Privacy Policy — jdclub9

1. Introduction

1.1 jdclub9 ("the Platform") is an internationally licensed online gaming platform providing sports betting, live casino, slot games, bingo, and related entertainment services to players, with a primary focus on English-speaking users in Malaysia.

1.2 We are committed to handling personal data responsibly, lawfully, and transparently. This Privacy Policy sets out in detail the types of personal data we collect, the purposes for which we process it, the parties with whom it may be shared, and the rights available to data subjects in relation to their personal information.

1.3 This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available on the jdclub9 website. Where this Privacy Policy uses terms defined in the Terms & Conditions, those definitions apply here unless the context requires otherwise.

2. Personal Data We Collect

2.1 jdclub9 collects personal data in the following categories:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued identity document;
• Date of birth;
• Residential address, including city, state, and postcode;
• Email address;
• Mobile phone number (where provided for 2FA or SMS verification).

2.2 Account Data

• Username and hashed password credentials;
• Account registration date and timestamps;
• Account settings, preferences, and responsible gaming tool configurations;
• Correspondence and support ticket history between you and jdclub9.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• Payment method ownership verification documents (e.g., screenshot or statement confirming ownership of a Touch n Go eWallet or bank account);
• Current and historical MYR wallet balance records.

2.4 KYC Verification Data

• Copy of government-issued identity document (MyKad, passport, or equivalent);
• Proof of residential address (utility bill, bank statement, or equivalent);
• Selfie or facial verification image where required by licensing obligations.

2.5 Technical & Usage Data

• IP address at time of registration and subsequent logins;
• Device type, operating system, and browser version;
• Session logs, navigation patterns, and feature interaction data;
• Geolocation data derived from IP address (approximate, not GPS-level);
• Betting and gaming activity records, including game rounds played, bet amounts, outcomes, and RNG seed data where applicable.

3. How We Use Your Personal Data

3.1 jdclub9 processes personal data for the following purposes:

• Account creation and management: To register your jdclub9 account, verify your identity, and maintain your account in accordance with our Terms & Conditions;
• Service delivery: To provide access to the sportsbook, live casino, slots, bingo, and all other platform features;
• Payment processing: To process deposits, withdrawals, and to comply with anti-money laundering (AML) obligations including transaction monitoring;
• KYC & age verification: To verify that account holders meet the 21+ age requirement and to comply with licensing obligations regarding player due diligence;
• Customer support: To respond to enquiries, resolve disputes, and communicate with you about your account;
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling and to apply self-exclusion, limit, and cooling-off requests made by the account holder;
• Platform security & fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and abuse of the platform;
• Legal & regulatory compliance: To meet obligations arising from our gaming licence, applicable financial regulations, and any lawful request from regulatory or law enforcement authorities;
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and user experience;
• Marketing communications: To send you promotional offers, bonus notifications, and updates about jdclub9 services, where you have consented to receive such communications or where we have a legitimate interest to do so.

4. Legal Basis for Processing

4.1 jdclub9 processes personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to fulfil our contractual obligations to you under the Terms & Conditions, including account management and payment processing;
• Legal obligation: Processing required to comply with applicable laws, regulations, and our gaming licensing conditions, including KYC, AML, and age verification requirements;
• Legitimate interests: Processing necessary for the legitimate interests of jdclub9, including fraud prevention, platform security, and improvement of our services, where those interests are not overridden by your rights;
• Consent: Where we rely on your consent, such as for direct marketing communications, you have the right to withdraw that consent at any time by contacting jdclub9 support or using the unsubscribe mechanism in marketing emails.

5. Data Sharing & Disclosure

5.1 jdclub9 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances.

5.2 We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Payment service providers: Including Touch n Go eWallet, Boost, GrabPay, and local Malaysian bank processing partners, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Licensed third-party services used to verify the identity and age of account holders;
• Game content providers: Studio partners (e.g., Evolution Gaming, Pragmatic Play) receive anonymised session data necessary to deliver game rounds and resolve technical disputes;
• Customer support technology providers: Live chat and ticketing platform providers who process communication data on jdclub9's behalf under data processing agreements;
• IT and cloud infrastructure providers: Hosting and server management companies with whom jdclub9 has data processing agreements;
• Regulatory and law enforcement authorities: Where jdclub9 is required by law, court order, or licensing authority direction to disclose personal data.

5.3 Any third party engaged by jdclub9 to process personal data on our behalf is required to maintain appropriate security standards and is contractually prohibited from using that data for any purpose other than the service they are providing to jdclub9.

6. Cookies & Tracking Technologies

6.1 jdclub9 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device by the browser when you visit the jdclub9 website.

