Privacy Policy jago368 – Player Personal Data Protection

This Privacy Policy is published by jago368 and applies to all users who access our platform through the official website at jago368.cc or via the jago368 mobile app available for iOS and Android. This policy fully explains how we handle your personal data from the point of collection through to deletion.

Jago368 recognises the privacy rights of every individual and is committed to ensuring that personal data entrusted to us is handled with care, security and responsibility. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia as well as relevant international data protection standards.

This policy should be read together with Terms and Conditions jago368, which forms the entire agreement between you and our platform. In the event of any conflict between those documents regarding privacy matters, this Privacy Policy shall prevail.

Jago368 only collects personal data that is strictly necessary for platform operations and the delivery of the best possible service to players. Data collection occurs in several different circumstances:

We do not collect sensitive information such as biometric data, medical records, or political views unless specifically required for identity verification processes mandated by law.

Every piece of personal data we collect is used for clear and legitimate purposes. jago368 does not use your data for any purpose other than those stated below, unless you provide explicit additional consent:

• Account management: To register, verify and manage your player account, including secure login and password recovery;
• Transaction processing: To accurately and securely process deposits, withdrawals and any other financial transactions you carry out on the platform;
• Identity verification (KYC): To comply with legal requirements relating to anti-money laundering and player age verification;
• Customer support services: To respond to enquiries, resolve technical issues and manage complaints submitted through our support channels;
• Platform security: To detect and prevent fraudulent activity, account manipulation or suspicious use of the platform;
• Platform improvements: To analyse aggregated usage patterns for the purpose of improving user experience, platform performance and features;
• Service communications: To send account-related notifications, security updates and important information about platform changes;
• Marketing (with consent): To send promotional information and bonus offers to players who have consented to receive such communications.

Jago368 does not sell, rent or share players' personal data with third parties for marketing purposes without your explicit consent. However, there are certain situations where data sharing is necessary for platform operations:

• Payment service providers: Transaction information is shared with approved payment processors such as DuitNow, FPX, Touch 'n Go, GrabPay, and Boost solely to process your transactions;
• Game providers: Limited technical data is shared with licensed game providers to ensure smooth gameplay and the resolution of any technical issues;
• Cloud services and infrastructure: Data is stored on servers managed by cloud service providers who have signed strict data processing agreements with jago368;
• Legal authority: jago368 will disclose personal data to law enforcement agencies or regulatory bodies when required by law or a valid court order;
• Fraud prevention: In cases involving suspected fraud or money laundering, relevant data may be shared with the appropriate authorities as required by law.

All third parties that receive personal data from jago368 are bound by strict confidentiality agreements and are required to handle such data in accordance with data protection standards no less stringent than our own.

Jago368 implements comprehensive technical and organisational security measures to protect players' personal data from unauthorised access, loss, destruction or accidental disclosure.

Key security measures we have implemented include:

• Data encryption in transit using TLS 1.3 protocol with 256-bit SSL certificates;
• Data encryption at rest for all sensitive information including passwords and financial details;
• Role-based access control (RBAC) ensuring staff can only access data relevant to their responsibilities;
• Two-factor authentication (2FA) for all administrative access to internal systems;
• Round-the-clock 24/7 security monitoring with automated intrusion detection systems;
• Regular security audits by independent third parties;
• Mandatory data security training for all staff who handle players' personal data.

Jago368 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use are as follows:

• Essential cookies: These cookies are required for core platform functions such as login session management and security. The platform will not operate properly without them and they cannot be disabled;
• Performance cookies: We use these cookies to collect information about how players use our platform, helping us understand and improve website performance;
• Functional cookies: These cookies allow the platform to remember your preferences such as language, display theme, and other personal settings;
• Analytics cookies: Used to analyze platform traffic and usage patterns in aggregated, anonymized form for continuous improvement purposes.

You can control and manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and your experience on the jago368 platform.

Jago368 retains players' personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law. Retention periods vary by data type:

• Active account data: Retained for as long as the player's account remains active and for an additional period following account closure as required by law;
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysia's tax laws and financial regulations;
• Support communication logs: Retained for three (3) years for reference and dispute resolution purposes;
• Technical data and server logs: Retained for twelve (12) months for security and technical troubleshooting purposes.

When the retention period expires or when data is no longer needed, jago368 will delete or anonymize it in a secure and irreversible manner. Players may request early deletion of their personal data, subject to applicable legal restrictions.

Under Malaysia's Personal Data Protection Act 2010 and the data protection principles we adhere to, you have the following rights regarding the personal data we hold:

To exercise any of the above rights, contact the jago368 privacy team via Live Chat or email at [email protected]. We will process your request within thirty (30) calendar days.

The jago368 platform is exclusively for individuals who are of age 18 and above. We do not knowingly collect personal data from children or minors. All players are required to verify their age during registration and throughout the KYC verification process.

If we become aware that personal data has been collected from underage individuals without proper verification, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect their child has registered an account at jago368 are requested to contact our support team immediately.

Jago368 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements or platform improvements. Any material changes will be communicated to players via:

• A prominent notice on the platform's main page;
• Email to the player's registered address at least seven (7) days before the changes take effect;
• In-app notifications via the jago368 mobile app for users who have installed the application.

The "Updated" date at the top of this policy will always reflect the date of the latest version. Continued use of the platform after changes are published is considered your acceptance of the amended policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by jago368, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the jago368 platform;
• Email: [email protected] — we aim to respond within 2 business days;
• FAQ Page: Visit our FAQ page for answers to frequently asked questions.

Jago368 is committed to addressing all privacy-related enquiries seriously and within a reasonable timeframe. Your satisfaction and trust are our top priority.