Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by JDL88 ("JDL88", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://jdl88.cam. This Policy describes how JDL88 collects, processes, stores, transfers, and protects personal data relating to individuals ("Data Subjects", "Players", "you") who interact with our platform, whether by registering an account, making a deposit, placing a wager, contacting our support team, or simply browsing our website.

JDL88 takes its data protection obligations seriously. We process personal data only where we have a lawful basis to do so, we apply appropriate technical and organisational safeguards to protect data from unauthorised access or disclosure, and we respect the rights of Data Subjects to exercise control over their personal information.

By registering an account on JDL88, depositing funds, or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should refrain from using the platform.

This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, which together form the complete framework of our obligations and your rights as a JDL88 player.

Definitions

The following terms are used throughout this Policy with the meanings set out below:

Data Controller Information

JDL88 acts as the Data Controller in respect of all Personal Data collected and Processed through the platform at https://jdl88.cam. As Data Controller, JDL88 is responsible for determining how and why your Personal Data is Processed, and for ensuring that appropriate safeguards are in place to protect your data.

JDL88 operates as an English-language online gaming platform targeting the Malaysian market, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations within Malaysia.

For all data protection enquiries, requests to exercise your rights, or complaints regarding the handling of your Personal Data, please contact our Data Protection team as described in Section 16 of this Policy.

Personal Data We Collect

JDL88 collects the following categories of Personal Data from or about you in connection with your use of the platform:

4.1 Account & Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth for age verification and 21+ eligibility confirmation.
• Email address used for account communications, transaction notifications, and support correspondence.
• Malaysian mobile phone number for account verification and two-factor authentication.
• Residential address including city and postcode, for KYC and fraud prevention purposes.
• Username and hashed password — passwords are never stored in plain text.

4.2 Identity Verification (KYC) Data

• Government-issued photo ID — Malaysian MyKad (NRIC), Driver's Licence, or Passport image (front and back).
• Proof of address — utility bills (e.g., Tenaga Nasional Berhad electricity bill) or bank statements issued within three months.
• Verification selfie — a photograph of you holding your photo ID, used solely for identity verification.
• Payment method proof — screenshot showing your registered e-wallet (Touch 'n Go eWallet, Boost, GrabPay) or bank account name.

4.3 Financial & Transaction Data

• Deposit and withdrawal records including amounts, dates, timestamps, and payment method references.
• Payment method identifiers — e-wallet account references, bank account last digits, or cryptocurrency wallet addresses (not full card numbers or e-wallet PINs).
• Account balance history and bonus credit/debit records.

4.4 Gaming & Wagering Activity Data

• Game session logs — titles played, wager amounts, outcomes, session duration.
• Sports betting records — markets selected, stakes, odds, and settlement outcomes across Liga Super Malaysia, EPL, UFC, and other covered events.
• Bonus interaction records — bonuses claimed, wagering progress, and promotion outcomes.

4.5 Technical & Device Data

• IP address — recorded at login and each significant account action for fraud prevention and geolocation.
• Device type and operating system (e.g., mobile browser, Android, iOS) for platform optimisation and security monitoring.
• Browser type and version for compatibility and user experience improvement.
• Session timestamps and page interaction logs for security and responsible gambling monitoring.

4.6 Customer Support Data

• Support chat transcripts and email correspondence relating to your account queries.
• Dispute and complaint records — submissions, investigation notes, and resolution outcomes.

How We Collect Your Data

JDL88 collects Personal Data through the following primary channels:

• Direct submission by you — when you register an account, complete KYC, make a deposit or withdrawal, contact support, or participate in promotions.
• Automated technical collection — via cookies, server logs, and session tracking technologies as you interact with the platform (see Section 8).
• Payment providers — when you transact via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or other payment channels, transaction reference data is passed to us by the payment processor.
• Third-party identity verification services — where JDL88 uses a third-party KYC verification partner to assist in document authentication, that partner may share verification outcomes and risk signals with us.
• Fraud and AML screening services — JDL88 may receive risk signals or watchlist matching data from external compliance service providers to fulfil our anti-money laundering obligations.

Purposes of Processing & Legal Basis

JDL88 processes your Personal Data for the specific purposes and on the legal bases summarised in the table below. We will not use your data for purposes that are incompatible with those originally stated without seeking your consent.

Data Sharing & Disclosure

JDL88 does not sell, rent, or trade your Personal Data to third parties for their own commercial or marketing purposes. We may share your Personal Data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: Transaction data is shared with payment processors — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network infrastructure — solely to execute and reconcile your financial transactions.
• KYC and identity verification partners: Where JDL88 uses a third-party service to assist with document verification, your submitted KYC documents may be processed by that partner under a binding data processing agreement.
• Fraud prevention and AML services: JDL88 may share transaction data and account identifiers with external compliance and fraud screening services to fulfil its anti-money laundering and counter-terrorism financing obligations.
• Cloud infrastructure and hosting providers: Platform data, including account and session logs, is stored on encrypted servers operated by our cloud hosting partners under strict data processing agreements.
• Game studio providers: Game session data may be shared with the licensed international studio that supplies the game, for the purpose of dispute resolution, game integrity monitoring, and RNG certification compliance.
• Law enforcement and regulatory authorities: JDL88 may disclose Personal Data to competent authorities where required by law, court order, or regulatory direction — including mandatory AML/CFT reporting obligations.
• Business successors: In the event of a merger, acquisition, or sale of assets involving JDL88, your Personal Data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third-party Data Processors engaged by JDL88 are contractually bound to process Personal Data only on our documented instructions, to maintain appropriate security measures, and to comply with applicable data protection obligations.

