Privacy Policy

JP88 ("we", "us", "our") operates the online gaming platform accessible at https://jp88.buzz (the "Platform"). This Privacy Policy ("Policy") describes how JP88 collects, uses, discloses, and safeguards personal data obtained from players and visitors ("you", "your") who access or use the Platform.

JP88 takes the privacy of its players seriously. We handle personal data in accordance with applicable international data protection principles and implement technical and organisational measures to protect your information against unauthorised access, loss, or misuse.

By registering an account on JP88, depositing funds, or otherwise interacting with the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern the overall use of the Platform.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including names, email addresses, identification documents, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination of such operations.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, JP88 is the Data Controller for all Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a written data processing agreement.
• "KYC" — Know Your Customer verification, comprising identity and document checks required to comply with anti-money laundering obligations and internal account security requirements.
• "Cookies" — small text files stored on a user's device by a web browser to record session information, preferences, and analytical data.
• "Third Party" — any natural or legal person other than JP88 and the registered Player.

JP88 collects the following categories of Personal Data in the course of providing its services:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required for KYC purposes and disclosed to you at the point of collection.

JP88 collects Personal Data through the following channels and methods:

1. Direct Submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
2. Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and analytics tools embedded in the Platform.
3. Payment Processors: Transaction confirmation and payment status data received from third-party payment processors including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency payment gateways.
4. Identity Verification Partners: Data from licensed third-party KYC and AML screening services used to verify your identity and conduct sanctions screening.
5. Game Providers: Aggregated gameplay data from licensed game studios that power the JP88 casino and sports betting products, used to resolve disputes and calculate bonus eligibility.

JP88 processes your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and securing your JP88 account, including verifying your identity and enforcing the minimum age requirement of 21 years.
• Service Delivery: Enabling access to sports betting, live casino, slots, and other gaming products; processing bets and calculating winnings; facilitating deposits and withdrawals through your chosen payment method.
• Regulatory Compliance: Fulfilling our obligations under applicable anti-money laundering regulations, including transaction monitoring, suspicious activity reporting, and sanctions screening.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling behaviour; applying deposit limits or session controls where a player has requested them or where we identify concerning patterns.
• Customer Support: Handling support queries, resolving disputes, and processing feedback submitted by players.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications. You may opt out at any time through your account settings or by contacting support.
• Platform Improvement: Analysing usage patterns to improve Platform performance, user experience, game selection, and payment method coverage for Malaysian players.

JP88 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions, including account creation, payment processing, game delivery, and withdrawal services.
• Legal Obligation: Processing required to comply with applicable AML regulations, licensing requirements, court orders, and other mandatory legal obligations, including KYC verification and transaction monitoring.
• Legitimate Interests: Processing carried out for the legitimate business interests of JP88, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests do not override your fundamental privacy rights.
• Consent: Where you have given clear, informed consent to a specific processing activity — most commonly in the context of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

JP88 does not sell your Personal Data to third parties. We do not share your data with advertisers or data brokers for commercial marketing purposes. We may disclose your Personal Data to the following categories of recipients in the circumstances described:

• Payment Service Providers: Financial institutions and payment processors — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency gateway operators — solely to facilitate your requested deposits and withdrawals.
• KYC & AML Providers: Licensed identity verification and sanctions screening services engaged to verify player identities and fulfil regulatory compliance requirements.
• Game Studio Partners: Licensed international game providers who supply the casino and sports betting content available on the Platform, to the extent required to deliver gameplay and resolve technical disputes.
• IT & Cloud Infrastructure Providers: Third-party hosting, server, and database service providers engaged to operate the Platform's technical infrastructure, subject to data processing agreements.
• Regulatory Authorities: Relevant licensing bodies, financial intelligence units, or law enforcement authorities where disclosure is required by law, regulation, or court order.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by JP88 who are bound by confidentiality obligations.

JP88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account plus a minimum of five (5) years following account closure, to comply with AML record-keeping obligations.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC Documents: Retained for the duration of your account plus a minimum of five (5) years, or longer if required by a regulatory investigation or legal proceeding.
• Technical and Usage Data: Retained for up to two (2) years from collection, unless required for longer retention for fraud investigation or legal proceedings.
• Support Communications: Retained for up to three (3) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the period during which you have an active account, or until consent is withdrawn, plus a reasonable period thereafter to evidence compliance.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with JP88's internal data lifecycle procedures.

