jayapoker Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how jayapoker ("we", "our" or "the platform") collects, uses, stores, shares and protects personal data relating to individuals ("you", "player", "user") who access the jayapoker website, create an account or use any service made available through the platform.

jayapoker is an English-language casino and sports entertainment service directed at Malaysian adults aged 21 and above. When you register, deposit in MYR, verify your identity, contact support or interact with any jayapoker feature, you provide personal information that is processed in accordance with this Policy.

This Policy operates alongside the jayapoker Terms & Conditions. Where a specific service has additional data handling arrangements, those arrangements will be drawn to your attention at the point of collection. By using jayapoker, you acknowledge that you have read this Policy and understand how your personal data will be processed.

2 Definitions

For the purposes of this Policy, the following definitions apply:

• Personal Data — any information that identifies or could reasonably identify a natural person, including name, identity document number, email address, contact number, device identifier and financial account reference.
• Processing — any operation performed on personal data, including collection, recording, storage, use, transmission, restriction, deletion or destruction.
• Controller — the entity that determines the purposes and means of processing personal data. In the context of this Policy, the controller is the operating entity responsible for jayapoker.
• Processor — a third party that processes personal data on behalf of the controller under a written instruction arrangement.
• KYC — Know Your Customer; the process of verifying a player's identity, age, address, source of funds and payment ownership before or after account activation.
• Cookies — small data files placed on a device by a website to record session state, preferences, analytics signals and security tokens.

3 Data We Collect

jayapoker may collect the following categories of personal data. The specific information requested depends on the function being accessed:

jayapoker does not intentionally collect special category data such as racial origin, political opinion, religious belief or biometric data beyond what appears incidentally in an identity document required for KYC. Where such data appears, it is processed only for verification purposes and not used for profiling.

4 How and Why We Process Data

Personal data collected by jayapoker may be processed for the following purposes and on the following legal bases:

• Account creation and management — to register your jayapoker account, verify your identity and age, maintain account integrity and manage login sessions. Legal basis: contract performance.
• Payment processing — to accept MYR deposits through DuitNow, FPX, Touch 'n Go eWallet, Boost and bank transfer, and to process withdrawals to verified accounts in your name. Legal basis: contract performance.
• KYC and anti-moneylaundering checks — to meet the anti-fraud, anti-money-laundering and age-verification requirements applicable under international licensing obligations and internal policy. Legal basis: legal obligation and legitimate interests.
• Fraud detection and account security — to identify suspicious activity, prevent unauthorised transactions and detect multiple-account behaviour. Legal basis: legitimate interests.
• Responsible gambling monitoring — to apply deposit limits, enforce self-exclusion, detect patterns of excessive play and provide appropriate intervention. Legal basis: legal obligation and legitimate interests.
• Customer support — to review, respond to and resolve account, payment and game enquiries submitted by Malaysian players through live chat, WhatsApp or email channels. Legal basis: contract performance.
• Platform improvement — to analyse usage patterns, identify technical issues and enhance the browsing, casino and sports experience on jayapoker. Legal basis: legitimate interests.
• Regulatory compliance and reporting — to comply with information requests from competent authorities, to respond to court orders and to meet data protection, licensing and financial crime obligations. Legal basis: legal obligation.

5 Cookies and Tracking Technologies

jayapoker may use session cookies, persistent cookies and similar technologies to maintain your account session, remember preferences, measure page performance and support security functions. Cookies are small files stored on your browser or device.

The principal categories of cookies used may include:

• Essential cookies — required for account login, navigation, session integrity and security token exchange. These cannot be disabled without preventing account access.
• Functional cookies — store language preference, display settings and session continuity information.
• Analytics cookies — collect aggregated usage data that helps improve the jayapoker platform without identifying individual players in reports.
• Security cookies — detect and block suspicious access patterns, bot traffic and credential stuffing attempts.

Your browser settings may allow you to limit or delete cookies, but disabling essential cookies may prevent full access to account functions. Mobile browsers and apps may use equivalent local storage or device identifiers.

6 Data Sharing and Third Parties

jayapoker does not sell personal data to third parties for independent commercial use. Personal data may be shared with the following categories of recipient in connection with the services described in this Policy:

• Payment processors — financial institutions, eWallet operators (including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX) and card networks that process MYR transactions on behalf of jayapoker.
• KYC and identity verification providers — third-party services that assist in matching identity document data against verification databases for age, identity and address confirmation.
• Fraud and anti-money-laundering screening services — platforms that analyse account behaviour and transaction patterns against fraud and sanctions indicators.
• IT infrastructure and cloud service providers — companies that host jayapoker servers, databases backup systems and content delivery infrastructure.
• Customer support platforms — live chat, ticketing and messaging tools used to manage player support communications.
• Competent authorities — regulators, law enforcement and courts where a lawful disclosure obligation applies.

