je88 Privacy Policy

1. Introduction

je88 ("we", "us", "the Company", or "je88") is committed to protecting the privacy and personal data of every individual who accesses the je88.win platform, registers a player account, or interacts with je88 services in any capacity. This Privacy Policy ("Policy") sets out the categories of personal data je88 collects, the purposes for which such data is processed, the parties with whom it may be shared, the security measures applied to protect it, and the rights available to data subjects in relation to their personal data.

This Policy applies to all Members — registered players who have created a je88 account — as well as to unregistered visitors who browse je88.win without completing registration. By accessing je88.win or registering an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with the je88 Terms & Conditions, which govern the overall contractual relationship between you and je88, and the je88 Responsible Gaming Policy, which sets out the Company's approach to player protection obligations.

2. Data Controller

For the purposes of applicable data protection legislation, je88 acts as the data controller in respect of personal data collected through the je88.win platform. As data controller, je88 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all data protection enquiries, subject access requests, or requests to exercise your rights under this Policy, please contact the je88 Data Protection Officer at the contact details set out in Section 15 of this Policy.

3. Categories of Personal Data We Collect

je88 collects the following categories of personal data from Members and platform visitors:

Identity & Registration Data:

Contact Data:

Financial Data:

Technical & Usage Data:

KYC / Verification Data:

Communications Data:

4. How We Collect Personal Data

je88 collects personal data through the following channels:

• Direct submission: Data you provide voluntarily when registering a je88 account, completing the KYC verification process, submitting a deposit or withdrawal request, or contacting je88 customer support.
• Automated collection: Technical data collected automatically when you access je88.win, including IP address, device identifiers, session data, and browsing behaviour within the platform, collected via cookies, web beacons, and server logs.
• Third-party sources: Data received from payment processors (including Touch n Go eWallet, Boost, and Malaysian banking institutions) in connection with deposit and withdrawal transactions; identity verification data from third-party KYC service providers; and fraud prevention signals from third-party risk management services.
• Responsible gaming assessments: Data collected in connection with je88's responsible gaming obligations, including self-assessment questionnaires, self-exclusion requests, and behavioural monitoring data generated through the je88 platform.

5. Purposes of Processing

je88 processes personal data for the following purposes:

• Account management: To create, maintain, and administer your je88 player account, including processing your je88 login credentials and account preferences.
• Service delivery: To provide access to je88 gaming products, process wagers, settle bets, and manage your je88 account balance.
• Payment processing: To process deposit and withdrawal transactions via Touch n Go eWallet, Boost, Maybank, CIMB, and other supported Malaysian payment methods.
• Identity verification (KYC): To verify Member identity and age in fulfilment of responsible gaming obligations and to prevent underage gambling.
• Anti-money-laundering (AML) compliance: To monitor transaction patterns and detect suspicious activity as required by applicable compliance obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised access, and breaches of the je88 Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns and implement protective measures for Members who may be exhibiting signs of problem gambling behaviour.
• Customer support: To respond to enquiries, resolve complaints, and maintain records of communications with je88 Members.
• Platform improvement: To analyse usage patterns, improve the je88 platform experience, and develop new features and gaming products.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications.
• Legal compliance: To comply with applicable laws, regulatory requirements, court orders, and lawful requests from competent authorities.

6. Legal Basis for Processing

je88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contractual obligations between je88 and the Member as set out in the je88 Terms & Conditions — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, AML monitoring, and responsible gaming compliance.
• Legitimate interests: Processing necessary for the legitimate interests of je88, including fraud prevention, platform security, and internal analytics — provided such interests are not overridden by the rights and interests of data subjects.
• Consent: Processing based on your freely given, specific, and informed consent — applicable primarily to marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

je88 does not sell, rent, or trade personal data. je88 may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Game providers and software suppliers: Third-party game studios and live casino providers whose products are available on the je88 platform may receive limited technical data necessary to deliver their gaming services.
• Payment processors: Malaysian payment service providers (including Touch n Go eWallet operator TnG Digital, Boost, and banking partners) receive financial data necessary to process transactions.
• KYC and fraud prevention providers: Third-party identity verification and risk management services that assist je88 in fulfilling its KYC, AML, and fraud prevention obligations.
• Customer support platforms: Service providers who operate live chat, email support, and ticketing systems on behalf of je88.
• Regulatory and legal authorities: je88 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or lawful regulatory request.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of the je88 business, Member data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

8. International Data Transfers

Some of the third-party service providers engaged by je88 may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, je88 ensures that appropriate safeguards are in place to protect such data to a standard equivalent to that required under applicable Malaysian data protection law, including through the use of contractual data protection clauses and assessments of the recipient jurisdiction's data protection framework.

