Privacy Policy for Malaysian Players

01 Introduction and Scope

This Privacy Policy applies to personal data processed by JCash through https://jcash.cam and the services available on the platform. It covers visitors, registered members, former members, people who contact JCash support, and individuals whose details are supplied for identity or payment verification.

By using JCash, you acknowledge that personal data may be processed as described in this policy. The policy should be read together with the JCash Terms & Conditions, which govern account access, gameplay, promotions, deposits, and withdrawals.

Malaysian users should understand that online gaming may be subject to legal restrictions. Each player is responsible for determining whether access is lawful in their location. Privacy processing does not represent confirmation that use of JCash is legally permitted in every jurisdiction.

02 Personal Data We Collect

The information collected by JCash depends on how you use the platform. Some information is supplied directly by you, while other information is generated automatically during account activity.

Identity and Account Information

• Full name, date of birth, nationality, residential address, username, password record, and account status.
• Email address, mobile number, preferred language, communication history, and support records.
• Government-issued identification, proof of address, selfie images, and verification results where KYC checks are required.

Financial and Transaction Information

• Deposit and withdrawal values, transaction dates, account balances, wagering history, bonus activity, and payment status.
• Limited payment identifiers connected with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or supported digital assets.
• Fraud screening results, chargeback records, source-of-funds information, and enhanced due diligence documents where reasonably required.

Technical and Usage Information

• IP address, browser type, operating system, device identifiers, general location, login times, referral source, and session activity.
• Games viewed or played, sports markets selected, bet values, settlement records, feature preferences, and responsible gambling settings.
• Security events, failed login attempts, suspected automation, platform errors, and information used to maintain service stability.

03 How JCash Uses Personal Data

JCash processes personal data only where there is a defined operational, security, contractual, legal, or player-service purpose. JCash may use information to:

• Create, authenticate, administer, and secure your JCash account.
• Verify that you are aged 21 or above and confirm your identity through KYC procedures.
• Accept deposits, process withdrawals, maintain transaction records, and resolve payment questions.
• Deliver slots, live casino games, live football markets, EPL betting, Liga Super Malaysia markets, UFC coverage, loyalty benefits, and promotional offers.
• Detect fraud, account sharing, bonus abuse, money laundering indicators, collusion, payment misuse, and other prohibited conduct.
• Respond to support requests and investigate concerns involving accounts, results, MYR balances, technical issues, or payment delays.
• Apply deposit limits, cooling-off periods, self-exclusion requests, and other responsible gambling controls.
• Analyse platform performance, correct errors, improve navigation, and adapt JCash services to devices and connections commonly used in Malaysia.
• Send service messages and, where permitted, marketing communications that reflect your stated preferences.
• Comply with lawful requests, preserve records, establish legal claims, and enforce the JCash Terms & Conditions.

Where consent is relied upon, you may withdraw it for future processing. Withdrawal does not affect processing that took place lawfully before your preference changed.

04 Legal and Operational Grounds

Depending on the context, JCash may process information because it is necessary to perform the account agreement, comply with an applicable obligation, protect legitimate operational interests, prevent harm, or act on consent.

Legitimate interests may include maintaining platform security, detecting payment fraud, improving JCash services, protecting players, responding to disputes, and understanding whether website functions operate correctly. JCash considers the likely privacy impact before relying on such interests.

Certain records may be required before JCash can provide an account or process a withdrawal. If required identity or financial information is not supplied, JCash may be unable to complete KYC, release funds, investigate a disputed transaction, or continue providing some services.

05 Cookies and Similar Technologies

JCash may use cookies, local storage, session identifiers, and comparable technologies to keep players signed in, remember preferences, secure accounts, measure page performance, and identify unusual activity.

Strictly necessary technologies support core functions such as authentication, transaction security, navigation, and fraud prevention. Preference technologies may remember language or display choices. Analytics information may be used in aggregated form to understand service performance.

Browser settings may allow you to block or delete some cookies. Disabling necessary cookies can affect login, wallet, game, and security functions. JCash does not use cookie controls to override account-level responsible gambling restrictions.

06 Disclosure to Service Providers

JCash does not sell personal data. Information may be shared with carefully selected providers only where reasonably necessary to operate, secure, and support the platform. Relevant recipients may include:

• Identity verification and KYC providers that confirm documents, age, and account ownership.
• Payment processors and participating payment channels supporting e-wallet, DuitNow, FPX, bank, or digital-asset transactions.
• Hosting, cybersecurity, fraud prevention, technical monitoring, and customer support providers.
• Game and sports data suppliers where a limited identifier or transaction record is required to operate, settle, or investigate gameplay.
• Professional advisers, auditors, insurers, and dispute specialists subject to appropriate confidentiality duties.
• Authorities or other recipients where disclosure is required by applicable law, a valid legal process, or the protection of rights and safety.

