Privacy Policy — jom888

Introduction

This Privacy Policy ("Policy") is published by jom888 ("we", "us", "the Platform", "jom888"), the operator of the online casino and sports betting platform accessible at jom888.cam and all associated digital properties and services.

This Policy applies to all individuals who register an account with jom888, visit the jom888 website, interact with our customer support team, or use any of our digital services in any capacity ("you", "User", "Player"). It describes our practices regarding the collection, use, storage, sharing, and deletion of your personal data, and sets out the rights available to you as a data subject.

jom888 is committed to handling your personal data in a manner that is lawful, transparent, and proportionate. We process personal data only for the specific purposes described in this Policy and for no other purpose without your prior consent or as required by applicable law.

This Policy is to be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy. By registering an account or using the jom888 platform, you acknowledge that you have read and understood this Privacy Policy.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, either directly or in combination with other information.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — jom888, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — Any third party that processes Personal Data on jom888's behalf under a contractual data processing agreement.
• "Sensitive Personal Data" — A subset of Personal Data that warrants heightened protection due to its nature, including government-issued identification numbers, financial account information, and KYC documentation.
• "Cookie" — A small text file placed on your device by the jom888 platform for the purpose of session management, security, or analytics.
• "KYC" — Know Your Customer; the identity and address verification process required before withdrawal of funds or as part of ongoing compliance obligations.
• "User" / "Player" — Any individual who has registered an account with jom888 or who interacts with the Platform in any capacity.

Data We Collect

jom888 collects the following categories of personal data in the course of providing its services to you:

3.1 Registration Data

When you create a jom888 account, we collect your full legal name, date of birth, Malaysian IC number or passport number (for non-Malaysian nationals), email address, Malaysian mobile telephone number, and chosen username. This information is mandatory for account creation and cannot be omitted.

3.2 Identity Verification (KYC) Data

As part of our KYC obligations, we collect copies of government-issued identity documents (Malaysian MyKad, Driver's Licence, or Passport), proof of residential address (utility bills, bank statements dated within three months), and biometric data in the form of selfie photographs used to confirm that the document holder matches the account registrant.

3.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, and wagering transactions conducted via your jom888 account. Payment method details — including e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay, and DuitNow; bank account identifiers for Maybank, CIMB, Public Bank, Hong Leong, and FPX transactions; and cryptocurrency wallet addresses for BTC, ETH, USDT, and BNB deposits — are collected as necessary to process payments.

3.4 Technical & Device Data

When you access the jom888 platform, we automatically collect certain technical data including your IP address, device type and model, operating system version, browser type and version, approximate geographic location derived from IP address, and session logs including login timestamps and pages visited.

3.5 Communications Data

Records of all communications between you and the jom888 support team — including live chat transcripts, email correspondence, and any information you provide in the course of raising a dispute or complaint — are retained in accordance with the retention periods described in Section 9.

3.6 Behavioural & Analytics Data

We collect data about how you use the jom888 platform, including game history, bet patterns, session durations, preferred game categories, and interaction with promotional offers. This data is used for platform improvement, personalisation, and responsible gambling monitoring.

How We Collect Your Data

jom888 collects personal data through the following means:

• Direct Submission — Information you provide actively during registration, KYC submission, support interactions, or when completing promotional claims.
• Automated Technical Collection — Device and session data collected automatically when you access the platform via web browser or mobile interface, using cookies, log files, and server-side analytics.
• Payment Processing — Transaction data collected in real time as deposits and withdrawals are initiated via Malaysian banking partners and e-wallet providers.
• Third-Party Verification Services — Identity verification data may be cross-referenced with authorised third-party KYC and anti-money laundering (AML) screening services.
• Referral Sources — If you access jom888 through a referral link or affiliate programme, we may receive information about the source of your referral for the purpose of attributing and processing referral bonuses.

Legal Basis for Processing

jom888 processes your personal data only where we have a valid legal basis to do so. The applicable legal bases are as follows:

How We Use Your Data

jom888 uses the personal data we collect for the following purposes, and for no other purpose without your prior consent:

6.1 Platform Operation

To create and maintain your account, process deposits and withdrawals in MYR via your chosen payment method, calculate and settle wagers across all game categories, and deliver the full range of jom888's casino and sports betting services.

6.2 Compliance and Regulatory Obligations

To fulfil our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gambling regulations. This includes verifying your identity before processing withdrawals, screening transactions against regulatory watchlists, and maintaining records required by our licensing authority.

6.3 Security and Fraud Prevention

To monitor account activity for indicators of fraud, unauthorised access, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions. Technical data including IP addresses and device identifiers is used to detect and prevent account takeover attempts and multi-account violations.

6.4 Customer Support

To respond to your enquiries, resolve disputes, investigate complaints, and provide the quality of support that jom888 is committed to delivering to all Malaysian players. Support communications are retained to ensure continuity of service and for training and quality assurance purposes.

6.5 Responsible Gambling Monitoring

To monitor player behavioural patterns for indicators of problem gambling, including escalating bet sizes, extended session durations, and rapid deposit sequences. Where such indicators are detected, jom888 may proactively contact the player, apply temporary account restrictions, or suggest use of responsible gambling tools.

