Privacy Policy
How JKT88 Handles Your Data

This Privacy Policy ("Policy") describes how JKT88 ("Company", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "User "Player") who access or use the JKT88 online gaming and sports betting platform available at https://jkt88.casa (the "Platform").

JKT88 is committed to protecting the privacy and security of your personal information. We operate under a data-minimisation principle — collecting only the data that is genuinely necessary to provide our services, maintain account security, comply with applicable legal obligations, and improve the Platform experience for all players, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the JKT88 Platform.

The following terms shall have the meanings assigned to them below throughout this Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, location data, or online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" means JKT88, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of JKT88, under contractual instruction and bound by appropriate data protection obligations.
• "Cookies" means small text files placed on your device by the Platform or third-party services to enable functionality, analytics, and session management.
• "KYC Data" means identity and age verification documentation collected as part of the Know Your Customer compliance process, including government-issued identification, proof of address, and, where required, source-of-funds documentation.
• "Sensitive Data" means a subset of Personal Data that warants enhanced protection, including financial information, identification documents, and data that could reveal a person's health status or patterns of behaviour.

JKT88 collects different categories of personal data depending on your interaction with the Platform. The table below summarises the primary categories of data we collect and their purpose:

JKT88 collects Personal Data through the following channels:

• When you register an Account on the Platform, including entering your name, date of birth, email address, and mobile number.
• When you complete KYC verification by submitting identity documents or source-of-funds information.
• When you make a deposit or withdrawal, including payment method details and transaction records.
• When you contact our customer support team via live chat, email, or any other communication channel.
• When you participate in promotional activities, surveys, or VIP programme enrolment.

• Through cookies, web beacons, and similar tracking technologies placed on your device when you access the Platform.
• Via server logs that record IP addresses, access times, browser details, and pages visited.
• Through game engine and betting platform logs that record gameplay activity and wagering history for integrity and compliance purposes.

• From payment processors and e-wallet providers (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX banking partners) for the purposes of transaction verification and fraud prevention.
• From identity verification service providers used to authenticate the documents you submit during KYC.
• From fraud detection and responsible gambling screening services to identify and manage at-risk behaviour.

JKT88 processes your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your JKT88 Account, including processing your login credentials and account settings.
• Service Delivery: Enabling you to access and play games, place bets on sports events including EPL and Liga Super Malaysia matches, use live dealer tables, and access all other Platform features.
• Payment Processing: Facilitating deposits and withdrawals in MYR through your chosen payment method, verifying transaction authenticity, and maintaining financial records.
• Identity Verification: Conducting KYC procedures to verify your age (21+), identity, and payment method ownership, in accordance with our Terms and Conditions and responsible gambling obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct through transaction monitoring and behavioural analytics.
• Responsible Gambling: Monitoring gameplay patterns to identify potentially problematic behaviour, administering self-exclusion requests, and providing player protection tools such as deposit limits and session alerts.
• Customer Support: Responding to your enquiries, resolving disputes, managing complaints, and providing technical assistance.
• Legal Compliance: Fulfilling our obligations under applicable anti-money laundering, data protection, and gaming-related legal and regulatory frameworks.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify areas for improving Platform performance, user experience, and product offerings.
• Marketing Communications: Sending you promotional offers, bonuses, and Platform updates where you have consented to receive such communications or where we have a legitimate interest to do so, with an opt-out mechanism available at all times.

JKT88 processes your Personal Data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and JKT88 — including account administration, payment processing, and service delivery — where you cannot receive the requested service without providing the data.
• Legal Obligation: Processing necessary for JKT88 to comply with applicable legal obligations, including anti-money laundering laws, age verification requirements, and financial record-keeping regulations.
• Legitimate Interests: Processing carried out for JKT88's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, Platform security, and internal analytics.
• Consent: Processing based on your explicit, informed, and freely given consent — primarily in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

JKT88 does not sell your Personal Data to third parties. We may share your data with the following categories of recipient only where necessary and proportionate to the purpose described:

• Payment Processors & E-Wallet Providers: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network processors — shared only as necessary to facilitate your transactions.
• Identity Verification & KYC Providers: Third-party identity verification services that help JKT88 authenticate your documents and confirm your eligibility to use the Platform.
• Game Software & Platform Technology Providers: Providers of the gaming software, live dealer streaming technology, and sports data feeds that power the JKT88 Platform, who may receive technical and gameplay data necessary to deliver the relevant service.
• Fraud Prevention & Security Services: Specialised third-party services that assist in detecting suspicious activity, preventing money laundering, and maintaining Platform integrity.
• Legal & Regulatory Authorities: Government agencies, regulators, law enforcement bodies, or courts where JKT88 is legally required or compelled to disclose Personal Data.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by JKT88 who are bound by professional confidentiality obligations.

