Privacy Policy

1 Introduction

This Privacy Policy (hereinafter the "Policy") describes how JK88 (hereinafter "JK88", "we", "us", or "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the JK88 online casino and sports betting platform, available at jk88.cam and any associated interfaces (collectively, the "Platform").

JK88 is committed to protecting the privacy of its users and to handling personal data in a manner that is transparent, lawful, and consistent with applicable international data protection standards, including — where relevant — principles analogous to those set out under the European Union's General Data Protection Regulation (GDPR) and Malaysia's Personal Data Protection Act 2010 (PDPA) as a reference framework for best practice.

This Policy should be read together with JK88's Terms & Conditions and Responsible Gambling Policy, which together constitute the full framework governing your use of the Platform.

2 Definitions

For the purposes of this Policy, the following terms shall be construed as follows:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and technical identifiers such as IP addresses.
• "Data Controller" means JK88, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party engaged by JK88 to process personal data on JK88's behalf and under JK88's instructions.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by JK88 — i.e., you, the User.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Cookies" means small data files placed on your device by the Platform to store information about your session and preferences.
• "KYC Documentation" means identity verification documents submitted pursuant to JK88's Know Your Customer obligations, including national identity cards, passports, proof of address, and selfie verifications.

3 Data We Collect

JK88 collects the following categories of personal data from users of the Platform:

3.1 Identity Data

Full legal name, date of birth, nationality, government-issued identification numbers (Malaysian NRIC, passport number, or driver's license number), and selfie photographs for identity verification purposes.

3.2 Contact Data

Email address, mobile telephone number, and residential address as provided during registration or KYC verification.

3.3 Financial Data

Payment method details necessary to process deposits and withdrawals, including eWallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow), bank account information for FPX transfers (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency wallet addresses for USDT TRC20 or other crypto transactions. JK88 does not store full card or banking credentials — payment processing is handled by certified third-party payment processors.

3.4 Account & Transaction Data

Account username, login history, session timestamps, deposit and withdrawal records, betting and gaming history, bonus claim records, and account settings.

3.5 Technical Data

IP address, browser type and version, device type and operating system, screen resolution, referring URLs, and session duration data collected automatically when you access the Platform.

3.6 Communications Data

Records of your communications with JK88 Customer Support via live chat, email, or any other channel, including the content of those communications and associated metadata.

4 How Data is Collected

JK88 collects personal data through the following means:

• Direct collection: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting Customer Support;
• Automated collection: Technical data collected automatically via cookies, server logs, and similar technologies when you interact with the Platform;
• Third-party sources: Data received from payment processors, identity verification service providers, and fraud detection partners where necessary to fulfil our legal and compliance obligations;
• Publicly available sources: In limited circumstances, publicly available information used to verify identities or investigate potential fraud or money laundering activity.

5 Purpose of Data Processing

JK88 processes your personal data for the following specific purposes:

1. Account Registration and Management: To create and maintain your JK88 account, verify your identity, and provide you access to Platform features;
2. Payment Processing: To process deposit and withdrawal transactions via your selected payment method, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency channels;
3. Regulatory Compliance: To fulfil our obligations under the terms of our international gambling licence, including Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) requirements;
4. KYC and Fraud Prevention: To verify that users meet the 21+ age requirement, are not on self-exclusion lists, and are not using the Platform for unlawful activity;
5. Customer Support: To respond to your enquiries, process complaints, and resolve disputes in accordance with JK88's internal procedures;
6. Platform Security: To detect, investigate, and prevent fraudulent, unauthorised, or illegal activity on the Platform;
7. Service Improvement: To analyse aggregated usage patterns and improve the functionality, performance, and user experience of the Platform;
8. Responsible Gambling: To monitor for indicators of problem gambling behaviour and to enforce self-exclusion, deposit limit, and cooling-off tools activated by users.

6 Legal Basis for Processing

JK88 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between JK88 and you as a registered user — including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with JK88's obligations under its operating licence, including AML/CTF obligations and KYC requirements;
• Legitimate interests: Processing carried out for JK88's legitimate business interests — including fraud prevention, platform security, and service improvement — where such interests are not overridden by your fundamental rights;
• Consent: Where processing is not covered by the grounds above, JK88 will seek your explicit consent before processing your data. You may withdraw consent at any time by contacting JK88 support, noting that withdrawal may affect your ability to use certain Platform features.

