jomkis Privacy Policy

Definitions and Scope

“Account” means a registered user profile. “Personal data” means information relating to an identified or reasonably identifiable person. “Processing” includes collecting, recording, organising, using, disclosing, retaining, restricting, deleting or anonymising information. “Platform” means the jomkis website and related account services.

This policy covers personal data provided directly by a user, generated through jomkis activity or received from authorised verification, payment, security and service providers. It does not alter the rules governing eligibility, wagering or withdrawals under the Terms and Conditions.

Information We Collect

jomkis may collect information needed to establish and operate an account. The precise categories depend on the services used, the verification stage and the risks associated with a particular activity.

• Identity details, including name, date of birth, nationality, identification document information and confirmation that the user is aged 21 or above.
• Contact details, including residential address, email address, mobile number and communication preferences.
• Account details, including username, encrypted credentials, login records, account status, security alerts and responsible gambling settings.
• Transaction records, including MYR deposits, withdrawals, payment references, funding source information and limited payment identifiers.
• Gambling records, including casino sessions, sports wagers, EPL or Liga Super Malaysia selections, bonuses, wins, losses and account balance movements.
• Technical data, including IP address, browser type, device information, operating system, language setting and website interaction logs.
• Support communications, complaint records, survey responses and documents supplied during a jomkis enquiry.

Identity and Account Verification

jomkis may request documents or digital checks to confirm identity, age, address, account ownership and source of funds. Depending on the circumstances, this may include a Malaysian identity document, passport, recent address evidence, a payment statement or a live identity comparison.

Verification helps prevent underage use, payment fraud, duplicate accounts and unlawful financial activity. jomkis may compare supplied details with information obtained from authorised verification providers. Services or withdrawals may remain restricted while necessary checks are incomplete or inconsistent.

Users should provide only the requested information through an authorised jomkis channel. Passwords, banking PINs and complete one-time authentication codes should never be sent to support.

How Personal Data Is Used

jomkis processes personal information for defined operational and protective purposes. Depending on applicable requirements, processing may be based on performance of an agreement, compliance with a legal obligation, legitimate interests, protection of users or valid consent.

• Create, authenticate, maintain and secure a jomkis account.
• Confirm age, identity, location, payment ownership and account eligibility.
• Process MYR deposits, withdrawals, refunds and account balance adjustments.
• Settle casino games and sports bets and maintain accurate transaction records.
• Detect fraud, collusion, multiple-account abuse and suspicious access.
• Respond to support enquiries, complaints and transaction disputes.
• Apply deposit limits, cooling-off periods and self-exclusion controls.
• Improve site reliability, navigation, device compatibility and user experience.
• Meet lawful record-keeping, reporting and dispute-resolution requirements.

Payments and Financial Information

When a user deposits or withdraws, jomkis may process payment method, amount, currency, date, reference number, account holder name and transaction outcome. This may involve familiar Malaysian channels such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong, subject to availability and verification.

Payment services may process additional information under their own operating responsibilities. jomkis does not need a user’s online banking password or card PIN. Limited payment records may be retained to reconcile MYR transactions, investigate chargebacks, prevent fraud and resolve withdrawal enquiries.

Cookies and Similar Technologies

jomkis may use cookies, local storage and related technologies to maintain secure sessions, remember preferences, measure performance and identify unusual access. Essential technologies support login status, account security, language choices and basic website functions.

Analytical information may show how users move between pages, which device types are common and where errors occur. Where consent is legally required for non-essential technologies, jomkis will seek that consent. Browser settings may block some cookies, although doing so can affect account or website functions.

Responsible Gambling Data

jomkis may analyse gambling behaviour to support player protection. Relevant indicators may include deposit frequency, rapid changes in stake, repeated cancelled withdrawals, extended sessions, unusual late-night activity or attempts to bypass established limits.

Such information may be used to provide a reminder, request an affordability or account review, restrict promotional communication, apply a cooling-off period or support self-exclusion. Responsible gambling records may need to remain associated with a user after account closure so that jomkis can uphold an exclusion and prevent immediate re-registration.