6.6 Marketing Communications

To send you promotional materials, bonus notifications, and news about jom888's products and services — but only where you have affirmatively opted in to receive such communications during registration or at a subsequent point. You may withdraw marketing consent at any time by contacting support or updating your account communication preferences.

Data Sharing & Disclosure

jom888 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes under any circumstances. We may share your personal data with the following categories of parties, strictly on a need-to-know basis and only to the extent required for the purposes described in Section 6:

7.1 Payment Service Providers

Financial transaction data is shared with the relevant payment processor (including FPX network operators, Malaysian banking institutions, and cryptocurrency infrastructure providers) to the extent required to execute and reconcile your deposit and withdrawal transactions.

7.2 Identity Verification Partners

KYC and AML screening data may be shared with authorised third-party identity verification and compliance service providers under contractual data processing agreements that bind them to the same data protection standards as jom888.

7.3 Legal and Regulatory Authorities

We will disclose personal data to regulatory authorities, law enforcement bodies, courts, and other governmental agencies where required to do so by applicable law, court order, or regulatory direction — including but not limited to AML reporting obligations and fraud investigation cooperation requests.

7.4 Platform Technology Partners

Technical service providers including cloud hosting infrastructure operators, cybersecurity service providers, and customer support platform vendors may process personal data on our behalf as Data Processors under contractual agreements that prohibit any use of such data for purposes beyond delivery of the contracted service.

International Data Transfers

Some of jom888's service providers and infrastructure partners operate in jurisdictions outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that required by applicable data protection law, jom888 will implement appropriate safeguards to ensure the protection of your personal data.

Such safeguards may include the use of standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms. By using the jom888 platform, you acknowledge that your personal data may be transferred, stored, and processed outside of Malaysia in accordance with the safeguards described in this section.

Data Retention

jom888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The following retention periods apply as a general guide:

Upon the expiry of the applicable retention period, personal data will be securely and irreversibly deleted from jom888's active systems, or anonymised such that it can no longer be associated with any individual.

Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device when you access the jom888 platform. They enable the platform to recognise your browser across sessions, maintain your login state, and operate core security and functionality features.

10.2 Types of Cookies Used

• Strictly Necessary Cookies — Essential for the platform to function. These manage your login session, maintain cart and balance state, and operate security features. These cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies — Used to collect anonymised data about how players navigate and interact with the platform, helping jom888 identify performance issues and improve the user experience.
• Functional Cookies — Used to remember your preferences such as language settings, preferred game categories, and display options.

10.3 Managing Cookies

You may manage or restrict cookie use through your browser's settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the jom888 platform. jom888 does not use third-party advertising tracking cookies or cross-site tracking technologies.

Your Data Rights

As a data subject whose personal data is processed by jom888, you hold the following rights. These rights are subject to applicable legal limitations and are exercisable by submitting a written request to [email protected]:

jom888 will respond to data rights requests within 30 calendar days of receipt. Where a request is complex or we receive multiple requests from the same individual, we may extend this period by a further 30 days, notifying you in writing of the extension and the reasons for it.

Children's Privacy

The jom888 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from minors. If we become aware that personal data has been collected from a person under the age of 21 — whether through false representation of age during registration or any other means — we will immediately suspend the account, void any associated balances, and delete all personal data associated with that account.

If you are a parent or guardian and you believe that a minor has registered an account with jom888, please contact us immediately at [email protected] so that we can take prompt action.

Data Security

jom888 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jom888's servers.
• AES-256 encryption for sensitive personal data at rest in our databases.
• Role-based access controls restricting employee access to personal data to only those with a legitimate operational need.
• Regular penetration testing and security audits of the jom888 platform infrastructure.
• Two-factor authentication options available to all registered players for account access protection.
• Real-time monitoring systems for anomalous account access patterns and potential data breach indicators.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, jom888 will notify affected players without undue delay and, where required, notify the relevant supervisory authority within the timeframe mandated by applicable law.

Third-Party Links

The jom888 platform may contain links to third-party websites, applications, or services. jom888 has no control over the data collection practices, privacy policies, or security measures of any third-party website and accepts no responsibility or liability for the privacy practices of such third parties.

You are encouraged to review the privacy policy of any third-party website you visit via a link on the jom888 platform before providing any personal information on that site. The inclusion of a link on the jom888 platform does not constitute an endorsement of the third party's privacy practices.

Amendments to This Policy

jom888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. Material changes to this Policy — that is, changes that significantly affect how we use or share your personal data — will be communicated to registered players via email or prominent in-platform notice at least seven (7) days prior to taking effect.

Non-material changes, including corrections of typographical errors, clarifications of existing provisions, or administrative updates, may be applied immediately without prior notice. The date of the most recent update is displayed at the top of this Policy and on the page hero banner. We encourage you to review this Policy periodically to stay informed of how jom888 protects your personal data.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how jom888 has handled your personal data, please contact our support team using the details below. We take all privacy-related enquiries seriously and will respond promptly and professionally.

If you are not satisfied with jom888's response to a privacy complaint, you may have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. jom888 will cooperate fully with any regulatory investigation into our data processing practices.