99jitu Privacy Policy – Personal Data Protection for Malaysian Casino Players

This Privacy Policy is published by the operator of the platform 99jitu accessible at 99jitu.express. This document outlines our commitments and practices in handling the personal data of all users who register for and use the 99jitu online casino platform in Malaysia.

User privacy has been a core priority at 99jitu since day one. We understand that when you register on our platform, you are entrusting us with your personal information — and that trust is something we take seriously. Every decision about how we collect, store, and use your data is made with your interests and safety as a Malaysian user front of mind.

This Privacy Policy applies to all 99jitu platform users regardless of how they access the platform — whether via a web browser on a desktop, an Android or iOS smartphone, or any other device. It also applies to all your interactions with our platform, including registration, deposits via Touch 'n Go, DuitNow, or other methods, gaming activity, and communications with our support team.

99jitu collects your personal data through several means: directly when you complete a registration form or interact with the platform, automatically as you use our platform, and in certain cases through authorised third parties. The following are the categories of data we collect:

We do not collect sensitive personal data such as medical information, religious beliefs, or biometric data unless required by law or explicitly requested with your consent. We also do not directly collect credit card details or bank account numbers — all payment processing is handled through authorised third-party payment gateways such as FPX providers and licensed e-wallet operators in Malaysia.

99jitu uses the personal data we collect solely for legitimate, relevant and necessary purposes. We do not use your data for anything unrelated to the platform's operations or the services you use. The following are the primary purposes for which your data is used at 99jitu:

• Account Management: Creating and maintaining your 99jitu account, processing registration, verifying your identity, and managing secure login.
• Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX, and managing withdrawals to your account in Malaysian Ringgit (RM).
• Service Delivery: Gives you access to all casino games on 99jitu, including live casino, slots, baccarat, blackjack, roulette and e-sports.
• Platform Security: Detecting and preventing fraud, account misuse, money laundering activity and other security threats to the 99jitu platform and its users.
• Legal Compliance: Fulfilling legal requirements, regulations, and directives from competent authorities in Malaysia that are applicable to our platform's operations.
• Service Improvement: Analysing platform usage patterns on an aggregated, anonymised basis to improve the user experience, platform performance, and the quality of games offered.
• Customer Support: Resolving complaints, responding to enquiries, and providing technical assistance to 99jitu users via live chat and email.
• Service Communications: Sending important notifications about your account, transactions, policy changes, or security information relevant to your use of the platform.
• VIP Programme & Promotions: Managing the 99jitu VIP Rewards program and sending you relevant promotional updates — provided you have given your consent to receive such communications.

99jitu states clearly: we do not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. This is a core commitment that has remained unchanged since we first began operations.

However, in the course of operating the platform, 99jitu may share your data with the following categories of third parties under limited and controlled circumstances:

• Payment Service Providers: Required transaction information is shared with licensed payment providers such as Touch 'n Go, DuitNow, GrabPay, and FPX gateway operators solely for the purpose of processing your deposits and withdrawals.
• Game Providers: Minimal game data required is shared with accredited game providers such as Evolution, Pragmatic Play and Playtech for the purposes of game delivery and result verification.
• Technology Service Providers: Companies that support 99jitu's technical infrastructure — such as cloud computing, cybersecurity, and analytics services — may have limited access to data in their capacity as service providers. All such parties are bound by strict confidentiality agreements.
• Legal Authority: Where required by Malaysian law, a court order, or a lawful directive from a relevant authority, 99jitu may be required to disclose certain data. We will only do so to the extent required by law and will notify you where permitted.

All third parties who receive data from 99jitu are contractually bound to protect that information and use it solely for the specified purpose. They are not permitted to use your data for their own purposes or disclose it to any other party without 99jitu's authorisation.

99jitu continually invests in security infrastructure to ensure your personal data is protected to the highest practicable standard. The technical and organisational security measures we have implemented include:

• Data Encryption in Transit: All communications between your device and 99jitu's servers are protected by TLS 1.3 with 256-bit SSL encryption. No sensitive data is ever transmitted unencrypted.
• Stored Data Encryption: Sensitive data stored in the 99jitu database — including passwords (stored as one-way hashes) and financial information — is encrypted using industry-standard encryption algorithms.
• Tiered Access Control: Internal access to user data is restricted on a least-privilege basis — each staff member can only access the data necessary to carry out their specific duties. All access is logged.
• 24/7 Threat Monitoring: 99jitu's security monitoring system operates around the clock to detect intrusion attempts, abnormal activity, and cyber threats that could potentially compromise user data.
• Two-Factor Authentication (2FA): We offer 2FA for user accounts as an added layer of protection, which can be enabled through your account settings on 99jitu.
• Regular Security Audits: The 99jitu platform and infrastructure undergo periodic independent security assessments to identify and address any vulnerabilities before they can be exploited.
• Staff Training: All 99jitu staff with access to user data receive regular information security training and are bound by strict confidentiality agreements.

