JSM888 Privacy Policy — How We Handle Your Personal Data

Introduction

JSM888 ("the Company", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://jsm888.cam ("the Platform"). We are committed to protecting the privacy and personal data of all individuals who access or use our services, including registered players, website visitors, and prospective customers ("you", "the User", "the Player").

This Privacy Policy ("Policy") is issued in accordance with applicable data protection legislation and sets out the basis on which JSM888 collects, processes, stores, shares, and otherwise handles your personal data. It should be read in conjunction with our Terms & Conditions, which govern your use of the Platform as a whole.

JSM888 serves players across Malaysia — including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and Bangsar — and we take our data protection responsibilities seriously. We do not sell, rent, or commercially exploit your personal data to third-party advertisers or data brokers under any circumstances.

Definitions

Throughout this Policy, the following terms shall have the meanings set out below:

Data We Collect

JSM888 collects Personal Data through a variety of channels, including the Account registration process, ongoing use of the Platform, customer support interactions, and automated technical systems. The categories of data we collect are as follows:

We do not knowingly collect Sensitive Data beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect data relating to racial or ethnic origin, religious beliefs, or biometric identifiers beyond what appears on standard government-issued identification documents submitted for KYC purposes.

Legal Basis for Processing

JSM888 processes your Personal Data only where a valid legal basis exists for doing so. The applicable legal bases are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between you and JSM888 — including Account creation, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering (AML) legislation, KYC regulatory requirements, and financial crime prevention obligations.
• Legitimate Interests: Processing is necessary for purposes of fraud prevention, platform security, service improvement, and responsible gambling enforcement — where such interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent — for example, to send you promotional communications or to place non-essential cookies — we will seek your express, informed agreement beforehand. You may withdraw consent at any time without affecting the lawfulness of prior processing.

How We Use Your Data

JSM888 uses your Personal Data for the following specific and documented purposes:

• Account Management: Creating, maintaining, and administering your registered Account, including processing login requests, updating account settings, and communicating account-related notices.
• Payment Processing: Facilitating deposits and withdrawals in MYR via your chosen payment method, including Touch 'n Go eWallet, Boost, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), GrabPay, and cryptocurrency channels.
• Identity & Age Verification: Verifying your identity and confirming that you are at least 21 years of age in compliance with our age restriction policy.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited conduct.
• Responsible Gambling: Monitoring gaming activity to identify potential problem gambling patterns, applying player-requested self-exclusion or deposit limits, and delivering responsible gambling interventions where appropriate.
• Customer Support: Responding to your queries, resolving disputes, and improving our support processes based on interaction history.
• Platform Improvement: Analysing aggregated, anonymised usage data to enhance platform performance, game selection, and user experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — where you have provided consent or where permitted under applicable law. You may opt out at any time.
• Legal Compliance: Meeting our obligations under applicable legislation, including responding to lawful requests from regulatory and law enforcement authorities.

Data Sharing & Disclosure

JSM888 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We may, however, share your data with the following categories of recipients on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Service Providers: Licensed payment processors and e-wallet operators (including but not limited to FPX-connected banks, Touch 'n Go, Boost, GrabPay, DuitNow, and cryptocurrency network providers) for the purpose of processing your financial transactions.
• Game Content Providers: Software studios whose game titles are hosted on the Platform receive limited technical data (session tokens, bet parameters) necessary to deliver their services. They do not receive your name, identity documents, or payment details.
• KYC & Identity Verification Services: Third-party identity verification providers who process your KYC documents solely for the purpose of confirming your identity and age in accordance with regulatory requirements.
• IT Infrastructure & Cloud Providers: Hosting, database, and security service providers operating our technical infrastructure. All such providers are contractually bound to process data only on JSM888's instructions and to maintain appropriate security standards.
• Regulatory & Law Enforcement Authorities: Where JSM888 is required by applicable law, court order, or legitimate regulatory demand to disclose your Personal Data, we will do so. We will notify you of such disclosure where legally permitted.
• Business Successors: In the event of a merger, acquisition, or transfer of all or part of JSM888's business, your Personal Data may be transferred to the relevant successor entity as part of that transaction, subject to the same privacy protections set out in this Policy.

