Jkr88 Privacy Policy – Protection Personal Data You

01 Information We Collect

As a responsible online entertainment platform, jkr88 collects various categories of personal data from members for lawful and specific purposes. This data collection is necessary to enable us to provide services that are safe, fair, and compliant with applicable legal requirements in Malaysia.

We only collect data that is strictly necessary for the stated purposes. All data collection complies with the data minimisation principles set out in Malaysia's Personal Data Protection Act 2010.

02 How We Use Your Data

The personal data we collect is used exclusively for legitimate purposes to enable us to deliver the jkr88 platform services to the highest standard. We do not use your data for any other purpose without obtaining your consent first.

• Account registration and verification: Process new membership applications and verify member identities through the KYC process as required by law.
• Transaction processing: Facilitate deposits and withdrawals, verify bank account ownership, and prevent suspicious transactions.
• Service delivery: Enable access to all games and platform features, and coordinate bonuses and promotions that members are entitled to receive.
• Security and fraud prevention: Detect and investigate suspicious activity, monitor unusual usage patterns, and protect the integrity of the platform.
• Customer support: Handle enquiries and complaints, resolve technical issues, and provide assistance as needed by members.
• Legal compliance: Meet reporting obligations to relevant authorities, including Anti-Money Laundering (AML) requirements.
• Platform improvements: Analyse aggregate usage patterns to improve the performance, usability, and overall experience of the platform.
• Marketing communications: Send information about promotions, bonuses, and the latest offers (only to members who have consented to receive such communications).

03 Legal Basis for Data Processing

Jkr88 processes your personal data on a lawful basis in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA). Every data processing activity is supported by at least one of the following bases:

• Consent: You have given explicit consent for the processing of your personal data for specific purposes, particularly optional marketing communications and analytics.
• Contract performance: Processing is necessary to carry out the membership agreement between you and jkr88, including the processing of deposits and withdrawals.
• Legal obligations: Processing is required to fulfill our legal obligations under Malaysian law, including KYC and AML requirements.
• Legitimate interests: Processing is necessary for our legitimate interests in preventing fraud, ensuring platform security, and improving service quality.

If you would like to know the specific legal basis used for any of your data processing activities, please contact our Data Protection Officer via the contact details below.

04 Data Sharing & Disclosure

Jkr88 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in certain limited situations, we may share your data with the following parties:

• Trusted service providers: Payment processing companies, gaming software providers, and technology infrastructure providers that help us operate the platform — all subject to strict data protection agreements.
• Regulatory authorities: Government authorities and lawful regulators when required by Malaysian law, including fraud investigations or anti-money laundering inquiries.
• Identity verification partners: Accredited third-party KYC service providers to verify member identities and documents in accordance with compliance requirements.
• Professional advisors: Lawyers, accountants, and auditors subject to legally binding confidentiality obligations.

In all data sharing instances, we ensure that receiving parties maintain adequate data protection controls and use the data solely for permitted purposes. All data sharing is documented and continuously monitored.

05 Data Security Measures

Protecting your personal data is jkr88's highest priority. We implement multiple layers of comprehensive technical and organisational security controls to ensure your data is always protected from unauthorised access, use, or disclosure.

• Encryption of data in transit: All communications between your device and jkr88 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption, ensuring no third party can intercept your data in transit.
• Encryption of data at rest: Sensitive data such as financial information and identity documents are stored in AES-256 encrypted format.
• Layered access controls: Access to members' personal data is restricted to staff who genuinely require it, with comprehensive audit logs maintained for every access.
• Two-factor authentication: jkr88's internal systems require two-factor authentication for all administrative access to prevent unauthorised entry.
• Regular security testing: We conduct regular penetration testing and security audits by qualified independent third parties.
• 24/7 Monitoring: An automated threat detection system monitors suspicious activity around the clock and responds immediately to any detected threats.

While we take all reasonable steps to protect your data, no security system can be fully guaranteed. In the event of any data security breach that affects you, we will notify you and the relevant authorities within the timeframe required by law.

06 Data Retention Period

Jkr88 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal and regulatory requirements. The following is a general guide to our data retention periods:

• Active account data: Retained throughout the active membership period and for the required duration after account closure for compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysia's financial and tax regulations.
• KYC verification documents: Retained for the duration of active membership plus 5 years following account closure in accordance with AML requirements.
• Support communication logs: Retained for 2 years for dispute resolution and service improvement purposes.
• Technical data and access logs: Retained for 12 months for security and system monitoring purposes.
• Marketing data: Retained until you opt out of marketing communications or close your account.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with our established data disposal procedures.

07 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by us. jkr88 fully respects these rights and is committed to helping you exercise them:

To exercise any of the above rights, contact our Data Protection Officer by email at [email protected]. We will process your request within 30 days from the date of receipt. In complex cases, this period may be extended by up to 60 days with notice to you.

08 Cookies & Tracking Technologies

Jkr88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app.

• Required cookies: Essential cookies required for the platform to function properly, including login session management and security. These cookies cannot be disabled.
• Performance cookies: Collect anonymous information about how you use the platform to help us identify and fix technical issues.
• Functionality cookies: Remember your preferences such as language, display theme, and account settings to provide a more personalised experience.
• Analytics cookies: Help us understand overall platform usage patterns on an aggregate basis for continuous improvement purposes.

You can manage cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality. For further details on the cookies we use, please contact our support team.

09 International Data Transfers

In operating the jkr88 platform, your personal data may be transferred to, stored in, or processed by servers located outside Malaysia. This may occur when we engage cloud service providers or international gaming software providers.

In all such cases, jkr88 ensures that such data transfers are carried out with adequate safeguards, including:

• Comprehensive data transfer agreements with all third-party service providers.
• Ensuring that the recipient country has data protection laws that are equivalent to or stronger than our own.
• Use of standard contractual clauses approved for international data transfers.
• Regular audits of data protection practices by third-party service providers.

Jkr88 will not transfer your personal data to countries that do not provide an adequate level of data protection without appropriate additional safeguards in place.

10 Links to Third-Party Sites

The jkr88 platform may contain links to third-party websites or services such as payment providers or partner gaming platforms. This Privacy Policy applies solely to the jkr88 platform and does not cover the privacy practices of third-party websites.

Jkr88 is not responsible for the content, privacy policies, or practices of any third-party website. We encourage you to read the privacy policy of every website you visit to understand how they handle your personal data.

11 Child Protection

Jkr88 is an online entertainment platform dedicated exclusively to individuals aged 18 years and above. We do not intentionally collect or process personal data from individuals under the age of majority.

If we find that personal data of a child (under 18 years of age) has been collected without valid parental or guardian consent, we will take immediate steps to delete that data from our systems. If you believe your child has registered or provided data to us, please contact us immediately via our support email.

We apply a rigorous KYC verification process during registration to ensure all members meet the minimum age requirement. This includes verification of a valid identity card or passport as part of the new member onboarding procedure.

12 Contact Us & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the jkr88 Data Protection Officer (DPO) through the following channels:

• Email: [email protected] (include email subject: "Privacy Inquiry")
• Live Chat: Available on the jkr88 platform — 24 hours a day, 7 days a week
• Response time: Within 3 business days for general inquiries; 30 days for formal data rights requests

If you are not satisfied with our response to your privacy complaint, you have the right to submit a complaint to Malaysia Department of Personal Data Protection or the relevant regulatory authority.