Privacy Policy — Jili88

This Privacy Policy ("Policy") is published by Jili88 ("Jili88", "we", "us", or "our"), the operator of the online gaming platform accessible at https://jili88.casa ("the Platform"). It sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Jili88 is committed to handling your personal data with care, transparency, and integrity. We process personal data in accordance with applicable international data protection principles and our obligations as a licensed iGaming operator. This Policy applies to all users who access, register on, or interact with the Jili88 platform — including players located across Malaysia, in cities such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

By creating an account on Jili88 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you disagree with any aspect of this Policy, you should discontinue use of the Platform and contact our support team to arrange account closure.

For the purposes of this Policy, the following terms have the meanings ascribed below:

• "Personal Data" means any information relating to an identified or identifiable natural person — for example, your name, email address, MyKad number, IP address, or transaction history.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or any combination thereof.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, Jili88.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a written agreement and according to documented instructions.
• "Cookies" means small text files placed on your device by the Platform for the purposes of session management, functionality, and analytics.
• "KYC" means Know Your Customer — the identity and address verification process mandatory under our regulatory compliance obligations.
• "User" or "you" means any individual who accesses, registers on, or interacts with the Jili88 platform.

Jili88 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, Jili88 is responsible for determining why and how your Personal Data is processed and for ensuring that processing activities comply with applicable data protection standards.

Where Jili88 engages third-party service providers — such as payment processors, identity verification vendors, or hosting infrastructure providers — to process Personal Data on its behalf, those parties act as Data Processors and are contractually bound to handle data solely according to Jili88's documented instructions and in a manner consistent with this Policy.

Questions or requests regarding data controllership, including Data Subject Access Requests, should be directed to our Data Protection contact at [email protected] — marked clearly as "Data Protection Enquiry" in the subject line.

Jili88 collects Personal Data through several channels, including account registration forms, KYC document submissions, transaction records, customer support interactions, and automated technical data captured during platform use. The categories of data collected are described below.

4.1 Registration & Account Data

• Full legal name, date of birth, gender.
• Email address, mobile phone number.
• Residential address including city, state, postcode, and country.
• Username and hashed password.
• Preferred currency (MYR by default for Malaysian players).

4.2 Identity Verification (KYC) Data

• Government-issued photo ID: Malaysian MyKad, Driver's Licence, or Passport.
• Proof of address document: utility bill, bank statement, or official correspondence dated within three months.
• Selfie photograph of the User holding their photo ID.
• Proof of payment method (bank account screenshot or e-wallet confirmation).

4.3 Financial & Transaction Data

• Deposit and withdrawal history, including amounts in MYR and timestamps.
• Payment method identifiers (e.g., partial bank account number, DuitNow reference, Touch 'n Go eWallet token, CIMB or Maybank identifier).
• Bonus and promotional credits received and utilised.
• Wagering history and game session records.

4.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser version.
• Session duration, page views, and click-stream data.
• Cookie identifiers and session tokens.
• Error logs and crash reports from mobile applications.

4.5 Communications Data

• Contents of Live Chat conversations with our support team.
• Email correspondence between you and Jili88.
• Feedback and complaint submissions.

Jili88 processes Personal Data only for specific, documented, and legitimate purposes. The principal uses of your data are set out below, together with the legal basis applicable to each use (see also Section 6).

Jili88 relies on the following legal bases to justify its processing of your Personal Data, in accordance with applicable data protection law:

• Contract Performance: Processing is necessary to perform our contractual obligations to you — including operating your Account, processing your deposits and withdrawals, and providing access to games and betting markets.
• Legal Obligation: Processing is necessary to comply with our obligations under applicable law — including anti-money laundering (AML) regulations, KYC requirements, responsible gambling legislation, and mandatory reporting obligations to regulatory authorities.
• Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by Jili88 — including fraud prevention, platform security, system integrity, and improving user experience — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent as the legal basis — for example, for sending marketing communications — we will seek that consent in a clear and unambiguous manner. You may withdraw your consent at any time, and withdrawal will not affect the lawfulness of any processing carried out prior to withdrawal.

Jili88 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are deployed:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancer stickiness cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and last-played game category. Retention: up to 12 months.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — page views, session duration, feature usage. This data is used internally only and is never shared with third-party advertisers. Retention: up to 13 months.

Jili88 does not deploy third-party advertising, retargeting, or social media tracking cookies. You can manage cookie preferences via your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality, including the ability to log in.

Jili88 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the circumstances described below, and only to the extent necessary for the specified purpose.

