Privacy Policy

1. Overview

jsm888 ("jsm888", "we", "us", "our") operates the online gaming and sports betting platform accessible at jsm888.app. jsm888 is committed to protecting the privacy and personal data of all persons who register as members, visit the Platform, or interact with our customer support team.

This Privacy Policy is intended to inform you clearly and transparently about what personal data jsm888 collects, why we collect it, how we use and protect it, and what rights you have in relation to that data. By registering a jsm888 account or continuing to use the jsm888 Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read together with the jsm888 Terms and Conditions, which are incorporated herein by reference. In the event of any conflict between this Policy and the Terms and Conditions regarding the handling of personal data, this Privacy Policy shall prevail.

2. Personal Data We Collect

jsm888 collects the following categories of personal data from members and Platform visitors:

jsm888 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data) unless specifically required by applicable law or identity verification obligations, and only with your explicit consent where required.

3. How We Collect Personal Data

jsm888 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, submitting support requests, or communicating with our team.
• Automated technical collection: Data gathered automatically when you access the jsm888 Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Payment processors: Financial verification data shared with jsm888 by approved Malaysian payment channel operators, including FPX banks and e-wallet providers, in connection with your transactions.
• Identity verification providers: KYC and age verification data returned by third-party identity verification services engaged by jsm888 to fulfil our compliance obligations.
• Fraud prevention services: Risk signals and device fingerprinting data from fraud detection providers engaged to protect the Platform and its members.

4. Purpose of Processing

jsm888 processes your personal data for the following purposes:

• Account management: Creating and maintaining your jsm888 account, verifying your identity, processing logins, and managing account security.
• Service delivery: Providing access to sports betting, live casino, slots, lottery, and all other Platform features you have registered to use.
• Payment processing: Facilitating deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen Approved Payment Method.
• Legal and regulatory compliance: Satisfying anti-money laundering (AML), know-your-customer (KYC), and age verification obligations under applicable international gaming authority guidelines.
• Responsible gaming: Monitoring gaming patterns to identify potential signs of problem gambling and to facilitate self-exclusion, deposit limits, and cooling-off requests.
• Fraud prevention and platform security: Detecting and preventing fraudulent activity, account takeover attempts, bonus abuse, and prohibited conduct as defined in the Terms and Conditions.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of your communications with the jsm888 support team.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the jsm888 Platform, optimise game performance, and personalise your experience where permitted.
• Marketing communications: Sending you promotional offers, bonus notifications, and updates about new features — only where you have provided consent or where permitted by applicable law. You may opt out at any time.

5. Legal Basis for Processing

jsm888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with AML, KYC, age verification, and other applicable regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications and certain cookie-based tracking, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Disclosure to Third Parties

jsm888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of third parties, strictly as necessary for the purposes described in this Policy:

• Payment service providers: Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay) and FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Connect) for the processing of deposits and withdrawals.
• Identity and age verification providers: Third-party KYC service providers engaged to verify member identity and age in compliance with applicable regulatory requirements.
• Game software providers: Licensed casino and slots studios whose software is integrated into the jsm888 Platform. These providers may receive anonymised session data required for game operation.
• Fraud prevention and security services: Specialist providers engaged to detect and prevent fraudulent account activity, bonus abuse, and platform security threats.
• Regulatory and law enforcement authorities: Where jsm888 is required by applicable law, court order, or regulatory directive to disclose personal data.
• Professional advisers: Legal, audit, and financial advisers engaged by jsm888, subject to applicable professional confidentiality obligations.

All third-party service providers engaged by jsm888 are required to process personal data only on jsm888's instructions and in accordance with applicable data protection standards.

7. Data Retention

jsm888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your jsm888 membership and for a minimum of 5 years following account closure, to satisfy AML and KYC record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 7 years following each transaction, in accordance with applicable financial record-keeping requirements.
• Gaming activity data: Retained for the duration of the account and for a minimum of 5 years following account closure.
• Technical and log data: Typically retained for 12–24 months, unless retained for longer as required for security investigations or legal proceedings.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

8. Data Security

jsm888 implements technical and organisational security measures appropriate to the nature of the personal data we process. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jsm888 Platform.
• Encrypted storage of all passwords using industry-standard cryptographic hashing with salting — no passwords are stored in plain text.
• Access controls limiting personal data access to authorised jsm888 personnel on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication available to all members to protect account access.
• Automated monitoring for suspicious login activity, unusual transaction patterns, and potential data breach indicators.

While jsm888 takes data security seriously, no system is completely immune to risk. In the event of a personal data breach that poses a risk to your rights and freedoms, jsm888 will notify you and applicable regulatory authorities in accordance with our legal obligations.

9. Your Data Rights

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in relation to your personal data held by jsm888:

• Right of access: Request a copy of the personal data jsm888 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: Request that jsm888 restrict processing of your personal data in certain circumstances.
• Right to data portability: Request a structured, machine-readable copy of personal data you have provided to jsm888, where technically feasible.
• Right to object: Object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Withdraw consent for any processing activity based on consent at any time, without affecting prior lawful processing.

To exercise any of the above rights, contact the jsm888 Data Privacy team via live chat or at [email protected]. jsm888 will respond to verified requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, with notice provided to you.

10. Cookies & Tracking Technologies

jsm888 uses cookies and similar technologies (including web beacons and session tokens) on the Platform for the following purposes:

• Strictly necessary cookies: Required for Platform functionality, including maintaining your logged-in session, security tokens, and language preferences. These cannot be disabled without impairing Platform functionality.
• Performance cookies: Collect anonymised data about how visitors use the Platform, enabling jsm888 to identify and resolve performance issues.
• Functional cookies: Remember your preferences (such as preferred payment method or display settings) to personalise your experience.
• Analytics cookies: Used to analyse aggregate Platform usage patterns for internal product development purposes. Data collected via analytics cookies is anonymised where technically feasible.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. jsm888 does not use third-party advertising or cross-site tracking cookies.

11. Minors

The jsm888 Platform is strictly for adults aged 21 and above. jsm888 does not knowingly collect personal data from persons under the age of 21. All registration attempts are subject to age verification. Where jsm888 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the personal data will be deleted, and any associated transactions will be voided.

Parents and guardians who believe a minor may have accessed or registered on the jsm888 Platform are encouraged to contact support immediately via the live chat function within the Platform.

12. Changes to This Policy

jsm888 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or Platform operations. Where material changes are made, jsm888 will notify registered members via email or by prominent notice within the Platform prior to the changes taking effect.

The effective date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the jsm888 Platform following notification of changes constitutes your acceptance of the revised Policy.

13. Contact & Data Enquiries

For all privacy-related enquiries, data subject access requests, or complaints about the handling of your personal data, please contact the jsm888 Data Privacy team:

• Live Chat: 24/7 via the jsm888 Platform (fastest response for urgent matters)
• Email: [email protected] — subject line: "Privacy Request – [your account username]"

jsm888 will acknowledge all data privacy requests within 5 business days and provide a substantive response within 30 calendar days, unless the complexity or volume of the request requires an extension as described in Section 9 above.