Privacy Policy jayakaya99 —
Your Personal Data Protection

Jayakaya99 collects your personal data directly when you register an account, make a transaction, or contact our support team. We only collect information that is genuinely necessary to provide a safe, fair, and legally compliant service.

In general, the types of data we collect can be grouped into three main categories:

In addition to information you provide directly, we also automatically collect technical data when you browse our platform. This includes server log data, session information, and usage patterns analysed in aggregate without identifying any individual personally.

Every piece of data we collect has a clear and legitimate purpose. jayakaya99 does not use your data for any purpose other than those stated in this document without first obtaining your consent.

• Account management: Registering new accounts, verifying user identity, and processing account-related requests.
• Transaction processing: Processing deposits, withdrawals, and all financial activities securely and in a timely manner.
• KYC verification: Meeting legal compliance obligations related to Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT).
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance effectively.
• Platform security: Detecting and preventing fraud, account abuse, and suspicious activity.
• Responsible gaming: Monitoring gameplay patterns to identify users who may need assistance and early intervention.
• Service improvement: Analysing usage data to improve platform performance, introduce new features, and enhance the overall user experience.
• Marketing communications: Sending promotional information and special offers — only to users who have consented to receive such communications.

We adhere to the principle of data minimisation — meaning your data is only processed to the extent necessary to achieve the stated purpose. When data is no longer needed, it will be deleted or anonymised in accordance with established procedures.

Jayakaya99 does not sell, rent, or trade your personal data to any external party for commercial purposes. However, in the course of operating the platform, we may need to share certain information with the following parties in limited and controlled circumstances:

• Payment service provider: Required transaction data is shared with providers such as FPX, card networks, and digital wallets to process your payments securely.
• Identity verification provider: Required KYC information is shared with authorised third-party identity verification service providers.
• IT infrastructure and cybersecurity: Our technical service providers may access data necessary to maintain and secure the platform's systems.
• Regulatory authority: We will disclose information to government agencies, regulatory authorities, or law enforcement bodies when required by law or court order.
• Auditors and legal consultants: In the context of audit reviews or legal advice, relevant information may be accessed by professionals bound by strict confidentiality obligations.

Jayakaya99 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform performance. Cookies are small text files stored on your device when you browse our website.

We use several types of cookies for different purposes:

• Essential Cookies: Required for core platform functions such as login, session management, and account security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how users interact with our platform — such as the most frequently visited pages and any error messages encountered — to help us improve our services.
• Functional Cookies: Saving user preferences such as language, display settings, and login details to make your experience more convenient and personalised.
• Analytics Cookies: Helping us understand overall platform usage patterns through aggregate analysis without identifying individual users.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality or user experience of our platform. Further details about the cookies we use are available in your account settings.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by jayakaya99. We respect and facilitate the exercise of each of these rights without discrimination or undue obstacles:

To exercise any of the above rights, please contact our privacy team via support email. We will verify your identity before processing any request related to your personal data for security purposes.

Jayakaya99 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. Our retention policy is designed to balance legitimate business needs with your privacy rights.

• Active account data: Retained for as long as your account is active and for a reasonable period after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's anti-money laundering and taxation legal requirements.
• Support communication records: Retained for 3 years for reference and dispute resolution purposes.
• Technical log data: Retained for 12 months for security and fraud detection purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications.

Once the designated retention period expires, data will be securely deleted or anonymised so it can no longer be linked to you as an individual. The data deletion process is carried out in accordance with industry standards to ensure data cannot be recovered.

Protecting your personal data is jayakaya99's highest priority. We continuously invest in the latest cybersecurity infrastructure to ensure your information remains safe and protected against evolving threats.

• Encryption of data in transit: All data transmitted between your device and our servers is protected with TLS 1.3 protocol and SSL 256-bit encryption.
• Encryption of data at rest: Sensitive data such as financial information and identification documents are stored in encrypted format using industry-recognised encryption algorithms.
• Tiered access control: Access to users' personal data is strictly limited to staff who require it to perform their duties.
• Two-factor authentication (2FA): We provide and encourage the use of 2FA for all user accounts to add an effective layer of protection.
• Regular security audits: Security audits and penetration testing are conducted regularly by independent third parties to identify and address any vulnerabilities.
• Incident response plan: jayakaya99 has a comprehensive incident response procedure to address any data breach swiftly and effectively.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. We therefore encourage you to also take precautions such as using a strong password, enabling 2FA, and never sharing your account information with anyone.

Jayakaya99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. The latest update date will always be displayed at the top of this document.

• For significant changes, we will notify you via an in-account notification or your registered email at least 14 days before the changes take effect.
• Continued use of the jayakaya99 platform after the effective date of any changes constitutes your acceptance of the updated terms.
• We encourage you to review this page regularly to stay informed about the latest developments in how we manage your personal data.