Privacy Policy – jsm888

1. Introduction

jsm888 ("jsm888," "we," "us," or "our") operates the online gaming platform accessible at jsm888.org. This Privacy Policy ("Policy") explains how jsm888 collects, uses, stores, discloses, and otherwise processes the personal data of individuals who register as Members, visit the jsm888 website, or otherwise interact with the jsm888 platform.

jsm888 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy is incorporated by reference into jsm888's Terms & Conditions. By accepting the Terms & Conditions, you also acknowledge and accept this Privacy Policy.

This Policy applies to all personal data collected through jsm888.org and any associated platforms or services operated by jsm888. It does not apply to third-party websites linked to or from jsm888, or to the independent data practices of jsm888's game software providers, payment processors, or other service partners.

2. Data Controller

jsm888 acts as the data controller in respect of the personal data it collects directly from Members and website visitors. As data controller, jsm888 is responsible for determining the purposes and means of processing Member personal data.

Where jsm888 engages third-party service providers to process data on its behalf — such as payment processors, KYC verification providers, or cloud hosting providers — those providers act as data processors and are bound by data processing agreements requiring them to handle data only in accordance with jsm888's documented instructions and this Policy.

3. Personal Data We Collect

jsm888 collects the following categories of personal data from Members and, in some cases, from website visitors:

• Identity data: Full legal name, date of birth, nationality, government-issued identity document number, and copies of identity documents submitted during Know Your Customer (KYC) verification.
• Contact data: Malaysian mobile phone number, and any email address provided voluntarily.
• Financial data: Payment method identifiers (e.g., last four digits of a bank card, e-wallet account identifier), deposit and withdrawal history, transaction amounts and timestamps, and MYR wallet balance records.
• Account data: Username, hashed password, account creation date, login history (including timestamps, IP addresses, and device identifiers associated with each session), and account settings.
• Gameplay data: Betting and gaming history, game preferences, session duration, wager amounts, win/loss records, and bonus usage history.
• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, referring URL, and page interaction data collected via cookies and similar technologies.
• Communications data: Records of support interactions, complaints, feedback, and any correspondence between the Member and jsm888.
• Responsible gaming data: Self-imposed deposit limits, cooling-off period requests, and self-exclusion records.

jsm888 does not intentionally collect special category data (such as health data, biometric data, or racial or ethnic origin data) unless specifically required for regulatory compliance or expressly provided by the Member in the context of a responsible gaming or welfare-related support interaction.

4. How We Collect Personal Data

jsm888 collects personal data through the following means:

• Direct provision: Data provided by you when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or submitting a complaint.
• Automated collection: Data collected automatically when you access jsm888.org, including IP addresses, session tokens, cookie data, and browser and device characteristics collected through standard web analytics and security technologies.
• Third-party sources: Data received from identity verification providers (who cross-reference documents against authoritative databases), payment processors (who confirm transaction outcomes), and, where permitted, fraud prevention databases maintained by industry bodies.

5. Purposes of Processing and Legal Basis

jsm888 processes Member personal data for the following purposes, each grounded in a recognised legal basis:

• Account administration and service delivery (contractual necessity): Processing necessary to create and maintain your jsm888 account, verify your identity, process deposits and withdrawals in MYR, and deliver the gaming and betting services you have requested.
• Regulatory and legal compliance (legal obligation): Processing required to meet anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, age verification requirements, and financial reporting obligations imposed by the jurisdiction in which jsm888 is licensed.
• Fraud prevention and platform security (legitimate interest): Processing necessary to detect, investigate, and prevent fraudulent activity, collusion, money laundering, and other prohibited conduct that could harm the integrity of the jsm888 platform or its Members.
• Responsible gaming compliance (legal obligation / legitimate interest): Processing necessary to enforce the 21+ age restriction, honour self-exclusion requests, administer deposit limits, and monitor gameplay patterns for indicators of problem gambling.
• Platform improvement and analytics (legitimate interest): Anonymised or aggregated analysis of gameplay patterns, navigation behaviour, and technical performance data to improve jsm888's products and user experience.
• Marketing communications (consent): Where you have expressly opted in, sending promotional emails, SMS messages, or in-platform notifications about jsm888 offers, new games, and platform updates. You may withdraw this consent at any time.

6. Disclosure and Data Sharing

jsm888 does not sell, rent, or otherwise trade personal data to unaffiliated third parties for their own commercial purposes. jsm888 may disclose Member personal data in the following circumstances:

• Payment service providers: Transaction data is shared with jsm888's payment processing partners (including the providers facilitating Touch 'n Go eWallet, Boost, Maybank, CIMB, and Public Bank transactions) to the extent necessary to execute and verify deposits and withdrawals.
• Identity verification providers: KYC documentation and identity data is shared with certified third-party verification services to meet regulatory requirements.
• Game software providers: Limited gameplay session data (such as bet amounts and game identifiers) may be shared with jsm888's licensed game suppliers for audit, RNG certification, and technical support purposes.
• Regulatory and law enforcement authorities: jsm888 will disclose personal data to licensing regulators, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory direction.
• Fraud prevention organisations: Where jsm888 has reasonable grounds to suspect fraudulent activity, Member data may be shared with industry fraud prevention databases to protect the platform and other Members.
• Corporate transactions: In the event of a merger, acquisition, or restructuring of jsm888's operating entity, Member data may be transferred to the acquiring or successor entity, subject to equivalent data protection obligations.

7. International Data Transfers

jsm888 is an internationally operated platform. Your personal data may be stored, processed, or accessed by jsm888's service providers in jurisdictions outside Malaysia. jsm888 takes steps to ensure that international data transfers are subject to appropriate safeguards, including contractual data protection clauses with service providers that require them to handle transferred data in a manner consistent with the principles set out in this Policy.

