Privacy Policy

1. Introduction

jcash88 ("we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you" or "your") who access and use the jcash88 platform at jcash88.co, including associated mobile applications and services (collectively, the "Platform").

This Privacy Policy explains how jcash88 collects, uses, discloses, stores, and protects your personal data in connection with your use of the Platform. It also sets out your rights in relation to your personal data and how you may exercise them.

This Policy should be read alongside the jcash88 Terms & Conditions, which govern your use of the Platform as a whole. By registering an account or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2. Data Controller

jcash88 is the data controller responsible for the personal data collected through the Platform. As data controller, jcash88 determines the purposes and means by which your personal data is processed. For all data-related enquiries and rights requests, contact details are provided in Section 14 of this Policy.

Where jcash88 engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification services), those providers act as data processors under contractual obligations that align with the requirements of this Policy and applicable data protection legislation.

3. Personal Data We Collect

jcash88 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

jcash88 does not intentionally collect sensitive special-category personal data (such as racial or ethnic origin, political opinions, health data, or biometric data for identification purposes) beyond the photograph and identity document images required for KYC age verification under international gaming authority compliance requirements.

4. How We Collect Personal Data

jcash88 collects personal data through the following means:

• Direct input: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated technical collection: Cookies, server logs, and session tracking technologies collect technical and usage data automatically as you interact with the Platform. See Section 9 for full details.
• Third-party providers: Identity verification agencies, payment processors (including FPX bank networks and e-wallet operators such as Touch n Go, Boost, and GrabPay), and fraud-screening services may share verification and transaction data with jcash88 as part of the account onboarding and payment processing workflow.

5. Purpose and Legal Basis for Processing

jcash88 processes personal data only where a lawful basis exists. The primary purposes and corresponding legal bases are:

• Contract performance: Processing necessary to create and manage your Account, process deposits and withdrawals, and deliver gaming services in accordance with the Terms & Conditions.
• Legal obligation: Processing required to comply with international gaming authority KYC obligations, anti-money laundering requirements, and applicable financial reporting obligations. jcash88 is required to verify the age and identity of all real-money players and to maintain records of financial transactions.
• Legitimate interests: Security monitoring, fraud prevention, responsible gaming intervention, and product improvement — where these interests are not overridden by your data protection rights.
• Consent: Direct marketing communications (such as promotional emails and SMS) are sent only where you have provided explicit opt-in consent. You may withdraw this consent at any time through your Account settings.

6. Data Sharing and Disclosure

jcash88 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Personal data is shared only in the following circumstances:

• Payment processors: Financial data is shared with payment service providers (including FPX network banks, Touch n Go, Boost, GrabPay, and 7-Eleven Cliqq) solely to process the transactions you initiate.
• KYC and fraud prevention services: Identity and document data is shared with licensed identity verification agencies for age and identity verification as required by international gaming authority guidelines.
• Gaming software providers: Your username and game session data are shared with licensed game providers (such as Evolution Gaming, SA Gaming, Pragmatic Play) to deliver the specific games you choose to play. These providers are bound by data processing agreements.
• Regulatory authorities: jcash88 may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by law or as part of a formal investigation into financial crime or gaming integrity issues.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

7. International Data Transfers

jcash88 operates servers and uses service providers located in multiple jurisdictions. Your personal data may be transferred to, stored, and processed in countries outside Malaysia. Where such transfers occur, jcash88 ensures that appropriate safeguards are in place — including contractual data processing agreements — to provide a level of data protection equivalent to that required under applicable Malaysian data protection law and international gaming authority guidelines.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions where data protection laws differ from those in Malaysia, and consent to such transfers subject to the safeguards described above.

8. Data Retention

jcash88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law:

• Account and transaction data: Retained for a minimum of 5 years following account closure, as required by anti-money laundering record-keeping obligations applicable under international gaming authority compliance frameworks.
• KYC documents: Retained for a minimum of 5 years following the completion of the KYC verification process, or 5 years after the last transaction, whichever is later.
• Communications data: Support chat transcripts and email correspondence are retained for a minimum of 2 years for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the duration of the consent and for 2 years thereafter as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Cookies and Tracking Technologies

The jcash88 Platform uses cookies and similar tracking technologies to enable core functionality, analyse usage, and improve the player experience. The categories of cookies used are:

• Strictly necessary cookies: Required for login session management, security token storage, and fraud detection. These cannot be disabled without breaking Platform functionality.
• Functional cookies: Store your preferences such as language settings, game lobby filters, and odds format. These improve your experience but are not essential to core operation.
• Analytical cookies: Collect anonymised usage statistics (pages visited, session duration, error rates) to help jcash88 identify performance issues and improve the Platform. Data collected by analytical cookies is aggregated and does not personally identify individual users.

You may control functional and analytical cookies through the cookie preference settings displayed on your first visit to the Platform. Strictly necessary cookies cannot be disabled. Note that disabling functional cookies may affect your experience on the Platform.

10. Your Data Rights

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in relation to your personal data held by jcash88:

• Right of access: You may request a copy of the personal data jcash88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jcash88's legal retention obligations.
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances, such as while accuracy is being verified following a rectification request.
• Right to data portability: You may request that personal data you have provided to jcash88 be provided to you in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests where you believe your rights and interests outweigh jcash88's legitimate purposes.

To exercise any of the above rights, contact jcash88 support as described in Section 14. jcash88 will respond to rights requests within 30 days of receipt.

11. Security Measures

jcash88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• TLS 1.3 encryption for all data transmitted between your device and jcash88 servers;
• AES-256 encryption for personal data stored at rest;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication for administrative access to production systems;
• Periodic third-party security audits and penetration testing;
• Automated anomaly detection for login attempts, payment patterns, and account activity indicative of fraud or compromise.

While jcash88 maintains these industry-standard measures, no system is completely immune from security incidents. In the event of a data breach that poses a risk to your rights and freedoms, jcash88 will notify you and the relevant regulatory authority as required by applicable law.

12. Children's Privacy

The jcash88 Platform is strictly for individuals aged 21 years and above. jcash88 does not knowingly collect personal data from persons under the age of 21. If jcash88 becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated Account. Parents or guardians who believe a minor has registered on the Platform should contact jcash88 support immediately using the contact details in Section 14.

13. Amendments to This Policy

jcash88 reserves the right to update this Privacy Policy at any time. Where material changes are made, jcash88 will notify registered users by email to their registered address and/or display a notification on the Platform at login. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform following notification of a material change constitutes acceptance of the revised Policy. If you do not agree to the revised Privacy Policy, you must close your Account and cease use of the Platform.

14. Contact and Complaints

For all data protection enquiries, rights requests, or complaints regarding jcash88's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 through the Platform (accessible after login). Average response time: 3–5 minutes.
• Email: [email protected] — plain text, not a clickable link. Average response time: 12–24 hours.

jcash88 will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days. If you are not satisfied with jcash88's response to a data rights request or complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.