Communications and Marketing Preferences

jomkis may send service messages relating to security, verification, payments, policy updates, account status or responsible gambling. These operational messages are separate from optional promotional communication.

Where permitted, jomkis may send information about bonuses, casino categories or sports markets according to recorded preferences. Users may ask to stop optional marketing. A marketing objection does not prevent essential account, legal, security or safer-gambling messages.

jomkis will take reasonable steps to suppress promotional communication during an active self-exclusion. Limited information may be retained to ensure that the suppression remains effective.

Sharing and Authorised Service Providers

jomkis does not disclose personal information merely because it may be commercially useful. Information may be shared where reasonably necessary with authorised providers that support identity verification, payment processing, hosting, cybersecurity, customer service, game operation, fraud prevention, professional advice or responsible gambling controls.

jomkis may also disclose relevant records where required by a valid legal process, to protect users or the platform, to investigate fraud, or during a legitimate corporate restructuring subject to appropriate confidentiality safeguards. Providers should receive only the information reasonably required for their role.

International Data Transfers

Because online platform infrastructure and specialist providers may operate in different countries, jomkis data can be processed outside Malaysia. Privacy and data protection standards vary between jurisdictions.

Where an international transfer occurs, jomkis seeks proportionate contractual, technical and organisational safeguards. These may include access restrictions, encryption, confidentiality requirements, provider assessment and contractual terms governing how personal information may be used.

Data Security

jomkis uses layered controls intended to protect confidentiality, integrity and availability. Measures may include encryption in transit, restricted staff access, authentication controls, system monitoring, activity logging, backup procedures and incident response processes.

No website, device or internet transmission can be guaranteed completely secure. Users should create a unique password, protect one-time codes, log out from shared devices and review unexpected account alerts promptly. Suspected unauthorised access should be reported to jomkis without delay.

Data Retention

jomkis retains personal information for as long as reasonably necessary to operate an account, complete transactions, maintain security, resolve disputes, uphold self-exclusion and satisfy valid record-keeping obligations. Different categories may have different retention periods.

Closing an account does not necessarily result in immediate deletion. Payment, verification, complaint and responsible gambling records may remain necessary after closure. When identifiable information is no longer required, jomkis will seek to delete, securely destroy or anonymise it in accordance with applicable requirements and operational capability.

Automated Monitoring and Decisions

jomkis may use automated tools to identify unusual logins, transaction patterns, duplicate accounts, bonus abuse or potential gambling harm. A system alert can lead to additional authentication, document requests, temporary restrictions or manual review.

Automated indicators are not always conclusive. Where an outcome materially affects an account and applicable rights require human consideration, the user may request an explanation or review. jomkis may withhold security-sensitive details where disclosure would help a person bypass fraud controls.

Children and Age-Restricted Services

jomkis is intended only for adults aged 21 and above. The platform does not knowingly permit minors to register or gamble. Age verification may occur during registration, before a transaction or whenever account information creates a reasonable concern.

If jomkis learns that an underage person supplied personal information, the account may be suspended and the information handled according to legal, safeguarding and record-retention requirements. Parents and guardians should use device controls and avoid leaving payment credentials accessible to minors.

Accuracy and Account Responsibility

Users must provide accurate information and notify jomkis when important contact or identity details change. An outdated mobile number, residential address or payment name can delay verification, security alerts or a MYR withdrawal review.

jomkis may ask for updated evidence where existing records appear inconsistent or expired. Users must not upload altered documents, impersonate another person or provide a payment account belonging to someone else without express approval.

Changes to This Privacy Policy

jomkis may revise this policy to reflect legal, security, technology or service changes. The current version will state its effective date. Material changes may also be communicated through an account notice or another appropriate channel.

Users should review the jomkis Privacy Policy periodically, particularly before supplying new categories of information or using a newly introduced service. Continued use after an effective date will be treated in accordance with applicable consent and notice requirements.