Joss168 Privacy Policy – Our Commitment to Protecting Your Personal Data

1 Scope and Purpose of This Privacy Policy

This Privacy Policy is issued by joss168 and applies to all users who access or use our platform via joss168.pro, including all services, games, and features we offer.

At joss168, we understand that your trust is something that must be earned, not assumed. One of the ways we build that trust is by being open and honest about how your personal information is handled. This document is the embodiment of that commitment — written in plain language so you know exactly what happens with your data.

This policy explains:

• The types of personal data we collect when you use the joss168 platform.
• The purpose and manner in which we use that data.
• Parties that may have access to your data and under what circumstances.
• The security measures we take to protect your data.
• The rights you hold over your personal data and how to exercise them.

This policy should be read alongside Terms and Conditions joss168 constitutes the entire agreement between you and our platform.

2 Personal Data We Collect

Joss168 collects personal data from various sources when you interact with our platform. The following are the main categories of data we collect:

A) Information You Provide Directly

• Full name as it appears on your identity document.
• Date of birth for age verification purposes.
• Email address and mobile phone number.
• Current residential address.
• A copy of your identification document (MyKad or passport) for the KYC process.
• Payment method details used (bank account number, account holder name).

B) Data Collected Automatically

• IP address and location information derived from it.
• Browser type and version, as well as your device's operating system.
• Session data includes pages visited, time spent, and actions taken.
• Cookie data and similar tracking technologies (detailed in Section 6).
• Game log records including date, time, game type, and wagering amounts.

C) Data from Third Parties

• Verification information from payment processors to confirm transaction identity.
• Identity verification data from third-party KYC service providers we use.

3 How joss168 Uses Your Data

The data we collect is used solely for legitimate, stated purposes. joss168 does not use your data for unrelated purposes without your prior consent.

You may withdraw consent for marketing communications at any time by contacting the joss168 support team. Withdrawing consent will not affect any data processing that has already taken place.

4 Information Sharing with Third Parties

Joss168 does not sell, rent, or share your personal data with third parties for marketing purposes without your explicit consent. However, there are limited situations where data sharing is necessary to effectively operate the platform:

• Payment Processors: Data required to process transactions is shared with approved payment processors such as FPX gateways, DuitNow, and digital wallet processors. All processors are subject to strict PCI-DSS security standards.
• KYC Service Providers: Identity information is shared with recognised identity verification service providers to complete the KYC process efficiently and securely.
• Game Providers: Required game session data is shared with third-party game providers to ensure a smooth gaming experience. Data shared is kept to a minimum and does not include full financial information.
• Statutory Authorities: joss168 will disclose data to authorities when required by law or a valid court order, or when we believe disclosure is necessary to prevent crime or protect public safety.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. Users will be notified in advance should this occur.

All third parties with whom we share data are required to comply with data protection standards equivalent to our own commitments and are subject to legally binding data processing agreements.

5 Data Storage and Security Measures

Your data security is a responsibility we take extremely seriously at joss168. We implement multiple layers of protection to ensure your data remains safe at all times.

Technical Security Measures

• 256-bit SSL encryption for all data transmitted between your device and joss168 servers.
• Data-at-rest encryption for all sensitive information stored in our database.
• Strict access control systems ensure that only authorised personnel can access user data.
• Real-time security monitoring and intrusion detection systems operating 24/7.
• Regular security audits conducted by independent security experts.

Data Retention Period

Joss168 retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or for as long as required by Malaysian law. Generally:

• Active account data is retained for the duration your account remains active, plus an additional 7 years after account closure for regulatory compliance purposes.
• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian legal requirements.
• General log and analytics data is retained for no more than 2 years.
• Marketing data is retained until you withdraw your consent.

6 Cookies and Tracking Technologies

The joss168 platform uses cookies and similar tracking technologies to enhance the user experience and help us understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login session management and security preferences. These cookies cannot be disabled as the platform will not function properly without them.
• Performance & Analytics Cookies: Help us understand how users interact with the platform so we can make relevant improvements. Data collected is in aggregate form and does not directly identify individuals.
• Functional Cookies: Store your preferences such as display language and user settings to provide a more personalised experience on future visits.

You can manage cookie settings through your web browser preferences. However, blocking essential cookies may affect certain functions of the joss168 platform. For more information on managing cookies in popular browsers, please refer to your browser's help documentation.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act (PDPA), you have the following rights regarding your personal data held by joss168:

To exercise any of the above rights, please contact the joss168 support team via live chat. We will process your request within 30 days of receipt. Note: certain requests may be subject to legal limitations or regulatory compliance requirements.

8 Children's Data Protection

The joss168 platform is strictly for adult users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data of minors has been collected without appropriate verification, we will take immediate steps to delete that data and close the relevant account. The integrated KYC process at joss168 is our primary mechanism for verifying age and preventing underage use of the platform.

If you become aware that someone under the age of 18 has registered an account at joss168, please contact our support team immediately so that appropriate action can be taken.

9 Links to Third-Party Services

The joss168 platform may contain references to third-party services such as payment processors and game providers. When you interact with these services, the relevant third party's Privacy Policy will apply to the information you provide to them directly.

Joss168 is not responsible for the privacy practices of those third parties and encourages you to read the Privacy Policy of each third-party service you use. Nevertheless, we exercise due diligence in selecting partners with appropriate data protection standards.

10 Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how joss168 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the joss168 platform — the fastest way to get a response.
• Email: [email protected] — for enquiries that require documentation or more detailed information.

We are committed to responding to all privacy-related enquiries within 7 business days. For more serious complaints, we aim for resolution within 30 days in line with PDPA requirements.

This Privacy Policy is subject to periodic review and may be updated from time to time. Any significant changes will be communicated to users via in-platform notices or registered email. Continued use of the platform after changes take effect constitutes acceptance of the updated terms.