jom91 Privacy Policy

Last updated: 1 June 2026  |  Version 3.1

1. Introduction

Who We Are

This Privacy Policy ("Policy") describes how jom91.org ("jom91", "we", "us", or "our") collects, processes, stores, and protects personal data in connection with your use of the jom91 online gaming platform (the "Platform"). This Policy applies to all registered players and visitors to the Platform, including users accessing from Kuala Lumpur, Penang, Johor Bahru, and all other locations in Malaysia and beyond.

jom91 takes its obligations as a data controller seriously. We are committed to handling your personal information with care, transparency, and in accordance with applicable data protection principles. If you have questions about this Policy or your data, please contact us using the details in Section 14.

By registering an account with jom91 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data We Collect

Categories of Information

jom91 collects personal data in the following categories:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification (Malaysian IC, passport, or equivalent) provided during account verification.
• Contact Data: Email address, mobile phone number, and residential address.
• Account Data: Username, password (stored in hashed, non-reversible form), account preferences, and communication history with jom91 support.
• Financial Data: Deposit and withdrawal transaction records, payment method identifiers (e.g., bank account last four digits, eWallet account reference), and transaction amounts in Malaysian Ringgit (MYR). Full payment card or bank account numbers are never stored by jom91.
• Gaming Activity Data: Bet history, game session logs, wagering amounts, win/loss records, bonus utilisation, and responsible gaming limit settings.
• Technical Data: IP address, device type and operating system, browser type and version, session timestamps, and geolocation data where applicable.
• Communications Data: Records of support enquiries, live chat transcripts, email correspondence, and any feedback submitted to jom91.
• Marketing Preference Data: Records of your consent status and preferences in relation to jom91 marketing communications.

3. How We Collect Data

Collection Methods

jom91 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or responding to a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, log files, and similar tracking technologies (see Section 9).
• Third-party providers: Identity verification data from authorised KYC (Know Your Customer) service providers; payment data from payment processors; fraud prevention data from anti-fraud service providers.
• Publicly available sources: In limited circumstances, jom91 may verify information against publicly available records for fraud prevention or regulatory compliance purposes.

4. How We Use Your Data

Purpose of Processing

jom91 uses your personal data for the following purposes:

• To create, verify, and maintain your jom91 account.
• To process deposits, withdrawals, and other financial transactions in MYR.
• To authenticate your identity and prevent unauthorised account access.
• To comply with anti-money laundering (AML), know-your-customer (KYC), and other regulatory obligations applicable to our licensed gaming operations.
• To deliver and personalise jom91 gaming services, including recommendations based on your activity on the Platform.
• To administer promotions, bonuses, and loyalty programmes you participate in.
• To operate responsible gaming tools, including monitoring for indicators of problem gambling and enforcing self-exclusion requests.
• To respond to customer support enquiries and resolve complaints.
• To send service-related communications, including account notifications, security alerts, and policy updates.
• To send marketing communications where you have provided consent, and to manage your marketing preferences.
• To detect, investigate, and prevent fraud, cheating, collusion, money laundering, and other prohibited conduct.
• To improve and maintain the Platform through analysis of aggregated usage data and technical diagnostics.

5. Legal Basis for Processing

Lawfulness

jom91 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the jom91 Terms and Conditions, including account management and transaction processing.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, gaming authority obligations, and other applicable laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

Third Parties

jom91 does not sell or rent your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients where necessary:

• Payment processors: To facilitate deposit and withdrawal transactions via Touch n Go eWallet, Boost, FPX (Maybank, CIMB, Public Bank), and other approved payment methods.
• Identity verification providers: To verify your identity and age in compliance with KYC and AML requirements.
• Gaming software providers: Game studios and live casino providers whose software operates on the jom91 Platform may receive session data necessary to deliver the relevant game.
• Fraud prevention and security providers: To detect and prevent fraudulent activity, cheating, and other prohibited conduct.
• Customer support platforms: Service providers that facilitate jom91's live chat and support ticketing systems.
• Regulatory authorities: Where disclosure is required by applicable law, court order, or regulatory request from a competent authority.

All third-party service providers engaged by jom91 are subject to contractual data processing agreements that require them to handle your data securely and in accordance with applicable data protection standards.

7. Data Retention

How Long We Keep Data

jom91 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of seven (7) years to comply with applicable financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of three (3) years following the relevant activity.
• Support communications: Retained for a minimum of two (2) years following resolution of the relevant enquiry.
• Marketing preference records: Retained for as long as the relevant consent or opt-out record is required to demonstrate compliance.

Upon expiry of the applicable retention period, data will be securely deleted or anonymised.

8. Security Measures

How We Protect Your Data

jom91 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption for all data in transit between your browser and jom91's servers.
• Encryption of sensitive data at rest, including identity verification documents and payment references.
• Password hashing using industry-standard one-way cryptographic algorithms — jom91 staff cannot view your password.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of the Platform.
• Incident response procedures including breach notification protocols in line with applicable regulatory requirements.

While jom91 takes all reasonable precautions to protect your data, no system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your jom91 account credentials.

9. Cookies & Tracking Technologies

Cookies Policy

jom91 uses cookies and similar technologies (including web beacons and local storage) on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limit configurations.
• Analytics cookies: Used to collect aggregated data on how users interact with the Platform, enabling jom91 to identify performance issues and improve the user experience. Data collected is anonymised where possible.
• Marketing cookies: Used where you have consented to receive personalised promotions from jom91, to track engagement with marketing communications.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the jom91 Platform. Strictly necessary cookies cannot be turned off via browser settings without rendering the Platform unusable.

10. Your Data Rights

Player Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by jom91:

• Right of access: You may request a copy of the personal data jom91 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to our legal and regulatory retention obligations.
• Right to restriction: You may request that we restrict processing of your data while a dispute about accuracy or lawfulness is pending.
• Right to data portability: Where processing is based on consent or contract, you may request your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact jom91 customer support via live chat on jom91.org or by email at support at jom91.org. jom91 will respond to verifiable requests within 30 days. Where requests are complex or numerous, this period may be extended by a further 60 days with notice.

11. Minors

Age Restriction

The jom91 Platform is strictly intended for adults aged 21 and above. jom91 does not knowingly collect personal data from individuals under the age of 21. If jom91 becomes aware that personal data has been collected from a person under 21, that account will be closed immediately and all associated data deleted. If you believe that a minor has registered on jom91, please contact us at support at jom91.org immediately.

12. International Data Transfers

Cross-Border Processing

jom91's operations involve the transfer of personal data to service providers located in jurisdictions outside Malaysia. Where such transfers occur, jom91 ensures that appropriate safeguards are in place, including the use of standard contractual clauses or reliance on adequacy decisions by relevant data protection authorities. By using the jom91 Platform, you acknowledge that your data may be transferred and processed in jurisdictions outside Malaysia in accordance with this Policy.

13. Changes to This Policy

Policy Updates

jom91 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Material changes will be notified to registered players via the email address on record or via an in-platform notification prior to the changes taking effect. The "Last updated" date at the top of this Policy will be revised accordingly. Continued use of the Platform after the effective date of any change constitutes your acceptance of the revised Policy.

14. Contact Us

Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the jom91 Data Privacy team:

• Live chat: Available 24/7 on jom91.org
• Email: support at jom91.org

jom91 aims to acknowledge all privacy-related requests within 48 hours and to respond substantively within 30 calendar days. For complex requests or those requiring verification, jom91 may request additional information to confirm your identity before processing your request.