Privacy Policy jomwin – Your Data Protection & Personal Information

Jomwin takes seriously our responsibility to protect the personal information of every player using this platform. This Privacy Policy ("Policy") is established to explain transparently how we collect, use, store, and protect your data when you access or use the jomwin website and services.

This policy applies to all users of the jomwin platform — including registered players, casual visitors, and anyone who interacts with any part of our services. It should be read together with Terms and Conditions which together form the complete agreement between you and jomwin.

By registering an account or continuing to use the jomwin platform, you express your consent to the collection and use of your personal information as described in this Policy. If you do not agree, please discontinue use of the platform.

Jomwin only collects data necessary to operate the platform properly and meet applicable legal requirements. Generally, the data collected includes the following categories:

Data you provide directly:

Data collected automatically:

• IP address and device information used
• Web browser type and version
• Game activity records and transaction history
• General location data (state/city) based on IP address
• Cookie and login session information
• Platform usage time and duration

Data from KYC (Know Your Customer) processes:

• Certified copies of identification documents
• Proof of current address
• Source of funds verification documents if required for specific cases

The personal data we collect is used solely for legitimate purposes related to the operation of the jomwin platform. Below are the main purposes for which your data is used:

• Account management — to create, verify, and maintain your account at jomwin
• Transaction processing — to process deposits, withdrawals, and bonus payments accurately and securely
• Identity verification — to meet KYC requirements and comply with anti-money laundering laws
• Platform Security — to detect and prevent fraud, unauthorised access, and suspicious activity
• Service improvement — to analyse usage patterns and improve the overall player experience
• Service communications — to send important notifications relating to your account, transactions, and policy changes
• Customer Support — so the jomwin support team can assist you effectively when needed
• Legal compliance — to fulfil reporting obligations to the relevant authorities when required

Jomwin does not use your data for third-party marketing purposes or sell it to advertisers. Any marketing communications we send are related to jomwin promotions and offers only, and you may unsubscribe at any time.

Jomwin does not disclose your personal data to third parties except in the following limited and controlled situations:

• Payment service providers — information required to process deposits and withdrawals is shared with the relevant e-wallet providers and banks, limited strictly to the data needed to complete the transaction
• Game software providers — gameplay session information is shared with the relevant game providers solely for the technical purpose of operating the games
• Identity verification services — KYC data is shared with licensed third-party verification services that comply with strict data protection standards
• Legal authorities — jomwin will disclose data to authorities if required by a court order or applicable law.

All third parties receiving data from jomwin are bound by strict confidentiality agreements and are not permitted to use that data for any purpose beyond the scope of the services provided.

We invest consistently in security infrastructure to ensure your data remains protected at all times. The security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and jomwin servers
• Password storage using irreversible one-way hashing algorithms
• Multi-layer access control for databases storing personal information
• Continuous security monitoring and active intrusion detection systems
• Regular security audits by independent third parties
• Two-factor authentication (2FA) is available for all players for added account protection
• Regular cybersecurity training for all staff with access to data

While we take all reasonable steps to protect your data, no digital system can be guaranteed 100% secure against all threats. We encourage you to play your part in protecting your account by using a strong password, enabling 2FA, and never sharing your login details with anyone.

Jomwin uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:

• Mandatory session cookies — required for core platform functions such as login and navigation. These cannot be disabled without affecting basic website functionality.
• User preference cookies — saves settings such as your preferred language, game layout, and display preferences for your convenience in future sessions.
• Analytics cookies — helps us understand how players use the platform so we can improve the overall experience. This data is processed in aggregate and without individual identification.
• Security cookies — used to detect suspicious activity and protect your account from unauthorised access.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the jomwin platform.

As a jomwin player, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the rights above, contact the jomwin support team via live chat or email. We will process your request within 14 business days. In some cases, we may need to verify your identity before processing data-related requests.

Jomwin retains your personal data for as long as your account is active or as necessary to provide services to you. After an account is closed, we retain certain records for the period required by law:

• Financial transaction records — retained for 7 years in compliance with anti-money laundering legal requirements
• KYC records and identity verification documents — retained for 5 years after account closure
• Game activity logs — retained for 3 years for dispute resolution purposes
• General personal information — deleted within 90 days after the account is officially closed, unless a dispute or active investigation is in progress

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

In operating the jomwin platform, your data may be processed or stored on servers located outside Malaysia. This occurs when we use cloud infrastructure services or software providers that operate globally.

When your data is transferred across borders, we ensure:

• The destination country or region maintains equivalent or higher data protection standards
• A legally binding data transfer agreement has been established between jomwin and the recipient
• All the same technical protections apply even when data is processed outside Malaysia.

We always prioritize service providers that comply with recognized international data protection standards.

Jomwin does not knowingly collect personal data from individuals under 18 years of age. This platform is exclusively for adults only.

If we find that personal data of a child or minor has been collected without proper consent, that data will be deleted immediately and the associated account will be closed without any refund of remaining balance.

Jomwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in laws, technology, or industry best practices. When material amendments are made, we will:

• Updating the "Last Updated" date at the top of this page
• Displays in-account notifications to players when they log in
• Sending an email to your registered address for amendments that materially affect your privacy rights

Your continued use of the jomwin platform after any amendments to this Policy are published will be considered your acceptance of the updated terms. We encourage you to review this page from time to time.

If you have any questions, concerns, or wish to exercise your privacy rights, we're here to help. You can contact us through the following channels:

• Live Chat — available 24 hours a day, 7 days a week via the jomwin platform
• Email — [email protected] (we aim to respond within 5 business days)

For more information on how we manage the platform overall, you may refer to the following pages:

• Terms and Conditions — overall platform terms of use
• Responsible Gaming — self-control tools and support resources
• About Us — jomwin's background and core values

Effective date: 1 January 2026. This version supersedes all previously published versions of the JomWin Privacy Policy.