Privacy Policy

This Privacy Policy (the "Policy") describes how jom2play (the "Company", "we", "us", or "our") collects, uses, discloses, stores, and protects the personal data of individuals (the "User", "Player", or "you") who access or use the jom2play online betting and gaming platform at jom2play.cam (the "Platform").

jom2play is committed to handling your personal information with integrity, transparency, and in accordance with applicable data protection principles. We serve players across Malaysia — including in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and recognise our responsibility to maintain the trust you place in us when sharing your personal data.

By registering an Account, accessing the Platform, or continuing to use our services, you acknowledge that you have read and understood this Policy and agree to the collection and use of your personal data as described herein. If you do not accept this Policy, you must discontinue use of the Platform.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between jom2play and its players.

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly — including name, identification number, contact details, financial information, and online identifiers such as IP addresses.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
• "Data Controller" means jom2play, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by jom2play to process Personal Data on our behalf, subject to contractual data processing obligations.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, preference retention, and analytics.
• "KYC" means Know Your Customer identity verification, a process through which jom2play collects and verifies identity documentation to comply with applicable regulatory and anti-money-laundering obligations.
• "MYR" means Malaysian Ringgit, the base currency of all financial transactions conducted on the Platform.

jom2play collects the following categories of personal data, depending on your interaction with the Platform:

3.1 Registration & Identity Data

When you create an Account, we collect your full name, date of birth, email address, and chosen username. We may also collect your residential address and Malaysian identification number (MyKad or equivalent) as part of KYC verification.

3.2 Financial Data

To process deposits and withdrawals in MYR, we collect payment-related information including your preferred payment method (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong Bank), bank account details where required, and transaction history. We do not store full card numbers or sensitive authentication credentials on our servers.

3.3 Technical & Usage Data

When you access the Platform, we automatically collect technical data including your IP address, browser type and version, device type and operating system, session duration, pages visited, and referring URLs. This data is used to ensure Platform security, detect fraudulent access, and improve user experience.

3.4 Betting & Gaming Activity

We maintain records of all bets placed, games played, wager amounts, outcomes, and promotional participation. This data is necessary for account management, dispute resolution, bonus tracking, and responsible gambling monitoring.

3.5 Communications Data

When you contact our support team via live chat, email, or any other channel, we retain records of those communications for quality assurance, compliance, and dispute resolution purposes.

jom2play collects personal data through the following means:

• Direct submission — information you provide during account registration, KYC verification, deposit or withdrawal requests, support communications, and promotional participation.
• Automated collection — technical and usage data collected automatically when you access or interact with the Platform, including through cookies and similar tracking technologies (see Section 10).
• Third-party verification services — identity and fraud screening data received from licensed KYC and anti-money-laundering (AML) verification providers where we engage them as Data Processors.
• Payment processors — transaction confirmation data received from payment service providers in connection with your MYR deposit and withdrawal activity on the Platform.

jom2play processes your personal data for specific, legitimate purposes as detailed in the table below:

jom2play will not use your personal data for purposes that are incompatible with those stated above without first notifying you and, where required, obtaining your consent.

jom2play processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing is required to fulfil our obligations to you under the Terms & Conditions, including account management, transaction processing, and platform access.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including KYC identity verification, anti-money-laundering (AML) obligations, and responsible gambling requirements.
• Legitimate interest: Processing serves jom2play's legitimate business interests — including fraud prevention, platform security, and analytical improvement of our services — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent (for example, for certain marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent can be made via the Platform account settings or by contacting our support team.

jom2play does not sell, rent, or trade your personal data to unaffiliated third parties for marketing purposes. We may share your data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers to assist in operating the Platform, including payment processors supporting DuitNow, FPX, and e-wallet services; KYC and AML verification providers; cloud hosting and IT infrastructure providers; and customer support software providers. All such providers are bound by contractual data processing agreements that prohibit the use of your data for any purpose other than delivering the specified service.

