At joya9, we take your privacy seriously. This document explains in detail how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010.
All your personal data and transaction information is transmitted and stored using 256-bit SSL encryption — the highest security standard in the digital financial industry.
Under Malaysia's PDPA 2010, you have the right to access, correct, restrict, and request the deletion of your personal data at any time through the channels we have provided.
Joya9 has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes without your explicit consent.
Your data is stored in secured data centres with restricted physical access, 24/7 monitoring, and automatic backup systems to ensure the safety and availability of your data.
You may opt out of receiving promotional emails, SMS notifications, or any marketing communications from joya9 at any time through your account settings.
Joya9 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Our compliance team ensures that all data handling processes meet current legal requirements.
Important Note: This Privacy Policy forms part of the legal agreement between you and joya9. It should be read together with Terms & Conditions us. By registering or continuing to use the joya9 platform, you agree to the handling of your personal data as described in this document.
Joya9 is a digital entertainment platform committed to protecting the privacy of every member. This Privacy Policy applies to all personal information collected through the joya9.world website, the joya9 mobile app, and all related services.
As a platform operating in Malaysia and serving Malaysian players, joya9 is fully compliant with Personal Data Protection Act 2010 (PDPA) Malaysia. This means we adhere to all seven core PDPA principles across every aspect of how we handle your personal data: the general principle, notice and choice principle, disclosure principle, security principle, integrity principle, access principle, and data transfer principle.
The data controller for the joya9 platform is the entity operating joya9.world. Any privacy-related enquiries may be directed to our Data Protection Officer through the channels stated in Section 11 of this document.
This policy applies to Malaysian members using joya9 services in Malaysian Ringgit (MYR) and local Malaysian payment methods.
Joya9 collects your personal data through several means: directly when you register or use the platform, automatically as you browse our website, and through legitimate third parties. Below is a full breakdown of the data we collect:
| Data Category | Information Type | Collection Method |
|---|---|---|
| Personal Identity | Full name, MyKad/passport number, date of birth, gender, nationality | Registration form, KYC process |
| Contact Information | Email address, phone number, Malaysian residential address | Account registration, profile updates |
| Financial Data | Deposit/withdrawal records in MYR, payment methods (DuitNow, TnG, FPX), transaction history | Deposit and withdrawal activity |
| Gaming Data | Game history, betting records, wins and losses, active session duration | Automatic use of the joya9 platform |
| Technical Data | IP address, device type, operating system, web browser, cookie data | Automatic server logs upon visit |
| Communications Data | Live chat records, support tickets, emails to joya9 | Interactions with the support team |
joya9 does not directly collect credit card details or bank account numbers. All financial transactions are processed through secure, certified payment gateways.
Joya9 uses your personal data only for legitimate purposes that have been made known to you. We do not use your data beyond what is necessary for the following purposes:
All data processing we carry out is based on at least one valid legal ground: fulfillment of a contract with you, a legal obligation, the legitimate interests of joya9, or explicit consent you have provided.
Joya9 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are specific circumstances where we may need to share your information with selected third parties:
All third parties involved are bound by strict confidentiality agreements and are required to handle your data to the same high security standards as joya9. We do not permit these third parties to use your data for their own purposes.
In the event of a merger, acquisition, or sale of joya9 assets, member personal data may be transferred to the new entity. You will be notified in advance via email and in-platform notification.
Joya9 employs a comprehensive security framework to protect your personal data against unauthorised access, loss, damage, or disclosure:
While we take all reasonable security measures, no system is 100% secure. In the event of a data breach affecting your information, joya9 will notify you within 72 hours as required by law.
Joya9 only retains your personal data for as long as necessary for the stated purposes or as required under Malaysian law. Our retention policy is as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account records | For the duration of the active account | Ongoing service provision |
| Financial transaction records (MYR) | 7 years after transaction | Malaysian accounting legal requirements |
| KYC records / identity verification | 5 years after account closure | AML/KYC Compliance |
| Customer support communication logs | 3 years | Dispute resolution |
| Gaming and betting data | 3 years | Risk management and auditing |
| Marketing data (with consent) | Until consent is withdrawn | Targeted marketing |
| Technical logs (IP, device) | 12 months | Security and fraud detection |
Once the defined retention period has elapsed, your data will be securely deleted or anonymised so it can no longer be linked to you. You may request early deletion of your data, subject to any legal obligations we are required to fulfil.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by joya9:
Request a copy of all personal data we hold about you. We will provide this within 21 working days.
Request the correction of inaccurate or outdated personal data in your joya9 account profile.
Request the deletion of your personal data, subject to any active legal retention obligations.
Request that joya9 limit how we process your data in certain circumstances as provided under the PDPA.
Object to the processing of your data for direct marketing purposes at any time, without providing a reason.
Request your data in a machine-readable format for transfer to another service provider.
To exercise any of the above rights, please contact the joya9 Data Protection Officer at privacy@joya9.world or via Live Chat on the platform. We will process your request within 21 working days of receipt. If your request is declined, we will provide a written explanation.
Joya9 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the joya9 website.
You can manage your cookie settings through your web browser or via the privacy settings in your joya9 account. Please note that disabling essential cookies may affect platform functionality.
The joya9 platform is intended solely for individuals aged 18 years and above only. joya9 does not knowingly collect or process personal data from individuals under the age of 18.
If we become aware that we have collected personal data from an individual under the age of 18, we will immediately take the following steps:
Joya9 uses an age verification system during registration and KYC to restrict minors from accessing our platform. Parents and guardians are encouraged to use parental control software to prevent children from accessing gambling websites.
Joya9 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other legitimate reasons. The following outlines how we will notify you of such changes:
Continued use of the joya9 platform after changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request the deletion of your data.
If you have any questions or concerns, or wish to exercise your PDPA rights, please contact our Data Protection Officer (DPO) through the following channels:
We are committed to responding to all privacy-related enquiries within 5 business days. For data access or deletion requests, processing time is up to 21 business days in accordance with PDPA 2010 requirements.
You may also refer to Terms & Conditions and Responsible Gaming Policy us for more information on how joya9 operates the platform safely and responsibly.
We take data protection seriously. Register a joya9 account today and enjoy Malaysia's digital entertainment platform — safe, responsible, and fully PDPA 2010 compliant.