JomKiss 8 Privacy Policy – Full Data Protection for Malaysian Members

1. Introduction

JomKiss 8 ("we", "Platform") respects the privacy of every member and user of our platform. This Privacy Policy details how we collect, use, store, disclose, and protect your personal information when you use JomKiss 8 services — including live casino games (baccarat, roulette, blackjack), online slots, Sports Betting (football, badminton, cricket, e-sports), and lottery.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. As a platform serving Malaysians, we are committed to complying with all applicable data protection legal requirements in Malaysia.

We hold your trust in the highest regard. Privacy is not merely a legal obligation to fulfil – it is a core value of JomKiss 8, central to building an honest, lasting relationship with our Malaysian player community.

2. Personal Data We Collect

JomKiss 8 only collects personal data that is genuinely necessary to provide a safe, fair, and efficient service. We do not collect information that is excessive or irrelevant to the platform's operational purposes.

Data you provide directly:

• Registration information: Malaysian phone number, password (stored as an encrypted hash, not plain text), preferred username.
• Identity verification information (KYC): Full name, MyKad number, date of birth, and identity document images when required to verify withdrawals exceeding certain limits.
• Financial information: Payment method details used (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX account numbers for Maybank2u, CIMB Clicks, and other banks) – stored as encrypted tokens, not full account numbers.
• Support communications: Records of conversations with our customer support team via live chat, WhatsApp, or email.

Automatically collected data:

• Technical data: IP address, web browser type, operating system, screen resolution, and device information.
• Usage data: Pages visited, visit times and duration, games played, betting history, and transaction records.
• Location data: General location based on IP address for regional verification and security purposes — we do not access your device's GPS.
• Cookie data: Login session information, language preferences, and platform settings you have saved.

3. How We Use Your Data

JomKiss 8 uses collected personal data solely for the legitimate and stated purposes below. We do not use your data for any other purpose without obtaining fresh consent from you.

• Service provision: Managing your account, processing deposits and withdrawals (Touch 'n Go, GrabPay, DuitNow, FPX, and others), settling bets and winnings, and providing access to all games and markets available on JomKiss 8.
• Security and fraud prevention: Detecting and preventing fraud, money laundering, multiple account usage, and any breach of our terms. This includes analysis of unusual usage patterns and transactions.
• Customer support: Helping you resolve issues, answer enquiries, and providing technical assistance via live chat, WhatsApp, or email in Bahasa Melayu.
• Platform improvements: Analysing usage patterns on an aggregate (not individual) basis to improve the design, performance, and user experience of the JomKiss 8 platform.
• Marketing communications: Sending you notifications about promotions, bonuses, and special offers relevant to you – subject to the communication preferences you have set. You may unsubscribe at any time.
• Legal compliance: Meeting reporting and compliance obligations under applicable Malaysian law, including anti-money laundering (AML) requirements.
• Responsible gaming: Monitoring gaming patterns to identify members who may benefit from responsible gaming support and offering appropriate assistance.

4. Sharing Data with Third Parties

JomKiss 8 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. Data sharing only occurs in limited and necessary situations, as outlined below:

• Payment service providers: Minimum transaction data necessary, shared with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks to process your deposits and withdrawals. These providers are bound by their own privacy policies and confidentiality agreements with us.
• Game software provider: Game information that must be shared with live casino and Sports Betting platform providers to enable the services to function. No unnecessary personal identification information is shared.
• Legal authorities: JomKiss 8 will disclose personal data to Malaysian authorities when required by a valid court order, writ, or lawful directive. We will notify you where possible, unless prohibited by law.
• Business transfers: In the event of a merger, acquisition, or sale of company assets, member data may be transferred as part of the business transaction. You will be notified in advance and given the option to opt out.

