Privacy Policy — jstar99

This Privacy Policy ("Policy") describes how jstar99 ("jstar99", "the Platform", "we", "us", "our") collects, uses, stores, and discloses personal data in connection with your use of the jstar99 online casino and sports betting platform accessible at https://jstar99.cam and all associated services.

This Policy applies to all registered players, visitors, and any person whose personal data is processed by jstar99 in connection with the Platform. By creating an account or using any jstar99 service, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy. Where this Policy conflicts with those documents on a matter of data processing, this Policy takes precedence.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data": Any information relating to an identified or identifiable natural person — including but not limited to name, email address, phone number, date of birth, residential address, financial account details, IP address, and device identifiers.
• "Processing": Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Data Controller": jstar99, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor": A third-party service provider that processes Personal Data on behalf of jstar99 in accordance with written instructions and applicable data protection law.
• "Player" / "User": Any registered account holder or visitor who accesses or uses the jstar99 Platform.
• "Consent": A freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their Personal Data for a defined purpose.
• "KYC": Know Your Customer — the identity verification process required under anti-money laundering and responsible gambling obligations.

jstar99 collects Personal Data in several categories depending on how you interact with the Platform. The table below summarises the categories of data collected and their general purpose:

We do not collect Special Category Data (such as racial or ethnic origin, health data, or biometric data) except where a document submitted for KYC incidentally contains such information, in which case it is processed solely for identity verification and not for any other purpose.

jstar99 collects Personal Data through the following means:

When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our customer support team, or respond to a promotional survey, you provide Personal Data directly to jstar99. This is the primary source of identity, contact, and financial data.

When you access and use the jstar99 Platform — whether on desktop or mobile, from Kuala Lumpur or elsewhere — our systems automatically collect Technical Data and Usage Data including your IP address, device identifiers, browser characteristics, and behavioural interaction data (pages visited, game sessions, bet records). This collection occurs via server logs, cookies, and similar tracking technologies.

We may receive data about you from third-party service providers engaged by jstar99, including payment processors (for transaction verification), identity verification services (for KYC), fraud detection services, and analytics providers. All third-party Data Processors engaged by jstar99 are contractually bound to process data only in accordance with our instructions and applicable data protection law.

In limited circumstances related to fraud prevention and AML compliance, jstar99 may cross-reference information you provide against publicly available databases, sanction lists, or Politically Exposed Persons (PEP) registers.

jstar99 processes your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your jstar99 player account, including authentication and access control.
• Identity & Age Verification: Confirming your identity and verifying that you meet the minimum age requirement of 21 years before permitting real-money gaming activity.
• Transaction Processing: Processing deposits made via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, 7-Eleven Cliqq, and USDT TRC20, as well as processing withdrawal requests.
• Customer Support: Responding to queries, complaints, and requests submitted via live chat or email.
• Fraud Prevention & Security: Detecting and preventing fraud, account takeover attempts, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Legal & Regulatory Compliance: Fulfilling obligations under applicable Anti-Money Laundering (AML) regulations, responsible gambling requirements, and the terms of our operating licence.
• Platform Improvement: Analysing aggregate usage patterns to improve game performance, navigation, and the overall player experience.
• Responsible Gambling Monitoring: Monitoring gameplay patterns to identify potential problem gambling behaviour and intervening with appropriate support tools where necessary.
• Marketing Communications: Sending promotional offers, bonus announcements, and platform news — only where you have provided explicit consent and only through channels you have opted into.

jstar99 processes Personal Data under one or more of the following legal bases, depending on the processing activity in question:

• Contractual Necessity: Processing required to fulfil the contract between you and jstar99 — i.e., to provide the gaming and betting services you have registered to use, including account management and transaction processing.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC requirements, and responsible gambling mandates.
• Legitimate Interests: Processing conducted in furtherance of jstar99's legitimate business interests — including fraud prevention, platform security, and product analytics — where such interests are not overridden by your rights and interests.
• Consent: Processing for purposes such as direct marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting our support team.

jstar99 does not sell or trade your Personal Data. We share Personal Data only in the limited circumstances described below:

We engage third-party service providers who process Personal Data on our behalf, subject to binding contractual obligations. These include payment processing gateways (for FPX, DuitNow, e-wallet, and USDT TRC20 transactions), identity verification providers, customer support platform operators, and infrastructure hosting providers. All such parties process data solely on our instructions and are prohibited from using it for their own purposes.

jstar99 may disclose Personal Data to competent authorities, regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or where disclosure is necessary to prevent fraud or protect the safety of players or third parties.

In the event of a merger, acquisition, or sale of all or a substantial part of jstar99's assets, Personal Data held by us may be transferred to the relevant successor entity, subject to that entity providing equivalent data protection commitments.

