Privacy Policy

This Privacy Policy ("Policy") describes how Jaya66 ("Company", "we", "us", or "our"), the operator of the Jaya66 online gaming platform accessible at https://jaya66.lat ("Platform"), collects, processes, stores, shares, and protects the personal data of all individuals who register for or use our Services.

Jaya66 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection legislation. We recognise that the players and visitors who use the Jaya66 Platform — whether you are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere in Malaysia — place significant trust in us when they share personal information, and we take that responsibility seriously.

By accessing the Platform, creating an Account, or using any of our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with our Terms and Conditions, which govern the overall contractual relationship between you and Jaya66. In the event of any conflict between this Policy and our Terms and Conditions, the Terms and Conditions shall prevail with respect to the contractual relationship, and this Policy shall govern the treatment of personal data.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Data Controller" means Jaya66, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of Jaya66, pursuant to documented instructions from Jaya66.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the process by which we verify your identity and assess risk, as required by applicable financial crime regulations.
• "Cookie" means a small text file placed on your device by the Platform for the purposes of session management, analytics, or personalisation.
• "Account" means the registered player account you hold on the Jaya66 Platform.

Jaya66 collects personal data that is necessary for the provision of our Services. We collect only the minimum data required and do not process personal data beyond what is necessary for the stated purposes.

We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless specifically required for responsible gambling purposes, such as processing self-exclusion requests or hardship assessments.

Jaya66 collects personal data through the following means:

• Direct collection: When you register an Account, complete your profile, submit KYC documents, contact customer support, participate in promotions, or communicate with us via email or live chat.
• Automated collection: As you interact with the Platform, we automatically collect technical data through cookies, server logs, and similar technologies. This includes your IP address, device fingerprint, and browsing behaviour on the Platform.
• Payment processors: When you make a deposit or withdrawal via Malaysian payment channels (Maybank2u, CIMB Clicks, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, or others), our payment processing partners share relevant transaction data with us for verification and reconciliation purposes.
• Identity verification partners: During KYC procedures, we may use third-party identity verification services to cross-reference the information you provide against authoritative databases.
• Publicly available sources: In connection with AML screening, we may cross-reference your details against publicly available sanctions lists, politically exposed persons (PEP) databases, and adverse media records.

Jaya66 processes your personal data for the following specific purposes. We do not process your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by applicable law.

• Account management: Creating and administering your registered Account, verifying your identity and age, and maintaining the accuracy of your profile information.
• Service delivery: Enabling you to access games, place bets, deposit and withdraw MYR funds, and use all features of the Jaya66 Platform.
• Financial transaction processing: Processing deposits and withdrawals via your chosen Malaysian payment methods and reconciling transaction records.
• Fraud prevention and security: Detecting, investigating, and preventing fraud, money laundering, unauthorised account access, and other unlawful activities.
• Regulatory compliance: Fulfilling obligations under applicable AML, KYC, and data protection regulations, including retaining records for statutory periods.
• Responsible gambling: Monitoring gaming activity to identify signs of problem gambling, enforcing self-exclusion decisions, and processing requests for deposit limits or cooling-off periods.
• Customer support: Responding to your queries, complaints, and feedback, and maintaining records of support interactions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game offerings.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications. You may withdraw consent at any time.

Jaya66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you as a registered player — including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and regulatory record-keeping obligations.
• Legitimate interests: Processing conducted for our legitimate business interests, including fraud prevention, Platform security, and improving our Services — provided that these interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent as the legal basis for processing — particularly for marketing communications and optional analytics — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

Jaya66 does not sell or rent your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients only where necessary and only to the extent required:

• Payment service providers: Malaysian payment processors including DuitNow network participants, FPX member banks, Touch 'n Go eWallet, Boost, and GrabPay — for the purpose of processing your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity, age, and source of funds as required by applicable regulations.
• Game technology providers: Licensed game studio partners who operate the underlying game engines. These providers receive only technical session data necessary to deliver game content; they do not receive personally identifiable information.
• IT and infrastructure providers: Cloud hosting, database, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Relevant regulatory bodies, financial intelligence units, and law enforcement agencies, where we are legally required or compelled to disclose information — for example, in connection with AML reporting obligations or court orders.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by Jaya66, where necessary for the provision of their services to us.

