Privacy Policy JDL688 — Data Protection & Member Security

Jdl688 collects your personal data through several key channels — during account registration, while you use the platform, and through interactions with our support team. All data is collected on a necessity-only basis and nothing more.

We may also collect data when you contact our support team — including Live Chat transcripts and emails — for training and service improvement purposes. You will be notified before any recording takes place.

All data collection is based on one of three lawful bases: contractual obligation (processing your account and payments), legal obligation (KYC and AML), or legitimate interest (platform security and fraud prevention). We do not rely on implied consent for the collection of mandatory data.

The data we collect is used exclusively for the purposes listed below. We do not use your data for any purpose not stated here without first obtaining your additional consent.

• Account Management: Registering, verifying, and maintaining your account, including secure login processes and active session management.
• Transaction Processing: Processing deposits and withdrawals accurately and securely via DuitNow, FPX, Touch 'n Go, GrabPay, and USDT.
• KYC/AML Compliance: Fulfilling legal obligations related to identity verification and anti-money laundering in accordance with Bank Negara Malaysia guidelines.
• Customer Support: Addressing enquiries, resolving complaints, and processing account-related requests more efficiently.
• Platform Security: Detecting and preventing fraudulent activity, unauthorised access attempts, and system abuse.
• Service Improvement: Analysing usage patterns on an aggregated (not individual) basis to improve user experience and platform performance.
• Important Communications: Sending important notifications regarding your account, policy changes, and security updates you need to be aware of.
• Marketing (with consent): Sending bonus offers and promotions via email or in-app notifications, only if you have agreed to receive marketing communications.

Jdl688 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where we need to share your data with certain parties to ensure the platform operates properly and remains legally compliant:

• Payment Providers: Minimal transaction data is shared with payment service providers such as DuitNow and FPX solely to process your deposits and withdrawals.
• Game Providers: Third-party game platform providers (such as Pragmatic Play and Evolution Gaming) receive the session data necessary to operate the games. These providers maintain their own privacy policies that comply with international standards.
• Statutory Authority: jdl688 will disclose data to law enforcement authorities or regulatory bodies when required by Malaysian law or a valid court order.
• Infrastructure Providers: Cloud and cybersecurity service providers used by jdl688 have limited access to data within the scope of their work only, and are bound by strict confidentiality agreements.

Data security is not an add-on feature at jdl688 — it is central to how we build and operate the platform. Here are the security layers we use to protect your data:

• 256-bit SSL/TLS Encryption: All communications between your device and jdl688 servers are encrypted using TLS 1.3, the highest industry standard used by global financial institutions.
• Bcrypt Password Storage: Your password is never stored in plain text. We use the bcrypt hashing algorithm with a unique salt for each account, meaning no one — including our staff — can view your actual password.
• Two-Factor Authentication (2FA): We provide and encourage the use of 2FA on all accounts to add an extra layer of protection against unauthorised access, even if your password has been compromised.
• 24/7 Monitoring: Our cybersecurity team monitors platform activity around the clock using automated threat detection systems that trigger instant alerts upon detecting suspicious activity.
• Regular Penetration Testing: We conduct regular security assessments, including penetration testing by independent security audit firms, to identify and address system vulnerabilities before they can be exploited.
• Internal Access Controls: Access to jdl688 members' personal data among staff is restricted on a strictly need-to-know basis. All access is logged and auditable.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding the personal data we hold. jdl688 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, you may contact the jdl688 customer support team via 24/7 Live Chat or our official email. We will process your request within 14 business days. If your request requires additional time due to its complexity or volume, we will notify you and provide a realistic estimated timeframe.

The jdl688 platform uses cookies and similar tracking technologies to ensure a smooth and secure user experience. Below are the types of cookies we use and their purposes:

• Essential Cookies (Required): Required for core platform functions such as login session management, CSRF security, and language preferences. These cookies cannot be disabled as they are essential to platform operation.
• Performance Cookies (Analytics): We use analytics tools that collect aggregated, anonymised usage data to understand how users interact with the platform for improvement purposes. This data is not linked to your personal identity.
• Functional Cookies: Saving your preferences such as theme selection, display settings, and favourite games to personalise your experience on future visits.
• Security Token: An encrypted session token is used to verify your identity during an active session and will automatically expire after a period of inactivity.

You can manage cookie settings through your browser. Please note that disabling essential cookies may affect platform functionality. Analytics and functional cookies can be disabled without impacting your core account capabilities.

Jdl688 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. The following is a general guide to our retention periods:

Upon expiry of the applicable retention period, your data will be securely deleted using methods that ensure it cannot be recovered, or anonymised so that it can no longer be personally associated with you.

Jdl688 reserves the right to update this Privacy Policy from time to time in response to changes in law, technology, or how we operate our services. Here is how we manage those changes:

• Any changes material — meaning changes that significantly affect your privacy rights — will be communicated to your registered email at least 14 days before the changes take effect.
• Minor changes that do not materially affect your rights (such as spelling corrections or language clarifications) will be updated immediately with a new revision date at the top of this page.
• If you disagree with the proposed changes, you have the right to close your account before the changes take effect and request a refund of any eligible balance.
• Continued use of the jdl688 platform after the effective date of any changes constitutes acceptance of the updated privacy terms.