Privacy Policy

1 Introduction

JomGoWin ("we", "us", "our", or "the Platform") is committed to protecting the personal data of all individuals who access, register on, or interact with our online sports betting and casino platform accessible at https://jomgowin.cam. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by JomGoWin.

This Privacy Policy applies to all registered users ("Users", "you", "your") and visitors to the JomGoWin Platform, regardless of the device or method used to access it. It should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy.

By creating a JomGoWin account, making a deposit, or otherwise using the Platform, you acknowledge that you have read this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must discontinue use of the Platform immediately.

2 Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information that identifies or can be used to identify a living individual, either directly or in combination with other information.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means JomGoWin, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of JomGoWin under a data processing agreement.
• "KYC Data" means identity verification documentation submitted by Users in fulfilment of Know Your Customer obligations, including government-issued identity documents and supporting materials.
• "Cookies" means small data files stored on your device by the Platform for the purposes described in Section 10 of this Policy.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including financial account information and identity document data.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for stated purposes.

3 Data We Collect

JomGoWin collects the following categories of Personal Data from Users, subject to what is necessary and proportionate for each specific processing purpose:

4 How We Collect Data

JomGoWin collects Personal Data through the following channels:

• Direct Submission: Information you provide when completing the account registration form, submitting KYC documentation, filling in withdrawal requests, or contacting our support team.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint data, and session logs — collected via server logs and cookies (see Section 10).
• Transaction Processing: Data generated when you make deposits or withdrawal requests through third-party payment providers such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20.
• Third-Party Verification: Data received from identity verification and fraud prevention service providers engaged by JomGoWin to fulfil our KYC and anti-money laundering obligations.
• Platform Interaction: Behavioural and usage data generated through your interaction with games, sports betting markets, and Platform features.

5 Data Processing

JomGoWin processes your Personal Data for the following specific purposes:

• Account Administration: Creating and maintaining your registered account, processing authentication requests, and managing account-level settings.
• Identity and Age Verification (KYC): Verifying that all Users are aged 21 years or above and confirming the identity of each User prior to processing withdrawals. This is a mandatory regulatory obligation under our international gaming licence.
• Payment Processing: Processing deposit and withdrawal transactions across all supported Malaysian payment methods. Financial data is processed via secure, PCI-DSS compliant channels where applicable.
• Responsible Gambling Compliance: Monitoring betting behaviour to identify potential problem gambling patterns and applying responsible gambling tools (deposit limits, self-exclusion, session limits) in accordance with our Responsible Gambling Policy.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised access, money laundering, collusion, and abuse of promotional offers.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and maintaining support interaction records for quality assurance.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and product offerings.
• Legal and Regulatory Compliance: Fulfilling obligations under applicable law, gaming licence conditions, and directions from competent regulatory authorities.
• Communications: Sending service-related notifications (account alerts, security notices, transaction confirmations) and, where you have opted in, promotional communications about JomGoWin offers.

6 Legal Basis for Processing

JomGoWin processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — including account management, payment processing, and provision of gaming services.
• Legal Obligation: Processing necessary to comply with applicable law and our international gaming licence conditions, including KYC identity verification, age verification, anti-money laundering screening, and regulatory reporting.
• Legitimate Interests: Processing conducted for JomGoWin's legitimate business interests, including fraud prevention, platform security monitoring, and improvement of Platform services — provided such interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent where required — including receipt of promotional communications and use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing

JomGoWin does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly limited to the purposes stated in this Policy:

• Payment Service Providers: Processing partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX network banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency processing services — solely for the purpose of facilitating your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and anti-money laundering screening services engaged to verify User identity and age in compliance with our licence obligations.
• Technology Infrastructure Providers: Cloud hosting, server infrastructure, and cybersecurity service providers that process data on our behalf under strict data processing agreements.
• Game Content Providers: Licensed international game studios that supply slot, live dealer, and other game content through the Platform. Game providers may receive session-level technical data necessary for gameplay functionality.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, regulatory direction, or where JomGoWin has a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of Users, or comply with legal process.
• Professional Advisers: Legal counsel, auditors, and compliance advisers engaged by JomGoWin who are bound by professional confidentiality obligations.

8 Data Retention

JomGoWin retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements.

