Privacy Policy

JomWin88 (referred to in this document as "we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every player who accesses or uses our online casino and sports betting platform at jomwin88.cam. We operate under applicable data protection frameworks and take our obligations as a data controller seriously.

This Privacy Policy ("Policy") describes in detail how JomWin88 collects, processes, stores, shares, and protects personal data in connection with your use of the Platform. It also sets out your rights as a data subject and explains how you may exercise those rights.

This Policy should be read together with our Terms and Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers such as IP address or device ID.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" — JomWin88, the entity that determines the purposes and means of processing personal data.
• "Data Processor" — any third party that processes personal data on behalf of JomWin88 pursuant to a written data processing agreement.
• "Data Subject" — you, the individual player whose personal data is being processed.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of your personal data for a stated purpose.
• "Platform" — the JomWin88 website, mobile interface, and all associated services accessible at jomwin88.cam.
• "Sensitive Data" — a subset of personal data requiring heightened protection, including financial account details, identity document copies, and KYC verification materials.

JomWin88 collects the minimum personal data necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect are set out in the table below:

We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data) unless expressly required for identity verification purposes under applicable KYC obligations, in which case such data is handled with the highest level of care and security.

JomWin88 collects personal data through the following methods:

4.1 Directly from You

The majority of personal data we hold is provided directly by you during the account registration process, KYC verification, deposit and withdrawal requests, support interactions, and participation in promotions. You are under no legal obligation to provide this data; however, failure to do so may prevent us from providing services to you.

4.2 Automatically through Platform Use

When you access and use the Platform, certain technical and usage data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser type, and a record of the pages you visit and the games you interact with. See Section 11 for full details on our use of cookies.

4.3 From Third-Party Service Providers

We may receive personal data about you from third-party payment processors (such as FPX operators, DuitNow, Maybank, CIMB, Public Bank, and Hong Leong banking partners), identity verification services engaged for KYC purposes, fraud prevention and anti-money-laundering screening services, and analytics partners. All such third-party providers are contractually bound to handle your data in accordance with applicable data protection standards.

JomWin88 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your player account, including identity verification, password management, and account security monitoring;
• Payment Processing: Facilitating deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, BTC, USDT, and other supported payment methods;
• Regulatory Compliance: Complying with Know Your Customer (KYC), Anti-Money Laundering (AML), and Counter-Terrorism Financing (CTF) obligations under applicable international gaming and financial regulations;
• Platform Security: Detecting, investigating, and preventing fraudulent activity, collusion, bonus abuse, and other policy violations;
• Responsible Gambling: Monitoring gaming patterns to identify potential indicators of problem gambling and facilitating access to responsible gambling tools including deposit limits and self-exclusion;
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions;
• Platform Improvement: Analysing aggregate usage data to improve the performance, reliability, and user experience of the Platform;
• Marketing Communications: Sending promotional materials, bonus offers, and platform updates where you have provided explicit consent to receive such communications. You may withdraw consent at any time.

JomWin88 processes your personal data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the Terms and Conditions, including account administration, payment processing, and customer support;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and CTF obligations;
• Legitimate Interests: Processing necessary for the legitimate interests of JomWin88, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing based on your specific, informed, and freely given consent — principally in the context of direct marketing communications. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

JomWin88 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients solely to the extent necessary for the stated purpose:

• Payment Service Providers: Banks and e-wallet operators (including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX operators) for the processing of deposits and withdrawals;
• Identity Verification Partners: Third-party KYC and AML screening services engaged to verify the identity and age of registered players and to fulfil regulatory obligations;
• Technology Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers who process data on our behalf pursuant to strict data processing agreements;
• Game Content Providers: Licensed international game studios that supply casino games and sports betting infrastructure to the Platform, limited to the technical data necessary for game delivery and fairness auditing;
• Regulatory and Law Enforcement Authorities: Government agencies, regulators, and law enforcement bodies where disclosure is required by applicable law, court order, or regulatory directive;
• Professional Advisers: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations, where engagement of such advisers requires access to limited personal data.

Any third party with whom we share personal data is required to process that data lawfully, in accordance with our instructions, and with appropriate technical and organisational security measures in place.

