Joker96 Privacy Policy – Malaysia Player Data Protection

1. Information We Collect

Joker96 collects various types of personal information from members in order to provide a safe, efficient, and responsible service. The information we collect includes:

Account Registration Information:

• Full name as per MyKad or passport
• Date of birth (for age verification — minimum 18 years old)
• Active Malaysian mobile number
• Valid email address
• Account username and password

Identity Verification Information (KYC):

• MyKad copy (front and back) or passport
• Selfie photo for facial verification (where required)
• Proof of residential address (utility bill or bank statement)

Financial & Transaction Information:

• Bank account number (for withdrawal processing)
• Bank name or eWallet provider (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX)
• Deposit and withdrawal history
• Betting and gaming activity records

Technical Information (Collected Automatically):

• Device IP address
• Device type, operating system, and web browser
• Geolocation data (country/region)
• Access timestamps and gaming session logs
• Cookie data and session identifiers

2. Purpose of Data Collection & Use

All personal information collected by joker96 is used solely for legitimate, clearly stated purposes. joker96 does not use your data for any other purpose without obtaining your additional consent.

Joker96 never uses members' personal data for third-party marketing, data sales, or profiling that is contrary to members' interests.

2. Purpose of Data Collection & Use (continued)

3. Data Sharing with Third Parties

Joker96 does not sell or disclose members' personal data to external parties for commercial purposes. However, there are limited circumstances where joker96 may need to share certain information with trusted third parties to ensure the platform operates smoothly:

• Game Providers: Game providers supplying slots, live casino, table games, and sports content on the joker96 platform may receive minimal session data for technical purposes only.
• Payment Gateway: Information required to process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX is shared with the respective payment providers within a secure, encrypted environment.
• Regulatory Authority: Joker96 will disclose information as required by Malaysian law, court orders, or requests from lawful authorities such as Bank Negara Malaysia or the Malaysian Communications and Multimedia Commission (MCMC).
• Audit & Security Services: Independent audit partners who verify the fairness of joker96's RNG games and system security may access technical data that contains no personally identifiable information.

All third parties working with joker96 are bound by non-disclosure agreements (NDAs) and are required to uphold data protection standards equivalent to, or stricter than, those of joker96 itself.

4. Use of Cookies & Tracking Technologies

The joker96 platform uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and understand how members interact with our platform. The types of cookies used are as follows:

• Essential Cookies: Required for core platform functions such as login verification, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how members use the platform — pages visited, time spent, and any errors encountered — to help joker96 improve platform performance.
• Functional Cookies: Saving member preferences such as display settings, preferred language, and game choices to deliver a more personalised experience.
• Analytics Cookies: Used by joker96's internal analytics tools to understand aggregate usage patterns for platform improvement purposes.

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of the joker96 platform. For more information on the cookies we use, contact our support team.

5. Data Retention Period

Joker96 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration of the active account and up to 7 years after account closure for legal and tax compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial legislation and anti-money laundering (AML) requirements.
• KYC Documents: Retained for the duration of the active account plus 5 years after account closure.
• Communication Logs (Email & Chat): Retained for 3 years for dispute reference and customer support purposes.
• Technical Data & Access Logs: Retained for 90 days, after which it is automatically anonymised or deleted.
• Marketing Data (with consent): Retained until you withdraw consent or close your account.

Once the retention period expires, your personal data will be securely deleted using irreversible data erasure methods, or fully anonymised so it can no longer be linked to you.

6. Your Rights Under Malaysia's PDPA

As a joker96 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information:

To submit any request relating to your data rights, please contact joker96's Data Privacy Officer by email at privacy@joker96.my or via the in-platform live chat. joker96 is committed to processing all valid requests within 14 business days.

7. Data Security & Protection Measures

Joker96 implements robust technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration, or destruction:

• Data Encryption: All sensitive data is encrypted using AES-256 standards at rest and SSL/TLS 1.3 in transit.
• Access Controls: Access to members' personal data by joker96 staff is restricted on a need-to-know basis, with full audit logs maintained.
• Two-Factor Authentication (2FA): joker96's internal systems are protected by two-factor authentication for all staff accessing sensitive data.
• Regular Security Testing: The joker96 platform undergoes regular penetration testing and security audits conducted by independent cybersecurity firms.
• Staff Training: All joker96 staff undergo regular security awareness and data protection training.
• Incident Response Plan: Joker96 has a comprehensive incident response protocol to address any security breaches swiftly and effectively.

8. Cross-Border Data Transfers

In certain circumstances, joker96 members' personal data may need to be processed or stored outside Malaysia — for example, when using international game provider services or cloud infrastructure. joker96 ensures that any cross-border data transfer is carried out with adequate safeguards:

• We only transfer data to countries or entities that offer a level of data protection equivalent to or greater than Malaysia's.
• All cross-border data transfers are safeguarded by comprehensive data processing agreements (DPAs) with the receiving parties.
• Joker96 is committed to ensuring your rights as a data subject are fully protected, regardless of where your data is processed.

9. Children's Privacy

The joker96 platform is strictly for individuals aged 18 and above. Joker96 does not knowingly collect or process personal data from anyone under the age of 18. Should joker96 discover that data belonging to a minor has been inadvertently collected, we will take immediate steps to delete that data and close the account in question.

If you believe a minor has registered on the joker96 platform, please contact us immediately at support@joker96.my so that we can take the appropriate action.

10. Marketing Communications & Unsubscribe Options

With your consent given at registration, joker96 may send marketing communications via email or SMS regarding the latest promotions, exclusive bonuses, new game offers, and special events. The types of marketing communications we send include:

• Daily and weekly deposit bonus notifications
• Festive promotional offers (Hari Raya, Chinese New Year, Deepavali, etc.)
• Invitations to VIP events and exclusive tournaments
• New game updates — latest slots, EPL football & Malaysia Super League

You may opt out of marketing communications from joker96 at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email.
• Update your notification preferences in your joker96 account profile settings.
• Reaching our customer support team directly via live chat or email.

Please note that unsubscribing from marketing communications will not affect essential transactional emails such as deposit confirmations, withdrawal notifications, and account security alerts.

11. Contact Us & Privacy Complaints

Joker96 takes every privacy complaint and enquiry seriously. If you have any questions about this Privacy Policy or how joker96 handles your personal data, please reach out to us through the following channels:

Joker96 will respond to all privacy-related enquiries within 5 business days. For complaints involving formal data rights under the PDPA, we are committed to providing a full response within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.