Jom333 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

This Privacy Policy document explains how jom333 (accessible at jom333.xyz) collects, processes, stores, protects and discloses your personal information when you use our online casino platform. This policy applies to all users of the jom333 platform — including website visitors, registered members and former members whose accounts have been closed.

At jom333, we take our responsibilities as the custodian of your personal data seriously. The trust of our 150,000+ Malaysian members in our platform depends in large part on their confidence that their personal data is handled with integrity, transparency, and the highest level of security. That's why we designed this policy not merely to satisfy legal requirements, but to genuinely explain our practices in clear, plain language that every Malaysian player can understand.

This Privacy Policy should be read together with Terms & Conditions jom333. By using the jom333 platform, you agree to the collection and use of your personal data as described in this policy.

Jom333 collects various types of personal data depending on how you interact with our platform. Below are the categories of data we collect:

Registration & Identity Data:

• Your full name as stated on your Malaysian MyKad or passport.
• The email address and Malaysian phone number you registered with.
• Date of birth for age verification (18 and above).
• Passwords are stored as cryptographic hashes — we never store your password in plain text.

Financial & Payment Data:

• The e-wallet account details you use for deposits and withdrawals — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u and CIMB Clicks.
• Deposit and withdrawal transaction records, including amounts, dates, times, and payment methods.
• Identity verification documents (KYC) such as a copy of your MyKad or passport, where required for withdrawals above a certain amount.

Activity & Gaming Data:

• Gaming records — games played, session duration, total bets, and winnings.
• Sports betting records covering the Malaysia Super League, EPL, badminton, e-sports, and other categories.
• Use of bonuses, promotions and VIP programmes.
• Self-exclusion limit settings and self-control records that you have activated.

Technical & Device Data:

• IP address and approximate location based on IP.
• Device type, operating system and web browser version.
• Cookie data and session identifiers (explained further in Section 6).
• Access logs and login/logout timestamps.

Communications Data:

• Recordings or transcripts of your live chat sessions with the jom333 support team.
• The content of emails you send to support@jom333.xyz.
• Feedback and complaints you have submitted.

Jom333 uses your personal data only for lawful and relevant purposes. Below is a table of our data processing purposes along with the legal basis underpinning each:

Jom333 does not process your data for any purpose other than those stated above without prior notice and, where required, your consent. If we plan to process your data for a new purpose that is incompatible with the original, we will inform you and obtain your consent where necessary.

Jom333 does not sell, rent or trade your personal data to third parties for commercial purposes. However, there are limited circumstances in which we need to share your personal data with certain parties to keep the platform functioning properly or to meet our legal obligations:

• Payment Providers: Required transaction information is shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and banks via FPX solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy policies and security standards.
• Game Providers: Minimal session data is shared with licensed game providers for technical purposes to display games correctly. No full identity data is shared unless strictly necessary.
• Legal Authorities: jom333 may be required to disclose data to the police, judicial bodies, or Malaysian regulatory agencies if mandated by law or a valid court order.
• Fraud Prevention Services: Limited data may be shared with identity verification and fraud prevention services for Anti-Money Laundering (AML) compliance purposes.
• Technical Infrastructure Providers: Server hosting providers and cloud services that support jom333's operations may have limited access to data for technical maintenance purposes only, and are bound by strict confidentiality agreements.

In all of the above cases, jom333 ensures that data sharing is limited to what is strictly necessary (data minimisation principle) and that recipients are bound by equivalent data protection obligations.

Jom333 continuously invests in security infrastructure to ensure your personal data is protected at every level. Our technical and organisational security measures include:

• 256-bit SSL/TLS Encryption: All data communications between your browser and jom333's servers are encrypted using the latest TLS protocol. This means that even if your data is intercepted in transit, it cannot be read by unauthorised parties.
• Stored Data Encryption: Sensitive data such as payment details and identity information is stored in encrypted form within jom333's databases. Passwords are stored as one-way cryptographic hashes that cannot be decrypted.
• Role-Based Access Control: Only jom333 staff who require access to certain data to carry out their authorised duties are permitted to do so. Access is governed by the principle of least privilege.
• Two-Factor Authentication (2FA): jom333 supports and encourages the use of 2FA on all member accounts as an additional layer of security.
• Continuous Security Monitoring: Our systems continuously monitor account activity to detect suspicious patterns such as repeated login attempts, access from unusual locations or irregular transactions.
• Penetration Testing: jom333 conducts regular security testing by independent third parties to identify and patch vulnerabilities before they can be exploited.
• Incident Response Plan: jom333 has a clear data incident response procedure in place. In the event of a material data breach, we will notify affected users and the relevant authorities within the timeframe required by law.

