jokaplay Privacy Policy

01Introduction

jokaplay ("we", "us", "our") is committed to protecting the personal data of every individual who accesses or uses the jokaplay platform ("Platform"). This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, retention and protection of personal data in connection with the Platform and related services.

This Policy applies to all users of jokaplay, including visitors who browse without registering and account holders who transact using Malaysian Ringgit (MYR) through methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong Bank.

By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, you must discontinue use of the Platform immediately.

We may update this Policy periodically. The "Last reviewed" date above indicates when the most recent revision was made. Continued use of the Platform following any update constitutes your acceptance of the revised Policy.

02Definitions

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" — any information that identifies or can reasonably identify a natural person, including name, identification number, contact details, financial information and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — jokaplay, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Subject" — the individual whose personal data is being processed; in the context of this Policy, the registered or visiting user of the Platform.
• "Third-Party Processors" — external service providers engaged by jokaplay to perform specific processing functions under contractual and security obligations.
• "KYC Documents" — identity, address and payment-ownership verification documents submitted by users as part of the account verification process.
• "Cookies" — small data files stored on a user's device that support platform functionality, session management and usage analytics.

03Data We Collect

jokaplay collects personal data through several channels depending on how you interact with the Platform. The categories of data we may collect are set out below:

jokaplay does not knowingly collect personal data from individuals under the age of 21. If we become aware that data has been collected from a person below this age threshold, the account will be suspended and the data deleted in accordance with our retention procedures.

04How We Use Your Data

jokaplay processes personal data for the following purposes, each supported by a lawful basis:

1. Account creation and management — to register your account, verify your identity, manage your MYR balance and process deposits and withdrawals through channels including DuitNow, FPX, Boost and Maybank.
2. Transaction processing — to execute and record deposits, withdrawals and in-game transactions denominated in MYR; to investigate and resolve payment disputes where they arise.
3. Legal and compliance obligations — to conduct KYC verification, comply with applicable anti-money laundering obligations, maintain mandatory transaction records and respond to lawful requests from competent authorities.
4. Fraud prevention and security — to detect, investigate and prevent fraudulent account activity, unauthorised access, misuse of bonus offers and other prohibited conduct described in the Terms & Conditions.
5. Responsible gambling management — to process self-exclusion requests, apply deposit and session limits, flag concerning activity patterns and communicate with users regarding their responsible gambling controls.
6. Customer support — to respond to your enquiries, resolve account issues and maintain a record of support interactions for quality and training purposes.
7. Platform improvement — to analyse aggregated and anonymised usage data for the purpose of improving navigation, content organisation and the overall user experience for Malaysian players.
8. Service communications — to send account-related notifications such as withdrawal confirmations, KYC status updates, policy change notices and security alerts. These are operational communications, not marketing.

jokaplay does not use personal data for automated decision-making that produces significant legal effects without a mechanism for human review upon request.

05Data Sharing & Disclosure

jokaplay does not sell, rent or trade personal data to third parties for commercial gain. We may share personal data only in the following limited circumstances:

1. Payment processors and e-wallet providers — financial data is shared with payment infrastructure partners (such as those supporting DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay and USDT processing) solely to complete your requested transaction. Each provider operates under its own data protection framework.
2. Identity verification services — KYC documents may be processed by specialist third-party verification platforms contracted by jokaplay under strict confidentiality agreements.
3. Platform service providers — hosting, infrastructure, analytics and customer support tools used to operate the Platform may involve limited access to personal data under processor agreements that bind those parties to equivalent data protection standards.
4. Legal and regulatory authorities — jokaplay will disclose personal data where required by a valid court order, regulatory direction or other lawful obligation. We will notify affected users of such disclosures where permitted to do so.
5. Responsible gambling organisations — where a user requests self-exclusion that is administered through an external scheme, relevant reference data may be shared with that scheme's operator for enrolment purposes only.

06Data Retention

jokaplay retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and operational obligations. The following principles guide our retention decisions:

• Active account data is retained for the full duration of the account relationship and for a defined period thereafter to support dispute resolution, audit and compliance requirements.
• KYC and identity documents are retained in accordance with anti-money laundering obligations, which typically require a minimum of five years from the date of the last relevant transaction.
• Transaction records including MYR deposit and withdrawal histories are retained to satisfy financial record-keeping requirements and to investigate any disputed transactions.
• Support communications are retained for a reasonable period to support ongoing account management and service quality review.
• Closed account data is subject to a defined deletion or anonymisation schedule following the expiry of all applicable retention periods.

