Privacy Policy Joker888 – Our Commitment to Protecting Your Personal Data

This Privacy Policy ("Policy") describes how Joker888 ("we", "platform", "company") collects, uses, processes, stores, and protects your personal information when you use Joker888's website, mobile application, and all associated services.

Joker888 is an online casino entertainment platform operating in Malaysia, and we regard your trust as a responsibility we take seriously. Every day, over 500,000 active members entrust their personal information to Joker888 — from deposits via Touch 'n Go eWallet to FPX Maybank2u transactions. We safeguard that trust wholeheartedly.

This Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. By using the Joker888 platform, you consent to the processing of your personal data as described in this document.

Joker888 only collects personal data that is strictly necessary to provide our services safely and effectively. The following are the categories of data we collect:

Joker888 collects your personal data through three transparent and lawful methods:

• Directly from you: When you register a Joker888 account, complete the KYC process, make a deposit, submit a withdrawal request, contact customer support, or fill in any form within our platform.
• Automatically: The Joker888 platform automatically records technical and usage data when you browse or use our services — including activity logs, cookie data, and device information. This data helps us identify suspicious activity and improve the user experience.
• From legitimate third parties: Joker888 occasionally receives information from Malaysian payment service providers (such as DuitNow or FPX platforms) and identity verification bodies to ensure the accuracy of our KYC process.

Joker888 does not purchase personal data lists from third parties for marketing purposes. All data we hold comes directly from your interactions with us or from sources you have authorised.

Joker888 uses your personal data solely for the following legitimate and stated purposes. We do not use your data for any other purpose without your consent:

• Account management: To create, verify, maintain, and protect your Joker888 account.
• Transaction processing: To securely and accurately process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX.
• KYC and AML Compliance: To meet legal obligations relating to identity verification (Know Your Customer) and anti-money laundering (Anti-Money Laundering) in compliance with Malaysian regulations.
• Customer service: To respond to enquiries, resolve complaints, and provide technical support via live chat, email, and other channels.
• Platform security: To detect, investigate, and prevent fraudulent activity, system manipulation, or any misuse of the Joker888 platform.
• Platform improvement: To analyse aggregate usage patterns (not individual-level) in order to improve user experience, technical stability, and the game content we offer.
• Marketing communications: To send promotional information, bonus offers, and platform updates — only to members who have consented to receive such communications.

Joker888 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited circumstances in which Joker888 shares data with specific parties in your own interest or to fulfil legal obligations:

• Payment service providers: Required financial data is shared with licensed Malaysian payment providers (DuitNow, FPX, TnG, GrabPay, Boost, ShopeePay) solely for the purpose of processing your transactions. They are governed by their own privacy policies and strict security standards.
• Game software providers: Only the minimum account information required is shared with licensed game providers to allow you to play their games on the Joker888 platform.
• Statutory authorities: Joker888 will disclose required data when ordered by a Malaysian court or competent authority, or when necessary to fulfil anti-money laundering reporting obligations.
• Technology service providers: Our technical infrastructure providers (such as cloud computing services) may process your personal data as data processors acting under our instructions, subject to strict data protection agreements.

Every third party that receives data from Joker888 is required to sign a data protection agreement ensuring they handle your personal data to a standard of protection equivalent to Joker888's own.

Joker888 continuously invests in the latest security technologies and procedures to ensure your personal data is protected against unauthorised access, use, or disclosure:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and Joker888's servers are encrypted using 256-bit SSL/TLS protocol — the same level of protection used by Malaysian banking institutions.
• Advanced data encryption (at-rest): Personal data stored in Joker888's databases is encrypted using industry-standard encryption algorithms. Passwords are never stored in plain text — they are hashed using the bcrypt algorithm.
• Strict access controls: Access to members' personal data within the Joker888 system is restricted to staff who genuinely require it to perform their duties, in accordance with the principle of "least privilege".
• Two-factor authentication (2FA): Joker888 offers and encourages the use of 2FA on all member accounts as an added layer of security.
• 24/7 security monitoring: Joker888's security systems monitor platform activity around the clock to detect and respond swiftly to any threats or security anomalies.
• Regular security audits: Joker888 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

Joker888 adheres to the principle of data minimisation — we only retain your personal data for as long as necessary for the stated purposes, or as required under Malaysian law.

• Active account data: Retained for as long as your Joker888 account is active and for the required period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial reporting and AML.
• Support communication logs: Retained for 3 years after support ticket closure for reference and service quality purposes.
• Technical data and logs: Access logs and technical data are retained for 90 days for security and technical troubleshooting purposes.
• KYC Data: Retained for a minimum of 5 years after account closure in line with Malaysia's AML/KYC compliance requirements.

Once the retention period expires, your personal data will be securely deleted using methods that ensure the data cannot be recovered.

As a Joker888 member and data subject under Malaysia's PDPA, you hold the following important rights regarding your personal data:

The Joker888 platform uses cookies to enhance your experience, maintain session security, and analyse platform usage. The following are the types of cookies we use:

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality and security of the Joker888 platform.

Joker888 strictly prohibits the use of our platform by anyone under the age of 18. Our services are not directed at minors in any way.

Joker888 does not knowingly collect, process, or store any personal data from individuals under the age of 18. Should we discover that we have inadvertently collected data from a minor, we will delete that data immediately and close the account in question.

As an online casino platform operating on international technical infrastructure, your personal data may be processed or stored on servers located outside Malaysia. This may occur in the context of cloud computing services we use.

Joker888 ensures that any transfer of personal data outside Malaysia is only carried out when:

• The recipient country maintains an adequate level of data protection, or
• Appropriate safeguards are in place in the form of binding data transfer agreements, or
• The transfer is necessary for the performance of a contract between you and Joker888.

In all cases, your personal data remains protected in accordance with the standards set out in this Privacy Policy, regardless of where it is physically processed.

Joker888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or business operational needs.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document;
• Displaying a clear notice within the Joker888 platform regarding the changes made;
• Sending email notifications to all active members if the changes materially affect their privacy rights.

We encourage you to review this page periodically to stay informed on how Joker888 protects your personal data. Continued use of the Joker888 platform after any amendments take effect will be considered acceptance of the revised Privacy Policy.

Joker888 has appointed a Data Protection Officer (DPO) responsible for ensuring our compliance with Malaysia's PDPA and this Privacy Policy. If you have any questions, concerns, or complaints regarding data privacy, please reach us through the following channels:

• Joker888 DPO Email: support@joker888.top — please use the subject line "Data Privacy Enquiry".
• Live Chat: Available 24/7 within the Joker888 platform — request to speak with our Privacy & Data Security team.
• Response time: We are committed to responding to all privacy enquiries within 5 business days and resolving data rights requests within 21 business days.

If you believe Joker888 has not handled your personal data properly and are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.