Privacy Policy joyo9 – Your Data Protection

01 Information We Collect

Joyo9 collects several categories of information from users to ensure the platform operates smoothly, securely, and in compliance with legal requirements. Below are the types of information we collect:

We only collect information that is genuinely necessary for the stated purposes. joyo9 does not collect sensitive data such as medical information or religious beliefs unless required by applicable law.

02 How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. joyo9 uses your personal data solely for the following purposes:

• Account management: Creating, verifying, and maintaining your joyo9 account, including the identity verification (KYC) process required by law.
• Transaction processing: Securely and accurately processing all deposits, withdrawals, and bonus payments through supported payment channels.
• Platform security: Detecting and preventing fraud, money laundering, unauthorized access, and other suspicious activities that could harm the platform or other users.
• Service communications: Sending important notifications related to your account, transactions, promotions you have opted into, and relevant policy updates.
• Platform improvement: Analyzing usage patterns in aggregate and anonymized form to improve user experience, platform performance, and game offerings.
• Legal compliance: Fulfilling applicable legal and regulatory obligations, including reporting suspicious transactions to authorities when required.

03 Data Storage & Security

Joyo9 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

• All data transmitted between your device and joyo9 servers is protected by 256-bit SSL encryption — the same industry standard used by major banking institutions in Malaysia.
• Account passwords are stored in hashed form using the robust bcrypt algorithm. The joyo9 team itself cannot view your original password.
• Sensitive financial information such as bank card numbers is stored in encrypted format in accordance with PCI DSS standards and is never stored in plain text.
• Access to user data at joyo9 is strictly limited to staff with a legitimate need on a "need-to-know" basis only.
• Joyo9's security monitoring system operates 24 hours a day, 7 days a week to detect any intrusion attempts or unusual activity in real time.
• Independent security testing and audits are conducted regularly to ensure our data protection infrastructure consistently meets the latest standards.

04 Sharing Information with Third Parties

Joyo9 does not sell, rent, or trade users' personal data to any third party. However, there are limited situations where we may need to share certain information:

• Payment service providers: Authorized payment processors such as FPX gateways, e-wallet operators, and banks receive only the transaction information strictly necessary to process your payments. They are bound by strict confidentiality agreements.
• Government authorities: joyo9 is required to disclose certain information when ordered to do so by a court, law enforcement authority, or regulatory body with valid jurisdiction.
• Technical service providers: Cloud service providers, security audit firms, and IT service providers that help maintain the joyo9 platform may have limited access to data required for their specific functions.
• Identity verification providers: Trusted third-party KYC services are used to verify user identities in order to meet legal compliance requirements.

All third parties we work with are bound by strict data protection agreements and are only permitted to use your data for the specific purposes agreed upon with joyo9.

05 Cookies & Tracking Technologies

Joyo9 uses cookies and similar tracking technologies to enhance your experience on the platform and maintain the security of your session. Below are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled.
• Performance cookies: Collecting anonymized information about how users interact with the joyo9 platform to help us improve performance and the overall experience.
• Functionality cookies: Saving your preferences such as language, currency, and display settings so you do not have to reconfigure them every time you login.
• Analytics cookies: Helps us understand platform usage patterns in aggregate for product improvement. This data does not personally identify you.

You may manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the joyo9 platform and your gaming experience.

06 Your Rights as a User

As a joyo9 user, you have the following rights regarding your personal data. joyo9 is committed to respecting and facilitating the exercise of these rights:

07 Child Data Protection

Joyo9 is an entertainment platform exclusively for adults aged 18 and above. We do not knowingly collect, store, or process personal data of individuals under the age of 18.

• All account registrations require age verification. Any account found to be owned by a minor will be closed immediately and all funds will be returned to the legal guardian.
• If you believe a child has registered a joyo9 account without authorization, please contact our support team immediately so that appropriate action can be taken.
• Joyo9 does not direct any marketing content at minors and takes active steps to prevent their access to the platform.

08 Cross-Border Data Transfer

In the course of its operations, joyo9 may transfer your personal data to servers or processing facilities located outside Malaysia. Any such transfer is carried out only with adequate safeguards in place:

• Cross-border data transfers only occur when the receiving country has a level of data protection equivalent to or higher than Malaysia.
• All data transfers are protected by standard data processing agreements that ensure recipients comply with strict data protection standards.
• Joyo9 uses cloud services with internationally recognised security certifications, including ISO 27001 and SOC 2.

09 Data Retention Period

Joyo9 retains your personal data only for as long as necessary to fulfil the original purpose of collection or meet relevant legal obligations. Below are our data retention guidelines:

• Active account data: Retained for the duration that your account remains active on joyo9.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Communication logs: Retained for 2 years for dispute resolution and customer support purposes.
• KYC Data: Retained for 5 years after account closure in accordance with compliance requirements.
• After the retention period ends, data is securely deleted or anonymized in accordance with joyo9's standard procedures.

10 Privacy Policy Amendments

Joyo9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or platform improvements. Users will be notified of any material changes through:

• In-platform joyo9 notifications will be displayed upon your next login.
• Email notification sent to the address registered with your joyo9 account.
• Update the "Updated" date at the top of this Privacy Policy page.

Your continued use of the joyo9 platform after any Privacy Policy amendments take effect constitutes your acceptance of the revised terms. If you do not agree with the changes, please stop using the platform and contact us to close your account.