Jack77 Privacy Policy — Malaysia User Data Protection

To provide a quality and secure service to every jack77 user, we need to collect certain categories of information. This collection is carried out transparently and only for legitimate purposes. The types of information collected by jack77 include:

• Registration Information: Your full name, date of birth, identification card number, email address, phone number, and username provided when registering your jack77 account.
• Financial Information: Bank account number, bank name, and e-wallet details (Touch 'n Go, Boost, GrabPay) required to securely process your deposits and withdrawals.
• KYC Verification Documents: Copies of your identity card, passport, or proof of residence documents collected solely for identity verification and legal compliance purposes.
• Technical Data: IP address, device type, web browser type, operating system, and log data collected automatically for security and platform improvement purposes.
• Platform Activity Data: Game records, transaction history, session duration, game preferences, and usage patterns that help us personalise your experience at jack77.
• Communications: Records of your interactions with the jack77 customer support team, including live chat and email correspondence retained for service quality purposes.

We only collect information necessary for the stated purposes. You are not required to provide any information not requested during the standard jack77 registration process.

Jack77 uses collected information solely for purposes related to platform operations and improving user experience. The following are the primary purposes for which your data is used:

Jack77 does not use your data to make automated decisions that negatively affect you without human intervention. Any data analysis is conducted within strictly controlled parameters with the sole purpose of improving the quality of our platform's services.

Jack77 understands that your trust is invaluable. We do not sell, lease, or disclose your personal data to third parties for commercial marketing purposes. However, in operating our platform, there are limited situations where your information may be shared with the following parties:

• Payment Processors: Authorised payment service providers such as FPX, Touch 'n Go, and other processing partners receive only the minimum information necessary to complete your financial transactions.
• Game Providers: jack77's gaming technology partners may receive technical data necessary to ensure a smooth and fair gaming experience. They are bound by strict confidentiality agreements.
• Legal Authority: jack77 will disclose required information when mandated by a court order, law enforcement agencies, or relevant regulatory bodies in Malaysia.
• Auditors and Advisors: Independent auditors and legal advisors may have limited access to data within the scope of their professional work, subject to binding confidentiality obligations.

All third parties working with jack77 are required to comply with data protection standards equivalent to or higher than those set out in this privacy policy. jack77 is responsible for ensuring this compliance through binding contractual agreements.

Jack77 uses cookies and similar tracking technologies to enhance platform functionality and user experience. The following are the types of cookies used:

• Essential Cookies: Required for the platform to function correctly, including login session management and security settings. These cookies cannot be disabled as they are essential to the core operation of jack77.
• Performance Cookies: Collecting information on how you use the jack77 platform to help us identify areas for improvement. All data is collected anonymously.
• Functional Cookies: Saving your preferences such as language, display settings, and game choices so your experience feels personalised every time you visit jack77.
• Analytics Cookies: Helping jack77 understand aggregate platform usage patterns for long-term product improvements.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Jack77 platform. For more information on managing cookies, refer to your web browser's help section.

Jack77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following is our data retention period guideline:

• Active Account Data: Retained for the duration your account is active on the jack77 platform and for a reasonable period after account closure for audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for 5 years after account closure, or longer if required by a regulatory body.
• Security Logs: Retained for 12 to 24 months for security incident investigation purposes if required.
• Support Communication Data: Retained for 2 years for quality control and dispute resolution purposes.

When data is no longer needed and there is no legal obligation to retain it, Jack77 will securely delete or anonymise that data using industry-approved deletion procedures.

Under Malaysia's Personal Data Protection Act 2010 and the jack77 Privacy Policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the jack77 support team via live chat within the platform. We will process your request within 14 business days. In complex cases, this period may be extended to 30 days with prior notice to you.

Jack77 invests seriously in cybersecurity infrastructure to ensure user data is protected at all times. The key security measures we implement include:

• End-to-End Encryption: All data transfers between your device and jack77's servers are secured by TLS 1.3 protocol with AES-256 encryption, ensuring no third party can read your information in transit.
• Two-Factor Authentication (2FA): jack77 supports two-factor authentication for an additional layer of security on your account, reducing the risk of unauthorised access even if your password is compromised.
• 24/7 Monitoring: jack77's cybersecurity team monitors the platform continuously around the clock to detect and respond to any threats or suspicious activity.
• Regular Security Testing: Penetration testing and security audits are conducted regularly by certified independent security firms to identify and address any vulnerabilities.
• Internal Access Controls: User data is only accessible by jack77 staff with a clearly defined operational need who have undergone rigorous background checks.

While jack77 takes all reasonable precautions, no online system can be guaranteed one hundred percent free from cyber threats. We encourage you to play your part in keeping your account secure by using a strong password and never sharing it with anyone.

Jack77 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology, or our operational practices. Whenever an amendment is made, we will:

• Displaying a new "Updated" date at the top of this page so you know when the latest changes were made.
• Notifying registered users via the email linked to their jack77 account of any significant changes that affect your privacy rights.
• Displaying a notice on your account dashboard for at least 14 days before major changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how jack77 protects your information. Continued use of the jack77 platform after any amendments are published constitutes your acceptance of the updated terms.