7.2 Legal and Regulatory Authorities

Where required by applicable law, court order, or lawful request from a competent regulatory or law enforcement authority, jom2play may disclose personal data to the extent strictly necessary to comply with such obligation. We will notify you of any such disclosure where we are legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or a material part of jom2play's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy protections applicable to your data going forward.

jom2play retains personal data for no longer than is necessary for the purposes for which it was collected, or as required to meet legal, regulatory, audit, or dispute resolution obligations.

The general retention periods we apply are as follows:

• Account and identity data: Retained for the duration of your active Account and for a minimum of five (5) years following Account closure, to comply with AML and KYC record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• Betting and gaming activity: Retained for the duration of your active Account and for three (3) years following Account closure, unless required for dispute resolution or legal proceedings.
• Support communications: Retained for three (3) years from the date of the communication, or longer where the communication relates to an unresolved dispute.
• Technical and usage data: Retained in aggregate, anonymised form for analytical purposes indefinitely. Individual-level technical data is typically retained for 12 months.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

jom2play implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All personal data at rest is encrypted using AES-256. Data transmitted between your device and our servers is protected using TLS 1.3 (Transport Layer Security).
• Access controls: Access to personal data is strictly limited to authorised jom2play personnel and service providers with a demonstrable operational need. All access is logged and audited.
• Pseudonymisation: Where technically feasible, personal data used for internal analytics and testing is pseudonymised to reduce re-identification risk.
• Incident response: jom2play maintains a formal data breach response procedure. In the event of a confirmed breach affecting your personal data in a materially harmful way, you will be notified without undue delay in accordance with applicable requirements.
• Third-party security: All service providers handling personal data on our behalf are contractually required to implement security standards equivalent to or exceeding those applied by jom2play.

Whilst we take all reasonable technical precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for reporting any suspected unauthorised access to your Account immediately.

jom2play uses cookies and similar technologies (such as local storage and session tokens) on the Platform for the following purposes:

• Essential cookies: Strictly necessary for Platform operation, including maintaining your authenticated session, remembering your language preference, and ensuring secure access. These cannot be disabled without affecting Platform functionality.
• Performance cookies: Collect aggregated, anonymised data about how the Platform is used — such as page load times, error rates, and navigation paths — to help us identify and resolve performance issues.
• Functional cookies: Remember your preferences and settings (such as preferred MYR display format or notification settings) to provide a more personalised experience across sessions.
• Security cookies: Support fraud detection and prevention measures by identifying anomalous access patterns associated with your Account.

jom2play does not deploy third-party advertising cookies or cross-site tracking technologies that would enable external advertisers to build profiles of your browsing activity across the web.

Subject to applicable data protection law, you hold the following rights with respect to your personal data held by jom2play:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: Where your personal data is inaccurate or incomplete, you may request that it be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances — including where the data is no longer necessary for its original purpose — you may request that your personal data be deleted. Note that erasure requests may be subject to legal retention obligations that jom2play is required to observe (for example, AML record-keeping requirements).
• Right to Restriction of Processing: You may request that processing of your data be restricted in specific circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that your data be provided in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. jom2play will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the jom2play support team via live chat on the Platform or by email (see Section 14 below). We will respond to your request within 30 days of receipt. Complex or multiple requests may require additional time, in which case we will notify you of the extended timeline.

The jom2play Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21.

If jom2play becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated Account. All funds held in such accounts, including any deposits and winnings, will be subject to forfeiture in accordance with our Terms & Conditions.

If you believe that a minor may have registered an Account or provided personal data on the Platform, please contact our support team immediately via live chat.

jom2play reserves the right to update or amend this Privacy Policy at any time. We will notify registered players of any material changes via email or a prominent in-Platform notification prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this document. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease use of the Platform and may request Account closure in accordance with our Terms & Conditions.

We encourage you to review this Policy periodically to remain informed about how we are protecting the personal data you entrust to us.

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by jom2play, please contact our support team. Customer support is available 24 hours a day, 7 days a week via the live chat function on the Platform.

For written privacy requests — including data subject rights requests under Section 11 — please contact us by email. Our support email address is provided below as plain text only and is not a clickable link: