Privacy Policy joya9

Joya9 ("we", "the Company") values the privacy of every member who registers and plays on our platform. This Privacy Policy is established to provide full transparency on our personal data collection and handling practices, in accordance with applicable data protection laws.

This document covers all your interactions with joya9 — whether through the main website at joya9.plus, the iOS and Android mobile app, or any related services we offer. Each time you register a new account, make a deposit, contact our support team, or simply browse our website, certain information may be collected for purposes that will be explained in detail in this document.

We believe transparency is the foundation of trust. That's why the joya9 Privacy Policy is written in plain language that everyone in Malaysia can understand — not in confusing legal jargon. Our goal is to ensure you fully understand what happens with your data before you make any decisions.

Joya9 collects various types of information depending on how you interact with our platform. Generally, this information falls into two main categories: information you provide directly and information collected automatically.

Information you provide directly:

Information collected automatically:

• Technical data: IP address, browser type, operating system, screen resolution, and device information.
• Usage data: Pages visited, time spent on the platform, games played, betting details, and general activity patterns.
• Location data: Approximate location data based on your IP address for geographic verification and regulatory compliance purposes.
• Session data: Login details, activity timestamps, and financial transaction records for security and audit purposes.

The personal data we collect is used responsibly and only for legitimate purposes. joya9 does not use your data for any purpose unrelated to the provision of our services without your explicit consent.

The following are the primary purposes for which your data is used:

• Verification and KYC: To verify your identity in compliance with Anti-Money Laundering (AML) legal requirements and Know Your Customer (KYC) procedures.
• Transaction Processing: To process deposits, withdrawals, and bonus payments quickly and securely using your bank account or digital wallet information.
• Account Management: To create, maintain, and manage your member account, including game history records, credit balance, and VIP points.
• Fraud Prevention: To detect, investigate, and prevent any suspicious activity, fraud, or misuse that may compromise the security of the platform and other members.
• Service Communications: To send important notifications such as transaction confirmations, account security alerts, and required policy updates.
• Service Improvement: To analyze aggregated usage patterns for improving platform design, app usability, and overall user experience.
• Marketing (with consent): To send promotional information, personalized bonus offers, and the latest joya9 news — only if you have given consent to receive such communications.
• Legal Compliance: To comply with any court orders, regulatory authority requests, or applicable legal requirements.

Joya9 does not sell, rent, or disclose your personal data to any third party for commercial purposes without your consent. However, there are limited situations where we may need to share your information with certain parties:

• Payment Service Providers: Required financial information is shared with approved payment providers (such as Maybank2u, CIMB Clicks, TNG eWallet, and others) solely to process your transactions.
• Game Software Providers: Limited account information is shared with game platform providers (such as Pragmatic Play and Playtech) solely for the purpose of verifying gaming sessions.
• Regulatory Authorities: Information may be disclosed to judicial authorities, law enforcement agencies, or regulatory bodies when required by law or a valid court order.
• Identity Verification Services: Third-party KYC service providers who have signed strict confidentiality agreements with joya9 may be involved in the document verification process.
• Business Transfers: In the event of a company merger, acquisition, or asset sale, your data may be transferred as part of those business assets, subject to continued privacy protections.

In all of the above cases, we ensure that third parties receiving your data are bound by strict confidentiality and data protection obligations and may not use that information for any purpose other than those specified.

Joya9 continuously invests in the latest security infrastructure to ensure your personal and financial data is fully protected. Our security systems are built on a multi-layered approach encompassing technical, administrative, and physical safeguards.

Technical security measures we have implemented:

• End-to-End Encryption: All communications between your browser or app and joya9 servers are secured with TLS 1.3 protocol and AES-256 encryption.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of protection to their accounts.
• Real-Time Monitoring: Our threat detection system operates 24/7 to identify and respond to any suspicious activity immediately.
• Network Isolation: Databases containing sensitive personal data are isolated from public-facing systems using strict firewalls and network segmentation.
• Password Encryption: Passwords are stored using a strong hashing algorithm — joya9 staff cannot view your password in its original form.
• Penetration Testing: Independent security experts conduct regular penetration testing to identify and address any system vulnerabilities.

Cookies are small text files stored on your device when you visit the joya9 website. We use cookies and similar tracking technologies to enhance your experience on our platform and ensure that key functions run smoothly.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session, processing transactions, and ensuring security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use our platform — which pages are visited most frequently and any error messages you encounter. This data is used in aggregate to improve platform performance.
• Functional Cookies: Remembering your preferences such as selected language, username (for login convenience), and your personal display settings.
• Analytics Cookies: Helps us understand overall platform usage patterns to make better development decisions. This information is not linked to your personal identity.

You can manage your cookie settings at any time through your browser. Please note, however, that disabling certain cookies may affect the functionality and user experience on the joya9 platform. For detailed instructions, refer to your browser's help documentation.

As a joya9 platform user, you have a range of rights regarding your personal data. joya9 is committed to respecting and facilitating the exercise of these rights. The following are the key rights you hold:

In addition to the rights above, you also have the right to object to the processing of your data for direct marketing purposes, withdraw any consent you have given at any time, and request restriction of your data processing under certain circumstances.

To exercise any of the above rights, please contact the joya9 support team via 24/7 live chat or email. We will process your request within 30 business days. In certain complex cases, this period may be extended with prior notification to you.

The joya9 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process personal data from any individual under the age of 18.

All new registrants are required to confirm they are 18 years of age or older during the registration process. Our KYC process is also designed to verify members' age through valid identification documents.

If we find that personal data of a minor has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question. Parents or guardians with concerns about this matter may contact us directly for follow-up action.

Joya9 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by applicable law.

Data retention periods are as follows:

• Active Account Data: Retained for the lifetime of your account and for the required period after account closure for audit and legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction in accordance with financial and tax legal requirements.
• KYC and Verification Document Data: Retained for a minimum of 5 years after account closure in accordance with AML (Anti-Money Laundering) requirements.
• Support Communication Logs: Retained for 3 years for reference and service improvement purposes.
• Technical Data and Server Logs: Retained for 90 days for security and technical troubleshooting purposes.

When data is no longer needed and there is no legal obligation to retain it, joya9 will delete or anonymise that data using secure, irreversible methods.

Joya9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new technologies, legal requirements, or other operational reasons. When material changes are made, we will notify you via in-app notification or your registered email before the changes take effect.

The "Updated" date at the top of this document will always reflect the date of the latest revision. We encourage you to review this page periodically so you stay informed on how we protect your information. Continued use of the joya9 platform after changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact our team.

For official requests relating to personal data rights (access, correction, deletion), please clearly state the type of request and include sufficient identity verification information so we can process your request securely and accurately.