Privacy Policy jos129 – Malaysian Player Data Protection

Jos129 only collects data that is genuinely necessary to provide you with a quality service. We do not collect excessive or irrelevant data. The following are the categories of data we collect.

Data you provide directly:

• Full name, Malaysian mobile number, and email address provided at account registration.
• Date of birth for age verification — to confirm that you meet the minimum age requirement of 18 years.
• Malaysian bank or e-wallet account information (such as your Touch 'n Go or GrabPay account number) for the purpose of processing winning withdrawals — stored in encrypted form.
• Identity document (copy of identification card) when requested as part of the KYC (Know Your Customer) process.
• Any information you share when contacting our customer support team.

Automatically collected data:

• Your IP address, device type, operating system, and web browser version.
• Game session data — games played, session duration, bet amounts, and game outcomes.
• Transaction history — a record of all deposits and withdrawals made through your account.
• Log data — login times, logout times, and in-platform navigation activity on jos129.

Every piece of data we collect is used for a clear and legitimate purpose. Jos129 does not use player data for purposes not stated in this Privacy Policy without first obtaining your additional consent.

• Account management: Creates and maintains your jos129 account, verifies your identity, and processes secure logins.
• Transaction processing: Processing deposits and withdrawals securely and accurately via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Service provision: Enables you to play slots, roulette, jackpot games, lottery, and place bets on badminton and other sports on the jos129 platform.
• VIP Programme: Calculating and crediting VIP reward points, weekly cashback, and bonuses based on your playing activity.
• Regulatory compliance: Fulfils KYC compliance obligations, AML (Anti-Money Laundering) requirements, and other applicable legal obligations.
• Platform security: Detecting and preventing fraud, multi-account usage, and suspicious activity that could compromise the integrity of the platform.
• Product improvement: Analyses usage patterns to understand which features are most valuable and to continuously improve the overall user experience.
• Service communications: Sending important notifications related to your account, transactions, updates to our Terms and Policies, and security information.

Should jos129 intend to use your data for any new purpose not stated above, we will obtain your consent before doing so.

Jos129 does not sell or rent your personal data to any third party. However, there are limited situations where we may need to share data with certain parties to keep the platform running properly and to comply with legal obligations.

• Payment service providers: Payment gateways that process your deposits and withdrawals (such as FPX, DuitNow, and other providers) receive only the transaction data required to complete the payment. They are not permitted to use this data for any other purpose.
• Game providers: Companies such as Pragmatic Play and PG Soft, which provide slots, roulette, and jackpot games, receive the game session data required to run those games. They are bound by strict confidentiality agreements with jos129.
• Legal authorities: jos129 will disclose required data to the relevant authorities when directed to do so by law or court order. We will inform you of any such disclosure unless we are legally prohibited from doing so.
• Technical service providers: Third parties providing technical services such as hosting, cybersecurity, and IT support may have limited access to data in order to carry out their duties — subject to binding confidentiality agreements.

Jos129 continually invests in security infrastructure to ensure your data is always protected. The technical and organisational security measures we employ include the following.

• Encryption in transit: All communications between your browser and jos129's servers are protected by TLS protocol using a 256-bit SSL certificate. This prevents any third party from intercepting or reading your data during transmission.
• Encryption at rest: Sensitive data such as passwords and financial account information is stored in encrypted form using strong hashing algorithms. Even jos129 staff cannot view your password in its original form.
• Two-factor authentication (2FA): jos129 offers two-factor authentication for all accounts — we strongly encourage you to enable this feature for an additional layer of protection.
• 24/7 security monitoring: Our IT security team continuously monitors the platform to detect suspicious activity, intrusion attempts, or any anomalies that may indicate a security threat.
• Internal access controls: Access to player data within the jos129 organisation is restricted to staff who genuinely need it to carry out their responsibilities — in line with the principle of minimum privilege.

While no security system is foolproof, jos129 is committed to reducing the risk of a data breach to the lowest level possible. Should a security incident affecting your data occur, we will notify you within 72 hours of confirming the incident.

Jos129 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use and their purposes.

• Session cookies (required): Required to maintain your login session and keep the platform functioning correctly. These cookies are automatically deleted when you close your web browser. Without them, the jos129 platform will not function.
• Preference cookies: Saving your preferences and settings — such as your preferred language and display configuration — so you don't have to reconfigure them each time you log in.
• Analytics cookies: Helping us understand how users interact with the platform — which pages are visited most, which features are used most, and where users encounter difficulties. This information is used in aggregate form (not at an individual level) for platform improvements.
• Security cookies: Helps detect and prevent fraudulent activity, CSRF (Cross-Site Request Forgery) attacks, and other web security threats.

Jos129 does not use third-party advertising tracking cookies. We do not permit advertising companies to place cookies on our platform for targeted advertising purposes.

As a jos129 user whose data we hold, you have certain rights regarding your personal data. Jos129 respects and supports the exercise of these rights. Click on each right to find out more.

The security of your financial transactions is a top priority at jos129. Our platform supports a wide range of Malaysian digital payment methods, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks). Here is how we handle your payment data.

• Jos129 does not store your full e-wallet account number, bank account number, or payment card details on our servers. This information is processed directly by licensed payment gateways that are PCI DSS Level 1 compliant.
• Jos129 only retains the information necessary to process withdrawals — specifically the account holder's name, payment method type, and account number in encrypted form — solely to ensure your winnings are sent to the correct destination.
• Every deposit and withdrawal transaction is securely logged with a timestamp, amount, payment method, and transaction status for record-keeping and dispute resolution purposes.
• jos129 uses an automated fraud detection system that reviews every transaction for suspicious patterns and may place a transaction on hold for further review where necessary.
• All deposits and withdrawals must be made to and from a payment method registered under the same name as your jos129 account — this is a safeguard against money laundering.

Jos129 does not retain your personal data longer than necessary. Retention periods vary depending on the type of data and applicable legal requirements.

• Active account data: Retained for the duration of your active account and for 6 months after account closure for record-keeping and potential dispute resolution purposes.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysian financial legislation and AML (Anti-Money Laundering) compliance requirements.
• Game logs: Retained for 2 years for dispute resolution and game fairness audit purposes.
• Support communication records: Retained for 1 year after a support ticket is resolved, for reference and quality training purposes.
• KYC document data: Retained for the duration of the active account and for 5 years after account closure, in accordance with regulatory compliance requirements.

Once the designated retention period has expired, your data will be securely deleted from jos129's systems or anonymised so that it can no longer be linked to your personal identity.

Jos129 may amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or improvements to how we protect your privacy.

• You will be notified of any significant amendments to this Privacy Policy via your registered email and/or an in-platform notification at least 14 days before the amendment takes effect.
• The date of the most recent update will always be displayed at the top of this page so you know when this Policy was last changed.
• Your continued use of the jos129 platform after any amendment takes effect will be considered your acceptance of the revised Privacy Policy.
• Where an amendment is a material change that significantly affects how we process your data, we will obtain your active consent before that amendment applies to your data.