Privacy Policy

JomKiss9 ("we", "our", "us", "the Platform") operates the online gaming and sports betting services available at https://jomkiss9.cam/. We are committed to protecting the personal data of every individual ("you", "Player", "User") who accesses our Platform, registers an account, or otherwise interacts with our services.

This Privacy Policy describes the categories of personal information we collect, the purposes for which we process that information, the circumstances under which it may be shared with third parties, and the rights you hold in relation to your personal data.

By registering an account or using any feature of the JomKiss9 Platform, you acknowledge that you have read, understood, and accepted the practices described in this Privacy Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

JomKiss9 collects the following categories of Personal Data in the course of providing its services:

JomKiss9 collects Personal Data through the following methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated Technical Collection: Data collected automatically as you interact with the Platform, including IP addresses, session data, device identifiers, and browser information via cookies and similar technologies.
• Payment Service Providers: Transaction confirmation data received from third-party payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banking partners, and cryptocurrency network confirmations. JomKiss9 does not store full payment credentials — only the reference identifiers necessary to match and reconcile transactions.
• Identity Verification Partners: Verification outcomes from KYC service providers engaged to authenticate the identity documents you submit. These providers operate under strict data processing agreements.
• Third-Party Game Providers: Aggregated game session and RTP data from licensed game content providers integrated into the JomKiss9 Platform. This data is used for auditing and responsible gambling monitoring.

JomKiss9 processes your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and securing your JomKiss9 Account, including authentication, password management, and session security.
• Service Delivery: Enabling access to all gaming products, sportsbook markets, live casino games, and promotional features available on the Platform.
• Financial Processing: Executing deposit and withdrawal transactions via your selected payment method (e-wallet, bank transfer, or cryptocurrency), verifying transaction legitimacy, and maintaining accurate financial records in MYR.
• KYC & AML Compliance: Verifying your identity and age in accordance with our compliance obligations; monitoring transaction patterns for indicators of money laundering, fraud, or other financial crime.
• Responsible Gambling: Monitoring gaming activity to identify patterns consistent with problematic gambling behaviour; enforcing deposit limits, loss limits, session time-outs, and self-exclusion requests that you have set or requested.
• Customer Support: Responding to support requests, resolving complaints and disputes, and maintaining records of communications for quality assurance and compliance audit purposes.
• Platform Security: Detecting and preventing fraud, account takeover, bot activity, and other forms of abuse; investigating and responding to security incidents.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent to receive such communications or where we have a legitimate interest in doing so. You may opt out at any time via Account settings or by contacting support.
• Legal & Regulatory Obligations: Retaining records as required by applicable law, responding to lawful requests from regulatory authorities, and fulfilling our reporting obligations.

JomKiss9 processes your Personal Data on the following legal grounds, depending on the specific purpose:

• Contractual Necessity: Processing required to perform the contract between you and JomKiss9, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and the retention of financial records.
• Legitimate Interests: Processing carried out for JomKiss9's legitimate business interests, including fraud prevention, platform security, and the improvement of our services, provided such interests are not overridden by your privacy rights.
• Consent: Processing for which you have provided specific, informed consent — principally marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

JomKiss9 does not sell, rent, or trade your Personal Data to any third party for commercial marketing purposes. We may share your data in the following circumstances only:

• Payment Processors: Necessary transaction reference data is shared with payment service providers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banking partners, cryptocurrency networks) solely for the purpose of processing your deposit or withdrawal. These providers are contractually bound to process data only as instructed.
• KYC & Verification Partners: Identity documents and verification data are shared with our authorised identity verification service providers under binding data processing agreements. These providers do not retain your documents beyond the period required to complete verification.
• Game Content Providers: Aggregated, pseudonymised session data may be shared with licensed game studios integrated into the Platform for audit, certification, and responsible gambling monitoring purposes.
• Regulatory & Law Enforcement Authorities: JomKiss9 will disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts when required to do so by law, court order, or regulatory direction. We will endeavour to notify affected Players of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of JomKiss9's business assets, Personal Data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.
• Professional Advisers: Legal, financial, and compliance advisers engaged by JomKiss9 may access Personal Data on a strictly need-to-know basis, subject to professional confidentiality obligations.