JKT88 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL (Secure Sockets Layer) encryption applied to all data transmitted between your device and the JKT88 Platform.
• Encrypted storage of all sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis.
• Two-factor authentication (2FA) available to all Account holders as an optional but strongly recommended additional layer of account security.
• Real-time fraud detection and anomaly monitoring systems that flag suspicious login attempts, unusual transaction patterns, and potential account takeover activity.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security specialists.

Despite these measures, no method of electronic transmission or storage is completely secure. JKT88 cannot guarantee absolute security and is not liable for breaches that result from factors outside our reasonable control. In the event of a data breach that poses a significant risk to your rights or interests, JKT88 will notify you in accordance with applicable data protection obligations.

The JKT88 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. By continuing to use the Platform, you consent to the use of cookies as described in this section.

• Strictly Necessary Cookies: Essential for the operation of the Platform. These cookies enable core functions such as maintaining your login session, processing deposits and withdrawals, and delivering game content. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings, preferred games, and display options, to deliver a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players interact with the Platform — including pages visited, session duration, and features used — to help us improve performance and content.
• Security Cookies: Help detect and prevent fraud, bot activity, and unauthorised access attempts by establishing and verifying authenticated sessions.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain areas of the Platform or may affect the performance of core features including payment processing.

JKT88 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, tax, and accounting obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active Account relationship with JKT88, plus a period of up to 7 years following account closure to meet regulatory record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years following the date of verification, in line with applicable anti-money laundering record retention requirements.
• Transaction & Financial Records: Retained for up to 7 years from the date of the relevant transaction.
• Support Communications: Retained for up to 3 years from the date of the final communication in a given case.
• Technical & Usage Logs: Retained for up to 12 months in identifiable form, after which they may be anonymised and retained indefinitely for analytical purposes.

Subject to applicable law, you have the following rights in relation to your Personal Data held by JKT88. To exercise any of these rights, please contact us at [email protected] with a clear description of your request:

• Right of Access: You may request a copy of the Personal Data that JKT88 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected. You may also update certain Account information directly through your Account Settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your Personal Data. This right is subject to overiding legal obligations — for example, financial records that must be retained under anti-money laundering law cannot be deleted on request.
• Right to Restriction of Processing: You may request that JKT88 restricts the processing of your data in specific circumstances, such as while a rectification or objection request is being evaluated.
• Right to Data Portability: Where technically feasible and legally appropriate, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your Personal Data for direct marketing purposes at any time, with immediate effect. You may also object to other forms of processing based on legitimate interests, subject to JKT88 demonstrating compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

JKT88 will respond to all data rights requests within 30 days of receipt. In cases of complexity or high volume, this period may be extended by a further 60 days, and you will be notified accordingly.

The JKT88 Platform is strictly intended for individuals aged 21 years and above. JKT88 does not knowingly collect, process, or store Personal Data relating to persons under the age of 21. Our KYC verification process is specifically designed to prevent underage individuals from creating accounts or accessing any gaming services on the Platform.

If JKT88 becomes aware that it has inadvertently collected Personal Data from an individual under the age of 21, we will promptly delete that data, close the associated account, and — where required by applicable law — notify the relevant authorities.

If you believe that a minor has accessed the JKT88 Platform, please contact our support team immediately at [email protected]. We take underage gambling prevention extremely seriously and will investigate all such reports promptly.

In the course of operating the JKT88 Platform and engaging third-party service providers — including payment processors, game content providers, and cloud infrastructure partners — your Personal Data may be transferred to and processed in jurisdictions outside Malaysia.

Where such transfers occur, JKT88 takes reasonable steps to ensure that your data receives an adequate level of protection, including through the use of contractual data protection clauses with receiving entities and by engaging only with service providers that operate under recognised data protection frameworks.

JKT88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or an in-platform notification.

We encourage you to review this Policy periodically to remain informed about how we handle your Personal Data. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms.

If you wish to exercise any of your data rights, have a question about this Privacy Policy, or would like to raise a concern about how JKT88 handles your Personal Data, please contact us through the following channel:

For general account or platform support queries unrelated to data privacy, our team is available 24/7 via live chat on the Platform or at the email address above.