Even with all the measures above in place, we acknowledge that no security system is ever one hundred percent foolproof. 99jitu will respond promptly to any identified security incident and notify affected users in accordance with our legal and ethical obligations.

99jitu uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and understand how our platform is used. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as maintaining your login session and remembering your language preference. Without these cookies, the 99jitu platform will not function properly. These cookies cannot be disabled.
• Functional Cookies: Remembering your preferences and settings — such as favourite games, last selected table limits, and display preferences — so 99jitu can deliver a more personalised experience without you having to reconfigure your choices each time.
• Analytics Cookies: Collecting information on how users interact with the 99jitu platform on an aggregated, anonymised basis — including the most visited pages, time spent, and navigation flow. This data is used to improve the platform.
• Security Cookies: Helping 99jitu detect and prevent fraudulent activity, session hijacking, and other security threats by identifying abnormal usage patterns.

You can manage your cookie settings through your web browser. Most modern browsers allow you to view, delete, and block cookies from the privacy settings. Please note that disabling certain cookies may affect the functionality of the 99jitu platform — particularly session cookies required to maintain your login.

99jitu does not retain your personal data longer than is necessary for the original purpose of collection, or as required under applicable Malaysian law. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration of your active account with 99jitu, and for any additional period required following account closure to meet legal compliance obligations.
• Financial Transaction Records: Deposit and withdrawal records in Malaysian Ringgit (RM) are retained for a minimum of seven (7) years in accordance with Malaysian accounting law and anti-money laundering (AML) compliance requirements.
• Game Logs: Game activity records are retained for a minimum of one (1) year for dispute resolution and security audit purposes, after which they may be anonymised or deleted.
• Support Communication Records: Records of interactions with the 99jitu support team are retained for two (2) years for service improvement purposes and as a reference in the event of a dispute.
• Technical Log Data: Access logs and technical data are retained for 90 days for security and technical troubleshooting purposes.

Once data is no longer required and the minimum retention period has elapsed, 99jitu will securely delete or anonymise it using appropriate methods. Successfully deleted data cannot be recovered.

As a 99jitu platform user in Malaysia, you have specific rights regarding your personal data. 99jitu respects and supports the exercise of these rights:

The 99jitu platform is an online casino service intended exclusively for individuals who are 18 years of age and above. We do not knowingly collect, store, or process the personal data of any individual under the age of 18.

If we find that personal data belonging to a minor has been collected — whether as a result of false information provided during registration or by other means — we will take the following steps immediately:

• Freezing and closing the account in question immediately without prior notice.
• Deleting all personal data associated with that individual to the extent permitted by law.
• Returning any remaining account balance, following appropriate identity verification.

If you are a parent or guardian who believes your child has registered on 99jitu while underage, please contact us immediately at support@99jitu.express with supporting evidence. We will respond promptly to resolve the matter.

99jitu reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or technological developments that affect how we handle personal data. Any material changes will be communicated to you via:

• A prominent notification within the 99jitu platform upon your next login.
• An email to the address registered to your account at least seven (7) days before a material amendment takes effect.
• Update the "Last Updated" date at the top of this Privacy Policy page.

We encourage you to review this Privacy Policy periodically. Continued use of the 99jitu platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you may close your account before the amendment's effective date.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way 99jitu handles your personal data, our team is here to help. We take every privacy-related enquiry seriously and are committed to providing a clear and helpful response.

How to contact the 99jitu privacy team:

• Email (Privacy Enquiries): support@99jitu.express — Use the subject line "Privacy Policy Enquiry" to ensure your message is handled by the right team. Please include your full name and registered email address.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the 99jitu platform. Suitable for general privacy enquiries or for guidance on how to exercise your data rights.

We are committed to responding to all privacy-related enquiries within 14 business days from the date of receipt. For more complex requests such as data access or data deletion applications, we may require additional identity verification before processing your request.

If, after contacting us, you remain unsatisfied with the way 99jitu has handled your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia or the relevant supervisory authority under applicable Malaysian law.