Privacy Policy

Section 1 Introduction

This Privacy Policy ("Policy") is issued by joker768 ("we", "us", "our", or "the Platform") and applies to all personal data collected from individuals ("you", "your", or "the Player") who access, browse, register on, or otherwise interact with the joker768 online casino and sports betting platform, accessible at joker768.cam.

joker768 primarily serves players based in Malaysia, including users located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions within Malaysia. We recognise the importance of privacy to our players and are committed to handling your personal data with care, transparency, and in accordance with internationally recognised data protection standards.

By registering an account on joker768 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

Section 2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person directly or indirectly, including but not limited to a name, identification number, location data, online identifier, or factors specific to that person's identity.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means joker768, the entity that determines the purposes and means by which Personal Data is processed.
• "Data Processor" means any third party that processes Personal Data on behalf of joker768 under a contractual data processing agreement.
• "KYC Data" means identity documents and supporting materials submitted by a Player for the purpose of Know Your Customer verification, including government-issued photo identification, proof of address, and biometric images.
• "Transaction Data" means records of financial transactions conducted through the joker768 platform, including deposits, withdrawals, wagers, and bonus credits denominated in MYR.
• "Usage Data" means information automatically generated by the Platform about how a Player interacts with the interface, including game session data, click-paths, IP addresses, browser type, and device identifiers.

Section 3 Categories of Personal Data We Collect

joker768 collects personal data across the following categories, depending on the nature of your interaction with the Platform:

Section 4 How We Collect Your Personal Data

joker768 collects personal data through the following means:

When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you directly provide us with personal data. This includes all information entered into registration forms, KYC upload portals, and support channels.

When you access the Platform, our servers and analytics systems automatically collect Usage Data including your IP address, device identifiers, browser characteristics, approximate geolocation (country/city level), session timestamps, and navigation patterns. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 11.

Where necessary for KYC and fraud prevention purposes, joker768 may receive supplementary identity verification information from licensed third-party identity verification providers. We may also receive information from payment processors and financial institutions in connection with the processing of deposits and withdrawals in MYR via Maybank, CIMB, Public Bank, Hong Leong, FPX, and Malaysian e-wallet providers.

Section 5 Legal Basis for Processing

joker768 processes personal data only where a valid legal basis exists. The primary legal bases upon which we rely are:

• Contractual Necessity: Processing is required to perform the contract between you and joker768 — i.e., to operate your account, process transactions in MYR, pay out winnings, and deliver the gaming services you have requested.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including anti-money laundering regulations, identity verification requirements, and financial record-keeping obligations imposed by joker768's operating licence jurisdiction.
• Legitimate Interests: Processing is in joker768's legitimate interests where those interests are not overridden by your privacy rights — including fraud detection, platform security, service improvement, and responsible gambling monitoring.
• Consent: Where no other legal basis applies, joker768 will seek your explicit consent before processing your personal data for that specific purpose. You may withdraw consent at any time by contacting support, though this will not affect the lawfulness of processing conducted prior to withdrawal.

Section 6 How We Use Your Personal Data

joker768 uses collected personal data for the following specified purposes:

• To create, maintain, and manage your player account, including authentication and access controls
• To process deposits and withdrawals in MYR via local payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian bank transfers
• To conduct Know Your Customer (KYC) identity verification and enforce the minimum age requirement of 21 years
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct as described in our Terms & Conditions
• To deliver customer support through Live Chat, email, and other channels in English, Bahasa Melayu, and Mandarin
• To administer bonuses, promotions, and loyalty programme benefits including the joker768 VIP tier system
• To monitor gaming behaviour for the purposes of responsible gambling intervention, including identifying patterns indicative of problem gambling
• To improve the Platform's functionality, performance, and user experience based on anonymised Usage Data analysis
• To communicate essential account notices, security alerts, and policy updates to your registered email address
• To comply with all applicable legal obligations under joker768's international operating licence and applicable financial regulations

Section 7 Data Sharing & Disclosure

joker768 does not sell, rent, or trade your personal data. We share personal data only with the categories of recipients described below, and only to the minimum extent necessary for the specified purpose:

To process MYR deposits and withdrawals, we share necessary transaction details with licensed payment service providers including Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay, DuitNow), FPX, and cryptocurrency processing services. These providers operate under their own privacy policies and regulatory obligations.

For KYC compliance, identity document data may be transmitted to licensed third-party identity verification service providers under strict data processing agreements. These providers are prohibited from using your data for any purpose other than completing the verification request.

joker768's platform infrastructure is hosted by reputable cloud service providers operating secure, certified data centres. These providers process data only under instruction from joker768 and are contractually prohibited from accessing or using your data for independent purposes.

joker768 will disclose personal data to competent regulatory, law enforcement, or governmental authorities where required to do so by applicable law, court order, or in connection with an active investigation into fraud, money laundering, or other criminal activity. Such disclosures will be made without prior notice to the Player where legally required or where providing notice would compromise the investigation.

In the event of a merger, acquisition, restructuring, or sale of all or part of joker768's business assets, personal data held by joker768 may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained by the successor entity.

