Privacy Policy jom33 — Protecting Your Personal Data Is Our Priority

Jom33 (hereinafter referred to as "we", "our platform", or "jom33") is an online betting and entertainment platform operating in Malaysia through the website jom33.biz. We understand how important privacy is to you as a user of our platform, and we are committed to protecting the personal information you share with us.

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out your personal data rights, as well as how jom33 handles your information responsibly. We adopt a "privacy by design" approach — meaning privacy protection is built into every aspect of the jom33 platform from the ground up, not added as an afterthought.

Jom33 collects only the personal data that is strictly necessary for clearly defined and legitimate purposes. The following are the categories of data we may collect:

2.1 Account Registration Information

• Full name as shown on your identification document
• Date of birth (for age verification — jom33 is for members aged 18 and above)
• Active email address
• Malaysian mobile number
• Current residential address
• Password (stored in an irreversible hashed format)

2.2 Financial & Transaction Information

When you make a deposit or withdrawal on jom33, we may collect information related to the payment method you use — including your bank account name, e-wallet holder name (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay), or FPX details (Maybank2u, CIMB Clicks). We not store credit card numbers or full banking details — this sensitive information is handled directly by licensed third-party payment processors.

2.3 Technical & Device Information

• Your device's IP address
• Web browser type and version
• Device operating system
• Login timestamps and activity logs
• General geolocation data (state only, not precise coordinates)

2.4 Gaming Activity Records

Jom33 retains records of your gaming activity, including betting history, winnings, losses, and game preferences. This data is used for payment processing, fraud detection, and responsible gambling monitoring to ensure the well-being of our members.

Jom33 uses collected personal data solely for legitimate and transparent purposes. The key purposes are as follows:

For marketing communications such as promotional information, new bonuses, and jom33 platform updates, we will only contact you if you have given your consent. You may withdraw this consent at any time through your account settings or by contacting the jom33 support team.

Jom33 does not sell, rent, or share your personal data with any third party for commercial purposes. However, in certain limited and lawful circumstances, data may be shared with:

• Licensed Payment Processors: Transaction information is shared with licensed payment processors — including DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX — solely for the purpose of processing your financial transactions.
• Game Providers: Technical information required to provide access to games on the jom33 platform is shared with game providers. No personally identifiable information such as full name or phone number is shared.
• Relevant Authorities: jom33 may be required to disclose certain information to Malaysian legal, regulatory, or government authorities when lawfully compelled to do so via a court order or official request.
• Cybersecurity Services: Anonymised technical data may be shared with cybersecurity service providers engaged by jom33 to protect the platform against attacks and fraud.

Jom33 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures we employ include:

• 256-bit SSL/TLS encryption for all data communications between your browser and jom33's servers
• Encryption of sensitive data in the database using AES-256 standards
• An intrusion detection system (IDS) that monitors suspicious activity in real time
• Role-based access control (RBAC) ensuring jom33 staff only access data relevant to their responsibilities
• Regular security audits conducted by independent security experts
• Encrypted data backups stored securely at separate locations
• Two-factor authentication (2FA) for all internal access to jom33's systems

While jom33 takes all reasonable measures, no system can guarantee 100% absolute security. We therefore encourage you to take your own precautions — such as using a strong, unique password and never sharing your jom33 account login details with anyone.

Jom33 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates smoothly. The following are the types of cookies we use:

6.1 Essential Cookies (Required)

These cookies are required for core jom33 platform functions such as login session authentication, security, and language preferences. Disabling these cookies will affect the platform's functionality.

6.2 Performance & Analytics Cookies

These cookies help jom33 understand how members use the platform, which pages are most frequently visited, and where users encounter difficulties. This data is used in aggregate form and cannot be used to identify you individually.

6.3 Functional Cookies

These cookies allow jom33 to remember your preferences — such as language selection, display theme, and notification settings — so you don't need to reconfigure them each time you log in.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of some features on the jom33 platform.

As a digital platform, your personal data may be processed or stored on servers located outside Malaysia. In such cases, jom33 ensures that any such data transfers are protected by appropriate data transfer agreements and that the level of data protection at the destination meets or exceeds the standards set by Malaysia's PDPA.

Jom33 prioritises server infrastructure based in the Asian region to minimise the need for cross-border data transfers and to ensure low latency for users in Malaysia.

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by jom33:

To exercise any of the above rights, please contact jom33's Data Protection Officer by email at privacy@jom33.biz. jom33 will respond to your request within 30 business days from the date it is received.

Jom33 does not retain your personal data for longer than necessary. Retention periods are determined based on the purpose of collection and applicable legal requirements:

• Active account data: Retained for as long as your account remains active on jom33, and for 5 years after account closure for legal compliance purposes.
• Financial transaction records in MYR: Retained for 7 years in accordance with Malaysia's tax and financial legal requirements.
• Security & activity logs: Retained for 2 years for fraud detection and security investigation purposes.
• Customer service communications: Retained for 3 years after the last interaction.

Once the retention period has expired, personal data will be securely deleted using methods that ensure it cannot be recovered. For data in physical form, secure destruction procedures will be applied.

Jom33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notifications to all registered jom33 members for material changes
• Displaying a prominent notice on the jom33.biz homepage for 14 days before the changes take effect

We encourage you to review this jom33 Privacy Policy page periodically. Continued use of the jom33 platform after any changes take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding how jom33 handles your personal data, please contact our officially appointed Data Protection Officer (DPO):