JE88 Privacy Policy – Data Protection Malaysian Member Personal Data

Je88 is the data controller responsible for all personal data collected through our platform. As data controller, we determine the purpose and manner in which your personal data is processed, in accordance with applicable legal requirements — in particular, the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Privacy Policy applies to all services provided by JE88, covering Live Casino, jackpot slots, Malaysia Super League football betting, BWF badminton, ICC cricket, MLBB esports, roulette and match odds — as well as all related interactions including customer support, marketing communications and the member loyalty programme.

Je88 only collects personal data that is strictly necessary to provide our services safely and effectively. The following are the categories of data we collect:

Registration & Identity Data:

• Full name as shown on MyKad or passport.
• MyKad identification card number or passport number.
• Date of birth for age verification (18+ requirement).
• An active email address for account communications.
• A Malaysian mobile number for OTP verification and important communications.
• Current residential address (collected during the KYC process).

Financial & Transaction Data:

• Payment method details used — account holder name for Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX account (Maybank2u, CIMB Clicks).
• Deposit and withdrawal transaction history in Malaysian Ringgit (MYR).
• Betting records and game activity logs for service delivery and compliance purposes.
• Account balance and history of bonuses credited or redeemed.

Technical & Usage Data:

• IP address and device information used to access je88.
• Internet browser type, operating system, and mobile app version.
• Session log data includes login time, logout time and session duration.
• Cookie data and similar tracking technologies (see Section 8 for full details).
• Approximate geolocation data derived from IP address (not GPS) for regional compliance purposes.

JE88 uses the personal data collected solely for the following legitimate and specific purposes. We will not use your data for any other purpose without prior notice and, where required, your consent:

• Account Management: Creating and managing your je88 account, processing registrations, verifying identity through KYC, and maintaining account security at all times.
• Financial Transaction Processing: Processing MYR deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as processing withdrawal requests to registered payment methods.
• Service Delivery: To give you access to Live Casino, jackpot slots, Sports Betting, match odds, and all other JE88 products. To personalise your platform experience based on your preferences and gaming history.
• Regulatory Compliance: To meet legal and regulatory obligations, including anti-money laundering (AML), know your customer (KYC), and reporting requirements to the relevant authorities.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, unauthorised access, money laundering, and other security breaches that could compromise your account or funds.
• Customer Support: Enabling je88's support team to provide effective and relevant assistance when you reach out via live chat, WhatsApp, or email at support@je88.bet.
• Marketing Communications (with consent): Sending promotional information, bonus offers and JE88 service updates to members who have agreed to receive such communications. You may unsubscribe at any time.
• Product Improvement: To analyse usage patterns on an aggregated and anonymised basis, helping us understand how the JE88 platform is used and make meaningful improvements to the user experience.

Je88 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, there are certain situations where we need to share data with the following parties to enable the je88 platform to operate securely and in compliance with the law:

• Payment Service Providers: Data required to process transactions is shared with licensed and trusted payment gateway providers in Malaysia — including processors for Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX. These providers are bound by strict confidentiality agreements and PCI-DSS security standards.
• Game Software Providers: Third-party game providers such as Pragmatic Play, Microgaming, NetEnt and Evolution Gaming may receive technical data necessary to run the games. This data is limited strictly to what is required for technical functionality.
• Relevant Authorities: JE88 will disclose personal data to Malaysian authorities — including the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or the Inland Revenue Board (LHDN) — when required by law or a valid court order. JE88 is fully compliant with all applicable Malaysian legal requirements.
• Identity Verification Services: Licensed and trusted third-party KYC service providers are used to assist with new member identity verification. These providers operate under the same privacy standards as JE88.
• Business Transfer: In the event of a merger, acquisition or sale of JE88's assets to another entity, member data may be transferred as part of the business assets. Members will be notified in advance and their rights under PDPA 2010 will remain fully protected.

All third parties receiving JE88 members' personal data are bound by data processing agreements (DPAs) ensuring they handle that data to a standard of data protection equivalent to or stricter than JE88's own.