Processors are required to handle personal data only under written instruction and to maintain security standards compatible with this Policy. Where data is transferred across international boundaries, appropriate safeguards are expected to be in place under the applicable framework.

7 Data Retention

Personal data is retained for as long as it is necessary to fulfil the purpose for which it was collected, or as required to meet legal, regulatory, audit, dispute resolution or fraud prevention obligations. In practice:

• Active account data is retained for the lifetime of the account.
• Financial transaction records may be retained for a minimum period following the final transaction in line with anti-money-laundering and gaming regulatory requirements.
• KYC documents may be retained for the applicable minimum regulatory period after account closure.
• Support communications may be retained for a reasonable period to enable dispute review and service quality assessment.
• Security event logs may be retained for a shorter period unless required as evidence of a specific investigation.

At the end of a retention period, personal data may be securely deleted, overwritten or anonymised such that it can no longer be attributed to an identifiable individual.

8 Your Rights

Subject to applicable law, identity verification and any overiding legal obligation, players whose personal data is processed by jayapoker may have the following rights:

• Right of access — to request confirmation of whether jayapoker holds personal data about you and to receive a copy in a portable format.
• Right to rectification — to request correction of inaccurate or incomplete personal data held on your account.
• Right to erasure — to request deletion of personal data where the processing is no longer necessary, consent has been withdrawn, or a legal basis no longer applies, subject to overiding retention obligations.
• Right to restriction — to request limited processing of your data during a period in which accuracy is contested or a legitimate interest balance is assessed.
• Right to object — to object to processing carried out on the basis of legitimate interests, including direct communications.
• Right to data portability — to receive personal data provided by you in a structured, machine-readable format where processing is based on consent or contract.
• Right to withdraw consent — where processing is based on consent, to withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise a right, please contact jayapoker support through the official platform interface. Requests will be assessed individually. Some requests may be limited or declined where legal, regulatory, fraud prevention or legitimate interest grounds apply. Requests involving high-value or security-sensitive data may require additional identity confirmation before they are processed.

9 Data Security

jayapoker applies technical and organisational measures designed to reduce the risk of unauthorised access, accidental loss, disclosure, alteration or destruction of personal data. These measures may include encrypted data transmission, access controls, session token management, activity monitoring, and background checks for personnel handling sensitive data.

No online system can guarantee absolute security. Players are also responsible for protecting their own credentials. You must not share your jayapoker password, one-time verification code or payment PIN with any person. Suspected unauthorised account access should be reported immediately through the official support channel.

Where a personal data incident occurs that is likely to create a material risk to the rights of affected players, jayapoker will assess the incident, take appropriate containment steps and notify relevant parties in accordance with applicable data protection obligations.

10 Protection of Minors

jayapoker is intended solely for adults aged 21 and above. The platform does not knowingly collect personal data from anyone below the age of 21, and age verification is conducted as part of the account and KYC process. If jayapoker determines that personal data has been collected from a minor, the account may be suspended, associated funds reviewed and the data deleted or handled in accordance with applicable legal requirements.

Any person who has reason to believe that a minor has provided personal data to jayapoker is encouraged to contact support through the official platform interface so that the matter can be investigated promptly.

11 Responsible Gambling and Sensitive Processing

Data relating to responsible gambling settings — including deposit limits, cooling-off periods, self-exclusion status and communication preferences — is treated with additional care. This data is used for the specific purpose of protecting player welfare and is not used to restrict lawful account benefits beyond what the player or a competent authority has instructed.

Where a self-exclusion is active, jayapoker may take reasonable steps to verify that the excluded individual is not attempting to open or use a further account. This may involve cross-checking identity and contact data against the exclusion record.

12 Changes to This Policy

jayapoker may update this Privacy Policy to reflect changes in data processing practices, legal requirements, payment methods or platform services. The effective date shown at the top of this page will be updated whenever a material revision is published.

Material changes may be communicated to players through the website or account interface where reasonably practicable. Continued use of jayapoker after a revised Policy has taken effect constitutes acknowledgement of the updated terms. Players who disagree with a material change should stop using jayapoker and request account closure.

13 Contact Us

Questions, concerns or data rights requests relating to this Privacy Policy should be directed to jayapoker support through the official platform interface. The website email address is [email protected] — displayed here as plain text only, not as a clickable link.

Please include your jayapoker username and clear description of your enquiry. Do not include your full password, one-time code or complete payment credential in any message. Enquiries will be reviewed and responded to in accordance with their nature and the information provided.