Jom321 Privacy Policy — Personal Data Protection for Malaysian Members

1 Introduction & Scope of the Privacy Policy

Jom321 ("we", "platform") takes our responsibility to protect the privacy and personal data of every member seriously. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and transparently explains how we handle your personal information.

This policy applies to all individuals who register, browse, or use any jom321 service — including playing slots, poker, Live Casino, betting on Malaysia Super League or EPL football, lottery games, cricket, and all other activities on our platform.

We encourage you to read this Privacy Policy in full. If any section is unclear or requires further clarification, our support team is available via live chat 24/7.

2 Types of Personal Data We Collect

Jom321 only collects data that is necessary for legitimate, stated purposes. Below are the categories of data we collect:

We do not collect sensitive data such as medical information, religious beliefs, or political affiliations unless required by law under specific circumstances.

3 How We Use Your Personal Data

Jom321 uses your personal data only for purposes that are lawful, relevant, and have been communicated to you. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and managing your jom321 account, including the required KYC process.
• Transaction Processing: Processing RM deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, and other supported Malaysian payment methods.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, and unauthorised account access.
• Customer Support: Providing technical support, resolving disputes, and responding to account-related enquiries.
• Legal Compliance: Meeting reporting and compliance obligations to the relevant Malaysian authorities.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate assistance.
• Platform Improvement: Analysing usage data in aggregated and anonymised form to improve the user experience on jom321.
• Marketing Communications: Sending promotional offers, bonuses, and platform news — only to members who have opted in to receive them.

4 Sharing Data With Third Parties

Jom321 does not sell your personal data to any third party. However, in the course of operating the platform, we may share your data with the following categories of parties under limited circumstances:

• Malaysian Payment Providers: Data required to process your MYR transactions is shared with payment service providers such as Touch 'n Go, GrabPay, DuitNow, and FPX partner banks for processing purposes only.
• Game Providers: Minimum account information required to access third-party games available on the jom321 platform, such as slots, Live Casino, and poker.
• Identity Verification Provider: Third-party KYC services used to verify the identity of new members in order to meet compliance requirements.
• Malaysian Authorities: When required by law, court order, or direction from a legitimate regulatory authority in Malaysia.
• Analytics Services: Anonymised and aggregated data for platform analytics purposes — no personally identifiable information is shared.

All third parties that receive data from jom321 are bound by strict confidentiality agreements and are only permitted to use that data for the specific agreed purposes.

5 Personal Data Security

Protecting your personal data is a core technical and operational priority at jom321. We implement multiple layers of security to keep your data safe at all times:

• 256-bit SSL Encryption: All communications between your device and jom321's servers are encrypted using the latest TLS protocol.
• Two-Factor Authentication (2FA): Additional security features are available on all member accounts to prevent unauthorised access.
• 24/7 Monitoring: A continuous security monitoring system detects and responds to security threats in real time.
• Internal Access Controls: Access to members' personal data within jom321 is restricted to authorised personnel on a need-to-know basis and is fully logged.
• Periodic Security Testing: Security audits and penetration testing are conducted periodically by independent parties.
• Encrypted Data Backup: All data backups are stored in encrypted format at secure locations that are segregated from the primary system.

While we take comprehensive security measures, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and not sharing your login credentials.

6 Cookies & Tracking Technologies

Jom321 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as language, display settings, and platform preferences to enhance your experience.
• Analytics Cookies: Collecting anonymised data on how you use the platform to help us improve our services.
• Security Cookies: Helping to identify suspicious activity and protecting your account from unauthorised access.

You can manage your cookie settings through your web browser settings. Disabling certain cookies may affect the functionality of some parts of the jom321 platform. For more information on managing cookies, please refer to your web browser's documentation.

7 Your Rights Regarding Personal Data

As a jom321 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team at privacy@jom321.net. We will process your request within 30 calendar days. In complex cases, this period may be extended to up to 60 days, with notification provided to you.

8 Data Retention & Deletion

Jom321 does not retain your personal data for longer than is necessary for the stated purposes, or as required under Malaysian law. Below are our data retention guidelines:

• Active Account Data: Retained for the duration of your active membership at jom321.
• Data After Account Closure: Basic data is retained for 7 years following account closure, in compliance with Malaysia's financial and anti-money laundering legal requirements.
• RM Transaction Records: Retained for a minimum of 7 years as required under Malaysian financial legislation.
• Security Logs: Retained for 12 months for security investigation purposes.
• Support Communication Data: Retained for 3 years after the last interaction.
• Cookie Data: Depending on the type of cookie — from session-only to a maximum of 24 months.

Once the retention period expires, your personal data will be securely deleted using irreversible deletion methods, or fully anonymised so that it can no longer be linked back to your identity.

9 Children's Privacy

Jom321 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process the personal data of children under the age of 18.

Should we discover that personal data of an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and terminate the associated account. Parents or guardians who suspect their child has registered with jom321 without authorisation are encouraged to contact us immediately at privacy@jom321.net.

10 Marketing Communications & Notifications

Jom321 may send you marketing communications about promotions, deposit bonuses, VIP offers, sports events such as Malaysia Super League and EPL matches, and platform updates. These communications will only be sent to members who have given their consent.

You may opt out of marketing communications at any time through:

• Click the "Unsubscribe" link in any promotional email you receive.
• Update your notification preferences in your jom321 account settings.
• Contact customer support via live chat and request to be removed from the marketing list.

Please note that opting out of marketing communications does not prevent us from sending important notifications related to your account, MYR transactions, security updates, or communications required by law.

11 Amendments to the Privacy Policy

Jom321 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform enhancements. The "Last Updated" date at the top of this document will always reflect the most current version.

For significant amendments, we will notify members via:

• In-platform notification on jom321 the next time you log in.
• An email to your registered address at least 14 days before the amendment takes effect.
• A clear banner or notice on the main page of the website.

Your continued use of the jom321 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request a withdrawal of your remaining balance.

12 Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by jom321, please reach out to us through the following channels:

• Privacy Email: privacy@jom321.net
• General Support: support@jom321.net
• Live Chat: Available 24/7 on the jom321 platform

Our privacy team will respond to all enquiries within 5 business days. For formal data rights requests, please submit your request via our privacy email along with a copy of a valid identity document for verification purposes.