Joss168 Privacy Policy – Your Data Protection

1Introduction & Scope of This Policy

Welcome to the Privacy Policy page joss168. We understand that trusting any online platform with your personal information is a significant decision. That's why we want to be completely transparent about our privacy practices.

This policy applies to all users who access the joss168 website, use our mobile app, or interact with any of our services. It covers all types of information we may collect from you — whether you are simply browsing our site or an active member making daily transactions.

By using the joss168 platform, you agree to the collection and use of information as described in this policy. If you do not agree, we encourage you to discontinue use of our platform and contact us to request account closure if needed.

2Types of Personal Data We Collect

Joss168 only collects data that is genuinely necessary to deliver our services effectively and securely. The main categories of data we collect are:

We never collect sensitive data such as medical information, political views, or religious beliefs. All data collection is conducted transparently and with a clear purpose.

3Purpose of Your Personal Data Use

Joss168 uses your personal data solely for legitimate purposes directly related to delivering our platform services. We do not sell or rent your data to any third party for marketing purposes.

• Identity verification and KYC — to verify member eligibility and comply with regulatory requirements.
• Transaction processing — your deposits, withdrawals and account balance management run smoothly and securely.
• Account security — detects suspicious activity, prevents fraud and protects your funds.
• Customer support — enables our team to understand the context of your issue and provide more accurate assistance.
• Platform improvements — anonymised usage data analysis helps us improve the user experience.
• Service Communications — important notifications relating to your account, security and policy changes.
• Legal compliance — fulfils reporting obligations to the relevant authorities when required.

Whenever we intend to use your data for a new purpose not stated here, we will seek your consent in advance or update this policy with clear notice.

4Information Sharing & Disclosure

Joss168 does not share your personal information with outside parties except in the following limited and controlled circumstances:

• Payment service providers — FPX, DuitNow, Touch 'n Go and other providers required to process your financial transactions securely.
• KYC and identity verification partners — third-party providers that help us verify member identities in accordance with compliance requirements.
• Regulatory authorities and law enforcement agencies — when required by Malaysian law or a valid court order.
• Auditors and professional advisors — bound by strict confidentiality obligations in the performance of their duties.
• Business transfers — in the event of a merger, acquisition or sale of company assets, your data will be transferred as part of those assets with appropriate notice given to you.

5Security & Data Protection

Joss168 invests seriously in security infrastructure to ensure your personal data is always protected. We combine technology, procedures, and staff training to maintain a secure environment.

• 256-bit SSL Encryption protects all data in transit between your device and joss168 servers.
• Data-at-rest encryption ensures sensitive information such as financial data and KYC documents is stored in encrypted form.
• Two-factor authentication (2FA) available to all member accounts as an added layer of protection.
• 24/7 Security Monitoring by our automated systems and internal security team.
• Restricted data access — only staff who genuinely need access to specific data to perform their duties are permitted to do so.
• Periodic penetration testing conducted by independent security experts to detect and close any system vulnerabilities.

While we take all reasonable measures, no online system can be guaranteed 100% secure. In the event of any security incident involving your data, joss168 will notify you within the timeframe required by applicable law.

6Cookies & Tracking Technology

The joss168 website and app use cookies and similar tracking technologies to enhance the user experience and analyze platform performance. Here are the types of cookies we use:

• Essential cookies — required for core platform functions such as login, session security and language preferences. These cookies cannot be disabled.
• Performance cookies — collects information about how you use our platform to help us improve site functionality and speed.
• Functional cookies — saves your preferences such as display theme and account settings for a more comfortable experience.
• Analytics cookies — anonymised data helps us understand usage patterns and improve our services overall.

You can manage your cookie preferences through your browser settings at any time. However, disabling certain cookies may affect core functionality on the joss168 platform.

7Your Rights Regarding Personal Data

As a joss168 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal information:

To exercise any of the above rights, contact the joss168 support team via live chat on the platform. We will process your request within 14 working days.

8Data Retention Period

Joss168 retains your personal data only for as long as necessary for the purposes described in this policy or as required by Malaysian law.

• Active account data — retained for as long as your account is active and for a defined period after account closure.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian financial reporting legal requirements.
• KYC Documents — retained for 5 years after the business relationship ends in accordance with anti-money laundering requirements.
• Support communication logs — retained for 2 years for reference and dispute resolution purposes.
• Anonymised analytics data — may be retained indefinitely as it cannot be linked to any specific individual.

Once the retention period expires, your data will be securely deleted or anonymized using procedures approved by industry standards.

9Child Protection

The joss168 platform is intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we determine that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question. Parents or guardians who become aware that their child has registered on our platform are urged to contact us immediately.

10Amendments to This Privacy Policy

Joss168 reserves the right to update or modify this privacy policy from time to time to reflect changes in our practices, legal requirements, or new platform features introduced.

Any material changes to this policy will be communicated to you through:

• Notifications will appear in your account upon your next login.
• A notification email will be sent to the email address registered to your account.
• Update the "Updated" date at the top of this page.

Your continued use of the joss168 platform after any amendments take effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.