JOS168 Privacy Policy — Personal Data Protection You Are Our Priority

Information We Collect

JOS168 collects various types of information to enable the platform to operate securely and deliver the best experience to every member. The information we collect falls into two main categories:

Information you provide directly:

• Full name as it appears on your official identification document
• Email address and mobile number for account verification
• Date of birth for age limit verification (18 and above)
• Identity documents (MyKad, passport) for the KYC process
• Bank account or e-wallet details for processing deposits and withdrawals
• The username and password you chose during registration

Information collected automatically:

• IP address and general geographic location information
• Device type, operating system, and browser version used
• Game session data including login time, logout time, and in-platform activity
• Deposit and withdrawal transaction history
• Cookie data and device identifiers for security and personalisation

How We Use Your Data

Every piece of information we collect is used for a clear and legitimate purpose. jos168 does not use your data for purposes unrelated to the operation of the platform. The following outlines how your personal data is used:

We do not use your personal data to make automated decisions that could have a significant impact on you without human review. Any important decisions relating to your account will be reviewed by our team.

Data Sharing with Third Parties

JOS168 takes a highly cautious approach to data sharing. We do not sell, rent, or disclose your personal data to third parties for marketing purposes. Data sharing only occurs in the following situations:

• Licensed payment providers: Required information is shared with payment gateways and partner banks solely for processing your financial transactions.
• Technology service providers: Cloud infrastructure and security providers contracted by JOS168 are subject to strict confidentiality agreements.
• Regulatory authority: When required by Malaysian law or a valid court order, we will disclose the necessary information to the relevant authorities.
• Fraud investigators: In cases of suspected fraud or financial crime, relevant information may be shared with the appropriate authorities for investigation purposes.

Data Security & Protection Measures

Your data security is JOS168's top technical priority. We continually invest in the latest security infrastructure to ensure your information is protected at all times. The security measures we implement include:

• Data encryption in transit using TLS 1.3 and SSL 256-bit protocols
• Password storage using irreversible one-way hashing algorithms
• Two-factor authentication (2FA) available for all member accounts
• Real-time threat monitoring system operating 24 hours a day
• Periodic penetration testing and security audits by independent parties
• Role-based access controls that restrict internal staff from accessing data unrelated to their duties
• Encrypted data backups stored at a secure, separate location

While no system can guarantee absolute security, jos168 applies industry best practices and internationally recognized security standards to minimize risk. If you suspect your account has been accessed without authorization, please contact our customer support immediately.

Cookies & Tracking Technologies

JOS168 uses cookies and similar technologies to enhance the user experience, maintain session security, and understand how our platform is used. Types of cookies we use:

• Essential Cookies: Required for core platform operations including login verification and session security. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as language, display settings, and game choices for a more personalized experience.
• Analytics Cookies: Helps us understand platform usage patterns for improvement purposes. This data is collected in aggregate and is not used to identify individuals.
• Security Cookies: Helps detect suspicious activity and protect your account from unauthorized access.

You can manage cookie settings through your browser. However, disabling essential cookies may affect platform functionality. JOS168 does not use third-party cookies for advertising purposes.

Your Rights as a Data Subject

As a jos168 member, you have the following rights regarding your personal data. We are committed to making it easy to exercise these rights without unnecessary hassle:

Data Retention & Deletion

JOS168 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. Retention periods vary by data type:

• Active account data: Retained throughout the period of active account and for 5 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian tax and accounting legal requirements.
• KYC Documents: Retained for the period specified by the relevant regulatory body, generally no less than 5 years.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Analytics data: Anonymised after 12 months and no longer attributable to any individual.

Once the retention period expires, your data will be securely deleted or anonymised using procedures that do not allow recovery.

Cross-Border Data Transfers

In the course of its operations, JOS168 may process or store your personal data on servers located outside Malaysia. Where such transfers occur, JOS168 ensures that a level of protection equivalent to Malaysian and international data protection standards is maintained through the following mechanisms:

• Binding data processing agreements with all service providers that receive your data
• Use of internationally recognised standard contractual clauses
• Data protection impact assessments (DPIA) prior to any new data transfer being implemented

JOS168 does not transfer your personal data to countries that lack adequate data protection standards without appropriate additional safeguards in place.

Children's Privacy

The jos168 platform is exclusively for users aged 18 and above. We do not knowingly collect any personal data from minors. Our registration process includes strict age verification, and any account found to be registered under a minor's name will be closed immediately.

If you believe a child under 18 has provided personal data to jos168 without your knowledge, please contact us immediately so we can take appropriate steps to delete that information.

Changes to This Privacy Policy

JOS168 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or added platform features. Any material changes will be communicated to you via:

• A prominent notice displayed within the platform when you log in
• Notification email sent to your registered email address
• Updates to the "last updated" date shown at the top of this document

Continued use of the JOS168 platform after a change notice has been issued constitutes your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the rights outlined in Section 6 above.

For any inquiries, concerns, or complaints regarding this Privacy Policy, please contact the jos168 Data Protection Officer at [email protected]. We are committed to addressing every enquiry transparently and within a reasonable timeframe.