Privacy Policy —
How Jejuslot Protects Your Data

This Privacy Policy ("Policy") describes how Jejuslot ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects personal data provided by or collected from users ("you", "the Player") who access or use the Jejuslot website at jejuslot.cam and any associated applications or services (collectively, the "Platform").

Jejuslot is an English-language online casino and sports betting platform built for Malaysian players. We are committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA) and any other applicable privacy laws.

This Policy should be read together with our Terms & Conditions, which govern your use of the Platform and incorporate this Policy by reference.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, payment information, device identifiers, and behavioural data linked to an individual.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" — Jejuslot, in its capacity as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third party that processes personal data on behalf of Jejuslot pursuant to a written data processing agreement.
• "Sensitive Personal Data" — categories of personal data requiring heightened protection, including financial account details, identity document numbers, and KYC verification records.
• "Consent" — a freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data for a stated purpose.

Jejuslot collects personal data across three broad categories, as set out in the table below:

We do not intentionally collect special category data (such as health, biometric, or political data) except where explicitly required by applicable law or regulation (for example, collecting information about gambling-related difficulties as part of responsible gambling support processes, with your explicit consent).

Jejuslot collects personal data through the following methods:

• Direct Collection: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or interact with any form or feature on the Platform.
• Automated Collection: Technical and behavioural data collected automatically when you access the Platform, using technologies such as cookies, log files, pixel tags, and session recording tools. See Section 7 (Cookies & Tracking) for further detail.
• Third-Party Sources: Data received from identity verification service providers, fraud detection agencies, payment processors, and KYC compliance partners for the purpose of verifying your identity and assessing transaction risk.
• Publicly Available Sources: In limited circumstances, Jejuslot may consult publicly available records (such as sanctions lists, politically exposed persons registers, or adverse media databases) as part of our anti-money laundering compliance obligations.

We process your personal data only where a valid legal basis exists. The primary bases on which Jejuslot processes personal data are set out below:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, fraud prevention, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing for purposes that serve Jejuslot's legitimate business interests and are not overridden by your rights — including fraud and cheating detection, platform security, responsible gambling monitoring, and service improvement analytics.
• Consent: Processing for purposes where your prior consent has been obtained — including marketing communications, non-essential cookies, and any special category data processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Jejuslot does not sell, rent, or commercially share your personal data with third parties for their own marketing purposes. We may disclose personal data only in the circumstances set out below:

• Service Providers & Data Processors: Third-party companies engaged to provide services on our behalf, including payment processors (covering Malaysian e-wallets such as Touch 'n Go eWallet, Boost, and GrabPay; FPX and DuitNow operators; and banks including Maybank, CIMB, and Public Bank), identity verification providers, fraud detection services, cloud hosting providers, and analytics platforms. All such parties are contractually bound to process data only on Jejuslot's instructions and to maintain appropriate security standards.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, Jejuslot will disclose personal data to competent authorities. We will notify affected Players of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of Jejuslot's assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and any material changes to data processing arrangements.
• Anti-Fraud & AML Networks: Jejuslot may share data with industry fraud prevention and anti-money laundering networks to detect and prevent financial crime, as permitted under applicable law.

Jejuslot uses cookies and similar tracking technologies to operate the Platform, maintain session integrity, analyse usage patterns, and support security functions. The categories of cookies we use are described below:

You can control cookie preferences through your web browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core Platform functionality. Consent for non-essential cookies can be managed through the cookie preferences tool available on the Platform or through your browser's built-in privacy controls.

Jejuslot retains personal data only for as long as is necessary to fulfil the purposes described in this Policy and to meet our legal and regulatory obligations. The general retention periods applicable to the main categories of personal data are as follows:

• Account and Identity Data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, to meet KYC, AML, and regulatory record-keeping obligations.
• Financial and Transaction Records: Retained for a minimum of seven (7) years following the relevant transaction, in accordance with financial record-keeping requirements under applicable Malaysian law.
• Gameplay and Betting History: Retained for a minimum of three (3) years from the date of each session or wager, for dispute resolution, responsible gambling monitoring, and regulatory compliance purposes.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is earlier. Opt-out records are retained indefinitely to honour your preference.
• Support Communications: Retained for two (2) years from the date of resolution, subject to extension where a complaint or dispute remains open.
• Technical and Log Data: Typically retained for 90 days from collection in active systems; archived log data may be retained for up to twelve (12) months for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup schedules or technical constraints, the data will be isolated from active use until deletion is completed.

Jejuslot implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• AES-256 encryption for sensitive personal data stored at rest, including identity documents and payment details.
• Multi-factor authentication (MFA) requirements for administrative access to internal systems holding personal data.
• Role-based access controls ensuring that employees access only the data required for their specific functions.
• Regular internal and external security audits, penetration testing, and vulnerability assessments.
• 24/7 automated monitoring for unusual access patterns, with incident response procedures in place.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, Jejuslot will notify affected individuals without undue delay and in accordance with the notification obligations under applicable data protection law.

As a data subject whose personal data is processed by Jejuslot, you hold the following rights. These rights may be subject to certain limitations and conditions under applicable law, which will be communicated to you where relevant when you exercise a right.

To exercise any of the above rights, please contact us at [email protected] (plain text — not a clickable link) with a description of your request and proof of identity. We will acknowledge your request within 3 business days and aim to respond fully within 30 calendar days.

Jejuslot's services are strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under the age of 21.

If Jejuslot becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close any associated account. Any funds deposited will be refunded to the originating payment method following identity verification.

In the course of providing its Services, Jejuslot may transfer your personal data to service providers or partners located outside of Malaysia. Where such transfers occur, Jejuslot ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to maintain data protection standards equivalent to those applicable in Malaysia under the PDPA.
• Transfers only to countries or entities that the relevant authorities have recognised as providing an adequate level of data protection.
• Binding corporate rules or equivalent internal privacy frameworks where transfers are made between affiliated entities.

Where none of the above mechanisms applies, Jejuslot will seek your explicit consent before undertaking the transfer, unless an exemption under applicable law permits the transfer without consent.

Jejuslot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or operational requirements. All amendments will be published on this page with a revised "Last Updated" date.

Where amendments are material — meaning they significantly affect your rights or the manner in which Jejuslot uses your personal data — we will provide you with advance notice via account notification or email (where provided) at least seven (7) days before the changes take effect.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the changes. If you do not accept any amendments, you should cease using the Platform and contact us to close your account and request deletion of your personal data where applicable.

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a privacy-related complaint, please contact the Jejuslot Data Privacy team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the Platform. Ask to be connected to a privacy query specialist.
• Subject Line: Please include "Privacy Policy" or "Data Request" in your email subject line so we can route your query correctly.
• Response Time: Acknowledgement within 3 business days; full response within 30 calendar days for data subject rights requests.

We value every privacy query and will treat your request with care and confidentiality. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant national data protection authority in accordance with applicable Malaysian law.