As an internationally operating platform serving Malaysian players, some of JomWin88's service providers, technology partners, and game content studios are located outside Malaysia. Where personal data is transferred to jurisdictions that may not provide a level of data protection equivalent to Malaysian standards, JomWin88 implements appropriate safeguards to ensure the security and integrity of that data.

Such safeguards include contractual data processing agreements incorporating standard data protection clauses, technical security measures including encryption in transit and at rest, and periodic audits of third-party data handling practices. By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia in accordance with this Section.

JomWin88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. Our standard data retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under applicable financial record-keeping regulations;
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later;
• Customer Support Records: Retained for two (2) years following the resolution of the relevant support interaction;
• Marketing Preference Data: Retained until you withdraw consent or request erasure, subject to overriding legal obligations;
• Technical and Usage Data: Retained in aggregated, anonymised form for platform analytics purposes indefinitely; identifiable technical data is deleted or anonymised within twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

As a data subject, you are entitled to exercise the following rights in respect of your personal data held by JomWin88. To exercise any of these rights, please contact us using the details in Section 15.

• Right of Access: You may request a copy of the personal data JomWin88 holds about you, together with information about how and why it is being processed;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You may also update certain account information directly through your account dashboard;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations that require retention;
• Right to Restrict Processing: You may request that we restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of data pending verification;
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing of your personal data based on JomWin88's legitimate interests, and to direct marketing processing at any time;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

JomWin88 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that enable us to recognise your browser, maintain your session, and analyse how the Platform is used.

11.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies enable session management, security features, and basic navigation. They cannot be disabled without impairing Platform functionality;
• Analytical / Performance Cookies: Used to collect anonymised data about how players interact with the Platform — which pages are visited most frequently, where errors occur, and how sessions flow. This data is used in aggregate to improve Platform performance;
• Functionality Cookies: Enable the Platform to remember your preferences, such as language settings, and provide a more personalised experience;
• Session Security Cookies: Used to detect and prevent fraudulent activity, including the identification of unusual login patterns or suspicious session behaviour.

11.2 Managing Cookie Preferences

You may control or disable non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies entirely or to be notified when cookies are being set. Please note that disabling certain cookies may affect the functionality of the Platform, including the ability to remain logged in during a gaming session.

JomWin88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption at rest for all stored personal and financial data;
• Multi-factor authentication requirements for account access and administrative systems;
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need may access personal data;
• Regular penetration testing, vulnerability scanning, and security audits of our platform infrastructure;
• Documented incident response procedures to address data security breaches promptly and in accordance with regulatory notification obligations.

While JomWin88 takes all reasonable precautions to secure your data, no internet-based transmission is completely infallible. You are responsible for maintaining the security of your account credentials and for notifying us immediately of any suspected unauthorised access.

JomWin88 strictly prohibits access to and use of the Platform by individuals under the age of 21 years. We do not knowingly collect personal data from individuals under 21. The Platform employs age verification controls at the registration stage and enforces mandatory KYC verification requiring government-issued identity documentation prior to processing any withdrawal.

If JomWin88 becomes aware or has reasonable grounds to believe that personal data has been collected from a player who is under 21 years of age, we will promptly suspend the relevant account, delete the personal data collected, and void any associated transactions or balances.

JomWin88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Material changes to this Policy will be communicated to registered players via their account email address and through a prominent notice on the Platform at least seven (7) days prior to the changes taking effect.

The "Last Updated" date displayed at the top of this Policy reflects the date on which the most recent revision was published. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by JomWin88, please contact our Data Privacy Team through the following channels:

• Email: [email protected] — subject line: "Privacy Enquiry" (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform — mark your enquiry as "Data Privacy"
• Response Time: All privacy-related enquiries acknowledged within 2 business hours; substantive responses provided within 30 calendar days
• Languages: English and Bahasa Malaysia
• Support Hours: 24 hours a day, 7 days a week, 365 days a year

For data subject access requests or erasure requests, please email us with the subject line "Data Subject Request" and include your full registered name, account email address, and a brief description of your request. We may require identity verification before processing any data subject request.