jw888 Privacy Policy

1. Introduction

jw888 ("the Company", "we", "us", "our") operates the online gaming platform accessible at jw888.win and all associated digital properties (the "Platform"). We are committed to protecting the privacy and personal data of all persons who interact with our Platform, including registered Members, prospective Members, and visitors.

This Privacy Policy ("Policy") describes how jw888 collects, uses, processes, discloses, stores, and protects your personal data in connection with your use of the Platform. This Policy is intended to be read alongside our Terms & Conditions, which govern the broader relationship between you and jw888.

This Policy is aligned with the principles of the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. By registering for a jw888 account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of applicable data protection legislation, jw888 is the data controller in respect of personal data collected through the Platform. All enquiries, requests, and complaints relating to the processing of your personal data should be directed to the jw888 Data Protection contact at [email protected], clearly marked "Privacy / Data Protection Enquiry" in the subject line.

jw888 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations. The DPO can be reached via the contact details above.

3. Personal Data We Collect

jw888 collects personal data in the following categories:

3.1 Data You Provide Directly

3.2 Data Collected Automatically

When you access the jw888 Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session timestamps and duration;
• Pages visited, navigation patterns, and interaction logs;
• Cookie and similar tracking technology data (see Section 6).

3.3 Data from Third Parties

jw888 may receive personal data about you from third parties, including identity verification service providers engaged for KYC purposes, payment processors (including e-wallet providers such as Touch n Go and Boost, and banking partners such as Maybank, CIMB, and Public Bank), fraud detection and AML screening service providers, and analytics partners who help us understand Platform usage patterns.

4. How We Use Your Personal Data

jw888 processes your personal data for the following purposes:

• Account Management: Creating, operating, maintaining, and closing your jw888 Member account;
• Service Delivery: Enabling your access to games, sportsbook, live casino, and all other Platform services;
• Payment Processing: Processing MYR deposits and withdrawals through your chosen payment method and maintaining accurate transaction records;
• KYC & AML Compliance: Verifying your identity and age, and fulfilling the Company's anti-money laundering and counter-financing of terrorism obligations under our gaming licence;
• Responsible Gaming: Monitoring gaming patterns for indicators of problem gambling, implementing and enforcing member-requested limits and exclusions, and discharging our duty of care obligations;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct;
• Customer Support: Responding to your enquiries, complaints, and support requests;
• Legal & Regulatory Compliance: Meeting obligations imposed by our gaming licence, applicable law, and regulatory authorities;
• Marketing Communications: Sending you promotional offers and updates about jw888 bonuses and events, where you have not opted out (see Section 10 regarding opt-out rights);
• Platform Improvement: Analysing usage data to improve Platform performance, user experience, and game content.

5. Legal Basis for Processing

jw888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of the Member agreement between you and jw888, including account operation, payments, and game access;
• Legal Obligation: Processing required to comply with applicable law and regulatory requirements, including KYC verification, AML obligations, and gaming licence conditions;
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, responsible gaming monitoring, and business analytics, where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time (see Section 10).

6. Cookies & Tracking Technologies

jw888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function, including session management and login authentication. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and "Remember Me" login options.
• Analytics Cookies: Help us understand how Members use the Platform so we can improve it. These are anonymised where possible.
• Marketing Cookies: Used to deliver relevant promotional content. You may opt out of marketing cookies without affecting core Platform access.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect your experience on the Platform. jw888 does not sell cookie data to third parties.

7. Data Sharing & Disclosure

jw888 does not sell your personal data. We may share your personal data with the following categories of recipients, solely as necessary for the stated purposes:

• Payment Service Providers: Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency processors — for deposit and withdrawal processing;
• Identity Verification Providers: Third-party KYC and AML screening services engaged for identity verification and sanctions screening;
• Game Providers: Licensed game providers (e.g., Evolution Gaming, Pragmatic Play, Microgaming, PG Soft) who supply game software and live dealer services — these providers process gaming activity data as necessary to deliver their services;
• Regulatory Authorities: Gaming licensing authorities, financial intelligence units, and law enforcement agencies, where required by law or our gaming licence conditions;
• IT & Security Service Providers: Cloud hosting, cybersecurity, and fraud detection service providers who process data on our behalf under strict data processing agreements;
• Professional Advisors: Legal, accounting, and compliance advisors, where necessary and subject to professional confidentiality obligations.

All third parties with whom jw888 shares personal data are required to implement appropriate technical and organisational security measures and to process data solely in accordance with jw888's instructions.

8. International Data Transfers

As an internationally licensed gaming platform serving Malaysian players, jw888 may transfer personal data to recipients located in countries outside Malaysia. Where such transfers occur, jw888 ensures that appropriate safeguards are in place, which may include contractual data protection clauses, adequacy decisions, or other recognised transfer mechanisms consistent with applicable data protection law.

You may contact [email protected] to request information about the specific safeguards applicable to any international transfer of your personal data.

9. Data Retention

jw888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and regulatory obligations:

• KYC and AML Records: A minimum of 5 years following account closure or the last transaction, as required by anti-money laundering regulations applicable under jw888's gaming licence;
• Financial Transaction Records: A minimum of 5 years from the date of the transaction;
• Gaming Activity Logs: A minimum of 3 years, for dispute resolution and regulatory audit purposes;
• Customer Support Records: A minimum of 3 years from the date of resolution;
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period thereafter for compliance demonstration.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10. Your Data Rights

Subject to applicable law and our legal obligations, you have the following rights in respect of your personal data held by jw888:

• Right of Access: You may request a copy of the personal data jw888 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations and the conditions of our gaming licence;
• Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances;
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to us;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days. We may require identity verification before processing a data rights request.

11. Security Measures

jw888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit Transport Layer Security (TLS 1.3) encryption for all data in transit;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication (MFA) for all internal systems holding Member data;
• Regular third-party security audits and penetration testing of the Platform infrastructure;
• Intrusion detection systems and 24/7 security monitoring;
• Formal data breach response procedures, including notification to affected Members and relevant regulatory authorities where required by law.

While jw888 takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. You are encouraged to protect your own account by using a strong, unique password and enabling two-factor authentication.

12. Children's Privacy

jw888 is strictly an adult platform intended for persons aged 21 years or above. We do not knowingly collect personal data from any person under the age of 21. If jw888 discovers that personal data has been provided by a person under 21, that account will be immediately closed, any balance refunded to the verified deposit source, and the personal data securely deleted, subject to any applicable legal holds.

If you believe a person under 21 has registered an account with jw888, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

jw888 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to active Members via the email address registered to their account and/or via a prominent notice on the Platform, at least 14 days before the changes take effect where practicable. The "Effective Date" at the top of this document reflects when the current version came into force.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement of and agreement to the revised terms. We encourage you to review this Policy periodically to stay informed of how jw888 handles your personal data.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by jw888, please contact:

• Email: [email protected] — subject line: "Privacy / Data Protection Enquiry" (plain text; do not send sensitive documents unless requested)
• Response Time: jw888 aims to acknowledge all privacy-related enquiries within 3 business days and provide a substantive response within 30 days
• Live Support: 24/7 live chat available after logging in to your jw888 account for general enquiries