JP88 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, analyse site traffic, and support security functions. The types of cookies used on the Platform are as follows:

• Strictly Necessary Cookies: Essential for the operation of the Platform. These cookies enable core functions such as authentication, session management, and security. The Platform cannot function correctly without them and they cannot be disabled.
• Functional Cookies: Used to remember your preferences, language settings, and display options to provide a more personalised experience during your session.
• Analytical Cookies: Used to collect anonymised information about how players interact with the Platform, including pages visited, session duration, and navigation paths, to help us improve the Platform's usability and performance.
• Security Cookies: Used to support fraud detection and account security measures, including identifying suspicious login patterns and flagging potentially compromised sessions.

You may configure your browser to refuse or delete cookies. Please note that disabling certain types of cookies may affect Platform functionality. JP88 does not use cookies to deliver third-party advertising.

JP88 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields at rest, including payment credentials and identification documents.
• Role-based access controls that restrict staff access to Personal Data to those with a legitimate operational need.
• Regular security assessments including penetration testing and vulnerability scanning.
• Two-factor authentication (2FA) available for player accounts and mandatory for staff access to systems containing Personal Data.
• Secure, geographically redundant data storage with access logging and intrusion detection systems.

While JP88 takes significant steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying JP88 immediately if you suspect any unauthorised access to your account.

In the event of a data breach that poses a risk to your rights and freedoms, JP88 will notify affected individuals and relevant authorities in accordance with applicable data breach notification obligations.

Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by JP88. To exercise any of these rights, please contact our support team via live chat or email.

JP88 will respond to all verified data rights requests within 30 calendar days. Where the complexity or volume of requests requires additional time, we will notify you and may extend the response period by up to a further 60 days, providing reasons for the extension. Requests will be processed free of charge unless they are manifestly unfounded, excessive, or repetitive.

JP88 strictly prohibits the use of its Platform by individuals under the age of 21. We do not knowingly collect, use, or store Personal Data from individuals under the age of 21.

If JP88 discovers that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete such data and close the associated account. Funds held in accounts found to belong to underage individuals will be handled in accordance with applicable law.

If you are a parent or guardian and believe that your child may have registered on JP88, please contact our support team immediately via live chat or email at [email protected] so that we can investigate and take appropriate action.

The JP88 Platform may contain references to or integrations with third-party services, including payment processors, game providers, and customer support tools. These third parties operate their own privacy policies and data practices, and JP88 is not responsible for the privacy practices of third parties.

When you interact with a third-party service in connection with the Platform — such as completing a payment through a Malaysian bank's FPX gateway or a cryptocurrency exchange — you may be providing data directly to that third party, which is governed by that third party's privacy policy.

JP88 carefully selects third-party service providers and requires all providers who process Personal Data on our behalf to enter into data processing agreements that include appropriate data protection obligations. However, JP88 cannot guarantee the conduct of third parties who act as independent data controllers in their own right.

JP88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Where changes to this Policy are material — meaning they significantly affect how we process your Personal Data or your rights in relation to it — JP88 will notify registered players by email or through a prominent in-platform notification prior to the changes taking effect, allowing you a reasonable period to review the updated Policy.

Continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the Platform and may request account closure in accordance with the process described in our Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how JP88 handles your Personal Data, please contact us through the following channels:

• 24/7 Live Chat: Available directly within the Platform. Our support team can handle routine data queries in real time. Average response time is under 2 minutes during peak hours.
• Email: [email protected] — for formal data rights requests, please include "Data Rights Request" in the subject line and provide your registered email address to assist verification.

JP88 will acknowledge all formal privacy-related communications within 5 business days and will endeavour to resolve your query or complete your data rights request within 30 calendar days. Where a request is complex or involves a high volume of data, we may notify you that an extension of up to 60 additional days is required, with reasons.

If you are not satisfied with our response to a privacy concern, you may have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.