jm8 Privacy Policy

1. Who We Are

jm8 ("we", "us", "our") operates the online casino and sports betting platform accessible at jm8.lat. We offer a comprehensive suite of gaming products — including live dealer games, slots, Dragon Tiger, Sic Bo, and a full sportsbook — primarily serving players across Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Bangsar.

jm8 is the data controller for all personal information collected through this platform. This Privacy Policy applies to all products and services operated under the jm8 brand.

2. Data We Collect

We collect personal data in several ways, depending on how you interact with the jm8 platform:

2.1 Account Registration Data

• Full legal name
• Date of birth (used to verify you are 21 years of age or older)
• Email address
• Mobile number (Malaysian numbers in +60 format)
• Residential address
• Username and password (stored in hashed form — never in plain text)

2.2 Identity Verification (KYC) Data

In compliance with anti-money laundering (AML) requirements, we may request identity documents such as a copy of your MyKad, passport or utility bill. These documents are processed securely and are not shared with any party other than our licensed KYC service provider.

2.3 Financial Transaction Data

• Deposit and withdrawal records (amounts, timestamps, methods)
• FPX transaction reference numbers
• DuitNow and e-wallet identifiers (Touch n Go eWallet, Boost, GrabPay)
• Bank account details where applicable (Maybank, CIMB, Public Bank, RHB, Hong Leong)

2.4 Gameplay and Activity Data

• Game history, session duration and wagering patterns
• Sportsbook bets, odds accepted and market selections
• Bonus and promotion usage records

2.5 Technical and Device Data

• IP address and approximate geolocation
• Browser type, operating system and device identifiers
• Referring URLs and on-site navigation paths

3. How We Use Your Data

jm8 uses personal data collected from you for the following specific purposes:

• Account management: Creating, verifying and maintaining your jm8 player account.
• Transaction processing: Handling deposits and withdrawals via FPX, DuitNow, Touch n Go eWallet, Boost and other supported payment methods in MYR.
• Identity verification: Confirming your age (21+), identity and residency as required under applicable gaming regulations.
• Customer support: Responding to your enquiries submitted via live chat or email at [email protected].
• Fraud prevention: Detecting, investigating and preventing fraudulent activity, collusion and money laundering.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and enforcing deposit limits, cool-off periods or self-exclusion where requested or required.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the jm8 platform experience.
• Marketing communications: Sending promotional offers, bonus announcements and event updates — only where you have opted in to receive such communications.
• Legal compliance: Meeting obligations under applicable laws, court orders and regulatory directives.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: Processing is required to fulfil our obligations under the jm8 Terms & Conditions you agreed to upon registration.
• Legal obligation: Certain data processing is mandated by anti-money laundering laws, tax regulations and licensing conditions.
• Legitimate interests: We process data for fraud prevention, platform security and responsible gaming monitoring, where our legitimate interests do not override your fundamental rights.
• Consent: For optional marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

5. Sharing and Disclosure

jm8 does not sell or rent your personal data to third parties. We may share your information with carefully selected third parties only in the following circumstances:

5.1 Service Providers

We engage trusted third-party vendors to perform specific functions on our behalf, including payment processing (FPX gateway operators, DuitNow), KYC/identity verification providers, cloud hosting services and customer support software. These vendors are contractually obligated to process your data solely for the purposes we specify and to maintain appropriate security measures.

5.2 Regulatory and Legal Authorities

We may disclose personal data to government agencies, regulators or law enforcement bodies when required by law, court order or to protect the rights and safety of jm8, its employees and its players.

5.3 Business Transfers

In the event of a merger, acquisition or sale of business assets, your personal data may be transferred as part of that transaction. We will notify affected players and ensure data protection obligations continue to be met.

6. Cookies and Tracking Technologies

jm8 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help us recognise returning players, remember preferences and analyse how our platform is used.

6.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly, including session management and login authentication. These cannot be disabled.
• Analytics cookies: Help us understand how players navigate jm8, which games are most popular and where improvements can be made. Data is aggregated and anonymised.
• Preference cookies: Remember your language, currency and display settings so you do not need to reconfigure them on each visit.
• Marketing cookies: Used only with your consent to measure the effectiveness of promotional campaigns. You can opt out at any time via your account settings.

You may control cookie settings through your browser. Note that disabling essential cookies will affect the functionality of your jm8 account.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Our standard retention periods are as follows:

• Account data: Retained for the duration of your account's active status, plus a minimum of five (5) years following account closure to meet anti-money laundering record-keeping obligations.
• Transaction records: Retained for seven (7) years in line with financial record-keeping requirements applicable to licensed gaming operators.
• KYC documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.

8. Security Measures

jm8 has implemented a comprehensive information security programme to protect your personal data against unauthorised access, disclosure, alteration and destruction. Key measures include:

• Transport Layer Security (TLS 1.3) for all data transmitted between your device and our servers
• AES-256 encryption for all personally identifiable information stored in our databases
• Bcrypt hashing with salting for all account passwords — we never store passwords in readable form
• Multi-factor authentication options for player accounts
• Regular third-party penetration testing and independent security audits
• Role-based access controls ensuring only authorised personnel can access player data
• Comprehensive audit logging of all data access and modification events
• 24/7 intrusion detection and incident response monitoring

9. Your Privacy Rights

As a jm8 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

• Right of access: Request a copy of all personal data we hold about you.
• Right to rectification: Ask us to correct any inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for us to retain it, subject to our legal obligations.
• Right to restrict processing: Ask us to pause processing of your data in certain circumstances while a dispute is resolved.
• Right to data portability: Receive a copy of your data in a structured, machine-readable format to transfer to another service provider.
• Right to object: Object to the processing of your data for direct marketing or where we rely on legitimate interests as our legal basis.
• Right to withdraw consent: Where we process data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10. Age Restriction — 21+ Only

jm8 operates a strict minimum age policy. Our platform is intended solely for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21.

During registration, we require all players to confirm their age and we conduct identity verification checks to enforce this requirement. If we discover that a player has provided false age information, we will immediately suspend their account, void any balances resulting from activity during the underage period and report the matter to the relevant authorities where required.

If you believe that a minor has accessed jm8 and created an account, please contact us immediately at [email protected] so that we can take prompt action.

11. Payment Data and Financial Security

All payment transactions on jm8 — whether via FPX, DuitNow, Touch n Go eWallet, Boost, GrabPay or direct bank transfer through Maybank, CIMB, Public Bank, RHB or Hong Leong — are processed through licensed and regulated payment gateways. jm8 does not store full card numbers, CVV codes or sensitive authentication data on our own servers.

Payment processor partners are required to comply with applicable financial services regulations and maintain their own data security programmes consistent with industry standards. All MYR transactions are processed through Malaysian banking infrastructure with end-to-end encryption.

12. Changes to This Policy

jm8 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform features. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send a notification to your registered email address where the changes are significant
• Display a prominent notice on the jm8 platform for a period of at least 14 days following the update

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the jm8 platform following notification of material changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way jm8 handles your personal data, please reach out to our dedicated privacy support team:

We are committed to working with you to resolve any privacy concerns fairly and promptly. Your trust in jm8 is something we work hard to earn and maintain every day.