Privacy Policy joy9 —
Our Commitment to Protecting Your Data

This Privacy Policy explains how joy9 ("we", "our platform") collects, uses, discloses and protects your personal information when you use our online gaming platform at joy9.ml, including all services, features and functions available through the platform.

We understand that your trust is our most valuable asset. That is why we take our responsibility as custodians of your personal data seriously. Every data-related decision we make is grounded in the principles of transparency, integrity and respect for each individual's privacy.

By registering an account or using joy9's services, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, we advise you not to use the joy9 platform.

Joy9 collects several categories of information to ensure the platform runs smoothly and your gaming experience can be optimised. The following are the types of information we collect and how we obtain them:

We do not collect sensitive information such as biometric data, medical records, religious beliefs, or political views unless specifically required for legal compliance purposes and only with your explicit consent.

Every piece of data we collect has a clear and legitimate purpose. joy9 uses your personal information for the following purposes:

• Account Management: Creating and maintaining your account, verifying your identity through the KYC process, and ensuring login security.
• Transaction Processing: Processing deposits, withdrawals, and bonus payments securely and accurately.
• Service Delivery: Ensuring all games, features, and platform functions run smoothly and responsively.
• Communications: Sending important account-related notifications, security updates, and relevant promotional alerts.
• Platform Improvements: Analyzing usage patterns to improve interface design, technical performance, and the overall user experience.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate support.
• Legal Compliance: Complying with legal obligations including anti-money laundering (AML) requirements and financial reporting obligations.
• Platform Security: Detecting and preventing fraud, unauthorized access, and activities that violate the terms of service.

Joy9 will not use your data for any purpose beyond those stated above without first obtaining your explicit consent. Whenever we wish to use your data for a new purpose, you will be notified and given the choice to agree or decline.

Joy9 does not sell your personal data. However, in the course of operating the platform, there are certain situations where we need to share information with carefully selected parties. Such sharing is always carried out on the basis of legitimate operational need only:

• Payment Providers: Required transaction information is shared with trusted payment gateways to securely process your deposits and withdrawals.
• Game Software Providers: Game session data is shared with third-party software providers that supply games on the joy9 platform, solely for technical purposes.
• Identity Verification Services: Your KYC information may be processed by licensed and trusted identity verification service providers to meet compliance requirements.
• Legal Authority: joy9 will disclose information to the relevant authorities when required by law, court order or regulatory obligation.

All third parties working with joy9 are bound by strict data protection agreements and are required to comply with privacy standards equivalent to our own.

Data security is an absolute priority for joy9. We continuously invest in security infrastructure to keep your information safe from increasingly sophisticated cyber threats. The security measures we employ include:

• 256-bit SSL/TLS Encryption for all data communications between your browser and the joy9 servers.
• Static data encryption (at-rest) for all personal information stored in our databases.
• Two-factor authentication (2FA) available to all user accounts as an additional layer of security.
• 24/7 security monitoring by our cybersecurity team to detect and respond to threats in real time.
• Penetration testing conducted periodically by independent security audit firms.
• Role-based access control (RBAC) ensuring that only authorised personnel can access sensitive user data.

While joy9 takes all reasonable steps to protect your data, no security system in the world can guarantee 100% protection at all times. We encourage you to play your part by using a strong password and never sharing your login credentials with anyone.

The joy9 platform uses cookies and similar tracking technologies to enhance user experience, analyse usage patterns and ensure the security of your login sessions. The following are the types of cookies we use:

• Strictly Necessary Cookies: Required for the platform to function properly — including login session verification, language settings and security. These cookies cannot be disabled.
• Functional Cookies: Remembering your preferences such as display settings, preferred currency, and game preferences to enhance your experience.
• Analytics Cookies: Collecting anonymized usage data to help us understand how users interact with the platform and identify areas for improvement.
• Security Cookies: Detecting suspicious activity and helping prevent unauthorized access to your account.

You can manage your cookie settings through your web browser. Disabling certain cookies may affect some platform functionality. We do not use third-party cookies for personalised advertising.

As a joy9 user, you have certain rights regarding your personal data. These rights are as follows and may be exercised by contacting our support team:

The joy9 platform is exclusively for adult users aged 18 and above. We do not intentionally collect, store or process any personal information from individuals under the age of 18.

Should we find that we have inadvertently collected data from a minor, the account in question will be terminated immediately and all related data will be deleted from our systems without delay. Parents or guardians who have reason to believe their child has registered an account on joy9 are advised to contact us promptly.

In operating our integrated platform, your personal data may be transferred to and processed on servers located outside Malaysia. Such transfers are only carried out when necessary for operational purposes and are always protected by adequate safeguards.

The protection measures we apply for cross-border data transfers include:

• Use of internationally recognized standard data transfer agreements.
• Ensuring the recipient country maintains data protection standards equivalent to or higher than ours.
• Data encryption in transit (in-transit) and at rest (at-rest).
• Regular reviews of the data protection practices of our international partners.

Joy9 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration your account is active, plus the applicable legal retention period following account closure.
• Financial Transaction Records: Retained for a minimum of seven years in accordance with financial and anti-money laundering legal requirements.
• Communication Logs: Support conversation records are retained for two years for quality assurance and dispute resolution purposes.
• Technical Data & Logs: Server logs and technical data are retained for 90 days before being automatically deleted.
• KYC Data: Retained for the period stipulated by the relevant regulatory authority, typically five to seven years.

Once the retention period expires, your data will be securely deleted or anonymised using procedures that ensure it cannot be recovered or linked back to you.

Joy9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or service improvements. The "Last Updated" date at the top of this page indicates the latest version in effect.

For significant changes that affect your rights or how we use your personal data, we will endeavour to provide clearer notice — whether through in-platform notifications, an email to your registered address, or a prominent notice on the platform's main page.

Continued use of the joy9 platform after any Privacy Policy changes take effect constitutes your acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us through the following channels:

• Live Chat: Available 24/7 within the joy9 platform — the fastest way to handle urgent privacy enquiries.
• Email: [email protected] — for formal requests regarding data rights or privacy complaints.
• FAQ: Visit FAQ page us for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related inquiries within 72 working hours. Requests involving data access, correction, or deletion will be processed within 30 working days as stipulated.