Official Documents

Privacy Policy joia9 — Data Protection & Your Personal Information

At joia9, your privacy is not merely a legal obligation — it is our most fundamental commitment. This document clearly explains how we collect, use, store, and protect the personal information of every player who trusts our platform.

Last Updated: 1 January 2026

Joia9 Privacy Commitment

Six core principles that shape how we manage your personal data

Bank-Grade Encryption

All personal data and transaction information is protected with 256-bit SSL encryption — the same security technology used by leading banking institutions worldwide, including in Malaysia.

No Data Sales

Joia9 has never and will never sell, rent or share your personal information with third parties for marketing purposes without your explicit consent. Your data belongs to you.

Full Control in Your Hands

You may access, update, amend, or request the deletion of your personal data at any time via the account settings page or by contacting our privacy team directly.

Secure Data Storage

Your data is stored in certified data centres with strict physical and digital access controls. Only specifically authorised personnel may access players' personal information.

Legal Compliance

Joia9 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection regulations. We conduct regular compliance audits.

Immediate Breach Notification

In the event of any security incident involving your personal data, joia9 will notify you within the timeframe prescribed by law and take immediate action to mitigate the risk.

1 Introduction & Policy Scope

This Privacy Policy is issued by joia9 and applies to all users who access or use our platform at joia9.bio, including the website and mobile app. By registering or using joia9 services, you agree to the collection and use of your personal information as described in this document.

We understand that trust is the foundation of the relationship between a platform and its players. As such, we are fully committed to ensuring that every decision involving your personal data is made with care, accountability, and with your best interests as a joia9 member always at the forefront.

This Privacy Policy should be read together with the Terms and Conditions joia9. Both documents form the complete agreement between you and our platform.

2 Types of Personal Data We Collect

Joia9 collects your personal information through various interaction points — during account registration, during platform use, during the KYC process and through communications with our support team. The following are the categories of data we collect:

Personal Identification Data

  • Full name as stated on official identification documents
  • National identification number (MyKad) or passport number
  • Date of birth and gender
  • Current residential address
  • Active mobile phone number
  • Valid email address

Financial Data

  • Bank account number registered for deposits and withdrawals
  • Digital wallet information (Touch 'n Go eWallet, GrabPay, Boost, and others)
  • Deposit and withdrawal transaction history
  • Debit or credit card information (full card numbers are not stored — only the last digits for verification purposes)

Technical & Usage Data

  • IP address and IP-based geographic location
  • Device type, operating system, and browser version used
  • Login activity logs including time and date
  • Game history, wagering activity and in-platform transactions
  • Cookie and session tracker data

KYC (Know Your Customer) Data

  • Copies of identity documents uploaded
  • Copies of bank statements or utility bills for address verification
  • Selfie photo for facial verification (where required)

We only collect data that is strictly necessary for the stated purposes. joia9 does not collect information unrelated to platform operations or legal compliance.

3 How We Use Your Data

Every piece of data collected by joia9 is used for a specific and legitimate purpose. We do not use your data beyond the scope stated below without obtaining your consent first:

Purpose of Use Types of Data Used
Identity verification & KYC Identification data, official documents, photos
Deposit & withdrawal processing Financial data, bank/wallet information
Fraud prevention & account security IP address, activity logs, device data
Customer Support Name, email, transaction history
Legal compliance & reporting Identification data, financial data
Platform improvement & analytics Technical data, usage history (anonymised)
Promotional communications (with consent) Email, phone number

We use an internal analytics system to understand platform usage patterns for the purpose of improving the user experience. All usage analytics are conducted anonymously and cannot be traced back to any specific individual.

4 Legal Basis for Data Processing

Joia9 processes your personal data on the following legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: You provide explicit consent when registering a joia9 account.
  • Contract performance: Processing is necessary to fulfil the contractual obligations between you and joia9, including payment processing and account management.
  • Legitimate interest: Processing is necessary for fraud prevention, platform security, and legitimate business analytics purposes.
  • Legal obligation: Processing is necessary to meet financial reporting requirements, AML (Anti-Money Laundering) compliance, and directives from lawful authorities.

You may withdraw your consent to any consent-based processing at any time. However, withdrawing consent may affect our ability to provide certain services to you.