6.2 The types of cookies used by jdclub9 include:

• Essential cookies: Required for core platform functionality, including session management, login persistence, and security. These cannot be disabled without affecting platform usability;
• Analytics cookies: Used to understand how users navigate the platform, which pages are most visited, and where users encounter friction. Data is aggregated and anonymised;
• Functional cookies: Used to remember your preferences, such as preferred language, game lobby layout, and responsible gaming settings;
• Marketing cookies: Where you have consented, used to deliver relevant promotional content within the jdclub9 platform.

6.3 You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the jdclub9 platform. jdclub9 does not use cookies to track your activity on third-party websites outside of the jdclub9 domain.

7. Data Retention

7.1 jdclub9 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and licensing obligations. The following general retention principles apply:

• Active account data: Retained for the lifetime of the account plus a period of up to 5 years following permanent account closure, to satisfy regulatory record-keeping requirements;
• KYC documents: Retained for a minimum of 5 years following the end of the player relationship, or longer where required by applicable AML or licensing regulations;
• Transaction records: Retained for a minimum of 5 years to comply with financial record-keeping obligations;
• Support correspondence: Retained for up to 3 years following resolution of the relevant matter;
• Technical logs: Typically retained for 12 months for security and fraud investigation purposes, after which they are aggregated or deleted.

7.2 Where data is no longer required for any lawful purpose, jdclub9 will securely delete or anonymise it in a manner that prevents reconstruction of the original personal data.

8. Cross-Border Data Transfers

8.1 jdclub9 operates internationally and some of the service providers and infrastructure partners it works with may be located in countries outside Malaysia. Where personal data is transferred to recipients in other jurisdictions, jdclub9 takes steps to ensure that appropriate safeguards are in place to protect that data in accordance with the standards set out in this Privacy Policy.

8.2 Such safeguards may include contractual clauses binding the recipient to data protection standards equivalent to those applicable to jdclub9, or reliance on the recipient's own certifications or regulatory compliance frameworks.

9. Your Rights as a Data Subject

9.1 Subject to applicable data protection laws and any legal obligations that may limit the exercise of these rights, you have the following rights in relation to your personal data held by jdclub9:

• Right of access: You may request a copy of the personal data jdclub9 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to jdclub9's legal retention obligations;
• Right to restriction of processing: You may request that jdclub9 restrict processing of your data in certain circumstances, such as while a dispute about accuracy is resolved;
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request a machine-readable copy of your personal data;
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, jdclub9 will cease that processing immediately;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

9.2 To exercise any of the above rights, please contact jdclub9 via the support email address provided in Section 14. We will respond to valid data subject requests within 30 days. We may require identity verification before processing certain requests.

10. Children's Privacy

10.1 jdclub9 is strictly an 18+ and in this context a 21+ platform. It is not directed at, nor intended for use by, persons under the age of 21. jdclub9 does not knowingly collect personal data from individuals under 21 years of age.

10.2 Where jdclub9 becomes aware that personal data has been collected from an individual who is under 21, that data will be deleted as promptly as practicable and the associated account will be terminated. If you believe that jdclub9 has inadvertently collected data from a minor, please contact us immediately using the details in Section 14.

11. Security Measures

11.1 jdclub9 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the jdclub9 platform;
• Encryption of sensitive data fields at rest, including KYC documents and payment information;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and security audits conducted by independent third parties;
• Two-factor authentication (2FA) available to account holders and enforced for administrative access to internal systems.

11.2 Notwithstanding the above, no data transmission over the internet or electronic storage system is completely secure. jdclub9 cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your jdclub9 login credentials and for notifying us promptly if you suspect unauthorised access to your account.

12. Third-Party Links

12.1 The jdclub9 platform does not contain links to external third-party websites other than those necessary for the operation of integrated payment methods. This Privacy Policy applies solely to data processed by jdclub9 and does not cover the privacy practices of any third-party payment processors or other external services, which are governed by their own privacy policies.

13. Changes to This Privacy Policy

13.1 jdclub9 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform functionality. The "Last Updated" date at the top of this document will be revised accordingly.

13.2 Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — jdclub9 will notify registered players via email at least 14 days before the changes take effect. For non-material updates, continued use of the jdclub9 platform following publication of the revised policy constitutes acceptance of the updated terms.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or jdclub9's handling of your personal data, please contact our data protection team through the following channels:

• Live Chat: Available in-platform 24 hours a day, 7 days a week on Malaysia Time (MYT / GMT+8)
• Email: [email protected]

Please mark data protection enquiries clearly in the subject line of your email. We aim to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 days of receiving complete information from the data subject.