Privacy Policy

1 Introduction

JomKiss operates the online casino and sports betting platform accessible at jomkiss.cam (hereinafter referred to as "the Platform", "JomKiss", "we", "our", or "us"). In the course of providing our services — including slot games, live casino tables, sports betting, live football markets, lottery, and arcade games — JomKiss necessarily collects and processes personal data relating to our registered players and website visitors.

This Privacy Policy ("Policy") sets out in clear terms: what personal data JomKiss collects from you; the purposes and legal bases for which that data is processed; the circumstances under which data may be shared with third parties; how long data is retained; the security measures we apply to protect your data; and the rights you hold in relation to your personal information.

JomKiss is committed to handling all personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, and integrity. We apply the same standards of data protection to all our players, whether they are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a living natural person, either alone or in combination with other available data. This includes name, identity document number, email address, phone number, IP address, and payment details.
• "Processing" — any operation performed on personal data, including but not limited to collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — JomKiss, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third-party service provider engaged by JomKiss to process personal data on behalf of and under instruction from the Platform.
• "Player" / "You" — any natural person who has registered an account on the JomKiss Platform or who accesses the Platform as a visitor.
• "KYC" — Know Your Customer: the identity verification process required before withdrawal processing may commence.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

3 Data We Collect

JomKiss collects personal data from you through several channels: data you provide directly when registering or using the Platform; data generated automatically through your use of our services; and, in limited circumstances, data received from third-party service providers.

3.1 Data You Provide Directly

• Full legal name and date of birth (collected at registration).
• Email address and mobile phone number.
• Residential address (including city, state, and postcode).
• Login credentials — username and encrypted password.
• Identity documentation submitted during KYC — MyKad, Driver's Licence, or Passport.
• Proof of address documentation — utility bills or bank statements.
• Payment information — bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, etc.), or FPX/DuitNow account references. Full card or account numbers are not stored by JomKiss; payment processing is handled by our Payment Data Processors.
• Communications submitted through live chat, email support, or feedback channels.

3.2 Data Generated Automatically

• IP address and geolocation data (country and city-level) derived from your connection.
• Device type, browser version, and operating system.
• Session data — login timestamps, session duration, pages visited, and features used.
• Transaction records — all deposit, withdrawal, bonus, and betting activity associated with your account.
• Game activity logs — games played, wagers placed, outcomes recorded, and RTP data.
• Cookies and similar tracking technologies (see Section 9).

3.3 Data from Third Parties

• Identity verification results from KYC service providers.
• Fraud risk scores and screening results from anti-fraud service providers.
• Transaction confirmation data from payment processors and banking partners.

4 Data Processing

The personal data collected by JomKiss is processed for the following specific and defined purposes:

JomKiss does not use your personal data for any purpose not listed above without first notifying you and, where required by applicable law, obtaining your explicit consent to the new processing activity.

5 Legal Basis for Processing

JomKiss processes personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to fulfil the contract between JomKiss and the Player — including account management, deposit processing, game access, and withdrawal handling. Without this processing, JomKiss cannot deliver the services you have registered to use.
• Legal Obligation: Processing required to comply with applicable legal requirements under our international gaming licence — including KYC identity verification, anti-money laundering (AML) checks, and transaction record-keeping.
• Legitimate Interests: Processing that serves a genuine and proportionate business interest of JomKiss — including fraud prevention, platform security monitoring, responsible gambling activity surveillance, and aggregated analytics — provided these interests do not override the fundamental rights and freedoms of the Player.
• Consent: Processing for which JomKiss has obtained your prior, freely given, specific, and informed consent — principally for direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

6 Data Sharing & Disclosure

JomKiss does not sell, rent, or trade personal data to any third party for commercial purposes. We will never share your personal information with advertisers or data brokers. We may share your data with carefully selected third-party service providers exclusively for the purposes of delivering our Platform services:

• Payment Processors: Licensed payment gateway and e-wallet providers (including FPX, DuitNow, and e-wallet infrastructure partners) that process deposit and withdrawal transactions on behalf of the Platform.
• KYC & Identity Verification Providers: Specialist third-party identity verification services that validate the authenticity of identity documents submitted by Players during the KYC process.
• Fraud Detection & AML Screening Services: Providers of automated screening tools used to identify suspicious account activity, prevent financial crime, and fulfil AML obligations under our gaming licence.
• Game Content Providers: Licensed game studios and aggregators that supply slot, live casino, and arcade game content. These providers may receive anonymised session data for game performance analytics purposes only.
• Customer Support Infrastructure: Platform tools that facilitate live chat and email support, which may store communication records in accordance with their own privacy policies.
• Legal & Regulatory Authorities: In circumstances where JomKiss is required by law, court order, or regulatory instruction to disclose personal data. JomKiss will notify the affected Player of any such disclosure requirement to the extent permitted by applicable law.

