

When contacting us about a privacy matter, please provide sufficient information for us to identify your account and understand your request clearly. This helps us process your request more quickly and accurately. For requests involving data access or deletion, we may need to verify your identity before proceeding.

JK9 takes all privacy complaints seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital, in accordance with the procedures set out under the PDPA 2010.