Section 8 International Data Transfers

As an internationally operating platform, joker768 may transfer your personal data to and process it in countries outside of Malaysia. Where such transfers occur, joker768 implements appropriate safeguards to ensure that your personal data receives a level of protection equivalent to that which it would receive within a jurisdiction with recognised data protection standards.

Such safeguards may include contractual data processing agreements incorporating standard contractual clauses, the use of certified third-party providers, and technical and organisational security measures appropriate to the sensitivity of the data transferred.

Section 9 Data Retention

joker768 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to meet legal, regulatory, or contractual obligations. Our principal retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from submission date, or longer if required under applicable regulatory obligations associated with joker768's operating licence jurisdiction.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction in compliance with financial record-keeping obligations.
• Support Communications: Retained for two (2) years from the date of the last interaction, or longer if the communication relates to a dispute or active investigation.
• Usage and Technical Data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised or deleted. Anonymised aggregate data may be retained indefinitely for platform analytics.
• Cookie Data: Session cookies expire upon browser closure. Persistent cookies expire within the periods specified in Section 11.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised unless retention is mandated by law.

Section 10 Security Measures

joker768 implements a layered technical and organisational security programme to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your browser and the joker768 platform is protected by TLS 1.3 protocol. You can verify this by the padlock symbol in your browser's address bar when accessing joker768.cam.
• Encryption at rest: Stored personal data — including KYC documents and financial records — is encrypted using AES-256 at the storage level.
• Access controls: Access to production systems containing personal data is restricted to authorised joker768 personnel based on role-based access control (RBAC) principles and requires multi-factor authentication.
• Security monitoring: Our systems are subject to continuous security monitoring, intrusion detection, and regular third-party penetration testing.
• Staff training: All staff with access to personal data receive mandatory data protection and security awareness training.
• Incident response: joker768 maintains a documented data breach incident response procedure. In the event of a breach affecting your personal data, we will notify affected players and relevant authorities within the timeframes required under applicable law.

Section 11 Cookies & Tracking Technologies

joker768 uses cookies and similar tracking technologies (collectively "Cookies") to operate the Platform effectively, maintain session security, and collect anonymised usage analytics. We do not use Cookies for cross-site advertising or behavioural profiling for marketing purposes.

• Strictly Necessary Cookies: Essential for Platform operation. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality. Expiry: session (deleted on browser close).
• Functional Cookies: Remember your preferences such as language selection and display settings. Expiry: up to 12 months.
• Analytics Cookies: Collect anonymised, aggregated data about how players use the Platform — which pages are most visited, average session duration, and error rates. This data is used solely to improve Platform performance. Expiry: up to 13 months.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and rate-limiting mechanisms. Expiry: session or up to 24 hours.

You can control and delete cookies through your browser settings at any time. Most browsers allow you to refuse all cookies or selectively accept certain types. Please note that disabling strictly necessary cookies will prevent you from logging into your joker768 account and accessing Platform features. Instructions for managing cookies in common browsers are available through each browser's help documentation.

Section 12 Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to the personal data joker768 holds about you. To exercise any of these rights, please contact our support team at the details set out in Section 16.

joker768 will respond to all verifiable data subject requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further sixty (60) days with prior notice. We reserve the right to verify your identity before processing any data subject request.

Section 13 Children & Minors

The joker768 platform is strictly intended for individuals aged 21 years and above. joker768 does not knowingly collect or process personal data relating to persons under the age of 21. If we become aware that personal data has been collected from an individual who is under the minimum age, that data will be deleted and the associated account closed immediately.

If you believe that joker768 may have inadvertently collected personal data from a minor, please contact us immediately at [email protected] (plain text — not a clickable link) so that we may investigate and take appropriate remedial action without delay.

Section 14 Third-Party Links

The joker768 platform may contain references or links to third-party services, including payment gateways such as DuitNow, FPX, and Malaysian bank portals, which are operated independently of joker768. This Privacy Policy applies only to data processing conducted by joker768 directly. We have no responsibility for, and accept no liability in connection with, the privacy practices of any third-party service, regardless of how you access it.

We encourage you to review the privacy policies of any third-party service you use in connection with your joker768 account, including your bank, e-wallet provider, and cryptocurrency wallet operator.

Section 15 Amendments to This Policy

joker768 reserves the right to amend this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this document will be revised accordingly. For significant amendments that affect your rights or the manner in which we process your data, we will make reasonable efforts to notify you via your registered email address or through a notice displayed upon your next login.

Your continued use of the joker768 platform following the publication of any amended Policy constitutes your acceptance of the updated terms. If you do not agree with the amendments, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

Section 16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact joker768's support team using the details below. Our team is available 24 hours a day, seven days a week, in English, Bahasa Melayu, and Mandarin.

For formal data subject requests — including access, correction, deletion, or portability requests — please include the following information with your submission: your full name as registered on your account, your registered account email address, a clear description of your request, and a copy of a valid photo ID for identity verification purposes.

For questions about responsible gambling and player protection tools, please refer to our dedicated Responsible Gambling page.