Privacy Policy JK8 Online — Our Commitment to Protecting Your Data

JK8 Online collects various types of personal information from our members. We only gather data that is strictly necessary to deliver our services safely and effectively. The following are the categories of data we collect:

• Identity Information: Full name, Malaysian identification number (MyKad) or passport, date of birth and gender. This is required to fulfil KYC (Know Your Customer) requirements and to verify the minimum age of 21.
• Contact Information: An active Malaysian phone number and email address. These are used for account communications, security notices and customer support.
• Financial Information: Details of registered payment methods such as your Touch 'n Go eWallet account number, GrabPay, DuitNow, or FPX account via Maybank2u and CIMB Clicks. We do not store credit or debit card numbers directly — all processing is handled by licensed payment providers.
• Gaming Activity Data: Game records, betting history, session data and deposit and withdrawal transaction history. This data is required for dispute resolution and security audits.
• Technical Data: IP address, device type, operating system, web browser, screen resolution, and session information. Used to optimise platform performance and detect suspicious activity.
• Communication Information: Records of interactions with the jk8 online customer support team via live chat, email or WhatsApp, retained for training and service improvement purposes.

Your personal data is collected by JK8 Online through several different methods:

• Account Registration: Information you provide directly during the new account registration process at jk8 online.
• Platform Usage: Activity data generated automatically as you use the platform — including games played, bets placed, and session duration.
• Financial Transactions: Information relating to every deposit and withdrawal transaction you make through your registered Malaysian payment method.
• KYC Process: Identity verification documents you submit when requested — such as a copy of your MyKad or passport for account verification or large withdrawal processing.
• Communications With Us: Information you provide when contacting the JK8 Online support team through any communication channel.
• Cookies & Tracking Technologies: Technical data collected automatically via cookies and similar technologies as you browse our platform (see Section 6 for further details).

We do not purchase or obtain your personal data from any third-party sources without your prior knowledge and consent.

JK8 Online use the personal data we collect solely for purposes related to providing our services to you. Those purposes are:

• Account Management: Creating, verifying and maintaining your jk8 online account, including processing logins and managing account security.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as processing your winnings withdrawals.
• Legal Compliance: Fulfilling KYC compliance obligations, AML (Anti-Money Laundering) requirements and other Malaysian statutory reporting obligations.
• Platform Security: Detecting and preventing fraud, account abuse, money laundering, and any other unlawful activity on the JK8 Online platform.
• Customer Support: Providing support and resolving any enquiries, complaints, or disputes you raise with our support team.
• Platform Improvement: Analysing usage patterns on an aggregated and anonymised basis to improve the performance, interface design, and overall experience of the JK8 Online platform.
• Account-Related Communications: Sending important account-related notices such as deposit confirmations, security alerts, and updates to our terms or policies.
• Marketing Communications: With your consent, sending you information about jk8 online promotions, bonuses and the latest offers. You may opt out of marketing communications at any time.

JK8 Online does not sell, rent or share your personal data with external parties for their own marketing purposes. However, there are limited circumstances in which we may need to share your data with certain parties:

• Payment Service Providers: Licensed payment processors that facilitate Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX transactions. They receive only the data necessary to process your transaction and are bound by strict confidentiality obligations.
• Game Providers: Game software development companies such as Pragmatic Play, PG Soft, and Microgaming may receive limited session data required to enable gameplay and resolve any technical disputes.
• Legal Authorities: Malaysian government agencies, law enforcement or regulatory bodies where required by law or a valid court order. In such situations, we will notify you where permitted by law to do so.
• Technical Service Providers: Cloud, cybersecurity and technical infrastructure service providers that enable JK8 Online to operate. All such providers are bound by strict data protection agreements.

All third parties we work with are required to meet data protection standards that are equal to or higher than our own. We do not permit them to use your data for their own purposes unrelated to the services they provide to us.

