Privacy Policy JOM918

1 Introduction

Jom918 is fully committed to protecting the privacy and security of every member's personal information. This Privacy Policy transparently explains how we collect, use, store, and protect your data when you use the jom918 platform in jom918.org — including our website, mobile app and any related services.

By registering or using jom918's services, you agree to the data protection practices described in this Privacy Policy. If you do not agree with any part of this policy, we encourage you not to continue using the platform.

This policy is written in English for the convenience of our members in Malaysia and is in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia. We take data protection responsibilities very seriously — not merely as a legal obligation, but as a core value of our service.

2 Information We Collect

Jom918 only collects information that is strictly necessary to provide a safe, smooth, and responsible service to our members. The following are the categories of information we collect:

We do not collect sensitive information such as medical records, religious information, or political views unless specifically required by applicable law. All data collection is conducted transparently and on a valid legal basis.

3 How We Use Your Data

All information we collect is used responsibly for the following purposes only:

• Account management — creates, maintains and protects your member account including the login process and two-factor authentication.
• Transaction processing — handles deposits, withdrawals and bonus payments efficiently and accurately.
• Legal compliance — fulfils KYC (Know Your Customer), AML (Anti-Money Laundering) and reporting obligations required by Malaysian law.
• Fraud prevention — detects and prevents suspicious activity, hacking and platform abuse.
• Customer support — helps you resolve enquiries, complaints or technical issues more effectively.
• Responsible gaming — monitors wagering patterns and identifies signs of problem gambling for timely intervention.
• Service communications — sends important account notifications, security updates and promotional information (if you have consented).
• Platform improvements — analyses usage patterns to continuously improve platform performance, design and functionality.

4 Information Sharing

Jom918 only shares your personal information in the following limited and controlled circumstances. We do not share your data for third-party marketing purposes without your consent:

• Payment service providers — payment partners supporting DuitNow, FPX, Touch 'n Go eWallet and Boost, solely to process your financial transactions.
• Licensed game providers — international game software companies providing content on our platform, subject to strict data protection agreements.
• Statutory authority — law enforcement agencies or regulatory bodies when required by a valid court order or Malaysian law.
• Technology service providers — cloud infrastructure providers, fraud detection systems and analytics platforms bound by confidentiality agreements and prohibited from using your data for their own purposes.

5 Data Security

The security of your data is jom918's top priority. We implement multiple layers of technical and organisational protection to ensure your information remains safe at all times:

• 256-bit SSL Encryption — all data transmitted between your device and jom918 servers is encrypted using the latest TLS/SSL standards.
• Secure data storage — passwords are stored in salted hash form using the bcrypt algorithm; no jom918 staff member can view your password.
• Two-factor authentication (2FA) — an additional security layer that verifies your identity via OTP code each time you log in from a new device.
• Continuous 24/7 monitoring — an automated threat detection system monitors account activity in real time and sends immediate alerts upon detecting unusual behaviour.
• Regular security audits — our infrastructure undergoes regular third-party penetration testing and audits to identify and address any vulnerabilities.
• Strict access controls — only authorised staff with a legitimate operational need are permitted to access member data, with all access logged and monitored.

While no security system can guarantee absolute protection, jom918 continuously updates and strengthens our security infrastructure in line with the latest cybersecurity threats. In the event of a security incident affecting your data, we will notify you in a timely manner as required by law.

6 Cookies & Tracking Technologies

Jom918 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our site.

Types of cookies we use:

• Essential cookies — required for core platform functions such as login authentication, session security and language preferences. Cannot be disabled.
• Performance cookies — collects anonymous information about how you use the platform to help us improve site speed and usability.
• Functional cookies — remembers your preferences such as language, text size and display settings to provide a more personalised experience.
• Analytics cookies — helps us understand aggregate usage patterns to make better product development decisions.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold about you. jom918 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact our support team via Live Chat or email. We will process your request within 14 working days. In complex cases, this period may be extended by up to 30 days with prior notice to you.

8 Data Retention

Jom918 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable Malaysian law.

• Active account data — retained for the duration of your active membership on the jom918 platform.
• Financial transaction records — stored for a minimum of 7 years as required by Malaysia's Income Tax Act and AML legislation.
• KYC records and identity verification — stored for a minimum of 5 years after account closure as required under AMLA 2001.
• Support communication logs — stored for 3 years for reference and dispute resolution purposes.
• Anonymous analytics data — may be retained indefinitely as it contains no information that can personally identify you.

After the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

9 Third-Party Links & Services

The jom918 platform may contain links to websites or services operated by third parties such as game providers and payment partners. This Privacy Policy applies only to the jom918 platform.

Jom918 is not responsible for the privacy practices, policies, or content of any third-party websites. We encourage you to read the privacy policy of each service you use separately before providing any personal information to them.

10 Child Protection

The jom918 platform is exclusively for users who are aged 18 years and above. We do not provide services to children and minors below the legal age, and we do not intentionally collect any personal data from such individuals.

If we discover that personal data of someone under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on our platform are encouraged to contact our support team immediately.

11 Privacy Policy Amendment

Jom918 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or new technologies we adopt. The "Updated" date at the top of this page will always reflect the current version.

For significant amendments, we will notify you via in-platform notifications or your registered email at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes your acceptance of the updated terms.

12 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) team via:

• Live Chat — available on the platform 24 hours a day, 7 days a week for immediate response.
• Email: [email protected] (plain text only, not a link)
• FAQ Page — visit FAQ page for frequently asked questions about privacy and account security.

We are committed to responding to every data protection inquiry within 14 working days. If you are not satisfied with our response, you have the right to file a complaint with Department of Personal Data Protection (PDPD) Malaysia as the relevant supervisory authority.