8.1 Service Providers (Data Processors)

We engage a limited number of third-party service providers — operating as Data Processors — who process Personal Data on our behalf. These include: payment processors handling DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong transactions; KYC and identity verification vendors; cloud hosting and infrastructure providers; and customer support software providers. All Data Processors are bound by written data processing agreements and are prohibited from using your data for any purpose other than delivering the contracted service.

8.2 Regulatory and Law Enforcement Authorities

Jili88 may be required by law to disclose Personal Data to regulatory bodies, law enforcement agencies, tax authorities, or courts — for example, in connection with anti-money laundering investigations, fraud inquiries, or court orders. Such disclosures are made only to the extent required by applicable law and subject to any available legal protections.

8.3 Corporate Transactions

In the event of a merger, acquisition, reorganisation, or sale of all or part of Jili88's business, Personal Data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and of any material changes to this Policy that result from it, in advance where reasonably practicable.

Jili88 retains Personal Data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any applicable legal minimum retention periods. The principal retention periods applied are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised data that can no longer be linked to any individual may be retained for statistical and analytics purposes indefinitely.

Jili88 implements a multi-layered security architecture to protect Personal Data against unauthorised access, accidental loss, destruction, or alteration. Technical and organisational measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between user devices and Jili88 servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment identifiers.
• Role-based access controls ensuring that staff members can only access Personal Data strictly necessary for their designated function.
• Multi-factor authentication required for all staff accessing production systems containing Personal Data.
• Regular third-party penetration testing and vulnerability assessments of platform infrastructure.
• Intrusion detection systems monitoring for anomalous access patterns in real time.
• Formal data breach response procedures, including a defined notification protocol for notifying affected Users and regulatory authorities within required timeframes where a breach is detected.

As an internationally operating platform, Jili88 may transfer Personal Data to service providers or infrastructure providers located outside Malaysia. Where such transfers occur, Jili88 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections afforded under the data protection framework applicable in your jurisdiction.

Safeguards may include: contractual clauses requiring the recipient to handle Personal Data to the same standard as required under this Policy; ensuring the recipient jurisdiction has been assessed as providing an adequate level of data protection; or other appropriate transfer mechanisms as recognised under applicable law.

You may request further information about the specific safeguards applied to international transfers of your data by contacting us at [email protected].

Subject to applicable law and the conditions described below, you have the following rights in respect of your Personal Data held by Jili88:

• Right of Access: You may request a copy of all Personal Data we hold about you, together with information about how it is being processed. Requests will be responded to within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. Account-level corrections can often be made directly via Account Settings; for KYC data corrections, please contact support.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data. Note that we may be unable to fulfil deletion requests in full where retention is required by applicable law — for example, AML regulations require retention of transaction records for five years.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is contested.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a machine-readable copy of your Personal Data for the purpose of transferring it to another provider.
• Right to Object: You may object to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights, or the processing is for legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time via Account Settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will verify your identity before processing the request and will respond within 30 calendar days.

Jili88 is an adult gaming platform. Access and registration are strictly prohibited for individuals under the age of 21. We do not knowingly collect Personal Data from minors.

Age verification is conducted as part of the KYC process for all registered Accounts. Where Jili88 becomes aware that Personal Data belonging to a person under the age of 21 has been collected, that data will be deleted promptly and the associated Account will be permanently closed.

The Jili88 platform does not contain links to third-party websites, social media platforms, or external services outside of its own domain. In the event that any such links appear in future, this Policy will be updated accordingly.

Where payment processors, e-wallet providers, or other service providers redirect you to their own interface as part of a transaction — for example, a DuitNow redirect or a Touch 'n Go eWallet authorisation screen — your use of those interfaces is governed by the respective provider's own privacy policy. Jili88 is not responsible for the data practices of third-party payment infrastructure providers in respect of data handled on their own systems.

Jili88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

For material changes — those that significantly affect your rights or the way we use your Personal Data — Jili88 will notify registered Users by email or via an in-platform notice at least seven (7) days before the change takes effect, where reasonably practicable.

Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you should contact our support team to discuss your options, including account closure.

If you have any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data, please contact Jili88 through the following channels:

• Live Chat: Available 24/7 on the Jili88 platform — the fastest channel for general data enquiries.
• Email: [email protected] — use subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate. Email responses are provided within one business day for general queries and within 30 calendar days for formal data rights requests.

Our support team is available in English, Bahasa Melayu, and Mandarin, serving players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, and Shah Alam — 24 hours a day, seven days a week.

For matters specifically related to responsible gambling — including self-exclusion, deposit limit requests, or referrals to external support resources — please visit our dedicated Responsible Gambling page.