• Account Data: Retained for the duration of your active account and for a minimum period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission, or longer where required by gaming licence conditions.
• Financial Transaction Records: Retained for a minimum of five (5) years from each transaction date for audit and regulatory purposes.
• Support Communication Records: Retained for three (3) years from the date of each interaction for dispute resolution purposes.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

9 Data Security

JomGoWin implements a comprehensive range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the JomGoWin Platform is encrypted using industry-standard Transport Layer Security protocols.
• Encryption at Rest: Sensitive Personal Data, including KYC documents and financial account references, is encrypted when stored on our servers.
• Access Controls: Access to Personal Data is restricted to JomGoWin personnel and authorised Data Processors who require it for legitimate operational purposes. Role-based access controls and audit logging are implemented.
• Fraud Monitoring: Continuous automated monitoring of account activity to detect and respond to anomalous behaviour, unauthorised login attempts, and potential data breach indicators.
• Penetration Testing: Regular security assessments are conducted to identify and remediate vulnerabilities in Platform infrastructure and application code.

Notwithstanding these measures, no method of electronic transmission or data storage is completely immune to breach. In the event of a personal data breach that poses a risk to your rights and freedoms, JomGoWin will take prompt remedial action and notify affected Users and relevant authorities in accordance with applicable data protection obligations.

10 Cookies & Tracking Technologies

JomGoWin uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help us deliver a functional, personalised, and secure Platform experience.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable session management, authentication, and security features. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences (such as language settings, responsible gambling limits you have set, and interface preferences) to provide a consistent experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how Users navigate the Platform — pages visited, features used, time on page — to help us improve Platform design and performance. These require your consent.
• Security Cookies: Used for fraud detection, identifying unusual login patterns, and preventing account takeover attacks. These are strictly necessary and cannot be opted out of.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

11 User Rights

Subject to applicable law and the limitations described below, you hold the following rights with respect to your Personal Data held by JomGoWin. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of the Personal Data JomGoWin holds about you and information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data held about you. You can update basic account information directly through your Account Settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes it was collected. Note that this right is subject to legal and regulatory retention obligations — in particular, KYC and transaction records must be retained for the minimum periods described in Section 8.
• Right to Restrict Processing: You may request that processing of your Personal Data be restricted in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of JomGoWin's legitimate interests. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

JomGoWin will respond to all data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, with notification provided to you within the initial thirty-day window.

12 Minors

JomGoWin does not knowingly collect or process Personal Data from individuals under the age of 21. During account registration and KYC verification, we require Users to confirm their age and submit a government-issued identity document to verify compliance with the 21+ minimum age requirement.

If JomGoWin becomes aware that Personal Data has been collected from an individual under the age of 21 without appropriate verification, such data will be deleted promptly and the associated account will be suspended. Parents or guardians who believe that their child under 21 has registered on the Platform are requested to contact us immediately at [email protected] so that the account can be closed and data erased.

13 Third-Party Links

The JomGoWin Platform may contain references to third-party services or payment providers (such as Touch 'n Go eWallet, Boost, Maybank, and CIMB) in the course of transaction processing. Where you interact with third-party platforms or services in connection with your JomGoWin account, your data is subject to the privacy policies of those third parties.

JomGoWin is not responsible for the privacy practices of third-party service providers and encourages you to review their respective privacy policies before submitting Personal Data to those platforms. Our responsibility for data protection extends only to the processing we conduct as Data Controller.

14 Policy Amendments

JomGoWin reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where changes are material — for example, a change in the types of Personal Data collected or a new category of data sharing — we will provide reasonable advance notice via the Platform or by email to your registered address.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to remain informed of how we protect your data.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of the User Rights described in Section 11, please contact the JomGoWin Data Protection team through the following channels. Contact information is provided as plain text — please do not attempt to click email addresses as they are non-clickable.

• Data Rights Requests: [email protected] — Subject line: "Data Rights Request – [Your Account Username]"
• Privacy Concerns: [email protected] — Subject line: "Privacy Enquiry"
• Live Chat: Available 24/7 through the Platform's live chat widget for general privacy questions.
• Response Time: Email responses within 2 hours during business hours; formal data rights requests responded to within 30 calendar days as required by applicable law.

For formal complaints regarding our data processing practices that cannot be resolved through our internal process, you may escalate the matter to the relevant supervisory authority under the jurisdiction of our international gaming licence.