jomwin8 Privacy Policy

Introduction

jomwin8 is an online gaming platform operated at jomwin8.org, providing casino games, live dealer services, crash games, and sports betting to players in Malaysia and other eligible jurisdictions. jomwin8 is committed to protecting the privacy and personal data of all users of its platform.

This Privacy Policy ("Policy") describes in detail what personal data jomwin8 collects from you, why we collect it, how we use and share it, how long we retain it, and what rights you have in relation to your personal data. This Policy applies to all personal data collected through the jomwin8 website, mobile-optimised platform, customer support interactions, and any other channel through which you interact with jomwin8.

This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the jomwin8 platform.

Data Controller

For the purposes of applicable data protection legislation, jomwin8 acts as the data controller in respect of personal data collected from Malaysian players using the jomwin8.org platform. As data controller, jomwin8 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted in compliance with applicable privacy laws.

If you have any questions regarding how jomwin8 processes your personal data, or wish to exercise any of your data subject rights, please contact our data protection team using the contact details provided in Section 16 of this Policy.

Personal Data We Collect

jomwin8 collects the following categories of personal data from players and platform users:

How We Collect Personal Data

jomwin8 collects personal data through the following means:

4.1 Direct Collection

Data you provide directly to jomwin8 when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to promotions, update account preferences, or otherwise interact with jomwin8 staff or platform features.

4.2 Automated Collection

Technical and usage data collected automatically when you access the jomwin8 platform, including through cookies, web beacons, server logs, and similar technologies. This data is collected to ensure platform security, diagnose technical issues, and improve user experience.

4.3 Third-Party Sources

jomwin8 may receive personal data about you from third parties in limited circumstances, including:

• Identity verification service providers used to validate KYC documentation;
• Fraud prevention and AML screening service providers;
• Payment service providers for the purpose of processing deposits and withdrawals;
• Game content providers where necessary for technical integration and dispute resolution.

Purpose and Legal Basis for Processing

jomwin8 processes your personal data for the following purposes and on the following legal bases:

• Account Registration and Management — Processing necessary for the performance of the contract between you and jomwin8;
• Identity Verification (KYC/AML) — Processing necessary to comply with legal obligations under applicable anti-money laundering and gaming regulations;
• Payment Processing — Processing necessary for the performance of the contract and compliance with financial regulations;
• Platform Security and Fraud Prevention — Processing based on jomwin8's legitimate interests in protecting the platform and its players from fraud, collusion, and unauthorised access;
• Customer Support — Processing necessary for the performance of the contract and based on jomwin8's legitimate interests in providing responsive player support;
• Responsible Gaming Compliance — Processing necessary to comply with legal obligations and based on jomwin8's legitimate interests in promoting safe gambling practices;
• Marketing Communications — Processing based on your explicit consent, where you have opted in to receive promotional communications from jomwin8. You may withdraw this consent at any time;
• Platform Analytics and Improvement — Processing based on jomwin8's legitimate interests in understanding platform usage patterns to improve the jomwin8 player experience.

Data Sharing and Disclosure

jomwin8 does not sell, rent, or trade your personal data to third-party advertisers or marketers under any circumstances. jomwin8 may share your personal data with the following categories of recipients for the purposes described in this Policy:

6.1 Service Providers

Third-party service providers engaged by jomwin8 to support platform operations, including KYC verification providers, payment processors, IT infrastructure providers, fraud screening services, and customer support technology platforms. These providers are bound by contractual data processing agreements and may only process your data on jomwin8's instructions.

6.2 Game Content Providers

Licensed game studio partners (including JILI, PG Soft, Pragmatic Play, and other providers integrated into the jomwin8 platform) may receive limited technical data necessary to deliver game content and resolve technical disputes. Game providers do not receive financial or identity data beyond what is technically required for game integration.

6.3 Regulatory and Law Enforcement Authorities

jomwin8 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory requirement. jomwin8 will notify you of such disclosure to the extent permitted by law.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of jomwin8's assets, personal data held by jomwin8 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

International Data Transfers

jomwin8 operates a platform that may involve the processing of personal data by service providers located outside Malaysia. Where jomwin8 transfers personal data internationally, we implement appropriate safeguards to ensure that your data receives a level of protection equivalent to that provided under applicable Malaysian data protection principles. These safeguards may include contractual clauses, data processing agreements, or transfer to jurisdictions that provide adequate privacy protections. Please contact our data protection team if you wish to obtain more information about international transfer safeguards applicable to your personal data.