Jaya66 uses cookies and similar tracking technologies to ensure the proper functioning of the Platform and to improve the player experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These are essential for the Platform to function. They enable you to log in, maintain your session, and use core features. These cookies cannot be disabled without preventing the Platform from functioning.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players interact with the Platform — pages visited, time spent, errors encountered. We use this data to improve Platform performance and user experience. These require your consent.
• Functionality Cookies: These remember your preferences such as language settings, game filters, and display options, allowing us to personalise your experience on return visits.
• Security Cookies: Used to support fraud detection, bot prevention, and account security features. These are strictly necessary for Platform security and cannot be disabled.

You can manage your cookie preferences at any time through the cookie settings accessible on the Platform. Please note that disabling non-essential cookies may affect certain Platform features but will not prevent you from playing or managing your Account.

Jaya66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data (active accounts): Retained for the lifetime of your Account. You may request account closure and data deletion at any time, subject to the exceptions below.
• Account data (closed accounts): Retained for a minimum of 7 years following Account closure to satisfy AML, KYC, and regulatory record-keeping obligations.
• Financial transaction records: Retained for 7 years in accordance with applicable financial regulations.
• KYC documents: Retained for 5 years following the end of the business relationship, unless a longer retention period is required by regulation.
• Customer support records: Retained for 3 years following resolution of the relevant query or complaint.
• Marketing and preference data: Retained until you withdraw consent or close your Account, whichever is earlier. Deleted within 30 days of opt-out.
• Technical and log data: Typically retained for 12 months for security and fraud prevention purposes, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it cannot be recovered or re-identified.

Jaya66 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security programme includes the following controls:

• AES-256 encryption for all data in transit (TLS 1.3) and data at rest in our databases.
• Two-factor authentication (2FA) available to all players to protect Account access.
• Role-based access control limiting internal employee access to personal data to only those with a business need.
• Real-time fraud monitoring and anomaly detection systems operating 24 hours a day, 7 days a week.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Security incident response procedures ensuring that any data breach is identified, contained, and reported within required timeframes.
• Employee security training ensuring all staff who handle personal data are trained on data protection obligations and secure data handling practices.

As a data subject, you hold specific rights over your personal data held by Jaya66. We are committed to facilitating the exercise of these rights without undue delay. The following rights are available to you:

To exercise any of the above rights, please contact our Data Protection team at [email protected] with your request. We will acknowledge receipt within 5 business days and respond in full within 30 calendar days. In complex cases, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it.

We may need to verify your identity before processing certain requests to ensure that personal data is not disclosed to unauthorised individuals. We will not charge a fee for processing your request unless it is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

In certain circumstances, personal data processed by Jaya66 may be transferred to, stored in, or accessed from, locations outside of Malaysia. This may occur where we use cloud infrastructure, third-party service providers, or technology partners based in other jurisdictions.

Where personal data is transferred internationally, Jaya66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. Such safeguards include contractual obligations imposed on recipient organisations through standard data protection clauses, and requirements to implement technical security measures consistent with those applied by Jaya66.

We do not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without implementing compensating controls. For questions about international data transfers or the safeguards we apply, please contact us at [email protected].

The Jaya66 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the Account registration and KYC processes to enforce this requirement.

If Jaya66 becomes aware that personal data has been inadvertently collected from an individual under the age of 21, we will promptly delete that data and permanently close the associated Account. Any funds held in such an Account will be returned in full.

Jaya66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform functionality. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where we make material changes to this Policy — changes that significantly affect your rights or the way we process your personal data — we will notify you by email to your registered address and/or by a prominent notice on the Platform prior to the changes taking effect.

For minor or non-material updates, the revised Policy will be posted on this page without individual notice. We encourage you to review this Policy periodically to stay informed about how we are protecting your data. Your continued use of the Platform following the posting of changes constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Jaya66 handles your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related enquiries professionally and promptly.

If you are not satisfied with our response to your privacy enquiry, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.