Privacy Policy – jkwin Online Gaming Platform

1. About This Policy and Data Controller

1.1 This Privacy Policy ("Policy") applies to all personal data processed by jkwin ("we", "us", "the Platform") in connection with the provision of online gaming services accessible at jkwin.co, including slots, live casino, sportsbook, Plinko, Lottery Magnum, and all associated account management, payment processing, and customer support functions.

1.2 For the purposes of applicable data protection legislation, jkwin acts as the data controller in respect of personal data collected directly from Players. Where jkwin engages third-party game providers, payment processors, or analytics partners, those parties may act as independent data controllers or processors subject to their own privacy practices.

1.3 jkwin's data practices are designed to be consistent with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

2. Personal Data We Collect

jkwin collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and a copy of a government-issued identification document (MyKad or passport) where required for KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and residential address.
• Account Data: Username, encrypted password, account registration date, and account preferences.
• Financial Data: Payment method details (e-wallet identifiers, bank account numbers, card details where applicable), transaction history, deposit and withdrawal records, and wallet balance history. Note: full card numbers are never stored by jkwin — card processing is handled by PCI DSS-compliant payment processors.
• Gaming Data: Betting and gaming history, game preferences, session durations, wager amounts, wins and losses, bonus usage, and responsible gaming settings.
• Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, and access logs.
• Communications Data: Records of live chat conversations, email correspondence, WhatsApp messages, and support ticket history with jkwin.
• Marketing Data: Your preferences for receiving marketing communications from jkwin and records of your engagement with promotional materials.

3. How We Collect Your Data

jkwin collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting support, or responding to surveys.
• Automated collection: Technical data collected automatically when you access the jkwin Platform, including through cookies, web beacons, server logs, and device fingerprinting technologies.
• Third-party sources: Identity verification and fraud prevention agencies, payment processors (such as FPX, Touch n Go eWallet, Boost, GrabPay), and analytics providers may share data with jkwin for the purposes described in this Policy.
• Publicly available sources: jkwin may, in limited circumstances related to fraud prevention or regulatory compliance, verify data against publicly available records.

4. How We Use Your Personal Data

jkwin uses personal data for the following purposes:

• Account administration: Creating and managing your jkwin Account, verifying your identity and eligibility, processing login requests, and maintaining account security.
• Service delivery: Enabling access to games, processing bets and wagers, crediting winnings, and operating the jkwin Wallet.
• Payment processing: Processing deposits and withdrawal requests through supported Malaysian payment methods including Touch n Go eWallet, Boost, DuitNow, FPX, and card networks.
• Legal and regulatory compliance: Fulfilling obligations under Malaysia's PDPA, anti-money laundering regulations, know-your-customer requirements, and jkwin's gaming licence conditions.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing responsible gaming limits set by Players, and administering self-exclusion requests.
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance through jkwin's 24/7 support channels.
• Marketing: Sending promotional communications about jkwin offers, bonuses, and platform updates — where you have given consent or where jkwin has a legitimate interest — subject to your marketing preferences.
• Platform improvement: Analysing usage data to improve the jkwin Platform, personalise your experience, and develop new features.

5. Legal Bases for Processing

jkwin processes personal data under the following legal bases:

• Contractual necessity: Processing required to perform the jkwin Account agreement, including providing gaming services, processing payments, and administering your account.
• Legal obligation: Processing required to comply with applicable Malaysian law, regulatory requirements, and jkwin's gaming licence obligations, including KYC, AML, and reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, where jkwin has obtained your prior consent. You may withdraw marketing consent at any time by contacting jkwin support.

6. Disclosure of Personal Data

6.1 jkwin does not sell your personal data to third parties for their own marketing purposes.

6.2 jkwin may share your personal data with the following categories of recipients where necessary:

• Game providers: Certified third-party studios and game content providers whose games are accessible through the jkwin Platform, to the extent necessary to deliver gameplay and resolve disputes.
• Payment processors: FPX banking network participants (Maybank, CIMB, Public Bank, Hong Leong), e-wallet providers (Touch n Go eWallet, Boost, GrabPay), and card network operators (Visa, Mastercard), for the purpose of processing your transactions.
• KYC and fraud prevention providers: Identity verification agencies and fraud detection services engaged by jkwin to verify player eligibility and prevent financial crime.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers engaged by jkwin under data processing agreements.
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, regulatory direction, court order, or for the prevention or detection of crime. jkwin will disclose only the minimum data necessary in such circumstances.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

6.3 All third-party processors engaged by jkwin are subject to data processing agreements that require them to process personal data only on jkwin's instructions and in compliance with applicable data protection law.

