Privacy Policy jack77 — Personal Data Protection for Malaysian Players

This Privacy Policy explains how jack77 ("we", "the jack77 platform") collects, uses, discloses, transfers, and protects your personal information when you use the jack77.best website and all related services.

As an online entertainment platform serving Malaysian players, jack77 understands that your trust is our most valuable asset. We know that many Malaysian players are concerned about the security of their personal information on online platforms — and we take those concerns seriously. Every decision about how we handle data is made with our players' interests and privacy as the top priority.

This Privacy Policy applies to all individuals who:

• Visiting or using the jack77.best website
• Registering a jack77 account
• Making deposits or withdrawals using Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX
• Playing any game on the jack77 platform, including slots, live casino, baccarat, roulette, Dragon Tiger or sports betting
• Contacting our customer support team

By using the jack77 platform, you agree to the collection and use of your data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the jack77 platform.

Jack77 only collects data necessary to deliver our services safely and efficiently. We do not collect irrelevant or excessive information. Below are the categories of data we collect and the purposes for which they are collected:

Jack77 also collects information you voluntarily provide when contacting our customer support, submitting feedback forms, or joining the jack77 VIP programme. All such information is stored securely and used solely for the stated purposes.

Jack77 uses your personal data for the following purposes, and only for these purposes:

• Account management: Creating and maintaining your jack77 account, processing registrations, verifying your identity (KYC), and enabling secure login including two-factor authentication (2FA).
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u and CIMB Clicks, as well as handling your withdrawal payouts quickly and accurately.
• Provision of gaming services: Granting access to all jack77 games including slots, Live Casino, baccarat, roulette, Dragon Tiger, and Sports Betting covering the Malaysia Super League, EPL, badminton, and esports.
• Customer support: Resolving queries, complaints, and technical issues you report to the jack77 support team via live chat or email.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse, multiple account usage, and other security threats to the jack77 platform.
• Legal compliance: Complying with applicable Malaysian legal requirements, including PDPA 2010 and anti-money laundering (AML) obligations.
• Platform improvements: Analysing aggregated (not individual) usage patterns to improve the user experience, platform performance, and jack77's game library.
• Promotional communications: Sending information about bonuses, promotions and platform updates — only to players who have agreed to receive such communications. You may unsubscribe at any time.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need responsible gambling support, and ensuring spending limit tools are functioning correctly.

Jack77 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, in the course of operating the platform, we may share your data with the following parties under limited and controlled circumstances:

• Payment service providers: Payment gateways handling Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX transactions receive only the minimum transaction information required to process your payment. All these providers comply with PCI DSS security standards.
• Game providers: Gaming software providers that supply slots, live casino, and table games for the jack77 platform may receive game session data necessary to run the games properly. This data does not include your personally identifiable information.
• Cloud and infrastructure service providers: Server and infrastructure providers that host the jack77 platform have limited data access governed by strict confidentiality agreements.
• Legal authorities: jack77 may be required to disclose data to Malaysian authorities — including the police, courts or regulatory bodies — when mandated by law or a valid court order.
• Identity verification services: Third parties who assist in verifying player identity during the KYC process, subject to strict data protection agreements.

In all cases where we share data with third parties, jack77 ensures that:

• Only the minimum necessary data is shared
• Binding data protection agreements are established with all third-party providers
• Third parties are held to the same security and privacy standards as jack77
• Data may not be used by third parties for any purpose beyond what has been authorised

Jack77 invests seriously in security infrastructure to protect your personal data. The measures we have in place are on par with those used by Malaysia's leading banking and financial institutions:

• 256-bit SSL Encryption: All data transmitted between your device and jack77's servers is protected by 256-bit Secure Socket Layer (SSL) encryption. This means that even if data is intercepted in transit, it cannot be read or exploited by any unauthorised party.
• Stored data encryption: Sensitive data stored in jack77's databases — including account information, financial details, and transaction history — is kept in encrypted format using AES-256 encryption standards.
• Two-factor authentication (2FA): jack77 provides and encourages the use of two-factor authentication for all accounts. With 2FA enabled, accessing your account requires both your password AND a one-time OTP code sent to your phone number — so even if someone knows your password, they cannot log in without your device.
• 24/7 security monitoring: jack77's cybersecurity team continuously monitors the platform for suspicious activity, intrusion attempts, and unusual usage patterns.
• Internal access controls: Access to players' personal data within jack77's internal systems is restricted to staff with a legitimate operational need, in accordance with the principle of least privilege access.
• Regular security audits: jack77 conducts regular internal and external security audits by independent assessors to ensure our systems remain protected against the latest threats.
• Incident response plan: jack77 has a clear incident response procedure in place. In the event of a data breach affecting player information, jack77 is committed to notifying affected players and the relevant authorities in accordance with PDPA 2010 requirements within the stipulated timeframe.