JomKiss9 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

• Account Data: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, in compliance with financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification, or longer where required by AML legislation or regulatory directive.
• Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction in accordance with financial reporting standards.
• Gaming Session Data: Retained for a minimum of three (3) years for audit, dispute resolution, and responsible gambling monitoring purposes.
• Support Communications: Retained for a minimum of two (2) years from the date of the last communication, or longer where the matter relates to an unresolved dispute.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data.

JomKiss9 implements a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security: All data transmitted between your device and the JomKiss9 Platform is encrypted using 256-bit SSL/TLS protocols. You can verify this by the HTTPS prefix and padlock icon in your browser's address bar.
• Data Encryption at Rest: Sensitive Personal Data, including KYC documents and financial account identifiers, is encrypted when stored on our servers.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. JomKiss9 staff are granted data access only to the extent required by their specific role and are bound by confidentiality obligations.
• Two-Factor Authentication: JomKiss9 supports and encourages the use of two-factor authentication (2FA) on all Player accounts to guard against unauthorised access.
• Intrusion Detection & Monitoring: Automated systems continuously monitor the Platform for signs of unauthorised access, unusual login patterns, and potential security breaches.
• Incident Response: In the event of a confirmed data breach that creates a material risk to affected individuals, JomKiss9 will notify impacted Players promptly and take all reasonable steps to contain and remediate the incident.

JomKiss9 uses cookies and similar tracking technologies to enable essential Platform functionality, retain your preferences, and gather anonymised analytics data to improve the user experience.

Categories of cookies used:

• Strictly Necessary Cookies: Required for core Platform functions such as session management, authentication, and security. These cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: Used to remember your language preferences, notification settings, and responsible gambling limits between sessions.
• Analytics Cookies: Collect anonymised data about how Players interact with the Platform — including pages visited, session duration, and feature usage — to help us identify and resolve usability issues.
• Security Cookies: Used to detect and mitigate fraudulent activity, bot traffic, and multiple-account behaviour.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. JomKiss9 does not use advertising or cross-site tracking cookies.

Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you hold the following rights in relation to your Personal Data held by JomKiss9:

• Right of Access: You may request a copy of the Personal Data we hold about you, including a summary of how it is being processed.
• Right to Rectification: You may request the correction of inaccurate or incomplete Personal Data. For certain data categories, you may update information directly through your Account settings.
• Right to Erasure: You may request deletion of your Personal Data in circumstances where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that KYC and transaction records must be retained for the statutory periods set out in Section 8.
• Right to Restrict Processing: You may request that we limit the processing of your data in specific circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or a contractual relationship and is carried out by automated means, you may request receipt of your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via Account settings. Withdrawal does not affect the lawfulness of prior consent-based processing.

To exercise any of these rights, please contact our support team via the contact details set out in Section 15. We will respond to all verified requests within 30 days.

JomKiss9 does not knowingly collect Personal Data from any individual under the age of 21. The Platform is strictly intended for adults aged 21 and above. Age verification is enforced at the point of account registration and as a prerequisite to processing any withdrawal.

If JomKiss9 becomes aware that Personal Data has been collected from a person under the age of 21 without the required consent or through misrepresentation of age, we will take immediate steps to delete that data, close the associated account, and, where applicable, return any real-money balance deposited by that individual to the originating payment method.

If you believe that a minor may have registered an account on JomKiss9, please contact our support team immediately at [email protected].

JomKiss9 operates as an internationally accessible online gaming platform. In the course of providing our services, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia by our authorised Data Processors (including KYC verification partners, payment processors, and game content providers).

When Personal Data is transferred internationally, JomKiss9 ensures that appropriate safeguards are in place to maintain a standard of protection that is not materially less than the protections afforded under this Privacy Policy. Such safeguards may include contractual data protection clauses, adequacy decisions, or equivalent transfer mechanisms.

JomKiss9 reserves the right to update or amend this Privacy Policy at any time. Material changes — particularly those that affect how we collect, use, or share your Personal Data — will be communicated to registered Players via email notification or a prominent notice on the Platform at least seven (7) days prior to the amendments taking effect.

The date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the amended terms, you must cease use of the Platform and contact our support team to close your Account.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how your Personal Data is being handled, please contact the JomKiss9 Data Protection team through the following channels:

JomKiss9 aims to acknowledge all Privacy-related requests within 48 hours and to provide a substantive response within 30 calendar days. For complex requests that require additional time, we will notify you of the extended timeline and the reason for the delay.