Even with these comprehensive security measures in place, no system can guarantee 100% absolute security. You also play an important role in protecting your account — use a strong password, enable 2FA, and never share your login credentials with anyone.

Jom333 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the jom333 website. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as maintaining your login session, remembering language preferences, and ensuring basic security. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
• Performance & Analytics Cookies: Collects anonymised information about how you use the platform — pages visited, time spent, links clicked. This data helps us understand usage patterns and improve the jom333 platform. No personally identifiable information is collected through these cookies.
• Functional Cookies: Remembers your preferences such as display settings, favourite game selections, and interface configurations, so you don't have to reconfigure them every time you log in.
• Security Session Cookies: Used to detect and prevent fraudulent activity, verify sessions, and ensure that only the legitimate account owner can access the account.

You can manage or delete cookies at any time through your web browser settings. However, disabling certain cookies may affect the functionality of the jom333 platform and your gaming experience. For guidance on managing cookies in major browsers, please refer to your browser's help documentation.

As an online platform, some of your personal data may be processed or stored on servers located outside Malaysia for technical infrastructure purposes. When such transfers occur, jom333 ensures that:

• Data transfers only take place to destinations that provide a level of data protection equivalent to or greater than that required under Malaysian law.
• Appropriate data transfer agreements are in place between jom333 and the relevant infrastructure providers, including standard data protection clauses.
• Sensitive financial and identity data is stored on servers located in the Asia region in compliance with local privacy laws.
• Data transfers for technical support purposes are limited to the minimum data required and are accessible only to authorised personnel.

If you'd like more details about specific cross-border data transfers involving your data, please contact the jom333 privacy team at support@jom333.xyz.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by jom333. We fully respect and support the exercise of these rights:

Jom333 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Age verification is part of our registration process, and we take reasonable steps to prevent access by minors.

Should we discover that we have unknowingly collected personal data from someone under the age of 18, we will:

• Immediately close the account in question.
• Deleting all personal data associated with the account from our systems.
• Returning any remaining balance in the account to the owner of the payment method used for the deposit.

If you become aware that someone under the age of 18 has registered at jom333, please contact us immediately at support@jom333.xyz so that we can take the appropriate action.

Jom333 does not retain your personal data for longer than necessary for the purpose it was collected, or beyond any period required by law. Below are our data retention guidelines:

• Active account data: Retained for the duration your account remains active with jom333.
• Data after account closure: Account records, transactions, and activity are retained for 5 years following account closure to meet legal compliance obligations, including AML requirements and financial audit purposes.
• KYC Documents: Retained for 5 years after the business relationship ends, in line with anti-money laundering legal requirements.
• Support communication records: Live chat logs and support emails are retained for 2 years for quality control and dispute resolution purposes.
• Marketing data: Retained until you withdraw your consent or for 2 years whichever comes first.
• Cookie & analytics data: Anonymised data is collected for a maximum of 13 months before being deleted or aggregated.

Once the relevant retention period expires, your personal data will be securely deleted or anonymised in a form that cannot be specifically identified as belonging to you.

Jom333 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements in how we protect your information. The "Updated" date at the top of this page indicates when the most recent amendment was made.

For material amendments — meaning changes that significantly affect how we use your data or your privacy rights — jom333 will provide advance notice via:

• An email to your registered address at least 14 days before the amendments take effect.
• An in-platform notification when you log in.
• Material updates to the top section of this Privacy Policy page.

Your continued use of the jom333 platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests relating to this Privacy Policy or how jom333 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@jom333.xyz — please include "Privacy Enquiry" in the subject line to reach our privacy team. Privacy-related enquiries are responded to within 3 business days.
• Live Chat: Click the chat icon at the bottom right of your screen — available 24 hours a day, 7 days a week. Suitable for general enquiries about your data.
• FAQ: Visit the FAQ our FAQ for answers to the most common privacy questions.

The jom333 privacy team is committed to handling all data-related enquiries and requests seriously and within a reasonable timeframe. For formal complaints that our team is unable to resolve, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, which enforces the PDPA 2010.