Jos168 Privacy Policy — Protection of Your Personal Data

1 Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is issued by jos168 and applies to all members, visitors and users who access or use the jos168 platform via the official website, Android and iOS mobile apps, and any related services operating under the jos168 brand.

We understand that your trust is our most valuable asset. That is why we are fully transparent about the data we collect, why we need it, and how it is used. No confusing language, no hidden conditions — just clear and honest explanations.

This Policy aims to explain:

• Types of personal data collected from you when using the jos168 platform
• The purpose for which such data is collected and processed
• Parties that may receive or access your data
• Security measures we take to protect your data
• Your rights regarding your personal data and how to exercise them

This Privacy Policy is to be read together with Terms and Conditions jos168 and forms part of the overall agreement between you and our platform.

2 Personal Data We Collect

Jos168 collects your personal data through various means — whether provided directly by you, collected automatically as you use the platform, or received from trusted third-party sources. Below is a detailed explanation of each category:

A. Data You Provide Directly:

• Registration Information: Full name, MyKad or passport number, date of birth, gender, mobile number and email address.
• Financial Information: Bank name, bank account number, account holder name and e-wallet details for deposit and withdrawal purposes.
• KYC Documents: Copies of identity cards, passports, utility bills, or other verification documents requested for compliance purposes.
• Communications: The content of messages you send to our customer support team via live chat or email.

B. Data Collected Automatically:

• Device Data: Device type, model, operating system, unique device identifier and app version.
• Network Data: IP address, browser type, language settings and time zone.
• Activity Data: Pages visited, games played, session duration, clicks and navigation patterns within the platform.
• Transaction Data: Deposit, withdrawal, betting, and wins history — retained for financial record-keeping and legal compliance purposes.

3 How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. jos168 does not collect data that is excessive or irrelevant to the operation of our platform. Below is a detailed breakdown of data usage purposes:

• Account Management: Creating, verifying and managing your member account including secure login processes and two-factor authentication.
• Transaction Processing: Processing your deposits, withdrawals and account balance management accurately and securely.
• Legal Compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering) and regulatory reporting requirements when mandated by law.
• Platform Security: Detecting and preventing fraud, unauthorized access, money laundering and bonus system abuse.
• Service Improvement: Analyzing usage patterns to improve the interface, platform speed and overall member experience.
• Communications: Sending important account-related notifications, promotions you have subscribed to, and policy updates that affect you.
• Customer Support: Handling complaints, responding to inquiries and resolving disputes promptly and effectively.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide timely assistance to members who need it.

4 Data Sharing & Disclosure

Jos168 does not sell your personal data to anyone. However, there are limited situations where we need to share your information with certain parties to ensure the platform operates smoothly and complies with applicable laws:

• Payment Service Provider: Information required to process deposits and withdrawals is shared with your chosen bank and e-wallet providers. All such parties are bound by strict confidentiality agreements.
• Game Software Provider: Minimum technical data required to run games is shared with certified, independently audited game software providers.
• KYC Verification Provider: Your identity documents are processed through a third-party verification system that complies with international security standards.
• Regulatory Authority: We will disclose required information to legitimate authorities when mandated by Malaysian law or court order.
• Technical Support Team: Internal technical support staff who have signed confidentiality agreements may access your data solely for maintenance and troubleshooting purposes.

5 Data Security & Protection Measures

Protecting your personal data is our operational priority. jos168 continuously invests in enterprise-grade security infrastructure to keep your information safe from cyber threats and unauthorized access.

• Data Encryption in Transit: All communications between your device and our servers are encrypted using TLS 1.3 — the latest and most secure encryption protocol available today.
• Data Encryption at Rest: Sensitive data such as banking information and identification numbers are encrypted using AES-256 before being stored in our database.
• Strict Access Controls: The principle of "minimum access rights" is applied — only staff who genuinely require access to specific data to perform their duties are permitted to do so.
• Regular Security Audits: The jos168 platform undergoes regular penetration testing and independent security audits conducted by accredited cybersecurity firms.
• 24/7 Monitoring: An automated threat detection system continuously monitors platform activity and will issue an immediate alert if any signs of suspicious activity are detected.
• Secure Data Backup: Data is regularly backed up to a secure, separate location to ensure service continuity and data recovery in the event of a technical incident.

While we take all reasonable steps to protect your data, no system is entirely perfect. We encourage you to also play your part in keeping your account secure by using a strong password and never sharing your login details with anyone.

6 Your Rights as a jos168 Member

Under Malaysia's Personal Data Protection Act (PDPA) and international privacy principles, you have the following rights regarding your personal data held by jos168:

7 Cookies & Tracking Technologies

Jos168 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as the platform will not function properly without them.
• Preference Cookies: Storing your preferences such as language, display theme and account settings so you do not need to reset them each time you log in.
• Analytics Cookies: Helping us understand how members use the platform for continuous improvement purposes. Data collected is aggregated and does not personally identify individuals.
• Security Cookies: Used to detect suspicious login attempts, fraudulent activity and to ensure the integrity of your session.

You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your browser's documentation.

8 Data Retention Period

Jos168 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Below are our data retention guidelines:

• Active Account Data: Retained for the duration your account is active plus 7 years after account closure, for audit record and financial compliance purposes.
• Transaction Records: Deposit, withdrawal, and betting history is retained for a minimum of 7 years in accordance with Malaysia's tax and financial legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, in line with AML (Anti-Money Laundering) requirements.
• Communication Logs: Customer support chat records are retained for 2 years for quality control and dispute resolution purposes.
• Analytics Data: Aggregated, non-identifiable usage data is retained for 3 years for long-term trend analysis.

Once the retention period expires, your data will be securely deleted or anonymised using methods that meet industry security standards.

9 International Data Transfers

In operating a global platform, there are situations where your personal data may be processed or stored outside Malaysia. jos168 takes strict precautions to ensure your data remains protected even during international transfers.

• Any transfer of data outside Malaysia is only made to countries or parties that provide a level of data protection equivalent to or exceeding Malaysia's PDPA standards.
• All third-party service providers that receive your data are required to sign data processing agreements containing strict protection clauses.
• We ensure appropriate safeguard mechanisms such as standard contractual clauses and data protection impact assessments are in place before any international data transfer takes place.

10 Contact Us & Privacy Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or how jos168 handles your personal data, we encourage you to contact us directly. Our Data Protection Officer (DPO) team is ready to assist.

You may contact us via the support email listed in the footer of this website, or through the live chat function available on the platform. Please use the subject line "Privacy Enquiry" to ensure your message is directed to the right team.

Jos168 is committed to:

• Acknowledge receipt of your complaint within 3 business days
• Investigate every complaint thoroughly and impartially
• Provide a full response within 14 business days
• Take appropriate corrective action if a privacy breach is confirmed

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.