Updated: January 2026 • SSL 256-bit

Privacy Policy JP88 – How We Protect Your Personal Data

At JP88, your privacy is more than a legal obligation — it is our moral commitment to every member who entrusts this platform with their personal information. This document clearly and honestly explains what we collect, why we need it, and how we protect it.

JP88's Privacy Commitment
Encryption SSL 256-bit for all data
Your data not sold to any party
You have the right access and delete your data
Full compliance with Malaysia PDPA
Notice 72 hours for any data breach
Effective from 1 January 2026

Six Principles Data Protection JP88

These are not just words — every one of these principles is reflected in JP88's technical systems and day-to-day operational processes.

Minimal Collection

JP88 only collects data that is strictly necessary to operate our services. If a piece of information is not required for account operation, identity verification, or payment processing, we do not ask for it. This principle of data minimisation is fundamental to how we design every form and process.

Minimum Data
End-to-End Encryption

All data transmitted between your device and JP88's servers is encrypted using 256-bit SSL — the same standard used by major Malaysian banks such as Maybank and CIMB. Your financial information, including DuitNow details, Touch 'n Go eWallet, and FPX, is never stored in plain text on our servers.

SSL 256-bit
No Data Selling

JP88 never sells, rents, or trades members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — we only manage it on your behalf to keep JP88's services functioning properly and securely.

Data Not Sold
Strict Access Controls

Access to JP88 member data is strictly limited to staff with a legitimate operational need. All internal access is logged and regularly audited. Every staff member who handles member data undergoes background checks and privacy compliance training before access is granted.

Restricted Access
Regular Security Audits

JP88 conducts independent security audits on a regular basis to identify and address any vulnerabilities in our data protection systems. Penetration testing is carried out at least twice a year by accredited third-party cybersecurity firms.

Independent Audit
Rapid Breach Notification

In the event of any security incident involving JP88 member data, we are committed to notifying affected members within 72 hours of discovering the incident. The notification will describe the nature of the incident, the data potentially affected, and the steps JP88 is taking in response.

72-Hour Notice

This Privacy Policy explains how JP88 (referred to as "we", "the JP88 platform", or "JP88" in this document) collects, uses, stores, and protects your personal data when you use the JP88 platform at jp88-khelo.com. By registering an account or continuing to use JP88's services, you agree to the practices described in this Privacy Policy.

We wrote this document in clear, plain English because we believe you deserve to know exactly what happens with your information — without getting lost in legal jargon that most people find impossible to follow. If you have any questions after reading this, don't hesitate to reach out to the JP88 support team.

1

Personal Data We Collect

JP88 collects your personal data through several channels — during account registration, during platform use, and through automated technologies such as cookies. Below are the types of data we collect and the purposes they serve:

Data Category Example Information Primary Purpose
Identity Full name, date of birth, identification card number KYC & Age Verification
Contact Phone number, email address, full postal address Account Communications
Finance Bank account number, digital wallet details Payment Processing
Technical IP address, device type, web browser, login session Security & Fraud Detection
Usage Game history, total wagers, play duration Responsible Gaming
Communication Customer support records and feedback Service Improvement
JP88 does not collect more information than is necessary for the stated purposes. We do not request irrelevant sensitive information such as medical or religious details.
2

How JP88 Uses Your Data

The personal data we collect is used solely for purposes related to delivering JP88's services to you. Below is a more detailed breakdown of how we use your data:

  • Account Management: To create, verify and manage your JP88 account, including the login process, password resets and two-factor authentication.
  • Transaction Processing: To process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), and to accurately and securely process withdrawals to your account.
  • KYC Verification: To verify your identity in compliance with anti-money laundering legal requirements and to ensure that JP88's services are only accessed by eligible individuals.
  • Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multiple account ownership, and any other misuse of the JP88 platform.
  • Service Improvement: To analyze aggregated platform usage patterns for the purpose of improving the user experience, refining the interface, and adding features that are relevant to Malaysian players.
  • Service Communications: To send important account-related notices, changes to our terms, promotions you are eligible for, and security updates. Marketing communications are only sent to members who have given their consent.
  • Responsible Gaming: To monitor your gameplay patterns for early signs of dependency issues, and to provide timely alerts or intervention recommendations in line with JP88's commitment to responsible gaming.
  • Legal Compliance: To meet regulatory reporting requirements and comply with relevant legal authorities in accordance with applicable Malaysian law.
JP88 does not use your data for automated decision-making that materially affects you without human involvement in that process.
3