Je88 implements comprehensive technical and organisational security measures to protect members' personal data against unauthorised access, misuse, loss, or destruction:

• Data Encryption in Transit: All communications between your device and JE88's servers are protected by TLS 1.3 with 256-bit SSL encryption. No personal data is transmitted in unencrypted form.
• Data Encryption at Rest: Sensitive data stored in JE88's databases — including identity details, payment information and transaction records — is encrypted using the AES-256 standard.
• Strict Access Controls: Access to members' personal data is restricted to JE88 staff who require it to carry out their duties only (least privilege principle). All access is logged and continuously monitored.
• Regular Security Audits: JE88 undergoes regular penetration testing and security audits conducted by independent third parties to identify and address any security vulnerabilities.
• Two-Factor Authentication (2FA): je88 offers and actively encourages the use of two-factor authentication on all member accounts as an added layer of protection against unauthorised access.
• 24/7 Monitoring: je88's cybersecurity team monitors our systems around the clock for unusual activity that may indicate a data breach or intrusion attempt.

JE88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. The following retention schedule applies as a general guide:

Once the designated retention period expires, your personal data will be securely deleted from JE88's systems or converted into an anonymised format that cannot be used to identify you.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices, you have the following rights regarding your personal data held by JE88. All requests to exercise these rights may be submitted by email to support@je88.bet and will be processed within 14 business days:

Je88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your internet browser when you visit the je88 website. The following are the types of cookies we use:

To manage your cookie settings, you can adjust the settings in your internet browser — Chrome, Firefox, Safari, Edge, and Opera all provide detailed cookie controls. Please note that disabling essential cookies may affect your ability to log in and use the je88 platform fully.

The JE88 platform is intended for adults aged 18 and above only. JE88 does not knowingly collect or process personal data from individuals under the age of 18. If you are a parent or guardian and believe your underage child has registered for or attempted to use the JE88 platform, please contact us immediately at support@je88.bet or via JE88 live chat.

JE88 enforces a rigorous age verification process at registration, including date of birth checks and KYC document verification. Any account found to have been registered using false information to circumvent this age restriction will be closed immediately and all associated data will be securely deleted.

In the course of je88's operations, your personal data may be transferred to and stored on servers located outside Malaysia — primarily in connection with international game software providers and cloud infrastructure used to maintain platform stability.

When this occurs, JE88 ensures that such data transfers are carried out with adequate safeguards, including:

• Binding data processing agreements (DPA) with all overseas data recipients.
• Data protection assessments of all third-party partners prior to approving any data transfers.
• Use of standard protection mechanisms such as Standard Contractual Clauses where applicable.
• Ensuring that the data protection standards in the recipient country are equivalent to or higher than those required under Malaysia's PDPA 2010.

You have the right to request information about the safeguards applied to the transfer of your personal data outside Malaysia by contacting us at support@je88.bet.

JE88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or to improve the transparency of the information we provide to members.

When material changes are made to this Privacy Policy, JE88 will notify you via:

• A prominent notice on the JE88 website homepage at least 14 days before the changes take effect.
• Email sent to the address registered to your account.
• A notification in your je88 account the next time you log in.

The date of the most recent update is always displayed at the top of this page. For minor changes that do not materially affect your rights, we may update this date without a separate notice. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how JE88 handles your personal data, please reach out to our privacy team through the following channels:

• Privacy Email: support@je88.bet (please include the subject line "Data Privacy Inquiry" and your account number)
• Live Chat: Available 24 hours a day, 7 days a week in Bahasa Melayu, directly from the JE88 website or app.
• Response Time: We are committed to responding to all privacy inquiries within 3 business days and resolving formal requests within 14 business days.

For formal complaints regarding personal data protection that cannot be resolved directly with JE88, you also have the right to contact the Department of Personal Data Protection (JPDP) Malaysia, which is the regulatory authority for PDPA 2010 in Malaysia.