7 Data Retention

JomKiss retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention guidelines apply:

• Active Account Data: Personal data associated with an active player account is retained for the duration of the account relationship.
• Closed Account Data: Following account closure, personal data (including transaction records and KYC documentation) is retained for a minimum period as required by our gaming licence obligations — typically five to seven years from the date of closure. This retention is required for AML record-keeping, dispute resolution, and regulatory audit purposes.
• Communication Records: Customer support communications are retained for a minimum of two years from the date of the interaction.
• Marketing Data: Data used for promotional communications is retained until you withdraw consent or unsubscribe, after which it is deleted within 30 days of the opt-out request being actioned.
• Cookie & Analytics Data: Anonymised and aggregated analytics data may be retained indefinitely as it cannot be linked to an individual. Non-anonymised session data is retained in accordance with our cookie policy.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders individual re-identification impossible.

8 Data Security

JomKiss implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security: All data transmitted between your browser and the JomKiss Platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. Look for the padlock icon in your browser's address bar.
• Data Encryption at Rest: Sensitive personal data stored in our systems is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within JomKiss is restricted to authorised personnel who require access to perform specific job functions. Role-based access controls and least-privilege principles are applied throughout.
• Two-Factor Authentication: JomKiss offers two-factor authentication (2FA) for Player accounts. We strongly encourage all Players to enable this additional security layer.
• Penetration Testing & Security Audits: The Platform undergoes regular independent security assessments to identify and remediate vulnerabilities.
• Incident Response: JomKiss maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify affected Players promptly in accordance with our obligations.

9 Cookies & Tracking Technologies

JomKiss uses cookies and similar technologies (such as pixel tags and web beacons) on the Platform. A cookie is a small text file placed on your device by a website server, which allows the website to recognise your device on subsequent visits and store certain information about your preferences or activity.

The following categories of cookies are used on the JomKiss Platform:

• Strictly Necessary Cookies: Essential for the operation of the Platform. These cookies enable core functions such as user authentication, session management, and security verification. They cannot be disabled without impairing basic Platform functionality.
• Functional Cookies: Enable enhanced features such as remembering your language preference, game display settings, and notification preferences. These improve your experience but are not strictly required.
• Analytics Cookies: Collect anonymised data about how visitors interact with the Platform — including pages visited, session duration, and error encounters — to help us improve the Platform's performance and usability.
• Marketing & Personalisation Cookies: Used with your consent to personalise promotional content and measure the effectiveness of marketing communications. These are only placed where you have actively consented.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse or delete cookies entirely; however, disabling strictly necessary cookies may prevent you from using some or all of the Platform's features. Consent to non-essential cookies may be withdrawn at any time.

10 Your Rights as a Data Subject

Subject to applicable data protection laws, you hold the following rights in relation to your personal data held by JomKiss. To exercise any of these rights, please contact our support team using the details in Section 14:

JomKiss will respond to all rights requests within 30 days of receipt. We may request proof of identity before processing a rights request to protect against unauthorised access. Requests may be submitted via our support email or live chat channel.

11 Minors & Age Restriction

If you believe that JomKiss may have inadvertently collected personal data from a person under the age of 21, please contact us immediately at the details provided in Section 14, and we will take prompt steps to delete the data and close the account in question.

12 International Data Transfers

As an internationally licensed gaming platform, JomKiss may process and store personal data in countries outside Malaysia. Where personal data is transferred to a country that does not maintain data protection standards equivalent to those under which this Policy operates, JomKiss takes appropriate safeguards to ensure that your data receives an equivalent level of protection. These safeguards may include:

• Data Processing Agreements incorporating internationally recognised standard contractual clauses with the relevant third-party recipients.
• Transfer only to countries or organisations that maintain adequacy-equivalent data protection frameworks.
• Technical measures such as encryption and pseudonymisation applied to data before and during transfer.

By using the JomKiss Platform and submitting personal data to us, you acknowledge and consent to the transfer, storage, and processing of your personal data in accordance with this section and the broader terms of this Privacy Policy.

13 Changes to This Privacy Policy

JomKiss reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, JomKiss will:

• Update the "Last Updated" date at the top of this page and in the page hero section.
• Display a notification banner to logged-in Players on their next Platform visit where the changes are material to their rights or our processing activities.
• In cases of significant changes, send a notification to the email address registered to your account.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you disagree with the updated Policy, you should cease using the Platform and may request account closure through our support team. The current version of this Privacy Policy is always accessible at jomkiss.cam/privacy-policy.

14 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by JomKiss — including subject access requests, correction requests, deletion requests, or complaints about data processing — please contact our Data Protection team through the following channels:

When submitting a data request, please include your registered email address, your JomKiss username, and a clear description of your request to help us process it efficiently. We may request proof of identity before actioning any request that involves access to or deletion of personal data.