Data Retention

jomwin8 retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. Indicative retention periods are as follows:

• Account and Identity Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, as required for AML compliance;
• Financial Transaction Records: Retained for a minimum of seven (7) years following the transaction date, as required for financial record-keeping obligations;
• Gaming Activity Data: Retained for five (5) years following the date of the relevant gaming activity;
• Customer Support Records: Retained for three (3) years from the date of the relevant interaction;
• Marketing Preference Data: Retained until you withdraw consent or until three (3) years following your last interaction with jomwin8 marketing communications.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with jomwin8's data disposal procedures.

Cookies and Tracking Technologies

jomwin8 uses cookies and similar tracking technologies on the jomwin8.org platform. Cookies are small text files placed on your device when you access the platform. jomwin8 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without significantly affecting platform functionality;
• Functional Cookies: Enable enhanced functionality and personalisation, such as remembering your login preferences and language settings;
• Analytics Cookies: Used by jomwin8 to understand how players interact with the platform, identify popular features, and diagnose technical issues. Analytics data is aggregated and does not identify individual users;
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You may manage cookie settings through your browser preferences. Note that disabling certain cookies may affect platform functionality. Strictly necessary and security cookies cannot be disabled without impacting your ability to use jomwin8.

Security Measures

jomwin8 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jomwin8 servers;
• Encryption of sensitive data at rest within jomwin8's database infrastructure;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the jomwin8 platform;
• Multi-factor authentication requirements for jomwin8 administrative system access;
• Monitoring and logging of access to systems containing personal data;
• Contractual security obligations imposed on all third-party service providers processing jomwin8 player data.

While jomwin8 implements robust security measures, no internet-based system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their jomwin8 accounts and to enable two-factor authentication where available.

Your Privacy Rights

Subject to applicable law, you have the following rights in respect of your personal data held by jomwin8:

• Right of Access: You may request a copy of the personal data jomwin8 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to jomwin8's legal retention obligations;
• Right to Restriction: You may request that jomwin8 restrict processing of your personal data in certain circumstances;
• Right to Data Portability: You may request a copy of personal data you have provided to jomwin8 in a structured, machine-readable format;
• Right to Object: You may object to processing of your personal data based on jomwin8's legitimate interests;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a written request to jomwin8 using the contact details in Section 16. jomwin8 will respond within 30 days of receipt. We may require identity verification before processing your request.

Children's Privacy

The jomwin8 platform is strictly for adults aged 21 and above. jomwin8 does not knowingly collect personal data from persons under the age of 21. If jomwin8 becomes aware that personal data has been collected from a person under 21, that data will be immediately deleted and the associated account closed. If you believe that jomwin8 has collected data from an underage person, please contact us immediately using the details in Section 16.

Third-Party Links

The jomwin8 platform does not contain links to third-party websites as a matter of policy. However, if game providers or third-party integrations accessible through jomwin8 maintain their own websites or privacy policies, those third-party privacy practices are independent of this Policy. jomwin8 does not accept responsibility or liability for the privacy practices of third-party game studio providers in respect of any data they independently collect through their own systems.

AML and KYC Data Processing

jomwin8 is subject to applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations. In fulfilment of these obligations, jomwin8 collects and processes KYC documentation and screens player data against applicable sanctions lists and politically exposed persons (PEP) databases. This processing is mandatory and is conducted on the legal basis of compliance with a legal obligation.

KYC and AML-related data is retained for the minimum periods required by applicable regulations, which in most cases means a minimum of five (5) years following account closure. Players cannot opt out of KYC/AML processing — refusal to provide required documentation will result in suspension of account functionality, including withdrawal privileges.

Changes to This Privacy Policy

jomwin8 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered players via email to their registered address and by prominent notice on the jomwin8 platform. The revised Policy will include an updated "Last Updated" date at the top of the document. Your continued use of the jomwin8 platform following notification of material changes constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Policy periodically to stay informed about how jomwin8 manages your personal data.

Contact Us — Privacy Enquiries

For all privacy-related enquiries, data subject access requests, data correction requests, or data deletion requests, please contact jomwin8 through the following channel: