JomKiss Privacy Policy – Malaysia User Data Protection

This Privacy Policy explains how JomKiss ("we", "Platform") collects, processes, stores and protects the personal information you provide when using our website or mobile app at jomkiss.vu.

We are committed to protecting the privacy of every user in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. This policy applies to all users who register, browse, or use any JomKiss service, including online casino games, sports betting, slot games, deposits, and withdrawals.

By using the JomKiss platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

This policy should be read together with Terms and Conditions and Responsible Gaming Guidelines which forms the comprehensive agreement between you and jomkiss.

JomKiss collects your personal information through several means — directly from you during registration, automatically through your use of the platform, and in certain cases from trusted third-party sources for identity verification purposes.

We do not collect sensitive information such as biometric data, political affiliations, religious beliefs, or medical records unless required by applicable law.

Every piece of information we collect is used for specific and legitimate purposes. jomkiss does not process your data for any purpose beyond those stated below without obtaining your additional consent:

• Account Management: To register, verify, and manage your account, including the KYC process required by regulatory authorities.
• Transaction Processing: To process your deposits and fund withdrawals securely and accurately via your chosen payment method.
• Platform Security: To detect and prevent fraud, money laundering, multiple account ownership, and other suspicious activities.
• Legal Compliance: To comply with legal obligations, regulatory directives, and anti-money laundering (AML) reporting requirements.
• Service Improvement: To analyse usage patterns in order to improve platform quality, games, and the overall user experience.
• Service Communications: To send important notifications related to your account, transactions, security updates, and changes to terms.
• Customer Support: To handle enquiries, complaints, and assistance requests submitted through our support channels.
• Responsible Gaming: To monitor usage patterns and identify users who may need responsible gaming assistance.

For marketing communications such as promotional offers and bonuses, we will obtain your separate consent. You may withdraw this consent at any time through your account settings.

JomKiss does not sell, rent, or disclose your personal information to external parties for their marketing purposes. However, in operating our services, there are limited situations where data must be shared with specific parties:

• Service Providers: Technical partners that help us operate the platform, such as payment service providers, identity verification systems, and cloud computing infrastructure. All such providers are bound by strict data protection agreements.
• Regulatory Body: Information required by licensed bodies, financial authorities, or law enforcement agencies when mandated by law.
• Financial Intelligence Unit: Transaction reports required under anti-money laundering (AML) and counter-terrorism financing (CTF) laws.
• Game Providers: Minimum technical information required by gaming software providers to operate your game session securely.

In all data sharing cases, we ensure that recipients are bound by data protection obligations equal to or stricter than our own standards. We do not transfer your personal data overseas without ensuring adequate protection exists in the destination country.

Protecting your personal data is a responsibility we take very seriously. JomKiss implements multiple layers of technical and organisational security to ensure your information is always kept safe:

• Data Encryption: All data transmitted between your device and jomkiss servers is protected with 256-bit SSL/TLS encryption. Sensitive data in storage is also encrypted using the AES-256 algorithm.
• Access Controls: Access to user data is restricted to staff who require it to perform their duties. Role-based access control (RBAC) is implemented at all levels.
• Continuous Monitoring: Intrusion detection systems and security monitoring operate around the clock to identify and respond to any threats promptly.
• Security Testing: JomKiss conducts regular penetration testing and security audits carried out by qualified independent parties.
• Incident Management: Clear and tested incident response procedures are in place to address any data breach quickly and effectively.

JomKiss uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification, session management and security. These cookies cannot be disabled as they are necessary for the platform to function properly.
• Performance Cookies: Collecting aggregated information on how users interact with the platform to help us identify and resolve technical issues.
• Functional Cookies: Storing your preferences such as language, display settings, and login information for a more convenient return experience.
• Analytics Cookies: Helping us understand overall platform usage patterns to make better-informed improvement decisions.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. Continued use of JomKiss after a cookie notice is displayed will be considered your consent to the use of essential cookies.

Under the Personal Data Protection Act 2010 and related data protection regulations, you have the following rights regarding your personal data held by JomKiss:

To exercise any of the above rights, contact our data protection team via live chat within the platform or our support email. We will verify your identity before processing any data-related request.

JomKiss retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account is active plus any additional period required by law.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction occurs, in line with Malaysia's financial and anti-money laundering legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, or longer if required by the regulatory authority.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• Closed Account Data: Basic information is retained for 7 years after account closure to comply with legal obligations, after which data will be permanently deleted or anonymised.

Once the retention period expires and there is no legal requirement for further storage, your data will be securely deleted using non-recoverable methods.

JomKiss reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

When we make significant changes to this policy, we will:

• Displaying a clear notice on our platform's home page at least 14 days before changes take effect.
• Sending notifications to your registered email address with details of the key changes made.
• Updating the "Last Updated" date displayed at the top of this page.

Your continued use of the JomKiss platform after the effective date of any policy change constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before the effective date.

If you have any questions, concerns, or complaints regarding how jomkiss handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.

You can reach us via:

• Live Chat: Available 24/7 directly within the jomkiss platform — the fastest way to get a response.
• Support Email: [email protected] — for enquiries requiring documentation or detailed clarification.
• FAQ Section: Visit FAQ page for answers to the most frequently asked privacy questions.

We are committed to responding to all privacy-related enquiries within 48 working hours. For more complex data rights requests, the maximum processing time is 14 working days and we will provide you with periodic progress updates.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your country.