When personal data is no longer required and no lawful retention basis applies, jokaplay will either securely delete it or anonymise it in a manner that prevents re-identification.

07Your Data Rights

As a data subject, you have the following rights in relation to your personal data held by jokaplay. Requests may be submitted to our support team and will be acknowledged within five (5) business days:

1. Right of Access — You may request a copy of the personal data jokaplay holds about you, together with information about how it is being used.
2. Right to Rectification — You may request correction of any inaccurate or incomplete personal data we hold. Updates to account registration details can often be made directly through account settings.
3. Right to Erasure — You may request deletion of your personal data where no overriding legal or contractual obligation requires its retention. Note that KYC records and financial transaction data may be subject to mandatory retention periods.
4. Right to Restrict Processing — You may request that jokaplay limits its use of your personal data in defined circumstances, for example while a correction request is being assessed.
5. Right to Data Portability — Where technically feasible and lawfully permissible, you may request a structured, machine-readable copy of personal data you have provided to jokaplay.
6. Right to Object — You may object to the processing of your personal data for specific purposes. Where objection is made to operational processing necessary for account management, account closure may result.
7. Right to Withdraw Consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

08Cookies & Tracking Technologies

jokaplay uses cookies and similar technologies to support Platform functionality, maintain user sessions, prevent fraud and understand how the Platform is used. The following categories of cookies may be in operation:

• Strictly Necessary Cookies — required for core functions such as login session management, account security and payment flow continuity. These cannot be disabled without affecting Platform functionality.
• Functional Cookies — used to remember your language and display preferences across sessions, improving your overall experience on the Platform.
• Analytical Cookies — used to collect aggregated, anonymised data about how users navigate the Platform, which informs improvements to content organisation and mobile performance.
• Security Cookies — used to detect and prevent fraudulent behaviour, identify suspicious login patterns and protect account integrity.

jokaplay does not place third-party advertising cookies or permit external advertising networks to track user behaviour on the Platform for commercial targeting purposes.

Most browsers allow you to control cookie settings through their privacy or settings menus. Disabling strictly necessary cookies may impair your ability to use core Platform features including login and payment processing.

09Data Security

jokaplay implements appropriate technical and organisational security measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Access controls limiting personal data visibility to authorised personnel on a need-to-know basis;
• Secure storage environments for KYC documents and financial records;
• Monitoring systems that detect and alert on suspicious access patterns or potential security breaches.

While jokaplay takes reasonable precautions, no digital system can guarantee absolute security. Users are responsible for maintaining the security of their own login credentials. If you believe your account has been accessed without authorisation, contact support immediately at [email protected].

10Children's Privacy

The jokaplay Platform is intended exclusively for adults aged 21 and above. We do not knowingly collect, process or retain personal data from individuals below this age. If we become aware that personal data belonging to a person under 21 has been submitted to the Platform, we will:

1. Suspend the associated account immediately;
2. Delete the relevant personal data as promptly as technically feasible; and
3. Take appropriate steps in accordance with our responsible gambling obligations.

If you have reason to believe that a person under 21 has registered with jokaplay, please contact support at [email protected] with relevant details so that we can investigate and act accordingly.

11Relationship with Other Policies

This Privacy Policy should be read alongside the jokaplay Terms & Conditions and Responsible Gambling page. Together, these documents form the full framework governing your use of the Platform and the obligations that apply to both parties.

In the event of any inconsistency between this Policy and the Terms & Conditions on a data-specific matter, this Privacy Policy shall prevail.

12Changes to This Policy

jokaplay may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or Platform operations. When material changes are made, we will update the "Last reviewed" date at the top of this page. Where changes significantly affect your rights or our processing activities, we will take reasonable steps to bring those changes to your attention through account notifications or Platform notices.

We encourage all users to review this Policy periodically. Continued use of the jokaplay Platform after a revised Policy is posted constitutes your acceptance of the updated terms.

13Contact Us

For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact the jokaplay privacy team through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours daily, Malaysia time
• Response Target: Within 12 hours for email; within 2–5 minutes for live chat

When submitting a data rights request, please provide your account username or registered email address, the nature of your request and, where applicable, supporting identification so we can process your request efficiently and securely.