jom888 Privacy Policy

1 Introduction

jom888 ("jom888", "we", "us", "our") is committed to protecting the privacy and security of the personal data of all individuals who access or use the jom888 platform at jom888.app, including registered members, prospective members, and site visitors (collectively, "you").

This Privacy Policy ("Policy") sets out in detail the categories of personal data jom888 collects, the purposes for which that data is processed, the parties with whom it may be shared, the retention periods that apply, and the rights available to you in respect of your personal data. This Policy forms part of jom888's broader legal framework alongside the Terms & Conditions and Responsible Gaming Policy.

By accessing jom888 or registering a member account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the jom888 platform immediately.

2 Personal Data We Collect

jom888 collects personal data through several channels, including account registration, KYC verification, payment processing, platform usage, and customer support interactions. The categories of data collected include:

2.1 Identity & Contact Data

• Full legal name as per government-issued identification;
• Date of birth (used for age verification — 21+ requirement);
• MyKad number, passport number, or other national identification number;
• Residential address;
• Email address;
• Mobile phone number.

2.2 Financial Data

• Bank account details (account holder name, bank name, account number) for withdrawal processing;
• E-wallet identifiers for Touch n Go eWallet and Boost transactions;
• Transaction history — deposit amounts, withdrawal amounts, dates, and payment references;
• Source of funds information where required for AML compliance.

2.3 Technical & Usage Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, browser type and version;
• Login timestamps and session duration;
• Pages visited, games played, bets placed, and navigation patterns within the platform;
• Cookies and similar tracking technologies (see Section 6).

2.4 Communications Data

• Records of correspondence between you and jom888 customer support, including live chat transcripts and email exchanges;
• Survey responses and feedback submitted through the platform.

3 How We Use Your Personal Data

jom888 processes personal data for the following purposes:

• Account Administration: Creating and maintaining your jom888 member account, verifying your identity, and managing your account preferences and settings.
• KYC & AML Compliance: Verifying that you meet the eligibility requirements (age 21+, not self-excluded), and fulfilling anti-money laundering obligations required by applicable international gaming authority guidelines.
• Payment Processing: Processing deposits and withdrawals via your chosen Malaysian payment method — Touch n Go eWallet, Boost, Maybank, CIMB, or Public Bank — and maintaining an accurate transaction record for your account.
• Platform Operation & Security: Detecting and preventing fraud, bonus abuse, account sharing, and other prohibited conduct; monitoring for unusual login patterns; and ensuring the integrity and security of the jom888 platform.
• Personalisation: Tailoring game recommendations, promotional offers, and dashboard content based on your platform usage history, where you have not opted out of personalisation.
• Responsible Gaming: Monitoring gaming behaviour patterns for indicators of problem gambling and, where appropriate, proactively providing responsible gaming resources or applying account restrictions.
• Legal & Regulatory Obligations: Retaining records as required by applicable law, responding to lawful requests from regulatory authorities, and defending jom888's legal rights.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of our support services.

4 Legal Basis for Processing

jom888 processes personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and jom888 (the Terms & Conditions), including account administration, payment processing, and gaming service delivery.
• Legal Obligation: Processing is required to comply with applicable anti-money laundering regulations, gaming authority requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for jom888's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where jom888 processes data for marketing communications or personalisation beyond what is strictly necessary for service delivery, such processing is based on your explicit consent, which may be withdrawn at any time.

5 Data Sharing & Third-Party Disclosure

jom888 does not sell your personal data to third parties. jom888 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: Banks and e-wallet operators (including Maybank, CIMB, Public Bank, Touch n Go eWallet, and Boost) for the processing of deposits and withdrawals.
• KYC & Identity Verification Partners: Third-party identity verification services engaged to assist jom888 in fulfilling its KYC and AML obligations.
• Game Software Providers: Licensed game providers may receive anonymised or pseudonymised usage data for technical integration and audit purposes. No directly identifying personal data is shared with game providers beyond what is technically necessary.
• Regulatory & Law Enforcement Authorities: jom888 will disclose personal data to competent authorities where required by law, court order, or regulatory direction — including in connection with AML investigations.
• Professional Advisers: Legal, accounting, and audit professionals engaged by jom888, subject to confidentiality obligations.