Cookies & Tracking Technologies

JDL88 uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow the platform to recognise your device on return visits, maintain your session state, and collect analytical data about how the platform is used.

JDL88 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for platform operation. These cookies maintain your login session, store your language and currency preferences, and enable core platform functionality. They cannot be disabled without disrupting platform use.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and CSRF attacks. These cookies are linked to your authenticated session and expire when you log out.
• Performance & Analytics Cookies: Used to collect anonymised data on how players interact with the platform — including page load times, error occurrences, and navigation patterns — to help us improve the user experience.
• Functional Cookies: Remember your platform preferences (e.g., game lobby view, deposit method last used) to provide a more personalised experience across sessions.

JDL88 does not use third-party advertising cookies or behavioural tracking cookies for external advertising networks. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use the platform.

Data Security

JDL88 implements a layered set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and JDL88 servers. The presence of HTTPS in the browser address bar confirms this protection is active.
• Encrypted data storage — all Personal Data stored on JDL88 servers, including KYC documents and account details, is encrypted at rest using industry-standard encryption algorithms.
• Password hashing — account passwords are processed using one-way cryptographic hashing functions and are never stored in recoverable plain text. JDL88 staff cannot retrieve your password.
• Access controls — internal access to Personal Data is restricted on a need-to-know basis, with role-based access permissions and audit logging of all data access events.
• Intrusion detection and monitoring — JDL88 operates continuous security monitoring systems to detect and respond to anomalous access patterns or potential security incidents.
• Regular security assessments — our platform undergoes periodic security reviews to identify and remediate vulnerabilities in our systems and processes.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, JDL88 will notify affected Data Subjects without undue delay in accordance with applicable legal requirements, providing details of the nature of the breach and the steps taken to mitigate its effects.

Data Retention

JDL88 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required under applicable law or regulation. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification. Where full deletion is not technically feasible (for example, within backup archives), the data will be isolated from active processing until it can be securely destroyed.

Your Data Rights

As a Data Subject, you are entitled to exercise the following rights in relation to your Personal Data held by JDL88. Requests to exercise these rights should be submitted in writing to our support team as described in Section 16. We will respond to all valid requests within thirty (30) calendar days of receipt.

Where JDL88 is unable to action a request — for example because doing so would conflict with a mandatory legal retention obligation — we will provide a written explanation of the grounds for refusal within the same 30-day response window.

Children & Minors

The JDL88 platform is strictly restricted to individuals who are at least twenty-one (21) years of age. JDL88 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process, and any account found to belong to a person under 21 will be immediately closed and all associated Personal Data deleted or anonymised, subject to any mandatory retention obligations under anti-money laundering regulations.

If you have reason to believe that a person under the age of 21 has registered on or is using the JDL88 platform, please contact our support team immediately. We take underage gambling extremely seriously and will act promptly on all such reports.

International Data Transfers

As an online gaming platform serving Malaysian players, JDL88 may transfer Personal Data to third-party service providers and infrastructure partners located outside Malaysia. Such transfers may occur in the context of cloud hosting, payment processing, KYC verification, or fraud screening services.

Where Personal Data is transferred internationally, JDL88 takes appropriate measures to ensure that such transfers are conducted lawfully and that the receiving organisation provides an adequate level of protection for your data, including through:

• Entering into standard contractual clauses or equivalent binding data protection agreements with the receiving entity;
• Ensuring the receiving entity operates in a jurisdiction recognised as providing an adequate level of data protection;
• Implementing supplementary technical measures, such as end-to-end encryption, where appropriate.

You may request details of the safeguards applied to any specific international transfer by contacting our Data Protection team at the address in Section 16.

Third-Party Links & Services

The JDL88 platform may contain references or contextual links to third-party services, including payment providers such as Touch 'n Go eWallet, Boost, and GrabPay. JDL88 does not control the privacy practices of these third-party services and is not responsible for their data handling.

When you interact with a third-party payment provider — for example, by authorising a payment within the Touch 'n Go eWallet app — you are subject to that provider's own privacy policy and terms of service. JDL88 recommends that you review the privacy policies of any third-party service you interact with in connection with your JDL88 account.

Updates to This Privacy Policy

JDL88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The revised Policy will be published at https://jdl88.cam/privacy-policy with an updated Effective Date.

For material changes that significantly affect your rights or the way we process your Personal Data, JDL88 will provide advance notice via email to your registered address or through a prominent notice on the platform's homepage, not less than seven (7) days before the changes take effect.

Your continued use of the JDL88 platform following the publication of an updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. We recommend that you review this Policy periodically and retain a copy for your personal records.

Contact Us

For all privacy-related enquiries, requests to exercise your data rights, or complaints regarding the handling of your Personal Data by JDL88, please contact our Data Protection team through the following channels. All correspondence is handled in English.

When submitting a formal data rights request, please include your registered account username, a description of your request, and a copy of your photo ID to enable us to verify your identity before processing your request. We will not action data rights requests without identity verification to protect against unauthorised access to your Personal Data by third parties.