5 Data Sharing With Third Parties

Joia9 does not sell your personal data to any third party. However, we may share certain information with the following parties under limited and lawful circumstances:

  • Payment processors & financial institutions: To process your deposits and withdrawals securely. All our payment processors comply with PCI-DSS security standards.
  • KYC service providers: An accredited company that assists us in verifying player identities to meet compliance requirements.
  • Legal authority: When required by court order, financial crime investigation, or direction from a lawful enforcement agency.
  • Technical infrastructure providers: Companies that provide hosting, cybersecurity and infrastructure services required for platform operations.
  • Business partners within the group: Related entities within the joia9 business group for internal operations and administration purposes only.

All third parties that receive your personal data from joia9 are required to comply with data protection standards equally as stringent as our own, and are strictly prohibited from using that data for any purpose other than those authorised.

6 Data Retention Period

Joia9 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are our data retention guidelines:

  • Active account data: Retained for the duration that your account remains active on the joia9 platform.
  • Data after account closure: Retained for a minimum of 7 years after account closure to meet anti-money laundering (AML) and tax legal requirements.
  • Technical log data: Retained for 12 months for security and incident investigation purposes.
  • Customer support communication records: Retained for 3 years after the last interaction.
  • KYC documents: Retained for the period stipulated by the relevant financial authorities.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be personally associated with you.

7 Data Security Measures

Joia9 continuously invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, theft, loss or misuse.

Technical Security

  • 256-bit SSL/TLS encryption for all data communications between your device and our servers
  • Database-level data encryption (AES-256) for stored sensitive information
  • Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) active 24/7
  • Network segmentation and layered firewalls to protect critical infrastructure
  • Regular vulnerability scanning and penetration testing by independent security experts

Access Control

  • Principle of least privilege — staff may only access data required for their specific duties
  • Multi-factor authentication (MFA) mandatory for all administrator access to internal systems
  • Full audit logs for all access to player personal data
  • Mandatory data security training for all joia9 staff

While we take all reasonable precautions, no system can guarantee 100% absolute security. We encourage you to also protect your account by using a strong password and enabling two-factor authentication (2FA).

8 Your Rights as a Data Subject

As a joia9 player, you have certain rights regarding your personal data under applicable data protection laws. We fully respect and facilitate the exercise of these rights:

Right of Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

You may update or correct any inaccurate personal information at any time.

Right to Erasure

You may request the deletion of your personal data, subject to mandatory legal requirements.

Right to Restriction

You may request that we restrict the processing of your data under certain circumstances provided by law.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact our Data Privacy Officer by email at [email protected] or via live chat on the platform. We will process your request within 30 business days from the date we receive a complete request.

9 Cookies, Tracking & Similar Technologies

Joia9 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognise you and remember your preferences.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login session verification and security. Cannot be disabled.
  • Performance Cookies: Helps us understand how players use the platform for improvement purposes. Data is collected anonymously.
  • Functional Cookies: Remembers your preferences such as language, display settings, and saved login information.
  • Analytics Cookies: Used by our internal analytics tools to measure platform performance and identify technical issues.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of some parts of the platform. For more information on managing cookies, refer to your browser's help documentation.

10 Child Protection

The joia9 platform is exclusively for individuals aged 18 and above without exception. We do not knowingly collect or process personal data of individuals under 18 years of age.

Should we discover that personal data of an underage individual has been unknowingly collected, we will take immediate action to delete that data and close the relevant account. If you suspect that a minor has registered on our platform, please report it to our support team immediately.

11 Links to Third-Party Sites

The joia9 platform may contain references to third-party services such as payment processors or game providers. This Privacy Policy applies only to data collected directly by joia9 and does not cover the privacy practices of any third party.

We encourage you to read the privacy policy of each third party you interact with through our platform. joia9 is not responsible for the privacy practices of those third parties.

12 Privacy Policy Amendments

Joia9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform improvements. You will be notified of any significant amendments via your registered email or in-platform notification at least 14 days before the changes take effect.

The last updated date is always displayed at the top of this document. We encourage you to review this Privacy Policy periodically. Continued use of the joia9 platform after any amendments constitutes acceptance of the latest version of the Privacy Policy.

13 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the joia9 Data Privacy Officer through the following channels:

We will endeavour to address your privacy enquiries or complaints within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.

For all matters relating to privacy and personal data, email us at [email protected] and our team will respond within 3 business days.

Your Data Is Safe Here

Register your joia9 account with confidence. The privacy and security of your personal information is our top priority. Enjoy the best wagering experience on a platform you can fully trust.

256-bit SSL Encryption PDPA 2010 Compliance No data sales Full control in your hands
Bahasa Melayu