7. International Data Transfers

7.1 Some of jkwin's service providers and game studios operate outside Malaysia. Where personal data is transferred outside Malaysia, jkwin ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent measures, to ensure that your data receives an adequate level of protection consistent with Malaysia's PDPA.

7.2 By using jkwin's Services, you acknowledge that your personal data may be processed in countries outside Malaysia where data protection laws may differ from those in Malaysia.

8. Data Retention

8.1 jkwin retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and audit obligations.

8.2 Account and transaction data is typically retained for a minimum of seven (7) years following Account closure, consistent with Malaysian financial record-keeping requirements and anti-money laundering regulations.

8.3 Marketing preference data is retained until you withdraw consent or request deletion, provided no conflicting legal retention obligation applies.

8.4 Technical and log data is retained for up to twenty-four (24) months for security and fraud prevention purposes.

8.5 Upon expiry of the applicable retention period, jkwin will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9. Cookies and Tracking Technologies

9.1 jkwin uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance cookies: Collect anonymised data on how Players use the Platform, enabling jkwin to identify and fix performance issues and improve user experience.
• Functionality cookies: Remember your preferences such as language settings, game history, and display options.
• Analytics cookies: Used by third-party analytics tools to measure Platform traffic and engagement patterns in aggregate, anonymised form.

9.2 You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the jkwin Platform.

10. Security of Your Personal Data

10.1 jkwin implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage of sensitive account data, multi-factor authentication options for Account access, regular security audits and penetration testing, and role-based access controls restricting internal access to personal data on a need-to-know basis.

10.2 No method of electronic transmission or storage is completely secure. While jkwin employs industry-standard security practices, we cannot guarantee the absolute security of your personal data. In the event of a data breach affecting your rights and freedoms, jkwin will notify affected Players and relevant authorities in accordance with applicable law.

10.3 You are responsible for maintaining the security of your Account credentials. jkwin recommends using a strong, unique password for your jkwin Account and enabling two-factor authentication (2FA) where available.

11. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by jkwin:

• Right of access: You may request a copy of the personal data jkwin holds about you.
• Right to correction: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where jkwin no longer has a lawful basis for retaining it, subject to overriding legal retention obligations.
• Right to restrict processing: You may request that jkwin limits the processing of your data in certain circumstances, such as where you contest its accuracy.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to jkwin, where technically feasible.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to jkwin's overriding legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact jkwin's support team. jkwin will respond to verified requests within thirty (30) calendar days. Identity verification may be required before processing a data subject request.

12. Children's Privacy

12.1 jkwin's Services are strictly restricted to individuals aged 21 years and above. jkwin does not knowingly collect or process personal data from individuals under the age of 21.

12.2 If jkwin becomes aware that personal data has been collected from an individual under 21, that Account will be closed immediately, any associated balance will be dealt with in accordance with applicable law, and all personal data related to that Account will be deleted as soon as practicable.

12.3 If you believe that a minor has created a jkwin Account, please contact jkwin support immediately.

13. Amendments to This Policy

13.1 jkwin may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. The "Last Updated" date at the top of this page indicates when this Policy was most recently revised.

13.2 Material changes to this Policy will be communicated to registered Players via email to the address on their Account, or via a notice displayed on the Platform. Your continued use of the Platform after the effective date of any changes constitutes acceptance of the revised Policy.

14. Contact and Data Enquiries

For any queries, requests, or complaints relating to this Privacy Policy or jkwin's handling of your personal data, please contact our support team through the following channels:

• Live Chat: Available 24/7 via the jkwin Platform (average response under 5 minutes).
• Email: [email protected]
• WhatsApp: Available via the support interface within the Platform.

jkwin will acknowledge data-related requests within five (5) business days and resolve them within thirty (30) calendar days, subject to the complexity of the request and any identity verification requirements.