Privacy Policy

This Privacy Policy ("Policy") describes how jbmbet ("Company", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://jbmbet.click, collects, uses, stores, and protects personal data belonging to users ("User", "Player", "you", "your") of the Platform.

This Policy applies to all personal data processed in connection with your access to and use of the jbmbet Platform, including data collected during account registration, identity verification (KYC), financial transactions, platform usage, customer support interactions, and marketing communications where consent has been provided.

By registering an account or continuing to use the jbmbet Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a living individual, directly or indirectly. This includes but is not limited to: name, email address, NRIC/IC number, IP address, and device identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" — jbmbet, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of jbmbet under a contractual arrangement and in accordance with jbmbet's instructions.
• "KYC Data" — Identity and address verification documents submitted by the User for the purpose of fulfilling Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance requirements.
• "Cookies" — Small data files placed on a User's device by the Platform for the purposes of session management, preference storage, and usage analytics.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their Personal Data for a stated purpose.

jbmbet collects the following categories of Personal Data:

jbmbet collects Personal Data through the following means:

• Direct provision by the User — when you complete account registration, submit KYC documents, make a deposit or withdrawal, contact our support team, or update your account profile.
• Automated technical collection — when you access the Platform, our servers automatically log Technical Data including your IP address, device identifiers, session metadata, and browser information.
• Cookies and tracking technologies — when you navigate the Platform, session cookies, functional cookies, and analytics cookies are placed on your device in accordance with Section 9 of this Policy.
• Third-party payment processors — when you initiate a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency channels, relevant transaction confirmation data is shared with us by the payment processor.
• Identity verification services — jbmbet may engage third-party KYC verification providers to cross-reference identity documents submitted by Users against official records, solely for the purpose of age and identity confirmation.

jbmbet processes Personal Data only where a valid legal basis exists. The primary legal bases and corresponding purposes are as follows:

• Performance of a Contract: Processing your Identity Data, Contact Data, and Financial Data is necessary to create and administer your jbmbet account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal Obligation: We are required to collect and retain KYC Data and transaction records to comply with international anti-money-laundering (AML) regulations, counter-terrorism financing (CTF) requirements, and the conditions of our operating licence.
• Legitimate Interests: We process Technical Data and Usage Data to detect and prevent fraud, ensure platform security, and improve the quality of our services. Our legitimate interest in protecting the platform and its users outweighs any privacy impact of this processing.
• Consent: Where you have opted in to receive marketing communications, we process your Contact Data and marketing preferences on the basis of your freely given, informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
• Responsible Gambling: We process Usage Data to monitor betting patterns and identify potential signs of problem gambling behaviour, fulfilling our obligation to provide player protection tools under our licensing conditions.

jbmbet does not sell, rent, or otherwise transfer your Personal Data to third parties for their own commercial purposes. We may share specific categories of data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Processing Partners: Financial transaction data is shared with Malaysian payment service providers (including FPX network operators, e-wallet platforms such as Touch 'n Go eWallet and Boost, and banking partners including Maybank, CIMB, Public Bank, and Hong Leong) solely for the purpose of executing deposit and withdrawal instructions.
• KYC & Identity Verification Providers: Identity documents and related verification data may be processed by third-party KYC service providers engaged by jbmbet under strict data processing agreements. These providers act solely as Data Processors and may not use your data for any independent purpose.
• Game Content Providers: Limited technical data (such as session tokens and game outcome records) is shared with the game studios and live dealer platform operators whose content is integrated into jbmbet, for the purpose of delivering game services and resolving game-related disputes.
• Legal and Regulatory Authorities: jbmbet may be required to disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law, a valid court order, or as necessary to protect the rights and safety of users or the public.
• Professional Advisers: Legal counsel, auditors, and compliance advisers may access limited personal data on a confidential basis where necessary to provide professional services to jbmbet.

As an internationally licensed platform, jbmbet may process or store your Personal Data in jurisdictions outside Malaysia. Where such transfers occur, jbmbet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the applicable data protection laws of our licensing jurisdiction.