By using jsm888 and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia. jsm888 makes no warranty that data protection standards in those jurisdictions are equivalent to any specific Malaysian legal standard, but commits to the protections described in this Policy regardless of processing location.

8. Cookies and Tracking Technologies

jsm888 uses cookies and similar tracking technologies on jsm888.org. Cookies are small text files placed on your device by your browser when you visit a website. jsm888 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — session authentication tokens, CSRF protection, and load-balancing cookies. These cannot be disabled without preventing access to core platform features.
• Functional cookies: Store your preferences (such as language settings and display options) to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how Members navigate jsm888.org to help jsm888 identify usability improvements. Data collected through analytics cookies does not identify individual users.
• Security cookies: Used by fraud detection and bot-prevention systems to distinguish legitimate users from automated access attempts.

You may configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging into your jsm888 account. jsm888 does not use third-party advertising or cross-site tracking cookies.

9. Data Security

jsm888 implements industry-standard technical and organisational security measures to protect Member personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between Member devices and jsm888 servers.
• Hashed (one-way encrypted) storage of Member passwords — jsm888 never stores passwords in recoverable plain-text form.
• Role-based access controls limiting staff access to Member personal data to those with a legitimate operational need.
• Regular independent security audits and penetration testing of jsm888's web infrastructure.
• Two-factor authentication (OTP via registered mobile number) for account login and sensitive account changes.

While jsm888 employs rigorous security practices, no internet-transmitted data can be guaranteed to be 100% secure. jsm888 will notify affected Members promptly in the event of a confirmed data breach that poses material risk to their personal data or financial interests, in accordance with applicable notification obligations.

10. Data Retention

jsm888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by regulatory obligations:

• Identity and KYC records: Minimum five years from the date of account closure, to meet anti-money laundering regulatory requirements.
• Financial transaction records: Minimum five years from the date of each transaction, for audit and regulatory reporting purposes.
• Gameplay and betting records: Minimum three years from the date of the relevant activity, for dispute resolution and fraud investigation purposes.
• Support communications: Minimum two years from the date of the interaction.
• Anonymised analytics data: May be retained indefinitely as it cannot be used to identify individual persons.

Following the expiry of applicable retention periods, personal data will be securely deleted or irreversibly anonymised. Retained data is stored in access-controlled environments with no operational use during the retention-only period.

11. Your Data Rights

Subject to applicable law and any overriding legal obligations jsm888 may have, Members have the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data jsm888 holds about you. jsm888 will respond to verified access requests within 30 days.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For standard account data, corrections can be made directly through your account settings.
• Right to erasure: You may request deletion of your personal data. jsm888 will honour deletion requests subject to any overriding legal retention obligations (see Section 10). Deletion requests cannot be fulfilled for data required by law to be retained.
• Right to restrict processing: You may request that jsm888 restrict the processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
• Right to object: You may object to processing based on jsm888's legitimate interests. jsm888 will assess the objection and cease processing if it cannot demonstrate compelling legitimate grounds that override the Member's interests.

To exercise any of the above rights, contact jsm888 support at [email protected] (plain text — not a clickable link). Requests will be acknowledged within five business days and resolved within 30 days. Complex requests may take up to 60 days; jsm888 will notify you if an extension is required.

12. Children and Minors

jsm888 is strictly an adult platform. No person under the age of 21 is permitted to register, deposit, play, or use any jsm888 service. jsm888 does not knowingly collect personal data from individuals under 21. If jsm888 becomes aware that it has inadvertently collected data from a person under the minimum age, that data will be deleted and the associated account will be permanently closed.

If you are a parent or guardian who believes a minor has registered on jsm888, please contact jsm888 support immediately at [email protected]. jsm888 will investigate and act on confirmed reports promptly.

13. Marketing Communications

jsm888 may send marketing communications to Members who have expressly opted in to receive them. Marketing content may include promotional offers, new game announcements, deposit bonus notifications, and platform news. jsm888 delivers marketing via in-platform notifications and, where consent has been given, SMS to the registered mobile number.

You may withdraw your marketing consent at any time by updating your notification preferences in your jsm888 account settings, or by contacting support. Withdrawal of marketing consent does not affect transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which jsm888 sends regardless of marketing preferences as they are necessary for the operation of your account.

14. Third-Party Services and Links

jsm888 integrates with third-party service providers to deliver its platform — including game software providers, payment processors, and identity verification services. These third parties operate under their own privacy policies and data practices. jsm888 is not responsible for the data practices of third-party providers beyond the data processing obligations imposed on them by jsm888's service agreements.

jsm888.org does not contain outbound links to third-party websites for advertising or referral purposes. Any navigation links on jsm888.org point exclusively to pages within the jsm888 domain.

15. Changes to This Privacy Policy

jsm888 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. The "Last Updated" date at the top of this Policy indicates the date of the most recent revision.

Material changes — those that affect how jsm888 uses your data in ways not previously disclosed — will be communicated via a prominent notice on jsm888.org and, where an email address or phone number is registered, via direct notification. Your continued use of jsm888 following notification of material changes constitutes acceptance of the revised Policy.

16. Contact and Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or jsm888's data practices, Members may contact jsm888 through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 10:00 AM – 2:00 AM Malaysian Time (MYT), seven days a week
• Language: English

jsm888 will acknowledge data-related enquiries within five business days. Where a request relates to the exercise of a specific data right, jsm888 will respond substantively within 30 days, or notify the Member if additional time is required. jsm888 will not charge a fee for standard data access or rectification requests.