99jitu Privacy Policy – Personal Data Protection for Malaysian Members

1Information We Collect

99jitu collects various types of information from our members for the purposes of platform operations, fulfilling legal requirements, and improving the user experience. This information is organised into the following key categories:

Account Registration Details: Your full name, date of birth, email address, mobile number, and password as provided when registering with 99jitu. This information is required to create and maintain your account and for identity verification purposes.

Identity Verification (KYC) Information: Where required, we may request a copy of your Malaysian identity card (MyKad), bank statement, or other relevant documents to meet our anti-money laundering (AML) and know your customer (KYC) compliance obligations. These documents are stored securely and used solely for verification purposes.

Financial Transaction Information: Records of deposits and withdrawals, including the payment method used (Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost, or FPX), the amount in Malaysian Ringgit (RM), and the date and time of each transaction. This information is retained for financial record-keeping, dispute resolution, and legal compliance purposes.

Platform Usage Data: Technical information such as IP address, web browser type, operating system, access time, pages visited, and links clicked while using the 99jitu platform. This data is collected automatically and used for platform performance analysis and user experience improvement.

2How We Use Your Data

Information collected by 99jitu is used only for legitimate and defined purposes, as follows:

• To create, maintain, and manage your member account on the 99jitu platform.
• Processing deposits and withdrawals in Malaysian Ringgit (RM) securely and on time.
• Verifying your identity to meet Malaysian legal compliance requirements, including AML and KYC obligations.
• To send you important notifications regarding your account, transactions, promotions, and policy updates via email or SMS.
• To deliver effective and personalised customer support to every 99jitu member.
• Analysing platform usage patterns to improve our products and overall user experience.
• Detecting and preventing fraud, money laundering, and other unlawful activities on our platform.
• To comply with any legal obligations, court orders, or directives from relevant regulatory authorities.

99jitu will not use your data for any purpose beyond those stated above without first obtaining your explicit consent. Should we wish to use your data for a new purpose, you will be informed and given the choice to agree or decline.

3Data Sharing with Third Parties

99jitu does not sell, rent, or commercialise our members' personal data to any third party for marketing or other commercial purposes. However, in the following limited circumstances, we may need to share certain information:

Technology Service Providers: Third-party companies that assist us in platform operations, including cloud hosting providers, payment gateways (Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost, and FPX processors) and analytics service providers. All such providers are bound by strict confidentiality agreements and may only access data that is necessary to deliver their services to 99jitu.

Legal Requirements: Where required by Malaysian law, court order, law enforcement investigation, or direction from a legitimate financial regulatory body, 99jitu will disclose the information necessary within the scope specified by the relevant authority.

Security Safeguards: In cases of suspected fraud, money laundering, or serious security threats, 99jitu may share relevant information with the appropriate authorities or industry fraud prevention organisations to protect the platform and all its users.

In all instances of data sharing, 99jitu ensures that the receiving party is bound by confidentiality obligations equivalent to or greater than the standards we uphold ourselves.

4Data Security & Storage

99jitu continuously invests in robust data security infrastructure to protect every member's personal information. Key security measures we have in place include:

• Data encryption in transit using regularly updated 256-bit SSL/TLS protocols.
• Data-at-rest encryption for all sensitive information stored in our databases.
• Strict multi-layered access controls – only authorised staff may access member data, and only to the extent required for their specific role.
• Round-the-clock 24/7 security monitoring by our cybersecurity team to detect any unauthorised access attempts.
• Regular penetration testing by independent third parties to identify and address system vulnerabilities.
• Regular data backup procedures with storage across multiple locations to ensure data availability and integrity.

Your personal data is stored on secure servers for as long as necessary to fulfil the original purpose of collection and any related legal obligations. Once the data is no longer required, it will be securely deleted or anonymised in accordance with industry-standard procedures.

5Cookies & Tracking Technologies

The 99jitu platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions as intended. The types of cookies we use include:

Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as they are essential for the platform to operate correctly.

User Preference Cookies: We save your settings and preferences – such as language and display options – so you don't have to reconfigure them every time you visit 99jitu.

Analytics Cookies: We collect information about how you use the platform – the pages you visit most often, links you click, and time spent in each section. This data is used in aggregate (not at the individual level) to improve the design and content of our platform.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the 99jitu platform and your overall user experience.

6Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights in relation to personal data processed by 99jitu:

• Right to Access: You have the right to request and receive a copy of the personal data we hold about you at any time.
• Right to Rectification: You may request that we correct any personal information in our records that is inaccurate or incomplete.
• Right to Erasure: In certain circumstances permitted by law, you may request that we delete your personal data from our systems.
• Right to Restriction of Processing: You may request that we restrict how we process your personal data in certain circumstances provided for under the PDPA.
• Right to Object: You may object to the processing of your personal data for specific purposes, particularly for direct marketing.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing that took place prior to your withdrawal.

To exercise any of the rights above, contact the 99jitu support team by email at support@99jitu.ws and clearly state your request. We will process it within 14 business days. In some cases, we may need to verify your identity before proceeding, to protect the security of your account.

7Children's Privacy and Protection of Young Users

The 99jitu platform is not intended for individuals under the age of 18, and we do not knowingly collect personal data from minors. Should we discover that personal data of someone under 18 has been collected without our knowledge, we will take immediate steps to delete that data from our systems and close the relevant account.

If you are a parent or guardian who believes your child under the age of majority has registered for or used the 99jitu platform, please contact our support team immediately at support@99jitu.ws. We will handle such cases with the highest priority and appropriate urgency.

8Cross-Border Data Transfers

In operating a global platform, your personal data may be processed or stored on servers located outside Malaysia. Where such transfers occur, 99jitu ensures that:

• The recipient country or region maintains a level of data protection comparable to that of Malaysia.
• Adequate safeguards are in place, such as standard data processing agreements or binding contractual terms, to protect your data.
• Transfers are carried out only when necessary for legitimate operational purposes and limited to the minimum scope required.

99jitu ensures that any cross-border data transfer complies with Malaysia's PDPA requirements and does not compromise the standard of protection we have committed to for every member of our platform.

9Updates to This Privacy Policy

99jitu reserves the right to update or amend this Privacy Policy from time to time in response to changes in legislation, technological developments, or updates to our business practices. Any material changes to this Privacy Policy will be communicated to all members via their registered email address or through a prominent in-platform notification at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically so you remain informed about how 99jitu handles your personal information. The date of the most recent update to this document is stated at the top of the page for your reference.

Your continued use of the 99jitu platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated privacy terms.

10Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or how 99jitu handles your personal data, please contact us through the following channels:

• Email: support@99jitu.ws – for written enquiries relating to privacy and personal data rights requests.
• LiveChat: Available 24/7 within the 99jitu platform for immediate enquiries regarding privacy and account security.

Our privacy team will respond to all written enquiries within 5 business days. For formal requests relating to personal data rights under the PDPA, please use email and clearly state the type of request along with your identification details to help us process it promptly.