All third parties with whom jom888 shares personal data are required to process that data in accordance with applicable data protection law and jom888's data processing requirements.

6 Cookies & Tracking Technologies

jom888 uses cookies and similar technologies (collectively, "Cookies") to enable essential platform functionality, maintain your login session, and gather analytics data to improve the jom888 experience for Malaysian players.

6.1 Essential Cookies

These are strictly necessary for the operation of jom888 — they enable login session management, security token validation, and shopping cart-equivalent functionality for live bets. Essential cookies cannot be disabled without impairing core platform functionality.

6.2 Analytics Cookies

jom888 uses analytics tools to understand how members use the platform — which pages are visited most, where users drop off in the registration flow, and which games are most popular. This data is aggregated and anonymised. You may opt out of analytics cookies via your browser settings.

6.3 Preference Cookies

These cookies remember your platform preferences — such as language settings and display options — so that you do not need to reconfigure them each time you log in to jom888.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of jom888.

7 Data Retention

jom888 retains personal data for as long as is necessary for the purpose for which it was collected, subject to longer retention periods required by applicable legal and regulatory obligations. Indicative retention periods are as follows:

• Account Data: Retained for the duration of your active jom888 account plus a minimum of five (5) years following account closure, in accordance with AML and gaming authority record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC check, whichever is later.
• Communications Data: Customer support interactions are retained for up to three (3) years from the date of the last interaction, unless a longer period is required in connection with an ongoing dispute or legal matter.
• Technical & Usage Data: Retained for up to twenty-four (24) months in identifiable form, after which it is anonymised or deleted.

8 Data Security

jom888 implements a multi-layered security framework to protect the personal data of all members. Security measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and jom888 servers;
• Encryption of sensitive data fields (including financial data and identification numbers) at rest in jom888 databases;
• Role-based access controls ensuring that jom888 personnel can only access personal data that is necessary for their specific job function;
• Regular independent security audits and penetration testing of the jom888 platform and infrastructure;
• Comprehensive incident response procedures — in the event of a data breach affecting your personal data, jom888 will notify affected members and relevant authorities in accordance with applicable law.

Notwithstanding the above, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own jom888 login credentials.

9 Your Data Rights

Subject to applicable data protection law and jom888's legal obligations, you have the following rights in respect of your personal data held by jom888:

• Right of Access: You may request a copy of the personal data jom888 holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to Erasure: In certain circumstances, you may request that jom888 delete your personal data. Note that erasure requests may be declined where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to Restriction: You may request that jom888 restrict the processing of your personal data in certain circumstances, for example while a rectification request is pending.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is conducted by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where it is based on jom888's legitimate interests. You may also opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact jom888 at [email protected]. jom888 will respond to data rights requests within thirty (30) days of receipt.

10 Children's Privacy

The jom888 platform is strictly intended for adults aged 21 years and above. jom888 does not knowingly collect personal data from any person under the age of 21. If jom888 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all associated data will be deleted to the extent permitted by law, and any deposited funds will be returned via the original payment method.

If you believe that jom888 may have inadvertently collected personal data from a person under 21, please contact jom888 immediately at [email protected].

11 International Data Transfers

jom888 may process or store personal data on servers or through service providers located outside of Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to Malaysia, jom888 will implement appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — to ensure that your personal data remains protected to a standard consistent with this Policy and applicable law.

12 Changes to This Policy

jom888 reserves the right to update this Privacy Policy at any time. The updated Policy will be published on this page with a revised "Last Updated" date. Where changes are material, jom888 will notify registered members via the email address associated with their account or via an in-platform notification prior to the changes taking effect. Your continued use of jom888 following notification of material changes constitutes acceptance of the updated Policy.

13 Contact & Complaints

For any questions, concerns, or data rights requests related to this Privacy Policy or jom888's handling of your personal data, please contact the jom888 Data Protection team:

Email: [email protected]

jom888 will acknowledge all privacy-related enquiries within five (5) business days and endeavour to resolve them within thirty (30) days. If you are not satisfied with jom888's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.