Safeguards employed for international transfers may include: Standard Contractual Clauses (SCCs) or equivalent binding contractual data transfer agreements with the recipient entity; transfers to recipients located in jurisdictions recognised as providing adequate data protection; or other approved transfer mechanisms under applicable law.

If you would like further information regarding the specific safeguards applied to any international transfer of your Personal Data, you may contact us using the details provided in Section 14 of this Policy.

jbmbet retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal retention requirements. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account relationship with jbmbet, and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with international financial compliance standards.
• KYC Documents: Retained for the duration required under the applicable AML regulatory framework — typically five (5) years from the end of the business relationship.
• Technical and Usage Data: Retained for up to twelve (12) months from collection, unless required for longer for fraud investigation or dispute resolution purposes.
• Communications Data: Live Chat transcripts and support email records are retained for up to two (2) years for quality assurance and dispute resolution purposes.
• Marketing Preference Data: Retained until you withdraw consent or request deletion, plus a reasonable period thereafter to process the withdrawal.

Upon expiry of the applicable retention period, jbmbet will securely delete or anonymise your Personal Data in a manner that prevents reconstruction or identification.

jbmbet uses cookies and similar web technologies to operate the Platform, maintain session continuity, and analyse user behaviour for the purpose of improving the platform experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing core platform functionality.
• Functional Cookies: Store user preferences such as language settings, display options, and responsible gambling tool configurations. These improve your experience but are not strictly required for the Platform to operate.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — pages visited, session duration, error reports — to help us improve usability and performance. No personally identifiable information is included in analytics reports.

jbmbet does not use third-party advertising cookies or permit any external advertising network to place cookies on the Platform.

Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you hold the following rights in respect of your Personal Data held by jbmbet:

To exercise any of the rights listed above, please contact our Data Privacy team via email at [email protected] with the subject line "Data Privacy Request", including your registered username and a clear description of the right you wish to exercise. We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

The jbmbet Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from individuals under the age of 21. Account registration requires confirmation that the applicant is at least 21 years old, and all accounts are subject to mandatory age verification as part of the KYC process.

If jbmbet becomes aware that Personal Data has been collected from an individual under the age of 21 without appropriate parental consent, we will take immediate steps to delete that data and suspend the associated account. If you believe that a minor may have accessed the Platform using false information, please contact us immediately at [email protected].

jbmbet implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and jbmbet's servers is protected by 256-bit encryption using TLS 1.2 or higher.
• Data Encryption at Rest: Sensitive data stored in jbmbet's systems — including financial records and KYC documents — is encrypted using AES-256 encryption at rest.
• Access Controls: Access to Personal Data is restricted on a role-based, least-privilege basis. Only personnel with a legitimate operational need may access identifiable user data, and all such access is logged and auditable.
• Two-Factor Authentication (2FA): All jbmbet accounts support two-factor authentication. Users are strongly encouraged to enable 2FA to add an additional layer of security beyond their password.
• Intrusion Detection Systems: jbmbet operates continuous network monitoring and anomaly detection to identify and respond to potential security threats in real time.
• Regular Security Audits: The Platform undergoes periodic independent security audits and penetration testing to identify and remediate vulnerabilities proactively.

While jbmbet takes all reasonable steps to protect your data, no online system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jbmbet will notify affected users within a reasonable timeframe and take all practicable remediation steps.

jbmbet reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services offered on the Platform. When material changes are made, we will provide notice via a prominent banner on the Platform and/or by email to registered users at the address associated with their account.

The "Last Updated" date at the top of this page will be revised with each update. We encourage you to review this Policy periodically to remain informed of how your Personal Data is handled. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data, please contact jbmbet through the following channels:

• Privacy & Data Requests Email: [email protected] — Please use the subject line "Data Privacy Request" for all privacy-related enquiries.
• General Support Email: [email protected] — For all other account and platform support queries.
• Business Enquiries: [email protected]
• Live Chat: Available 24/7 directly within the Platform. Average response time: 3–5 minutes. Live Chat support is available in Bahasa Melayu, Mandarin, and English.

We aim to respond to all data privacy requests within 5 business days of receipt, and to resolve requests fully within 30 calendar days. For complex requests, we may require up to 90 calendar days, in which case we will notify you of the extension and the reasons for it.