Jomkiss Privacy Policy — Malaysian Player Data Protection

When you register and use the jomkiss platform, we collect several categories of information to ensure our services are secure, efficient, and tailored to your needs as a player. This information falls into two main categories — information you provide directly, and information collected automatically.

1.1 Directly Provided Personal Information

Information you provide during the registration process and while using the platform includes:

• Identity information: Full name, Malaysian identity card number (MyKad), date of birth, and gender.
• Contact information: Email address, mobile number and residential address.
• Financial information: Local bank account details for deposit and withdrawal purposes, including bank name, account number and account holder name.
• Verification documents: Copies of identity documents, bank statements, or other documents requested during the KYC process.
• Account information: Username, password (stored in encrypted hashed form), and account settings.

1.2 Automatically Collected Technical Information

Our platform automatically records certain technical information when you access jomkiss:

• IP address and general geographic location (city/state level).
• Device type, operating system, and web browser version in use.
• Session data including login time, logout time and active session duration.
• Pages visited, buttons clicked, and navigation patterns within the platform.
• Game data including bets placed, games played and transaction history.

Jomkiss collects information through several different channels depending on the type of interaction you have with our platform:

• Account registration: Online registration form on the jomkiss website or mobile app.
• KYC process: Documents uploaded during identity verification to enable withdrawal processing.
• Financial transactions: Information provided when making a deposit or submitting a withdrawal request.
• Customer support: Records of Live Chat conversations, emails, and other interactions with our support team.
• Cookie technology: Small files stored on your device that help us recognise your active session and preferences.
• Server logs: Automatic logs of technical activity generated by our platform infrastructure.

Every piece of information collected by jomkiss is used for specific, legitimate purposes. We do not use your data for any purpose other than those stated below:

3.1 Platform Operations

• Processing account registrations and verifying player identity through KYC.
• Processing deposits and withdrawals securely and on time.
• Managing game sessions and ensuring continuity of your playing experience.
• Providing effective and personalized customer support.

3.2 Security & Compliance

• Detecting and preventing fraud, money laundering, and other illicit activities.
• Ensuring compliance with applicable legal and regulatory requirements.
• Investigating any complaints, disputes, or suspicious activity on the platform.
• Maintaining audit records for regulatory compliance purposes.

3.3 Service Improvement

• Analyzing usage patterns to improve platform performance and stability.
• Tailoring game recommendations and promotions based on your preferences.
• Conducting internal research to develop better new features.

3.4 Communications

• Sending important notifications related to your account, transactions, and security.
• Keeping you informed about promotions, bonuses, and platform updates (subject to your notification preferences).

Jomkiss does not sell, rent, or disclose players' personal data to third parties for marketing purposes. However, there are limited circumstances where data sharing is necessary for the platform to function properly:

4.1 Trusted Service Providers

We work with trusted third-party providers to carry out specific functions, including payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay), identity verification service providers, and server infrastructure. All these providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.

4.2 Legal Requirements

Jomkiss will disclose personal information when required by Malaysian law, court order, or a lawful request from a law enforcement agency. In such cases, we will disclose only the minimum information necessary and will notify you as soon as possible unless prohibited by law.

Protecting your personal data is a responsibility we take very seriously. jomkiss implements multiple layers of technical and organizational security measures to ensure your information remains protected at all times:

• 256-bit SSL encryption: All communications between your device and jomkiss servers are secured by the latest TLS protocols.
• Data segregation: Financial information is stored separately from game data using distinct database systems with their own access controls.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA for an added layer of security on their account.
• 24/7 Monitoring: Our automated monitoring system detects and responds to any suspicious activity in real time.
• Regular penetration testing: Our infrastructure security is regularly assessed by independent cybersecurity experts.
• Passwords are hashed: Account passwords are never stored in plain text — all passwords go through an irreversible cryptographic hashing process.

Jomkiss uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use and their purposes:

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of certain parts of the jomkiss platform, including the ability to stay securely logged in.

Jomkiss retains your personal data for as long as your account is active or as long as necessary to provide services to you. After an account is closed, certain data will be retained for a period prescribed by Malaysian law, particularly for anti-money laundering (AML) compliance and financial audit purposes.

7.1 Retention Period

• Financial transaction records: Retained for 7 years from the transaction date in line with Malaysian financial legal requirements.
• KYC Documents: Retained for 5 years after account closure for regulatory compliance purposes.
• Game activity logs: Retained for 2 years for dispute resolution and audit purposes.
• Customer support records: Retained for 2 years for reference and service improvement purposes.

7.2 Deletion Procedure

Once the retention period expires, or upon a valid player request (subject to legal requirements), your data will be disposed of using secure, non-recoverable methods. This includes secure deletion from databases, unlinking of backup files and destruction of physical records where applicable.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding your personal data that jomkiss is committed to upholding:

• Right to access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: If any information is inaccurate or outdated, you have the right to request an immediate correction.
• Right to withdraw consent: You may withdraw consent for specific uses of your data, though this may affect our ability to provide certain services.
• Right to erasure: Subject to our legal obligations, you may request the deletion of your personal data.
• Right to object to processing: You may opt out of having your data used for direct marketing purposes at any time.

To exercise any of the rights above, contact our privacy team via Live Chat or email at [email protected]. We will process your request within 14 working days.

Some of the service providers we use may store or process data outside Malaysia. In all such cases, jomkiss ensures that data transfers are protected by data processing agreements that meet or exceed the international standards equivalent to those required under Malaysia's PDPA.

We only engage providers operating in regions with recognized data protection standards, and all such providers are contractually bound to maintain the confidentiality and security of your data to the same standards we uphold at the jomkiss platform level.

The jomkiss platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If we discover that a minor's data has been collected without our knowledge — for example, through registration using false information — we will take immediate action to delete that data and close the account involved. Parents or guardians who believe their child may have registered on our platform are encouraged to contact us right away.

Jomkiss reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable legal requirements. Any material amendments will be communicated to you via in-platform notification or email at least 7 days before the changes take effect.

The date of the latest update is always displayed at the top of this document. Continued use of the jomkiss platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

For any questions, concerns, or requests relating to this Privacy Policy or the protection of your personal data, please contact the jomkiss privacy team through the following channels:

• Live Chat: Available 24/7 within the jomkiss platform or app.
• Email: [email protected] (responses within 14 business days for data-related requests)
• FAQ: Visit the page FAQ us for a quick response.