7 Data Sharing & Disclosure

JK88 does not sell your personal data. We may share personal data with the following categories of third parties in strictly limited circumstances:

7.1 Payment Service Providers

We share financial data with payment processors and eWallet operators (including Touch 'n Go, Boost, GrabPay, DuitNow, and FPX banking partners such as Maybank, CIMB, Public Bank, and Hong Leong) solely to facilitate deposit and withdrawal transactions. These providers are contractually obligated to process your data only as directed by JK88 and in compliance with applicable data protection standards.

7.2 Identity Verification Providers

We share identity documents and related data with certified KYC and AML service providers for the purpose of verifying user identities and screening against sanctions lists and politically exposed person (PEP) databases.

7.3 Regulatory and Law Enforcement Authorities

JK88 may disclose personal data to regulatory authorities, law enforcement agencies, or judicial bodies where required by law, court order, or under the terms of its operating licence. Such disclosures are made only to the minimum extent required.

7.4 Fraud Prevention and Security Providers

We share technical and transaction data with fraud detection and cybersecurity service providers to protect the Platform and its users from fraudulent activity, account takeovers, and financial crime.

7.5 Professional Advisors

We may share relevant data with legal, compliance, audit, and accounting advisors who are bound by professional confidentiality obligations and engage with the data solely for the purpose of providing professional services to JK88.

8 Data Retention

JK88 retains personal data for as long as your account remains active and for a defined period after account closure. The specific retention periods applicable to different categories of data are outlined below:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in accordance with our AML/CTF licensing obligations;
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping requirements;
• KYC documentation: Retained for a minimum of five (5) years following completion of the verification process or account closure, whichever is later;
• Customer support communications: Retained for three (3) years following the closure of the relevant support case;
• Technical and log data: Retained for twelve (12) months from the date of collection, unless required for longer as part of a fraud or security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with JK88's internal data disposal procedures.

9 Data Security

JK88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between user devices and JK88 servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication for internal administrative systems;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists;
• Incident response procedures for the identification, containment, and notification of personal data breaches where legally required.

10 Cookies & Tracking Technologies

JK88 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, login authentication, and security token validation. These cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — such as pages visited and load times — to help us identify and resolve performance issues.
• Functional Cookies: Used to remember your language preferences, display settings, and session duration notifications.

JK88 does not use advertising cookies, third-party behavioural tracking cookies, or social media tracking pixels. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to log in to or use the Platform.

11 International Data Transfers

Given that JK88 operates under an international gambling licence and works with globally distributed service providers, your personal data may be transferred to and processed in countries outside of Malaysia. In such cases, JK88 takes steps to ensure that appropriate safeguards are in place to protect your data during international transfer, including the use of contractual data processing agreements with third-party processors that incorporate data protection obligations equivalent to those applicable under JK88's licensing framework.

By using the JK88 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

12 Your Rights as a Data Subject

Subject to applicable law and the limitations of JK88's legal obligations, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data JK88 holds about you;
• Right of Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Restriction: You may request that JK88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested;
• Right to Data Portability: You may request that certain personal data be provided to you in a structured, machine-readable format;
• Right to Object: You may object to the processing of your personal data where processing is based on legitimate interests;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to JK88 Customer Support via live chat from within your account dashboard, or by email at [email protected]. JK88 will respond to verified requests within 30 calendar days. We may request proof of identity before processing your request.

13 Minors

The JK88 Platform is strictly for individuals aged 21 years and above. JK88 does not knowingly collect or process personal data relating to minors. If we become aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended and the associated personal data will be deleted in accordance with our data disposal procedures.

Parents and guardians who become aware that a minor has registered an account or submitted personal data to JK88 are requested to contact us immediately at [email protected] so that the matter may be addressed without delay.

14 Third-Party Links & Services

The JK88 Platform may contain references to third-party payment service providers and game studios. JK88 is not responsible for the privacy practices or data protection standards of any third-party operator or service. Users who interact with third-party payment platforms — such as Touch 'n Go eWallet, Boost, GrabPay, or Maybank online banking — do so subject to those parties' own privacy policies. We encourage you to review the privacy policies of any third-party services you use in connection with your JK88 account.

15 Policy Amendments

JK88 reserves the right to amend, update, or replace this Privacy Policy at any time. Where material changes are made, JK88 will provide reasonable notice to registered users via the Platform or by email to the address associated with your account. The "Last Updated" date at the top of this document will reflect the date of the most recent revision.

Your continued use of the JK88 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should discontinue use of the Platform and may request account closure by contacting JK88 Customer Support.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to JK88's handling of your personal data, please contact our Data Protection team using the following details:

For requests related to self-exclusion, responsible gambling tools, or account restrictions, please visit our dedicated Responsible Gambling page. For general platform and account queries, our FAQ page addresses the most common questions from Malaysian players.