Jack77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit jack77.best.

Types of cookies used by jack77:

• Essential Cookies (Required): Required for core platform functionality — including maintaining your login session, remembering your language preference, and ensuring session security. These cookies cannot be disabled as they are essential for the platform to operate correctly.
• Performance Cookies: Collecting information on how players use the jack77 platform — pages visited most often, time spent, and buttons clicked. All data is aggregated and does not identify individuals personally. Used to improve the interface and overall user experience.
• Functional Cookies: Remembering your preferences — such as text size, game display settings, and language — so you don't have to reconfigure them each time you log in to jack77.
• Security Cookies: Helps identify and prevent unauthorised access attempts, CSRF (Cross-Site Request Forgery) attacks, and other security threats to your jack77 account.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the jack77 platform and your ability to log in or play without interruption.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by jack77. We respect and facilitate the exercise of all these rights:

• Right of access: You have the right to request a copy of the personal data jack77 holds about you. Jack77 will provide access to that data within 21 days of receiving your request.
• Right to rectification: If personal data held by jack77 about you is inaccurate or outdated, you have the right to request a correction. Correction requests will be processed within 14 days.
• Right to request deletion: You may request the deletion of your personal data from jack77's systems under certain circumstances — for example, when the data is no longer needed for its original purpose, or when you withdraw your consent. Please note that some data may need to be retained by jack77 to meet legal obligations or audit requirements.
• Right to withdraw consent: Where jack77 processes your data based on your consent (for example, for promotional communications), you may withdraw that consent at any time through your account settings or by contacting jack77 support.
• Right to object to processing: In certain circumstances, you have the right to object to jack77's processing of your personal data — for example, processing carried out for direct marketing purposes.
• Right to lodge a complaint: If you believe jack77 has mishandled your personal data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (JPDP).

To exercise any of the rights above, please contact the jack77 privacy team at support@jack77.best with the subject line "Privacy Rights Request" and clearly state the right you wish to exercise, along with your account details for identity verification.

Jack77 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet legal requirements. Our data retention schedule is as follows:

• Active account data: Retained for the duration your account remains active and for 7 years after account closure for legal compliance and audit purposes.
• Financial transaction history: Retained for a minimum of 7 years in accordance with Malaysian financial and anti-money laundering legislation.
• Security and access logs: Retained for 12 months for security threat monitoring and dispute resolution purposes.
• Customer support recordings: Retained for 24 months for quality control purposes and resolution of outstanding complaints.
• Cookie and analytics data: Aggregated, anonymised analytics data is retained for 24 months. Session cookies expire when you close your browser.
• Marketing data: Marketing communication preferences are retained until you withdraw your consent or close your account.

Once the retention period expires, data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to any individual.

Jack77 strictly prohibits the use of its platform by anyone under the age of 18. jack77 is an adult entertainment service and is not intended for children or minors.

Jack77 does not knowingly collect personal data from individuals under the age of 18. Should we become aware that personal data belonging to a minor has been collected, we will take immediate steps to:

• Immediately suspending the account in question
• Deleting all associated data from our systems
• Refunding any remaining balance (where applicable) in accordance with the relevant procedures

If you are a parent or guardian who believes your child has accessed or registered on the jack77 platform, please contact us immediately at support@jack77.best. We will respond promptly and take appropriate action.

Jack77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable legislation, or improvements to the jack77 platform.

When we make significant changes to this Privacy Policy, we will notify players via:

• A prominent notice on the jack77.best homepage
• Email to your registered address (for changes that materially affect how we handle your data)
• In-platform notifications when you log in to your jack77 account

The "Updated" date at the top of this document indicates when this Privacy Policy was last revised. Your continued use of the jack77 platform after any amendments take effect will be considered acceptance of the updated terms.

We recommend reviewing this Privacy Policy page periodically to stay informed about how jack77 protects your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how jack77 handles your personal data, we are always here to help.

You can reach the jack77 privacy team through the following channels:

• Privacy email: support@jack77.best – Please use the subject line "Data Privacy Enquiry" to ensure your email reaches the right team. Responses within 24 hours (business days) or 48 hours (weekends and public holidays).
• Live Chat: Available on the jack77.best platform, 24 hours a day, 7 days a week. For sensitive privacy inquiries, email is the more appropriate channel as it provides a written record of your correspondence.

For formal requests relating to PDPA rights (access, rectification, or data deletion), please include the following details in your email:

• Your full name as per your MyKad
• The phone number registered to your jack77 account
• Type of request (access / correction / erasure / other)
• A brief description of your request or concern

Jack77 is committed to handling all privacy-related enquiries with the utmost seriousness and resolving valid requests within the timeframes stipulated by Malaysia's PDPA 2010.