In any circumstances not covered by the above, jstar99 will share Personal Data with third parties only with your prior explicit consent.

jstar99 uses cookies and similar tracking technologies to operate the Platform, analyse usage, and improve player experience. A "cookie" is a small text file placed on your device by a web server when you visit a website. The cookies used on jstar99 fall into the following categories:

You may manage cookie preferences through your browser settings at any time. Please note that disabling Essential cookies will impair your ability to use the Platform. Where applicable, a cookie consent mechanism is presented upon your first visit to jstar99.

jstar99 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulatory obligation.

• Active Account Data: Retained for the duration of your active account relationship with jstar99 plus a minimum of five (5) years following account closure, to meet regulatory and AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later, in compliance with anti-money laundering legislation.
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years in accordance with applicable financial regulation and audit requirements.
• Support Interaction Records: Records of live chat and email support interactions are retained for up to two (2) years for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Records of your marketing consent (including opt-in and opt-out events) are retained for as long as they remain relevant plus a reasonable additional period to demonstrate compliance.

Upon the expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle procedures.

jstar99 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and jstar99 servers is encrypted using 256-bit TLS/SSL protocols. The padlock icon visible in your browser's address bar confirms this encryption is active.
• Encryption at Rest: Sensitive Personal Data stored on jstar99 servers — including KYC documents, financial account details, and passwords — is stored in encrypted form.
• Access Controls: Access to Personal Data within jstar99's internal systems is restricted on a strict need-to-know basis. Personnel with access to sensitive data undergo regular security training and are subject to confidentiality obligations.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their jstar99 account for an additional layer of login security.
• Regular Security Audits: jstar99 conducts regular internal and third-party security reviews of its infrastructure, application layer, and data handling processes.
• Data Breach Procedures: jstar99 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, we will notify affected players promptly and take immediate remedial action.

While jstar99 employs industry-standard security measures, no system is entirely immune to risk. You are equally responsible for maintaining the security of your account credentials and for accessing the Platform only from trusted, secure devices and networks.

Subject to applicable data protection law and certain legal limitations, you have the following rights in relation to the Personal Data jstar99 holds about you. To exercise any of these rights, please contact our support team via live chat or email at the address provided in Section 16.

jstar99 will respond to all valid data rights requests within a reasonable timeframe, typically within thirty (30) calendar days of receipt. We may request verification of your identity before processing a rights request to ensure the security of your data.

jstar99 is strictly an adult platform. We do not knowingly collect Personal Data from individuals under the age of 21 years. Our registration process includes mandatory age confirmation, and KYC verification is used to validate the age of all players before real-money gaming activity is permitted.

If jstar99 discovers that Personal Data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on jstar99, please contact our support team immediately so we can investigate and act accordingly.

The jstar99 Platform is operated by an internationally structured entity and may engage service providers located outside of Malaysia. Where your Personal Data is transferred to countries outside the jurisdiction in which it was collected, jstar99 takes steps to ensure that appropriate safeguards are in place to protect your data to an equivalent standard as required under applicable data protection law.

Such safeguards may include: contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable in your home jurisdiction; reliance on jurisdictions that have been assessed as providing adequate data protection; or the consent of the data subject where no other mechanism is available.

For further information about international data transfers applicable to your Personal Data, please contact our support team.

The jstar99 Platform integrates third-party services — including payment processors, game providers, and identity verification systems — in the operation of its services. While jstar99 carefully vets all service providers and requires contractual data protection commitments, once you interact with a third-party service directly (for example, your bank's FPX interface or your Touch 'n Go eWallet application), that service provider's own privacy policy applies to the data processed within their environment.

jstar99 is not responsible for the privacy practices of third-party systems you access outside of the jstar99 Platform itself. We encourage you to review the privacy policies of any third-party service provider whose services you use in connection with your jstar99 account.

jstar99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are material — meaning they significantly affect your rights or how your data is used — jstar99 will provide advance notice via the email address registered on your account and/or a prominent notification on the Platform homepage, with a minimum of fourteen (14) days' notice before the changes take effect.

Your continued use of the jstar99 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended Policy, you must cease using the Platform and may request account closure under Section 16.

If you have questions, concerns, or requests relating to this Privacy Policy or jstar99's data handling practices, please contact our Data Support team using the details below. We are committed to addressing all privacy-related inquiries promptly and thoroughly.

For data rights requests (access, deletion, portability, objection), please include your registered email address and a brief description of your request. jstar99 will verify your identity before processing any request that involves disclosing or deleting Personal Data.

For related legal documentation, please also review our Terms & Conditions and Responsible Gambling Policy.