Data Sharing with Third Parties

JP88 does not sell, rent, or trade personal data of members to any third party for marketing or commercial purposes. However, in the course of operating the platform, we do need to share certain data with the following parties under limited and controlled circumstances:

  • Payment Service Providers: The necessary transaction information is shared with payment gateways to process deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX. These providers have their own data security responsibilities and are bound by strict confidentiality agreements.
  • Game Providers: Minimum necessary game data is shared with slots, Live Casino, and sports providers to enable gameplay and ensure winnings are recorded correctly.
  • KYC Service Providers: For identity verification purposes, submitted documents may be processed through an accredited third-party identity verification platform.
  • Legal Authorities: JP88 will disclose required data to regulatory bodies, anti-fraud teams, or legal authorities when mandated by Malaysian law or by a valid court order.
  • Independent Auditors: Certified third-party auditors may access certain data within the scope of JP88's periodic security audits. Such access is limited, monitored and subject to binding confidentiality agreements.

All third parties that receive data from JP88 are bound by data processing agreements requiring them to uphold data protection standards equal to or exceeding our own. JP88 is not responsible for the privacy practices of third parties operating outside the scope of those agreements.

JP88 never shares member data with marketing agents, data companies, or third-party data brokers for any purpose. If you receive marketing communications from a party claiming to be associated with JP88 but not through our official channels, it is fraudulent and should be reported to us.
4

Data Security & Technical Protection

JP88 continually invests in technical security infrastructure to ensure your personal data is protected to the highest achievable standard. Our technical security measures include:

  • Transmission Encryption: All data transmitted between your device and JP88 servers is encrypted using TLS 1.3 with a 256-bit SSL certificate. This means that even if someone were to intercept your network traffic, they would be unable to read its contents.
  • Storage Encryption: Sensitive data stored in JP88's databases — including passwords, financial information, and KYC documents — is stored in encrypted form using AES-256 standards.
  • Tiered Access Control: JP88 systems operate on a Role-Based Access Control (RBAC) model, where each staff member can only access the data specifically required for their job responsibilities.
  • 24/7 Monitoring: An automated security monitoring system watches the JP88 platform around the clock to detect any unusual activity or unauthorised access attempts.
  • Multi-Data Centre Infrastructure: JP88 data is stored and backed up across multiple secure data centres with automated backup procedures to ensure data availability and resilience.
  • Regular Penetration Testing: JP88 engages independent cybersecurity firms to conduct penetration testing at least twice a year to identify and remediate any vulnerabilities.
While we invest heavily in technical security, the safety of your account also depends on your own actions. Use a strong password, enable two-factor authentication, and never share your JP88 login credentials with anyone.
5

Your Rights as a Data Subject

As a JP88 member, you have certain rights regarding the personal data we hold about you. These rights are set out below and can be exercised by contacting the JP88 support team:

Right of Access

You have the right to request a copy of the personal data we hold about you. JP88 will provide this information within 30 days of receiving your request.

Right to Rectification

If your data on JP88 is inaccurate or incomplete, you have the right to request a correction. Basic information can be updated directly through your account settings.

Right to Erasure

You may request that JP88 delete your personal data under certain circumstances — for example, when the data is no longer needed or you withdraw your consent. Some data may need to be retained to meet legal obligations.

Right to Restrict Processing

You may request that JP88 restrict how we process your data under certain circumstances — for example, while you are disputing the accuracy of the data or when you object to its processing.

Data Portability Right

You have the right to receive your personal data from JP88 in a machine-readable format (such as JSON or CSV) for reuse, or to have it transferred to another service provider upon request.

Right to Object

You may object to the processing of your data for specific purposes, such as direct marketing. Once an objection to marketing use is received, JP88 will immediately cease using your data for that purpose.

To exercise any of the above rights, contact us at support@jp88-khelo.com by stating the right you wish to exercise. JP88 will respond within 30 business days and may request identity verification before processing your request.
6

Cookies, Tracking & Similar Technologies

The JP88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. Below are the types of cookies we use:

You can manage cookie settings through your web browser preferences. Disabling essential cookies may affect the functionality of the JP88 platform, while disabling analytics and preference cookies will not impact your gaming experience.

