Privacy Policy jom88 — Your Personal Data Protection

01 Information We Collect

Jom88 collects various categories of personal information to enable us to provide a safe, fair, and compliant online casino service. The information we collect falls into two main categories:

A. Information You Provide Directly

• Identity Information: Full name, date of birth, ID card or passport number, gender, and nationality.
• Contact Information: Email address, phone number and current residential address.
• Financial Information: Bank account number, bank name, e-wallet details (Touch 'n Go eWallet, Boost, GrabPay), and deposit and withdrawal transaction records.
• Verification Documents: MyKad copy, passport, utility bill, or other documents requested during the KYC process.
• Profile Information: Chosen username, password (stored in hashed form), language preference, and account settings.

B. Information Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version.
• Usage Data: Pages visited, session duration, games played, bets placed, and in-platform activity records.
• Location Data: Approximate location based on IP address for geographic jurisdiction compliance purposes.
• Cookie Data: Session data, user preferences, and analytics data collected via cookies and similar tracking technologies.

02 How We Use Your Data

Every piece of information we collect is used for specific and legitimate purposes. jom88 does not use your data for any purpose other than those stated below:

Jom88 uses data analytics to understand platform usage patterns in an aggregated and anonymised manner for continuous improvement purposes. These analytics do not reveal individual user identities and are not used to make automated decisions that directly affect your rights or interests.

03 Legal Basis for Data Processing

Jom88 processes your personal data on valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). The processing bases we rely on are as follows:

• Contractual Compliance: Processing necessary to fulfil our contractual obligations to you, including account management and financial transaction processing.
• Legitimate Interest: Processing for platform security, fraud prevention, internal analytics, and service improvement where our interests do not override your privacy rights.
• Legal Obligation: Processing required under Malaysian law, including compliance with anti-money laundering (AML) requirements and reporting to relevant authorities where necessary.
• Consent: For marketing and promotional communications, we require your explicit consent. You may withdraw this consent at any time through your account settings or by contacting us.

04 Sharing Information With Third Parties

Jom88 respects your privacy and does not share your personal information with outside parties except in the following limited situations:

• Payment Service Providers: Banks, FPX operators, DuitNow, and e-wallet operators that process your financial transactions. This sharing is limited to information necessary to process payments only.
• Game Software Providers: Third-party game companies whose games are integrated into the jom88 platform may receive the session data required to run the games correctly. They do not receive your full identity information.
• KYC Services: Third-party identity verification providers who assist us in verifying your identification documents. All providers are bound by strict confidentiality agreements.
• Legal Authority: When required by law, court order, or direction from a competent authority, jom88 will disclose the necessary information without requiring your consent.
• Business Transition: If jom88 is involved in a merger, acquisition, or asset sale, user data may be transferred to the new entity, which will be subject to the same or stricter privacy policy.

05 Cookies & Tracking Technologies

Jom88 uses cookies and similar tracking technologies to enhance your experience on our platform. There are four types of cookies we use:

• Essential Cookies: Required for core platform operations such as login session management and security. These cookies cannot be disabled as they are necessary for the platform to function properly.
• Functional Cookies: Stores your preferences such as language choice, display settings, and login details for your convenience on future visits.
• Analytics Cookies: Helps us understand how users interact with the platform — which pages are most popular, how long users stay, and more. This information is used in aggregate and anonymised form.
• Performance Cookies: Used to monitor platform performance and identify technical issues requiring immediate attention.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect core functionality of the jom88 platform and your overall experience. Note: Cookie settings are separate from your marketing communication preferences.

06 Data Security

Jom88 continuously invests in cybersecurity infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data communications between the platform and users
• Sensitive data encryption in the database using AES-256 algorithm
• Role-based access control (RBAC) systems that restrict which members of our organisation can access specific data
• Regular security audits by independent third parties
• 24/7 system monitoring to detect suspicious activity
• Two-factor authentication (2FA) for all internal admin access
• Regular data backups and tested disaster recovery procedures

While we take all reasonable precautions, no system can be guaranteed 100% secure against all cyber threats. If you suspect your account has been compromised, please contact the jom88 support team immediately for prompt protective action.

07 Data Retention Period

Jom88 retains your personal data only for as long as necessary to fulfil the purpose of collection or to meet applicable legal requirements. Our general data retention period guidelines are as follows:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure for AML compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements.
• KYC Documents: Retained for 5 years after the termination of the business relationship, or longer if required by law.
• Communication Logs: Support emails and live chat logs are retained for 2 years for reference and dispute resolution purposes.
• Analytics Data: Anonymised usage data may be retained for a longer period for trend analysis and service improvement purposes.

Once the relevant retention period has expired, your data will be securely deleted or anonymised using approved data disposal procedures.

08 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by jom88:

09 International Data Transfers

In operating an online casino platform that encompasses global technology infrastructure, jom88 may transfer your personal data to servers or systems located outside Malaysia. This includes cloud service providers, backup systems, and international technology partners.

In all cases of international data transfers, jom88 ensures that:

• The recipient country provides a level of data protection equivalent to or higher than Malaysia
• Appropriate data transfer agreements have been established with all data recipients outside Malaysia
• Additional technical measures such as end-to-end encryption are applied during data transfers.
• All cloud service providers we use comply with international security standards such as ISO 27001

10 Children's Privacy

The jom88 platform is exclusively for users who are of age 18 years and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

If we determine that personal data of a child has been collected without our knowledge — for example, through registration using false information — we will take immediate action to:

• Immediately closing the account in question
• Deleting all personal data associated with the account
• Reporting the incident to the relevant authorities where required

Parents or guardians who believe their minor child has registered or used the jom88 platform are requested to contact us immediately through the official support channels.

11 Changes To This Privacy Policy

Jom88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. When significant changes are made:

• The "Last Updated" date at the top of this document will be updated
• Notifications will be sent to all active members via their registered email
• An in-platform notice will be displayed for at least 30 days before changes take effect
• For highly significant changes, we may request renewed consent from members

Continued use of the jom88 platform after the effective date of any changes constitutes your acceptance of the updated terms. If you do not agree with the changes made, please discontinue use of the platform and contact us to close your account.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the jom88 Data Protection team through the following channels: