JP88 Privacy Policy – Malaysian Player Data Protection

1Introduction & Scope of Privacy Policy

JP88 takes our responsibility to protect members' personal information seriously. This Privacy Policy explains in detail how JP88 — which operates the Sports Betting and online casino platform at jp88.cash — collects, uses, stores, discloses, and protects your personal data as a user of our platform.

This Policy applies to all registered JP88 members, visitors to the jp88.cash website, and any individuals who interact with JP88's services through any channel, including the web platform, customer support, and email communications. By registering an account with JP88 or continuing to use the platform after this Privacy Policy has been updated, you consent to the collection and use of data as described herein.

This Privacy Policy should be read together with Terms & Conditions JP88, which serves as a complementary document outlining your rights and responsibilities as a member of the platform.

2Personal Data We Collect

JP88 collects your personal data in several ways — directly when you provide it to us, automatically as you use the platform, and in some cases from legitimate third-party sources. The following are the categories of data we collect:

A. Data You Provide Directly

B. Automatically Collected Data

3How JP88 Uses Your Data

JP88 uses collected personal data solely for legitimate purposes directly related to the operation of our platform. The following are the primary purposes for which your data is used:

• Account Management: To create, verify, maintain, and secure your JP88 account — including identity verification, password recovery, and login session management.
• Transaction Processing: To process deposits and withdrawals via your chosen Malaysian payment method, verify payment account ownership, and maintain transaction records required for internal auditing.
• Service Delivery: To provide access to all JP88 games and services including Sports Betting, Live Casino, slots, lottery, and poker; and to personalise your platform experience based on your preferences and activity history.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account use, poker collusion, and any violations of JP88's Terms & Conditions.
• Service Communications: To send transaction notifications, service updates, account security alerts, and responses to customer support inquiries you have initiated.
• Promotions & Marketing: To send you information about relevant JP88 promotions, bonuses, and special offers — only if you have not objected to receiving marketing communications. You may opt out of marketing communications at any time through your account dashboard.
• Legal Compliance: To fulfil legal compliance obligations, including anti-money laundering (AML) requirements, KYC requirements, and any lawful requests from law enforcement authorities.
• Platform Enhancement: To analyse aggregated usage patterns for product improvement, new feature testing, and a general understanding of Malaysian user needs. This analysis uses anonymised data that cannot be traced back to any specific individual.

JP88 will not use your personal data for any purpose other than those stated above without first obtaining your consent or without a valid legal basis.

4Data Sharing & Disclosure

JP88 does not sell our members' personal data to any party. However, in the normal course of platform operations, there are specific situations where JP88 may need to share certain information with selected third parties:

All third-party service providers working with JP88 are required to comply with strict data protection agreements, use shared data only for the specified purposes, and maintain security standards equivalent to or higher than those of JP88. JP88 is not responsible for the privacy practices of third parties not listed above.

In the event that JP88 undergoes a merger, acquisition, or asset sale, members' personal data may be transferred to the successor entity, subject to a commitment to maintain an equivalent or higher level of privacy protection. Members will be notified of any such change in ownership via an in-platform notification.

5Data Security at JP88

JP88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, accidental disclosure, or destruction:

• Encryption in Transit: All communications between your device and JP88 servers are protected with TLS 1.3 (Transport Layer Security) — the latest encryption protocol, ensuring your data cannot be intercepted in transit over the network.
• Encryption at Rest: Sensitive data stored in JP88's databases — including identity information and financial details — is encrypted using AES-256 at rest, ensuring the data remains unreadable even in the event of unauthorised database access.
• Two-Factor Authentication (2FA): JP88 supports and encourages the use of two-factor authentication for all accounts. OTP verification via a Malaysian phone number is required for critical transactions, including withdrawals and password changes.
• 24/7 Security Monitoring: JP88's automated monitoring system and security team continuously track platform activity in real time, detecting suspicious patterns, unauthorized login attempts, and any security anomalies as they occur.
• Internal Access Controls: JP88 staff access to member data is strictly governed by the principle of least privilege — each staff member can only access the data necessary for their specific role. All access is logged for audit purposes.
• Regular Penetration Testing: JP88 engages independent third parties to conduct regular security penetration testing, identifying and addressing vulnerabilities before they can be exploited.

