Jj8 Privacy Policy – Malaysia User Personal Data Protection

1 Introduction

Jj8 is a digital entertainment platform operating in Malaysia that values the privacy of every user who joins our community. This Privacy Policy has been drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management.

This document clearly and transparently explains the types of information we collect when you use the jj8 platform, why we need it, how we use it, and the steps we take to ensure your data remains safe and well-protected at all times.

We believe that user trust is the foundation of a healthy long-term relationship. That is why we do not hide anything behind complex legal language — we explain our privacy policy in terms that every Malaysian user can easily understand.

If you have any questions regarding this policy, the jj8 data protection team is always ready to assist you. Contact us via the in-platform live chat or email at [email protected].

2 Personal Data We Collect

Jj8 only collects data that is strictly necessary to provide a quality, secure service that complies with legal requirements. The following are the categories of data we collect:

A. Personal Identification Information

• Full name as stated in official identification documents.
• Date of birth for age verification (18 years and above).
• Identity card or passport number for the KYC process.
• Current residential address.
• Registered mobile phone number.
• Active email address.

B. Financial Information

• Bank account number for deposit and withdrawal processing purposes.
• Bank name and account type used.
• Records of deposit and withdrawal transactions on the platform.
• Registered e-wallet information for payment purposes.

C. Platform Usage Data

• Gaming activity records, including game type, play duration, and betting history.
• Timestamps of account login and logout activity.
• IP address of the device used to access the platform.
• Your device's browser type and operating system.
• In-platform navigation data for the purpose of improving the user experience.

3 How We Use Your Data

The data we collect is used exclusively for the following purposes, and nothing beyond that:

4 Information Sharing

Jj8 does not sell, rent, or transfer your personal data to third parties for commercial purposes. However, in certain limited situations, we may share your information with the following parties:

• Payment Service Provider: Local banks, e-wallets, and payment gateways used to process your transactions. They receive only the information necessary to complete the transaction.
• KYC Service Provider: Third-party identity verification companies that assist us in verifying the identities of new users in compliance with legal requirements.
• Statutory Authority: Law enforcement agencies, courts, or regulatory bodies when required by law or a valid court order.
• Technical Service Provider: Hosting and cloud infrastructure companies that maintain jj8's servers, bound by strict confidentiality agreements.

All third parties we work with are bound by data processing agreements that require them to protect your information to the same or higher standard that we uphold.

5 Data Security

The personal data security of our users is an absolute priority for jj8. We continuously invest in the latest security infrastructure to ensure your data is always protected.

• 256-bit SSL Encryption: All communications between your browser and the jj8 platform are encrypted using the latest TLS 1.3 protocol, ensuring no third party can intercept data in transit.
• Layered Access Control: Only authorised personnel with a legitimate business need may access user data, and every access is recorded in a comprehensive audit log.
• Two-Factor Authentication (2FA): Users are encouraged to enable two-factor authentication for an additional layer of security on their account.
• Regular Security Audits: The jj8 platform undergoes penetration testing and security audits by independent cybersecurity firms on a regular basis.
• 24/7 Monitoring: Our automated monitoring system operates around the clock to detect and respond to any suspicious security threats.
• Data Backup: User data is securely backed up and encrypted at separate locations to ensure service continuity.

6 Cookie Policy

The jj8 platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:

• Necessary Cookies (Essential Cookies): Cookies required for basic platform functions such as login session authentication and security settings. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how users interact with the platform to help us improve performance and the overall experience.
• Functional Cookies: Saving user preferences such as language, currency, and display settings for a more personalised experience.
• Analytics Cookies: Used to understand platform usage patterns in an aggregated and anonymised form for continuous improvement purposes.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the jj8 platform.

7 User Rights Regarding Personal Data

As a jj8 platform user, you have the following rights regarding your personal data under Malaysia's PDPA:

To submit any request related to the rights above, contact our data protection team at [email protected] by stating the type of request and your account information.

8 Data Retention Period

Jj8 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your account is active, plus the period prescribed by legal requirements after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysia's financial and taxation legal requirements.
• Security Logs: Retained for 12 months for security incident investigation and audit verification purposes.
• Marketing Data: Retained until you withdraw consent to receive marketing communications.
• KYC Documents: Retained for 5 years after account closure in compliance with anti-money laundering legal requirements.

Once the retention period expires, your data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.

9 Links to Third-Party Platforms

The jj8 platform contains links to third-party services such as game providers and payment gateways. This Privacy Policy applies to the jj8 platform only and does not cover the privacy practices of third-party websites or applications.

• We are not responsible for the privacy practices or content of any third-party websites you may access through links on the jj8 platform.
• We encourage you to read the privacy policy of each third-party platform you use separately.
• Third-party game providers within the jj8 platform are subject to their own data protection agreements, though they are also bound by the minimum requirements we set through contractual agreements.

10 Changes to the Privacy Policy

Jj8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological advancements. Any amendments take effect immediately upon being published on the platform.

We will notify you of material changes through:

• A notice prominently displayed on the jj8 platform homepage.
• Notification emails sent to your registered address.
• A pop-up notice upon login requiring acknowledgement of the new policy.

The "Last Updated" date at the top of this document indicates when this policy was last revised. We encourage you to review this policy periodically to stay informed about how we protect your information.