Privacy Policy — jitu99

This Privacy Policy ("Policy") is issued by jitu99 ("we", "us", "our", or the "Company") and applies to all personal data processed in connection with the jitu99 online betting and gaming platform accessible at https://jitu99.click, including any associated mobile interfaces or software (collectively, the "Platform").

jitu99 is committed to handling personal data responsibly, lawfully, and in accordance with internationally recognised data protection principles. We recognise that our players — including the many Malaysian users from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere — entrust us with sensitive personal and financial information. We take that trust seriously.

By accessing the Platform or registering an account, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your relationship with jitu99.

In this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, jitu99.
• "Data Processor" means a third party that processes Personal Data on behalf of jitu99 under a data processing agreement.
• "KYC" means Know Your Customer — the identity verification process required to activate full account functionality on jitu99.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the Processing of Personal Data.
• "Data Subject Request" means a formal request by a registered user to exercise any rights set out in Section 11 of this Policy.

jitu99 collects only the Personal Data necessary to deliver our services, comply with legal and regulatory obligations, and ensure platform security. The categories of Personal Data we collect include:

We do not collect sensitive categories of personal data (such as health, biometric, or racial data) unless strictly required by a specific regulatory obligation, and only with your explicit consent where applicable.

jitu99 collects Personal Data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or completing any form on the Platform.
• Automated technical collection: Data gathered automatically as you interact with the Platform, including cookies, server logs, device fingerprinting, and analytics tools used strictly for security and performance purposes.
• Third-party sources: Identity and fraud verification data from KYC/AML service providers; payment transaction data from Malaysian payment processors including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, and GrabPay gateways.
• Publicly available sources: In limited circumstances, we may verify information against publicly available registers or sanction screening databases as required by our anti-money laundering compliance obligations.

jitu99 processes Personal Data only where a valid legal basis exists. The applicable legal bases and the corresponding purposes are as follows:

• Performance of a contract: Processing necessary to register your account, process transactions, settle bets, pay out winnings, and deliver all core platform services.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and any applicable reporting obligations under our gaming licence.
• Legitimate interests: Fraud prevention, platform security, abuse detection, system performance monitoring, and service improvement — where these interests are not overridden by your rights and freedoms.
• Consent: Marketing communications, promotional emails, and non-essential cookies — where you have opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jitu99 does not sell, rent, or trade your Personal Data. We share data only in the following circumstances and only to the extent necessary:

• Payment processors: Malaysian payment service providers (including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and direct bank transfers via Maybank, CIMB, Public Bank, RHB, and Hong Leong) receive the minimum financial data required to process your transactions.
• KYC / AML service providers: Third-party identity verification and fraud screening providers receive identity document data solely for the purpose of completing mandatory verification checks.
• Gaming platform providers: Licensed game studios and sports data providers may receive anonymised or pseudonymised session data necessary for game delivery and result settlement.
• IT and infrastructure providers: Cloud hosting and cybersecurity vendors that process data on our behalf under binding data processing agreements that prohibit unauthorised use.
• Legal and regulatory authorities: Where required by applicable law, court order, or our gaming licensing authority, we may disclose Personal Data to law enforcement or regulatory bodies.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by jitu99, subject to professional confidentiality obligations.

jitu99 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of the relevant transaction, for regulatory compliance and dispute resolution purposes.
• Support communications: Retained for three (3) years from the date of last interaction, unless retention is required for ongoing legal proceedings.
• Marketing preference records: Retained until you withdraw consent or close your account, plus a short administrative period thereafter.
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud prevention, then deleted or anonymised.

Where Personal Data is no longer required, jitu99 will securely delete or anonymise it in accordance with our data destruction procedures. Anonymised data may be retained for statistical and analytical purposes indefinitely, as it can no longer identify you.

jitu99 uses cookies and similar technologies on the Platform. A cookie is a small text file stored on your device that allows us to recognise your browser and remember certain information about your session.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled.
• Functional cookies: Remember your preferences (such as language or display settings) to improve your experience. These are set only with your consent.
• Analytics cookies: Used to understand how players interact with the Platform — for example, which pages are most visited. This data is aggregated and anonymised. Set only with your consent.

You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will affect Platform functionality. Consent-based cookies can be withdrawn without affecting your ability to use the core Platform.

jitu99 operates under international gaming licensing and may use service providers located outside Malaysia. As a result, your Personal Data may be transferred to and processed in countries other than your country of residence.

Where such international transfers occur, jitu99 implements appropriate safeguards to protect your Personal Data, including:

• Contractual clauses that bind data recipients to data protection standards equivalent to those applied by jitu99;
• Transfers only to service providers in jurisdictions with adequate data protection frameworks;
• Encryption of data in transit and at rest for all cross-border transfers.

Malaysian users should note that data transferred internationally remains subject to the protections described in this Policy, regardless of the jurisdiction in which it is processed.

jitu99 implements technical and organisational measures appropriate to the sensitivity of the Personal Data we hold. Our security programme includes:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS protocols.
• Data-at-rest encryption: Sensitive data stored in our systems (including identity documents and financial records) is encrypted using industry-standard algorithms.
• Access controls: Strict role-based access controls ensure that Personal Data is accessible only to jitu99 personnel who have a legitimate need.
• Intrusion detection: Automated monitoring systems detect and alert on suspicious activity, including unauthorised access attempts.
• Regular security audits: Internal and external security reviews are conducted periodically to identify and remediate vulnerabilities.
• Staff training: All jitu99 employees handling Personal Data receive regular training on data protection and security obligations.

As a Data Subject, you hold the following rights with respect to your Personal Data held by jitu99. You may exercise any of these rights by submitting a Data Subject Request through the contact channels described in Section 14.

• Right of Access: You may request a copy of the Personal Data jitu99 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held about you.
• Right to Erasure: In certain circumstances, you may request deletion of your Personal Data. Note that we may be legally required to retain certain data (e.g., KYC and transaction records) even after your account is closed.
• Right to Restriction of Processing: You may request that we limit the processing of your Personal Data in specific circumstances, such as while a rectification request is under review.
• Right to Data Portability: Where processing is based on consent or contract, you may request that we provide your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests. You also have an absolute right to object to processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

jitu99 will respond to all verified Data Subject Requests within 30 days of receipt. We may require identity verification before processing a request, to ensure we are responding to the correct individual. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative charge or may be declined, with written explanation.

If you are a parent or guardian and believe that a minor has provided Personal Data to jitu99 without your consent, please contact us immediately using the details in Section 14. We will investigate promptly and take appropriate action.

jitu99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered users by email or by a prominent notice on the Platform, providing reasonable advance notice before changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was published. Continued use of the Platform after the effective date of any changes constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically. Archived versions of this Policy are available upon request.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the jitu99 Data Support team through the following channels:

• Live Chat: Available 24/7 directly within the jitu99 Platform — the fastest channel for urgent matters.
• WhatsApp: Available through the jitu99 support channel during all operating hours.
• Email: [email protected] — for formal Data Subject Requests and privacy-related enquiries.

Support is available in English, Bahasa Melayu, and Chinese. Data Subject Requests received by email will be acknowledged within 5 business days and resolved within 30 days.