6Data Retention Period

JP88 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, as stated in this Privacy Policy, or as required to meet legal obligations. Our data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account is active on JP88 and for one year after account closure, for the purpose of resolving any outstanding disputes.
• Financial Transaction Records: Retained for seven years from the date of the transaction, as required under Malaysian law governing financial records and anti-money laundering obligations.
• Support Communication Data: Customer support conversation records are retained for three years from the date of interaction for quality control and dispute resolution purposes.
• KYC (Identity Verification) Data: Identity verification documents are retained for the period required under applicable legal compliance obligations, typically five to seven years.
• Security Logs: Access logs and security logs are retained for ninety days for the purpose of detecting and investigating security threats.
• Marketing Data: Data used for marketing communications is retained until you opt out, after which it is removed from our marketing communications list within thirty days.

Once the retention period expires, JP88 will securely delete or anonymize the data using procedures that ensure it cannot be recovered. In cases where legal obligations require longer retention, data will be stored accordingly with more restricted access compared to active data.

7Your Rights Over Personal Data

As a JP88 member and data subject under Malaysia's PDPA, you have the following rights regarding the personal data we hold:

To exercise any of the rights above, you may submit a request through your JP88 account dashboard under the "Data Privacy" section, or by contacting us via email at support@jp88.cash, stating the right you wish to exercise and the relevant details. JP88 will respond to your request within 30 days from the date the request is received.

Please note that certain rights may be limited in situations where data processing is required for legal compliance, resolution of outstanding disputes, or for legitimate security purposes. In such cases, JP88 will explain the limitations that apply to your request.

8Cookies & Tracking Technologies

JP88 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session security, and understand how the platform is used for continuous improvement. Below are the types of cookies we use:

You can manage cookie settings through your web browser. Most browsers allow you to view, manage, and delete cookies via browser settings. However, disabling essential cookies will affect the functionality of the JP88 platform and may prevent you from logging in to your account. JP88 does not use cross-site tracking technology for third-party advertising purposes.

9Children's Data & Age Restrictions

The JP88 platform is intended solely for individuals who are 18 years and above only. JP88 does not knowingly collect or process personal data of individuals under the age of 18.

During the registration process, all prospective members are required to confirm that they are at least 18 years of age. JP88 reserves the right to request additional age verification at any time, and any account found to belong to a minor will be terminated immediately.

If JP88 discovers or is notified that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to remove that data from our systems. If you believe we may have unknowingly collected personal data from a minor, please contact us immediately at support@jp88.cash.

10Privacy Policy Amendments

JP88 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our privacy practices, new service requirements, or updated legal compliance obligations. The latest version of the Privacy Policy is always available on the JP88 website, with a clearly displayed "Last Updated" date at the top of the document.

For amendments deemed material — meaning those that significantly change how JP88 collects or uses your personal data — JP88 will notify members via in-platform notifications or via their registered email address at least 14 days before the amendment takes effect. This gives you sufficient time to review the changes and make an informed decision regarding your continued use of the JP88 platform.

Your continued use of the JP88 platform after the amended Privacy Policy takes effect will be considered your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account and request data deletion before the amendment's effective date.

11Contact Us About Privacy

JP88 takes all privacy-related inquiries, requests, and complaints seriously. If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to exercise your privacy rights, please contact the JP88 data privacy team through the following channels:

• Email: support@jp88.cash — include "Data Privacy Inquiry" in the email subject line to ensure faster handling by the relevant team.
• Live Chat: Reach JP88 customer support directly through the in-platform live chat feature, available 24 hours a day, 7 days a week.
• Account Dashboard: The "Data Privacy" section in your JP88 account dashboard provides direct access to submit requests related to data access, correction, and deletion.

JP88 is committed to responding to all privacy inquiries and requests within 30 days of receipt. For more complex cases requiring deeper investigation, we will keep you informed of the progress within the same timeframe.

This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions of the JP88 Privacy Policy. For more information on your rights and responsibilities as a JP88 member, please also read Terms & Conditions us.