7

Child & Vulnerable Individual Protection

The JP88 platform is intended solely for adults aged 18 and above. We take the protection of minors very seriously and have the following measures in place:

  • JP88 does not knowingly collect personal data from individuals under the age of 18. If we discover that a child's data has been collected without our knowledge, it will be deleted immediately.
  • Our KYC process includes age verification to ensure all members meet the minimum age requirement.
  • If you are a parent or guardian who believes your underage child has registered at JP88, please contact us immediately at support@jp88-khelo.com and we will take action without delay.
JP88 and parents or guardians share a joint responsibility to ensure that online gambling platforms remain inaccessible to minors. Please use parental control software where necessary to block access to gambling sites.
8

Data Storage & Retention Period

JP88 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable law. Our retention period guidelines are as follows:

  • Active Account Data: Retained for the duration your JP88 account remains active and for 5 years following account closure, for legal compliance and anti-money laundering purposes.
  • Transaction Records: All deposit, withdrawal and winnings records are retained for a minimum of 7 years in accordance with applicable financial and tax legislation in Malaysia.
  • KYC Documents: Retained for 5 years after the business relationship ends, in compliance with Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act (AMLATFPUAA).
  • Security Logs: Technical and security log data is typically retained for 12 months for the purpose of security incident investigations should they arise.
  • Communication Data: Customer support records and account-related communications are retained for 3 years for reference and dispute resolution purposes.

Once a set retention period expires and there is no legal requirement to retain the data further, your data will be deleted or anonymised in accordance with JP88's secure procedures.

9

Amendments to the Privacy Policy

JP88 reserves the right to update this Privacy Policy from time to time in line with changes in legislation, technology or how we conduct our operations. When material amendments are made, we will:

  • Updating the "Updated" date at the top of this page to reflect the date of the latest amendment.
  • Notifying members of material amendments — those that significantly affect your rights or how we use your data — via registered email or in-platform notice.
  • Maintaining an archive of previous versions of this Privacy Policy, which you may request for review if needed.

Continued use of the JP88 platform after an amended Privacy Policy takes effect will be considered acceptance of the updated terms. If you disagree with any changes made, you have the right to close your JP88 account before the amendments come into effect.

The current version of this Privacy Policy is effective from 1 January 2026. We recommend reviewing this page at least once every six months to stay informed about how JP88 handles your data.
10

Contact Us — JP88 Privacy Officer

If you have any questions, concerns, or complaints about how JP88 handles your personal data, or if you wish to exercise any of the data rights outlined in this document, please contact JP88's Privacy Officer through the following channels:

Privacy Officer Email
support@jp88-khelo.com
In-Platform Live Chat
Available 24/7 — Quote "Privacy Enquiry"
Target Response Time
Within 30 business days
Support Language
Bahasa Malaysia & English

We take every privacy enquiry and complaint seriously. If you are not satisfied with our response, you have the right to escalate your complaint to the Malaysian Communications and Multimedia Commission (MCMC) or a relevant body under Malaysia's Personal Data Protection Act 2010 (PDPA).

Rights Summary Privacy You at JP88

You have full control over your personal data. Here's how to manage it.

📋
Request a Copy of Your Data

Send an email to support@jp88-khelo.com with the subject line "Data Access Request" and we will provide a copy of your data within 30 days.

✏️
Correct Inaccurate Data

Log in to your JP88 account settings to update basic information, or contact support for corrections that cannot be made on your own.

🗑️
Request Data Deletion

To request deletion of your personal data (subject to legal limitations), submit a written request to JP88's Privacy Officer via email.

🚫
Opt Out of Marketing

Use the "unsubscribe" link in any JP88 marketing email, or contact support to opt out of all marketing communications.

Secure Platform & Privacy Protected

Play at JP88 with Full Confidence – Your Data, Always Protected

JP88 is built on trust. Register today and enjoy over 500 games — including jackpot slots, Live Casino, football, badminton and e-sports — all backed by bank-grade data protection. Make fast deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX.

DuitNow Touch 'n Go GrabPay Boost ShopeePay FPX
Related Documents

This Privacy Policy should be read together with JP88 Terms & Conditions and Responsible Gaming Policy us for a complete understanding of your rights and responsibilities as a JP88 member. Together, these three documents form the full agreement between you and JP88.

Bahasa Melayu