Privacy Policy Jalak4D – Protecting Malaysian Players' Data

Jalak4D collects several categories of personal information from players to keep the platform running safely and effectively. The information we collect falls into two main categories:

Information you provide directly:

• Full name as per MyKad or passport
• An active Malaysian mobile number
• A valid email address
• Date of birth for age verification
• Bank account or e-wallet details (DuitNow, FPX, Touch 'n Go, GrabPay, Boost, ShopeePay) for payment processing
• Identity documents (MyKad, passport) during the KYC (Know Your Customer) process
• Communications you send to our customer support team

Information collected automatically:

• IP address and general geolocation information
• Device type, operating system, and web browser used
• In-platform activity history, including games played, bets placed and financial transactions
• Game session times and duration
• Cookie data and similar tracking technologies to improve the user experience
• Technical logs for troubleshooting and fraud detection

Personal information collected by Jalak4D is used solely for legitimate and transparent operational purposes. Below is a summary of how your data is used:

Jalak4D will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

Jalak4D does not sell, rent or disclose players' personal information to third parties for marketing purposes. However, there are limited circumstances in which sharing data with certain parties is necessary for platform operations:

• Payment service providers: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay receive only the minimum transaction information necessary to process your payment. All these providers are bound by strict confidentiality agreements.
• Game software providers: Limited game session information is shared with licensed game providers solely to ensure games function correctly and fairly.
• Legal authorities: Jalak4D will disclose required information to Malaysian authorities when mandated by law, court order or in the course of a legitimate criminal investigation.
• Technical service providers: Infrastructure and cybersecurity providers who assist us in maintaining the platform may have limited access to technical data, but are bound by strict data protection agreements.

In all cases of data sharing, Jalak4D ensures that the receiving party is bound by data protection obligations equivalent to or stricter than those we uphold.

Platform Jalak4D uses cookies and similar tracking technologies to enhance your experience. Here are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are essential for the platform to operate.
• Performance Cookies: Collects information on how you use the platform to help us improve speed and usability. All data is aggregated and does not personally identify you.
• Functional Cookies: Remembers your preferences such as language, display settings and favourite game selections to personalise your experience.
• Analytics Cookies: Helps us understand how players interact with the platform as a whole for product improvement purposes.

You can manage cookie settings through your web browser. Please note, however, that disabling essential cookies may affect platform functionality Jalak4D. For more information on how to manage cookies in your browser, refer to the help documentation for the browser you are using.

Jalak4D retains your personal information only for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable law. The following guidelines apply to our data retention periods:

• Active account data: Retained for as long as your account remains active, plus a minimum period of two (2) years following account closure.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with AML compliance requirements and Malaysian accounting law.
• Customer support communication history: Retained for three (3) years from the date of last communication.
• Security logs and activity: Retained for two (2) years for fraud detection and security incident investigation purposes.
• KYC Documents: Retained for seven (7) years following account closure in accordance with anti-money laundering legal requirements.

Once the retention period has expired and there is no legal obligation to retain the data further, your data will be securely deleted or anonymised so it can no longer be linked back to you.

As a player Jalak4D, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Right to Access: You may request a copy of the personal information we hold about you at any time.
• Right to Rectification: If your information is inaccurate or incomplete, you may request that we correct it.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to that withdrawal.
• Right to Object: You may object to the processing of your data for certain purposes, such as direct marketing.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data.
• Right to Restriction of Processing: You may request that we restrict how we use your data in certain circumstances.

To exercise any of the above rights, please contact our privacy team by email at support@jalak4d.best clearly stating the right you wish to exercise and the relevant details. We will process your request within 30 working days.

Jalak4D implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, accidental alteration, or destruction.

Key security measures we have in place include:

• 256-bit SSL/TLS encryption for all data in transit
• Encryption of sensitive data stored in databases using industry-standard encryption algorithms
• Role-based access control (RBAC) ensuring Jalak4D staff can only access data relevant to their specific responsibilities
• Two-factor authentication (2FA) for all staff access to systems containing player data
• Periodic independent security audits conducted by external cybersecurity firms
• Continuous system monitoring to detect suspicious activity and security threats
• Established incident response procedures to address any data breaches
• Regular security awareness training for all Jalak4D staff who handle player data

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. Any security vulnerabilities that could affect the platform will be addressed promptly.

Platform Jalak4D is not designed for, and does not accept members under the age of 18. We do not knowingly collect personal information from individuals below that age.

If we discover that we have collected data from an individual under 18 years of age without proper parental consent verification, we will immediately take the following steps:

• Suspend the account in question immediately while an investigation is carried out
• Delete all personal information associated with the individual concerned
• Returning any funds deposited into that account
• Reporting incidents to the relevant authorities where required

If you believe that someone under the age of 18 has registered for or used the platform Jalak4D, please contact us immediately at support@jalak4d.best.

Jalak4D may contact you with information about promotions, bonuses, special offers, and platform updates via SMS, email, or in-app notifications. You may opt out of these marketing communications at any time using the following methods:

• Click the "Unsubscribe" link found at the bottom of any marketing email we send you
• Update your communication preferences in the Jalak4D account profile page
• Contact our customer support team directly to opt out of marketing communications

Please note that opting out of marketing communications does not mean you will stop receiving important communications related to your account operations, such as security notices, transaction confirmations or material policy changes. Operational communications are essential and cannot be stopped while your account remains active.

Jalak4D reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. When we make material amendments, we will:

• Updating the "Updated" date at the top of this page
• Sending notice via email or in-platform notification to all registered players
• In the case of highly material amendments, we may request that you reconfirm your consent

Continued use of the platform Jalak4D after the amended policy takes effect will be considered your acceptance of the updated policy. We therefore encourage you to review this page periodically.