Privacy Policy jomkiss7 —
Member Personal Data Protection

This Privacy Policy ("Policy") is published by jomkiss7 ("we", "Platform", or "company") and applies to all individuals who use, register with, or access the jomkiss7 platform via our website, mobile app, or any other digital channel.

At jomkiss7, we understand that privacy is a fundamental right. In the online casino industry, member trust is our most valuable asset. That's why we invest in the latest security infrastructure and enforce strict data protection policies to keep your information safe with us at all times.

This Policy describes:

• The types of personal data we collect from you.
• The purpose and legal basis for processing that data.
• The parties who may receive your data and under what circumstances.
• The security measures we take to protect your data.
• Your rights regarding your personal data and how to exercise them.

Jomkiss7 only collects data necessary to provide a safe, fair, and responsible service. Below are the main categories of data we collect:

Data You Provide Directly

• Identity Information: Full name, date of birth, MyKad or passport number.
• Contact Information: Email address, phone number, residential address.
• Financial Information: Bank account number, eWallet details, deposit and withdrawal records.
• KYC Documents: Copies of identity documents, bank statements, or proof of address documents.
• Account Information: Username, encrypted password, account preferences.

Automatically Collected Data

• Technical Data: IP address, web browser type, operating system, screen resolution.
• Usage Data: Pages visited, games played, session duration, clicks, and interactions.
• Device Data: Unique device identifiers, mobile hardware information.
• Location Data: Geographic location based on IP address for compliance purposes.

Every piece of data we collect has a clear and legitimate purpose. jomkiss7 does not use your data for purposes unrelated to the provision of our platform services.

Account Management & Services

• Create and manage your member account.
• Process deposits, withdrawals, and other financial transactions.
• Verify your identity through the required KYC process.
• Provide effective and personalised customer support.

Security & Compliance

• Detect and prevent fraud, money laundering, and other unlawful activities.
• Meet legal obligations under PDPA 2010 and other applicable laws.
• Conduct ongoing risk monitoring to protect platform integrity.

Platform Enhancement & Communication

• Analyse usage patterns to improve platform design and functionality.
• Send important notifications related to your account, promotions, and platform updates.
• Personalise your gaming experience based on your preferences and history.

Jomkiss7 does not sell your personal data. However, in certain limited situations, we may share your data with carefully selected parties:

Trusted Third-Party Service Providers

We work with service providers that help us operate the platform, including payment processors, cloud services, fraud detection systems, and game software providers. All these providers are required to comply with strict data protection standards and may only use your data according to our instructions.

Regulatory Authorities & Law Enforcement

We may be required to disclose your data to government authorities or law enforcement when directed by a valid court order or other legal obligation. In such situations, we will endeavour to notify you unless prohibited by law.

Protection in Data Sharing

• All data sharing is governed by binding confidentiality agreements.
• Data shared is kept to the minimum necessary for the specific purpose.
• We do not share your data with third-party advertisers without your consent.
• No data transfers overseas are carried out without adequate safeguards.

Protecting member personal data is our highest priority. jomkiss7 continuously invests in the latest security technologies and practices to keep your data safe at all times.

Technical Measures

• 256-bit SSL Encryption: All data transmitted between your browser and our servers is encrypted using the latest TLS protocol.
• Stored Data Encryption: Sensitive data such as financial information and identification documents are stored in encrypted format.
• Strict Access Controls: Only authorised staff may access member personal data, and every access is logged.
• Periodic Security Scanning: Our systems are regularly tested and scanned by independent security experts.

Organisational Measures

• Mandatory data security training for all staff with access to member data.
• A clear incident response protocol to address any data breaches promptly.
• Regular internal audits to ensure compliance with our privacy policy.

Jomkiss7 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance Cookies: Collect information on how you use the platform to help us improve performance and user experience.
• Functional Cookies: Save your preferences such as language, display settings, and login details for convenience.
• Analytics Cookies: Help us understand overall usage patterns for product development purposes.

Cookie Management

You can manage or delete cookies through your browser settings at any time. However, disabling certain cookies may affect platform functionality. Essential cookies are required for account security and cannot be disabled without impacting your ability to use the platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by jomkiss7:

Jomkiss7 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: Retained for as long as your account remains active and for a reasonable period after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements.
• KYC Documents: Retained for 5 years after account closure or as required by applicable regulations.
• Communication Logs: Retained for 2 years for dispute resolution purposes.
• Technical & Log Data: Retained for 12 months for security and technical troubleshooting purposes.

When data is no longer needed, it will be securely deleted or anonymised using industry-recognised methods.

Jomkiss7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational reasons.

For material amendments — meaning changes that significantly affect how we handle your data — we will provide clear notice through the platform at least 14 days before the changes take effect. Notice may be given via a website banner, an email to your registered address, or an in-platform notification.

The "Last Updated" date at the top of this document indicates when this Privacy Policy was last revised. We encourage you to review this page from time to time.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat button on the platform.
• Email: [email protected] — replies within 1 to 2 business days.

If you are not satisfied with how we handle your complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body.