Cookies & Tracking Technologies

JSM888 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by your browser when you access a website. The types of cookies we use are described below:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable core features such as session management, login authentication, and security controls. They cannot be disabled without impairing the Platform's functionality.
• Performance & Analytics Cookies: Collect anonymised data on how users interact with the Platform — including pages visited, session duration, and error encounters — to help us identify and resolve performance issues.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options to deliver a more personalised experience across sessions.
• Marketing Cookies: Used — where you have provided consent — to track your engagement with promotional content and to avoid delivering irrelevant or repetitive marketing messages. These are not placed without your express agreement.

You may manage or withdraw consent for non-essential cookies at any time by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. JSM888 does not use cross-site tracking to follow your activity on third-party websites.

Data Retention

JSM888 retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to overriding legal obligations. Our standard retention periods are as follows:

Upon the expiry of the relevant retention period, Personal Data will be securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and analytical purposes.

Data Security

JSM888 implements technical and organisational measures proportionate to the risks associated with the processing of your Personal Data. Our security framework includes, but is not limited to, the following controls:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the JSM888 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols, preventing interception in transit.
• Encrypted Data Storage: Sensitive data fields — including passwords, payment identifiers, and KYC document files — are stored in encrypted form at rest. Plain-text storage of sensitive credentials is not permitted.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based access controls and two-factor authentication requirements.
• Intrusion Detection & Monitoring: Our infrastructure is continuously monitored for suspicious activity, unauthorised access attempts, and anomalous behaviour patterns using automated detection systems.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, JSM888 will notify affected individuals and relevant authorities within the timeframes required by applicable law.

While JSM888 takes all reasonable technical precautions, no data transmission over the internet is entirely secure. You are responsible for maintaining the confidentiality of your Account credentials. JSM888 will never ask for your password via any support channel.

Your Data Rights

As a data subject, you are entitled to exercise the following rights with respect to your Personal Data held by JSM888. Requests should be submitted in writing to our support team at [email protected].

JSM888 will respond to all valid rights requests within 30 calendar days of receipt. We may need to verify your identity before processing any request. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

International Data Transfers

JSM888 operates through technical infrastructure hosted in multiple jurisdictions. Where the processing of your Personal Data involves a transfer to a country outside Malaysia, we ensure that appropriate safeguards are in place to maintain a level of data protection equivalent to that applicable in Malaysia.

Safeguards used for international data transfers may include: standard contractual clauses incorporated into Data Processor agreements; processing in jurisdictions that have been recognised as providing adequate data protection standards; and application of technical controls such as encryption and pseudonymisation to minimise the exposure of identifiable data in transit.

Minors & Age Restriction

The JSM888 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

If we become aware that we have inadvertently collected Personal Data from a minor — for example, through a false declaration of age at registration — we will take immediate steps to delete such data and close the associated Account, along with any balances held therein.

If you believe that a minor has registered an Account on JSM888 using false information, please contact us immediately at [email protected] so that we may investigate and take appropriate action without delay.

Third-Party Links & Services

The JSM888 Platform may contain references to or integrations with third-party services — such as payment gateways and game content providers — that have their own independent privacy policies. JSM888 is not responsible for the privacy practices of any third-party service provider.

When you interact with a third-party payment provider (for example, when completing a DuitNow transfer or topping up via Touch 'n Go eWallet), you will be subject to that provider's own terms and privacy policy. We encourage you to review the privacy documentation of any third-party service before providing your information to them.

Changes to This Privacy Policy

JSM888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or our data processing activities. Any material changes will be communicated to registered Players via email or a prominent notice on the Platform prior to the change taking effect.

The "Effective Date" at the top of this Policy indicates when the current version was last updated. We encourage you to review this Policy periodically. Continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

Contact Us — Data & Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact JSM888 through the following channels. All contact details are provided as plain text — please do not share passwords or full financial account numbers via any communication channel.

• Email: [email protected] — Please use the subject line "Privacy Request — [Your Account Username]" for data rights requests.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average response time: 3–5 minutes.
• WhatsApp: Available to registered Players after login. Support in English, Bahasa Melayu, and Chinese.

JSM888 will acknowledge all privacy-related requests within 5 business days and provide a substantive response within 30 calendar days, unless the complexity or volume of requests requires an extension, in which case we will notify you of the revised timeline.