Privacy Policy Jozy88 –
Malaysian Player Data Protection

Jozy88 ("we", "our platform") is the operator of an online gaming platform responsible for processing the personal data of users who access and use our services. This Privacy Policy applies to all registered players, website visitors, and any individual who interacts with the Jozy88 platform through our website, mobile app, or other communication channels.

As a platform operating for users in Malaysia, jozy88 fully complies with the Personal Data Protection Act 2010 (PDPA) Malaysia. We also adhere to industry best practices in online gaming for the handling and protection of personal data.

This Privacy Policy covers:

• The types of personal data we collect from you.
• The purpose and legal basis for collecting that data.
• How we store, process, and protect your data.
• Parties with whom we may share your data under limited and controlled circumstances.
• Your rights as a data subject under Malaysian law.
• How to contact us regarding any privacy enquiries or complaints.

Jozy88 only collects personal data necessary to deliver our services safely and effectively. We do not collect irrelevant or excessive data. The following are the categories of data we collect:

Every piece of data we collect has a clear and lawful purpose. Jozy88 processes your personal data only on recognised legal bases under PDPA 2010, including contract fulfilment, legal obligations, legitimate interests, and your consent.

• Account Management: Creating, verifying, and maintaining your player account on the Jozy88 platform to ensure a smooth gaming experience.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as handling withdrawal of winnings to your local bank account.
• Identity Verification (KYC): Verifying that you are a real individual, aged 18 or above, and located in Malaysia — in line with our legal compliance requirements.
• Platform Security: Detecting and preventing fraud, money laundering, multiple account usage, and any activity that violates our terms of use.
• Service Improvement: Analysing usage patterns to improve platform performance, introduce new features, and personalise your gaming experience.
• Service Communications: Sending important notices regarding your account, transactions, policy changes, and security updates via email or SMS.
• Marketing (With Consent): Sending you the latest promotions, Jozy88 bonus offers, and new game updates — only if you have given consent to receive marketing communications.
• Responsible Gaming: Monitoring your gaming habits to identify early signs of problem gambling and providing appropriate support through our Responsible Gaming ours.
• Legal Compliance: Fulfilling reporting obligations to the relevant Malaysian authorities where required by applicable law.

Jozy88 does not sell your personal data to any third party. However, in the course of operating the platform, we may share your data with certain parties in limited and controlled circumstances as follows:

• Payment Service Providers: eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow processors, and FPX banks that process your financial transactions. Data shared is limited strictly to what is necessary to complete each transaction.
• Gaming Platform Providers: Providers of slots, Live Casino, and Sports Betting games that partner with Jozy88. They receive only the game session data necessary to deliver the gaming experience.
• Identity Verification Providers: Third-party KYC service providers that assist in verifying player identities. All such providers are bound by strict confidentiality agreements.
• Statutory Authorities: Malaysian law enforcement agencies, regulatory bodies, or courts where required by court order or applicable law.
• Technical Infrastructure Providers: Cloud computing, analytics, and technical support services that help us run the platform securely. All these providers are bound by data processing agreements that comply with PDPA.

Jozy88 employs enterprise-grade security infrastructure to ensure your personal data is always protected against unauthorised access, loss, or damage.

Technical Security Measures:

• 256-bit SSL/TLS encryption for all data transmissions between your device and our servers.
• Data encryption at rest for all sensitive information stored in our databases.
• Role-based access control (RBAC) — only authorised staff are permitted to access your personal data.
• 24/7 security monitoring and intrusion detection systems (IDS/IPS).
• Regular penetration testing and security audits conducted by certified independent experts.
• Two-factor authentication (2FA) for staff access to internal systems.

Data Retention Period:

• Active account data: Retained for as long as your account remains active and for 7 years after account closure, in line with Malaysian legal requirements.
• Financial transaction records: Retained for a minimum of 7 years for audit and legal compliance purposes.
• Customer support communication logs: Retained for 3 years.
• Cookie and analytics data: Retained for 13 months or until you clear your browser cookies.

Jozy88 uses cookies and similar tracking technologies to enhance platform functionality, understand usage patterns, and deliver a more relevant experience. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies (Strictly Necessary): Required for the platform to function properly — including login sessions, security, and basic navigation. These cookies cannot be disabled.
• Performance & Analytics Cookies: Collects information on how users interact with the platform to help us improve the overall experience. This data is aggregated and does not identify individual users.
• Functional Cookies: Saves your preferences such as language, display settings, and favourite game selections for a more convenient experience.
• Marketing Cookies (With Consent): Used to deliver more relevant Jozy88 ads and promotions based on your interests. We only use these cookies with your consent.

You can manage or disable non-essential cookies through your browser settings (Chrome, Firefox, Safari, Edge). Please note that disabling certain cookies may affect the functionality of the Jozy88 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 business days from the date your request is received.
• Right to Rectification: If your data is inaccurate or outdated, you have the right to request a correction. You may also update basic information directly through your account settings.
• Right to Withdraw Consent: You may withdraw any consent given for marketing purposes at any time without affecting the validity of any processing carried out prior to withdrawal.
• Right to Object to Processing: You may object to the processing of your data for specific purposes if you have legitimate grounds to do so, subject to our legal obligations.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data. Such requests are subject to our legal record-retention obligations of 7 years.
• Right to Complain: If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

The Jozy88 platform is strictly prohibited for individuals under the age of 18. We do not knowingly collect or process personal data from minors who have not reached the age of majority.

• All account registration processes require age verification through a valid identification document.
• Our KYC process actively detects and blocks registrations by underage individuals.
• If we discover that personal data of a child has been collected without our knowledge, we will delete that data immediately and close the relevant account.

The jozy88 platform may contain links or references to third-party websites or services, such as game providers, payment partners, or other information sources. This Privacy Policy applies only to the jozy88 platform and does not cover the privacy practices of those third-party websites.

• Jozy88 is not responsible for the privacy policies or data handling practices of any third-party websites you visit via links from our platform.
• We encourage you to read the privacy policy of every website you visit before providing any personal information.
• The presence of links to third-party websites does not mean that Jozy88 endorses or vouches for the content or privacy practices of those sites.

Jozy88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legislative changes, or new operational requirements. We are committed to notifying you of any material changes.

• Material amendments will be communicated via a prominent notice on the platform or by email to your registered address at least 14 days before taking effect.
• Non-material amendments (such as spelling corrections or clarifications) will be updated directly without prior notice.
• The "Last Updated" date at the top of this page will always reflect the date of the most current version.
• Continued use of the Jozy88 platform after the effective date of any amendment constitutes your acceptance of the revised policy.

It is your responsibility to review this Privacy Policy this page periodically. If you do not agree with any changes, you may close your account by contacting our support team.

Jozy88 has appointed a Data Privacy Officer responsible for ensuring our compliance with PDPA 2010 and handling all privacy-related enquiries, requests, and complaints.

For further information about your rights under Malaysian law, you may also contact Department of Personal Data Protection (JPDP) Malaysia directly. Jozy88 will cooperate fully with any JPDP investigation if required.