Members who have questions regarding the specific safeguards applied to international data transfers may direct enquiries to the je88 Data Protection Officer via the contact details in Section 15.

9. Data Retention

je88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active account data: Retained for the duration of the Member's je88 account and for a period of at least five (5) years following account closure, in compliance with AML and responsible gaming record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of collection or from the date of account closure, whichever is later, as required by applicable compliance obligations.
• Transaction records: Retained for a minimum of seven (7) years for financial audit and regulatory compliance purposes.
• Marketing data: Retained until the Member withdraws consent to receive marketing communications or requests deletion, subject to overriding legal retention requirements.
• Technical and usage data: Retained for up to twenty-four (24) months from the date of collection for platform analytics and security monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with je88's data disposal procedures.

10. Cookies & Tracking Technologies

je88.win uses cookies and similar tracking technologies to maintain session integrity, enhance platform functionality, and gather analytics data. The following categories of cookies are used:

• Essential cookies: Strictly necessary for the operation of the je88 platform, including maintaining your logged-in session, preserving game state, and enabling secure payment flows. These cookies cannot be disabled without materially impairing platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how visitors interact with je88.win — including pages visited, session duration, and navigation paths — to help je88 improve the platform experience.
• Functional cookies: Used to remember your preferences and settings — such as language selection and display preferences — to provide a more personalised je88 experience.
• Security cookies: Used to support je88's fraud detection and account security systems, including login anomaly detection and bot mitigation.

You may configure your browser to block or delete cookies; however, disabling essential cookies will prevent normal access to je88 services including the je88 login function. je88 does not use third-party advertising cookies or tracking pixels for cross-site advertising purposes.

11. Your Data Rights

Subject to applicable law and the conditions set out in this Policy, je88 Members have the following rights in respect of their personal data:

• Right of access: You may request a copy of the personal data je88 holds about you by submitting a subject access request to je88 support.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held by je88.
• Right to erasure: You may request deletion of your personal data, subject to je88's legal retention obligations and responsible gaming compliance requirements. Requests for erasure that conflict with mandatory retention periods will be accommodated to the extent permitted by law.
• Right to restrict processing: You may request that je88 restrict the processing of your personal data in certain circumstances, including where you contest the accuracy of the data or where processing is unlawful.
• Right to data portability: You may request that je88 provide your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on je88's legitimate interests where you believe your rights and interests override those legitimate interests.

To exercise any of the above rights, please contact je88 support using the details in Section 15. je88 will respond to all verifiable data rights requests within 30 calendar days of receipt.

12. Security Measures

je88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction:

• All data transmission between your device and je88.win is encrypted using 256-bit SSL/TLS encryption.
• Member passwords are stored using industry-standard one-way cryptographic hashing. je88 staff do not have access to Member passwords in plain text.
• Access to production systems and Member data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• je88 conducts regular independent security audits and penetration testing of its platform infrastructure.
• je88's login anomaly detection system monitors for suspicious authentication patterns, including login attempts from unrecognised devices or geographic locations, and triggers account alerts in such cases.
• Member financial data is processed through PCI-DSS compliant payment channels.

Notwithstanding the above measures, no internet-based platform can guarantee absolute security. je88 encourages all Members to maintain strong, unique passwords for their je88 account and to enable two-factor authentication to reduce the risk of unauthorised access.

13. Children's Privacy

je88 does not knowingly collect personal data from persons under the age of 21. Access to je88 is strictly restricted to adults aged 21 and above. If je88 becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be permanently terminated.

If you are a parent or guardian and believe that a person under 21 has accessed je88 or provided personal data to je88, please contact je88 support immediately using the contact details in Section 15 so that appropriate action can be taken without delay.

14. Amendments to This Policy

je88 reserves the right to amend this Privacy Policy at any time. Where material amendments are made, je88 will provide notice to Members via the email address registered to their je88 account or through a prominent notice displayed on je88.win, at least 14 days prior to the amended Policy taking effect.

Your continued use of je88 following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. The "Last Updated" date at the top of this Policy will be revised to reflect the date of the most recent amendment. je88 recommends that Members review this Policy periodically to remain informed of how their personal data is processed.

15. Contact & Data Protection Officer

For all privacy-related enquiries, subject access requests, or requests to exercise your data rights, please contact the je88 Data Protection Officer:

• Support Hours: 24 hours a day, 7 days a week, including Malaysian public holidays.
• Live Chat: Available within the je88 platform after completing the je88 login process.
• Email: [email protected]

je88 endeavours to acknowledge all privacy enquiries within 48 hours and to resolve subject access requests and data rights requests within 30 calendar days of receipt of a verifiable request.