Protecting your personal data is our highest priority JK8 Online. We implement multiple layers of technical and organisational security measures to ensure your data remains protected at all times:

• 256-bit SSL Encryption: All communications between your device and JK8 Online servers are encrypted using the latest TLS protocol with 256-bit encryption keys.
• Stored Data Encryption: Sensitive data stored in our databases, including passwords and financial information, is encrypted using industry-standard encryption algorithms.
• Role-Based Access Control: Each JK8 Online staff member only has access to the data required for their specific job role — no individual is granted blanket access.
• 24/7 Monitoring: An automated security monitoring system operates around the clock to detect and respond to any threats or suspicious activity.
• Regular Security Audits: We conduct regular penetration tests and security audits to identify and address any vulnerabilities before they can be exploited.
• Staff Training: All jk8 online staff undergo regular data security awareness training to ensure best practices are upheld at every level of the organisation.

Platform JK8 Online use cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use and their purposes:

• Essential Cookies (Cannot Be Disabled): Required for core platform functionality — including login authentication, session security and account setting preferences. Without these cookies, the jk8 online platform will not function properly.
• Performance Cookies: We collect anonymous information about how players use the platform — pages visited, time spent and any errors encountered. This helps us identify and resolve technical issues more efficiently.
• Functional Cookies: Storing your preferences such as selected language, last betting amount, and display settings to provide a more personalised experience on your next visit.
• Analytics Cookies: Helping us understand overall platform usage patterns in aggregate, so we can make data-driven decisions to improve jk8 online services.

You can manage your cookie preferences through your web browser. However, disabling essential cookies may affect platform functionality. For more information on managing cookies in your browser, refer to your browser's help section.

As a player JK8 Online who are based in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your personal data is inaccurate or outdated, you have the right to request that we correct it.
• Right to Erasure: Under certain circumstances, you have the right to request that we delete your personal data from our systems.
• Right to Withdraw Consent: For any data processing to which you have given consent (such as receiving marketing communications), you may withdraw that consent at any time.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and to transfer it to another service provider if you wish.

To exercise any of the rights listed above, please contact our support team JK8 Online via email at support@jk8online.click or through the platform's live chat. We will process your request within 14 working days at no charge. We may require identity verification before processing certain requests to ensure the security of your data.

JK8 Online retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law. Below is a guide to retention periods for the various categories of data:

• Active Account Data: Retained for the duration your account remains active on JK8 Online, plus any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years following the date of the transaction, in accordance with Malaysian tax and financial regulatory requirements.
• KYC Records: Retained for a minimum of 5 years after the business relationship ends, in line with Malaysia's AML compliance requirements.
• Support Communication Records: Retained for 2 years for quality training and dispute resolution purposes.
• Technical & Log Data: Retained for 12 months for security and technical debugging purposes.

Once the relevant retention period has expired and there are no other legal obligations preventing deletion, the data will be securely destroyed using approved data disposal procedures that ensure it cannot be recovered.

Platform JK8 Online is intended for individuals aged 21 and above only. We do not knowingly collect, store or process the personal data of any individual under the age of 21.

If we discover that personal data belonging to someone under the age of 21 has been inadvertently collected, we will take immediate steps to delete that data from our systems and close the associated account. If you believe that someone under 21 may have registered an account on JK8 Online, please notify our support team promptly so we can take the appropriate action.

Parents and guardians who have concerns about their children's use of online platforms are encouraged to make use of the parental control tools available on their devices and browsers, and to have open conversations with their children about responsible internet use.

JK8 Online reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or evolving technologies. For any material amendments, we will:

• Notifying all registered members by email at least 7 days before any amendment takes effect.
• Displaying a clear notice on the JK8 Online platform homepage regarding upcoming amendments.
• Updating the "Last Updated" date on this page to reflect when the most recent amendment was made.

Continued use of the platform JK8 Online after the amendment's effective date will be considered your acceptance of the updated policy. If you do not agree with the changes, you may close your account before they take effect and request a withdrawal of any remaining balance. If you have any questions about upcoming or recent amendments, please do not hesitate to contact our support team.