JCash requires service providers to handle information for authorised purposes, apply suitable security, and retain data only as permitted by their instructions and applicable requirements.

07 International Data Transfers

Some infrastructure, security, payment, support, or gaming providers may process information outside Malaysia. Privacy standards can differ between jurisdictions. Where personal data is transferred, JCash takes reasonable steps to ensure that contractual, organisational, or technical protections are in place.

Such protections may include restricted provider access, encryption in transit, documented processing instructions, confidentiality requirements, and transfer arrangements appropriate to the relevant circumstances.

08 Data Security

JCash uses layered measures designed to protect personal data against accidental loss, unlawful access, alteration, misuse, and unauthorised disclosure. Measures may include encryption, network monitoring, access controls, authentication safeguards, audit records, staff confidentiality requirements, and incident response procedures.

No online service can guarantee absolute security. Players must choose a strong password, avoid sharing login details, sign out on shared devices, and notify JCash promptly if account activity appears unfamiliar.

If JCash identifies a personal data incident, it will investigate, contain the issue, preserve relevant evidence, and provide notifications where required by applicable obligations.

09 Data Retention

JCash retains personal data for as long as reasonably necessary to provide the services, maintain accurate financial records, respond to disputes, prevent fraud, support self-exclusion, and comply with applicable requirements.

Retention periods vary according to the type of information and the reason it is held. KYC, transaction, complaint, and security records may need to be retained after an account closes. Marketing preference records may be kept so that JCash can respect an opt-out request.

When information is no longer required, JCash will delete, anonymise, or securely isolate it in accordance with internal retention procedures. Anonymised statistics that no longer identify an individual may be retained for service analysis.

10 Your Privacy Rights

Subject to applicable law and appropriate identity verification, you may ask JCash to explain how your information is used or to exercise relevant data rights. A request may be restricted where disclosure would affect another person, expose security controls, conflict with record-keeping obligations, or prejudice a fraud investigation.

To protect account information, JCash may request identity confirmation before acting on a privacy request. The website email is displayed in the contact section below as plain text.

11 Marketing Communications

JCash may send information about games, sports markets, bonuses, loyalty rewards, or service developments where the communication is permitted and consistent with your preferences. Marketing selection may consider broad account activity, such as whether a player generally prefers slots, live casino, EPL, UFC, or live football.

You can change your marketing preference through available account controls or by contacting support. Essential service messages concerning account security, withdrawals, KYC, changes to terms, or responsible gambling controls are not marketing and may still be sent where necessary.

JCash does not intentionally direct gambling promotions to anyone known to be under 21, permanently self-excluded, or otherwise ineligible to receive them.

12 Responsible Gambling and Privacy

Information concerning deposit limits, session controls, cooling-off requests, and self-exclusion is handled as sensitive account information. JCash uses these records to apply requested protections, prevent circumvention, and support responsible gambling operations.

A self-exclusion record may be retained after account closure where necessary to stop a new account from bypassing the restriction. JCash will not use responsible gambling records to encourage increased wagering.

Players who need limits, self-exclusion, or support information should review the JCash Responsible Gambling page. JCash services are intended for adults aged 21 and above only.

13 Information About Minors

JCash does not knowingly collect personal data from anyone under 21 for gambling purposes. Registration and KYC controls are designed to identify ineligible users. If JCash has reasonable grounds to believe that an account belongs to a minor, the account may be suspended while the matter is investigated.

A parent or guardian who believes that a person under 21 has supplied information to JCash should contact support. JCash may request evidence needed to verify the concern before restricting the account or deleting eligible information.

14 Changes to This Policy

JCash may update this Privacy Policy to reflect changes in services, payment methods, security practices, technology, or applicable requirements. The revised version will be published on this page with an updated effective date.

Where a change materially affects how personal data is handled, JCash may provide an additional account notice. Continued use of the platform after an update is subject to the revised policy and the JCash Terms & Conditions.

15 Contact Us

Questions, correction requests, privacy concerns, and preference requests may be directed to JCash support. Please provide enough information for the team to identify the relevant account or issue, but do not send passwords or complete payment credentials.

JCash may ask for identity verification before releasing account data or changing verified details. This protects users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia from unauthorised requests.