J2cr Privacy Policy – Personal Data Protection for Malaysian Players

1.Personal Data We Collect

j2cr collect your personal data through various means when you use our platform. Below are the categories of data we may collect:

A. Data You Provide Directly

• Full name as it appears on your identification document;
• Malaysian identity card number (MyKad) or passport number;
• Date of birth for age verification purposes (18 years and above);
• An active Malaysian mobile phone number;
• A valid email address;
• Malaysian residential address;
• Payment method details — including e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) or bank account information for DuitNow and FPX;
• Identity verification (KYC) documents uploaded for account verification purposes.

B. Automatically Collected Data

• Your device's IP address;
• Web browser type and operating system version;
• Mobile device information (model, unique device identifier);
• Gaming session data — games played, session duration, betting amounts and outcomes;
• Transaction data — deposit and withdrawal details including time, amount, and payment method;
• Activity logs on the j2cr platform;
• Cookie data and similar tracking technologies.

2.How We Use Your Personal Data

j2cr uses the personal data collected for the following purposes:

We will not use your personal data for any purpose other than those stated above without notifying you first and, where required, obtaining your fresh consent.

3.Legal Basis for Data Processing

j2cr process your personal data on the following bases recognised under Malaysia's Personal Data Protection Act 2010:

• Contract: Processing necessary to fulfil the membership agreement between you and j2cr — including the processing of deposits, withdrawals and account management;
• Legal Obligations: Processing required to comply with Malaysian legal obligations — including identity verification under anti-money laundering regulations;
• Consent: Processing based on consent you voluntarily provide — such as for marketing communications and promotional offers. You may withdraw this consent at any time;
• Legitimate Interests: Processing necessary for j2cr's legitimate business interests — such as platform improvements, fraud prevention and system security — provided these interests do not override your fundamental rights and freedoms.

4.Data Sharing & Disclosure

j2cr does not sell your personal data. However, we may share your data with certain parties under limited and controlled circumstances:

• Payment Service Providers: To process your deposits and withdrawals — including operators such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and the banks involved in FPX transactions. Such disclosure is limited to the minimum necessary to complete your transaction;
• Game Providers: j2cr works with third-party game software providers. Game data required to deliver the playing experience may be shared with these providers under strict confidentiality agreements;
• Legal Authorities: j2cr will disclose personal data to the relevant Malaysian authorities when required to do so by law, court order or official investigation — including investigations related to money laundering or fraud;
• Group Companies: j2cr may share data with related entities within the same corporate group for legitimate internal operational purposes, subject to binding data protection agreements;
• Business Transfer: Should j2cr be involved in any merger, acquisition or sale of assets, members' personal data may be transferred to the new entity — with prior notice given to members.

5.Cookies & Tracking Technologies

j2cr using cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential Cookies: Required for the core functions of the j2cr platform — including login authentication, session security and account balance management. These cookies cannot be disabled without affecting platform functionality;
• Performance & Analytics Cookies: Help us understand how members interact with the j2cr platform — the most frequently visited pages, time spent, and navigation patterns. This data is used to improve the user experience;
• Functional Cookies: Enables the j2cr platform to remember your preferences such as language, display settings and game preferences for a more comfortable gaming session;
• Security Cookies: Used to detect suspicious activity, prevent fraud and safeguard the integrity of your account at j2cr.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of the platform j2cr. For more information, please refer to your web browser's documentation.

6.Data Security

j2cr continuously invests in comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or accidental disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between your device and j2cr's servers;
• Encryption of data at rest for all personal and financial information stored in our databases;
• Role-based access controls ensuring that only authorised personnel can access member data in accordance with their job responsibilities;
• Round-the-clock security monitoring by j2cr's cybersecurity team using advanced intrusion detection systems;
• Penetration testing and regular security audits conducted by qualified third parties;
• Mandatory data security training for all j2cr staff with access to members' personal data;
• Tested incident response procedures to ensure swift action in the event of any security breach.

7.Data Retention Period

j2cr retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law:

• Active Account Data: For as long as your account remains active with j2cr and for the required period following account closure;
• Financial Transaction Data: A minimum of seven (7) years as required by Malaysia's anti-money laundering regulations and tax laws;
• Identity Verification (KYC) Data: A minimum of five (5) years following account closure or the final settlement of the relevant transaction;
• Customer Support Communication Data: Three (3) years from the date of communication for reference and complaint resolution purposes;
• Log & Security Data: One (1) year for standard activity logs, and longer for cases involving security or legal investigations.

Once the required retention period has expired, j2cr will delete or anonymise your data securely and irreversibly.

8.Your Rights Under PDPA 2010

As a member j2cr and as a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the data protection team at j2cr via email at [email protected] with the subject line "Personal Data Rights Request". We will process your request within 14 business days, and no fee will be charged for reasonable requests.

If you believe that j2cr does not comply with this Privacy Policy or the provisions of the PDPA 2010, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

9.Children's Privacy

j2cr does not knowingly collect or process personal data of individuals under the age of 18. Our platform is strictly intended for adults who meet the minimum age requirement of 18 years.

If you believe we have inadvertently collected personal data from someone under the age of 18, please contact us immediately at [email protected] and we will take the appropriate steps to delete that data from our records as soon as possible.

10.Cross-Border Data Transfers

In the course of its operations, j2cr may transfer your personal data to servers or processing facilities located outside Malaysia. Any such transfer will be carried out with adequate safeguards to ensure your data remains protected at a standard equivalent to Malaysia's PDPA 2010, including:

• Binding data processing agreements with data transferees outside Malaysia;
• Ensuring the recipient country has adequate data protection laws in place;
• The use of recognised standard contractual clauses for international data transfers;
• Data protection risk assessments prior to any new data transfer being carried out.

j2cr prioritises storing Malaysian members' personal data in regions that comply with stringent data protection standards and will always notify members of any material changes to our data transfer practices.

11.Changes to This Privacy Policy

j2cr reserve the right to update or modify this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements or new platform features.

When we make material changes to this Privacy Policy, we will notify you via:

• Clear notifications within the j2cr platform upon login;
• Email to the address registered in your account;
• Update the "Updated" date at the top of this page.

We encourage you to review this page periodically to ensure you are always kept informed about how j2cr protecting your information. Continued use of the j2cr platform after any changes take effect will be considered acceptance of the updated Privacy Policy.

12.Contact j2cr's Data Protection Officer

j2cr has appointed a Data Protection Officer responsible for ensuring ongoing compliance with PDPA 2010 and this Privacy Policy. If you have any questions, concerns or wish to exercise your personal data rights, please contact us through the following channels:

• Email: [email protected] (subject: "Data Privacy Inquiry")
• Live Chat: Available on the j2cr platform 24 hours a day, 7 days a week
• FAQ: Visit our FAQ page for a prompt response

Data privacy requests will be processed within 14 working days. For more complex cases, we may require up to 30 days and will notify you of the time needed. All communications relating to data privacy are confidential and handled with full professionalism by the j2cr team.

This Privacy Policy is governed by and interpreted in accordance with the laws of Malaysia. In the event of any conflict between the Bahasa Melayu version and any other language version of this document, the Bahasa Melayu version shall prevail as the primary reference for Malaysian members.