5. Data Security Measures

JomKiss 8 invests seriously in security infrastructure to protect your personal and financial data. The following are the technical and organisational measures we have in place:

• 256-bit SSL/TLS encryption: All communications between your browser and JomKiss 8 servers are encrypted using the latest TLS 1.3 protocol — the same standard used by leading financial institutions in Malaysia.
• Data encryption at rest: Sensitive data such as passwords (stored as bcrypt hashes), card numbers, and financial information are encrypted at rest using AES-256.
• Two-factor authentication (2FA): A 2FA system is available for all accounts to add an extra layer of protection at login.
• 24/7 security monitoring: Our IT security team monitors systems continuously to detect and respond to threats or intrusion attempts.
• Data segregation: Members' funds are kept fully segregated from the company's operational accounts and are protected within a separate system.
• Regular security audits: Penetration testing and security audits are conducted regularly by independent third parties to identify and address any vulnerabilities.
• Internal access controls: Only authorised personnel who require access to specific data may access it — the principle of least privilege is enforced at every level of the system.

While we take all reasonable steps to protect your data, no system is 100% immune to increasingly sophisticated cyber threats. In the event of a serious data breach, JomKiss 8 is committed to notifying affected members within 72 hours in line with industry best practices.

6. Cookies and Tracking Technologies

JomKiss 8 uses cookies and similar tracking technologies to improve user experience, maintain session security, and understand how our platform is used. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions – secure login, session verification, CSRF protection, and basic navigation. These cookies cannot be disabled as the platform will not function properly without them.
• Functional Cookies: Stores your preferences such as language (Bahasa Melayu), display settings, and "remember me" login information to make future visits more convenient.
• Analytics Cookies: Collecting information on how you use the platform – pages visited, time spent, and navigation patterns – to help us improve the user experience. This data is gathered in aggregate form and does not identify any individual specifically.
• Security Cookies: Helping us identify suspicious activity and protect your account from unauthorised access attempts.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality. For mobile users accessing JomKiss 8 via a phone browser, cookie settings can be managed through your Android or iOS browser settings.

7. Data Retention Period

JomKiss 8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to satisfy legal requirements. The following are our data retention guidelines:

• Active account data: Retained for the duration of your active account and for a reasonable period after closure to facilitate the resolution of any disputes or claims.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering (AML) legal requirements.
• Support communication records: Retained for 3 years for reference and dispute resolution.
• Security log and activity: Retained for 12 months for security and audit purposes, then deleted or anonymised.
• KYC Information: Retained for the duration of the active account and for 5 years following account closure, in accordance with AML compliance requirements.
• Analytics data: Anonymised usage data may be retained for longer periods for long-term trend analysis purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity. The deletion process uses methods that ensure the data is irrecoverable.

8. Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please contact us by email at support@jomkiss8.click, stating the right you wish to exercise along with your account details for identity verification. We will respond within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

9. Protection of Children's Data

The JomKiss 8 platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If you are a parent or guardian and believe that your child under the age of 18 has provided personal information to JomKiss 8 or registered an account without authorisation, please contact us immediately at support@jomkiss8.click. We will investigate and delete the account along with all associated data within 48 hours of confirming the user's minor status.

10. Amendments to the Privacy Policy

JomKiss 8 reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our privacy practices, technology, legal requirements, or the services we offer.

• Members will be notified of any material amendments via in-platform notification or email at least 14 days before the changes take effect.
• The last updated date and version number of the Privacy Policy are always displayed at the top of this document so you can easily track any changes.
• Continued use of the JomKiss 8 platform after the effective date of any amendment constitutes acceptance of the updated policy.
• If an amendment involves a fundamental change to how we use your data, we may seek fresh consent from you before the amendment takes effect.

We encourage you to revisit this page periodically to stay informed about JomKiss 8's privacy practices. If you have any questions about changes that have been made, do not hesitate to contact our support team.

11. Contact Us About Privacy

JomKiss 8 takes all privacy enquiries, requests, and complaints seriously. If you have any concerns about how we handle your personal data, there are several ways to reach us:

• Privacy Email: support@jomkiss8.click – use the subject line "Privacy Enquiry" or "Privacy Complaint" for a faster response. Response time is within 24–48 working hours.
• Live Chat: Available 24 hours a day, directly within the JomKiss 8 platform. Ideal for non-urgent privacy enquiries. Our Malay-speaking support team is ready to assist.
• WhatsApp: For enquiries requiring further clarification or involving sensitive details, please reach out via WhatsApp, which is more secure than a public enquiry.

For complaints regarding PDPA compliance that cannot be resolved directly with us, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.