Jus22 Privacy Policy – Data Protection Malaysian Players Come First

1 Personal Data jus22 Collects

When you register and use the jus22 platform, we collect certain types of personal data for the purposes set out in this document. We only collect data that is strictly necessary to provide the services you request — nothing more.

Data collected during registration:

• Full name as per Malaysian identity card (MyKad)
• An active Malaysian mobile number
• A valid email address
• Date of birth (for age verification — players must be 21 years of age or older)
• Your self-created password (stored as a cryptographic hash — jus22 cannot read your original password)

Data collected during the KYC (identity verification) process:

• Copy of Malaysian identification card (MyKad) — front and back
• Selfie holding MyKad for liveness verification
• Proof of current address (TNB bill, SYABAS, Indah Water, or a bank statement dated within the last 3 months)

Transaction data & platform activity:

• Deposit and withdrawal records, including the payment methods used (Touch 'n Go, DuitNow, GrabPay, FPX, and others)
• Gaming history, including games played, bet amounts, and outcomes
• Bonus claim and usage records
• Customer support interaction logs

Technical data collected automatically:

• Your device's IP address
• Device type and operating system (iOS, Android, Windows, etc.)
• Web browser type and version
• Cookie and session data
• Login session times and duration

2 Purpose of Data Collection and Processing

Jus22 processes your personal data only for clear and legitimate purposes. Each processing purpose has a solid legal basis under Malaysia's Personal Data Protection Act (PDPA) 2010. Below is a summary of the data processing purposes and their respective legal bases:

For marketing communications such as promotional emails or SMS notifications about jus22 offers, you have the option to opt out or unsubscribe at any time via the "unsubscribe" link in any email or through the notification settings in your account. Opting out of marketing communications will not affect your access to the platform.

3 Data Sharing With Third Parties

Jus22 does not sell, rent, or transfer players' personal data to any third party for marketing or commercial purposes. This is an absolute commitment that will never change.

However, in the course of operating the platform, jus22 needs to share certain data with carefully selected service providers. All such providers are bound by strict data confidentiality agreements and are only permitted to process your data for the specified purposes stated:

• Payment gateway providers — Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other payment methods receive the transaction data necessary to process your deposits and withdrawals. This data is handled in accordance with each provider's own privacy policy.
• Game providers — Companies such as Evolution Gaming and Pragmatic Play receive the session data required to run games on a technical level. They do not receive players' full identity information.
• Identity verification service providers — The third-party KYC provider used to verify player identities receives a copy of your identification documents during the KYC process. These documents are deleted once verification is complete.
• Statutory authorities — jus22 is legally required to disclose certain data to Malaysian authorities such as the police, courts, or anti-corruption agencies if ordered to do so through lawful legal channels. We have no discretion to refuse a valid court order.
• Technical service providers — Companies providing server infrastructure, CDN services, and analytics tools may have limited access to technical data for system maintenance purposes. This access is restricted to technical data only and does not include any personally identifiable information.

In the event of a company merger, acquisition, or asset sale, jus22 player data may be transferred to the new entity as part of the transferred assets. In such circumstances, players will be notified in advance and their data will continue to be protected in accordance with this privacy policy.

4 Data Security & Protection Measures

Jus22 invests seriously in security infrastructure to protect players' personal data. The following are the key technical and organisational measures we have in place:

Data Transmission Encryption and Protection:

• All communications between your device and jus22 servers are encrypted using TLS 1.3 with AES-256-GCM cipher suites — the same standard used by Malaysia's major banks.
• Player passwords are never stored in their original form. Instead, jus22 uses a one-way cryptographic hash function (bcrypt with salt), which means your password cannot be recovered even if our database were ever accessed without authorisation.
• All payment card data is handled through licensed payment gateways that comply with PCI-DSS standards. jus22 does not store full card numbers or CVV details on our servers.

Access Control & Authentication:

• Internal staff access to player data is restricted on a least-privilege basis. Only staff who require access to perform their duties are granted it, and all access is logged for audit purposes.
• Two-factor authentication (2FA) is mandatory for all jus22 staff who have access to systems containing player data.
• All players are encouraged to enable 2FA for their accounts via the security settings in their jus22 account panel.

Monitoring & Incident Response:

• Jus22's technical security team monitors our systems around the clock, 24 hours a day, 7 days a week, using real-time threat detection tools.
• Penetration testing is carried out regularly by independent security firms to identify and patch system vulnerabilities before they can be exploited.
• In the event of a data breach affecting players' personal information, jus22 is committed to notifying affected players within 72 hours of detecting the incident, in line with international best practices.

5 Cookies, Tracking Technologies, and Your Choices

The jus22 platform uses cookies and similar tracking technologies to ensure the platform functions properly and to understand how players interact with it. Below is an explanation of the types of cookies we use:

Essential Cookies (Cannot Be Disabled):

These cookies are essential for the jus22 platform to function. Without them, you will not be able to log in, save your preferences, or carry out any transactions. This includes login session cookies, CSRF security tokens, and language preference cookies.

Functional Cookies (Can Be Disabled):

These cookies remember your preferences, such as your chosen currency, game display settings, and interface configurations. Disabling them means you'll need to re-enter your preferences each time you use the platform.

Analytics Cookies (Can Be Disabled):

Jus22 uses analytics tools to understand how players use the platform — which pages are visited most, how long sessions last, and where players encounter difficulties. This data is used in aggregate form and is not linked to any individual's identity. You can disable analytics cookies through the cookie settings in the platform footer.

Managing Your Cookie Preferences:

You can manage, disable, or delete cookies through your web browser settings. However, disabling all cookies may affect the functionality of the jus22 platform. Guidance on managing cookies in popular browsers (Chrome, Safari, Firefox, Edge) is available in the platform's technical help section.

Jus22 does not use third-party cookies for retargeting or cross-site tracking purposes.

6 Your Rights as a Data Subject Under PDPA 2010

As a jus22 player who is a Malaysian citizen or resident, you have the following rights under Malaysia's Personal Data Protection Act (PDPA) 2010. jus22 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, submit a written request to support@jus22.best with the email subject line "Personal Data Rights Request", and include your full name, jus22 account number, and the specific right you wish to exercise. jus22 will respond within 14 business days and provide confirmation that your request is being processed.

Please note that certain requests may not be fully fulfilled if doing so would cause jus22 to breach its legal obligations, such as the requirement to retain financial records for audit purposes over the period prescribed by Malaysian law.

7 Data Retention and Deletion

Jus22 does not retain players' personal data for longer than necessary. Retention periods are determined based on the purpose of processing and applicable legal requirements:

• Active account data — Personal data associated with an active account is retained for as long as the account remains active and for 7 years after account closure, in line with financial record-keeping requirements under Malaysian law.
• Financial transaction records — Records of deposits, withdrawals, and bets are retained for 7 years for legal compliance, audit, and fraud prevention purposes. This retention period is set by Malaysian legal requirements and is not a discretionary decision by jus22.
• KYC Documents — MyKad copies and other identity verification documents are retained for the duration of the active account and for 7 years after account closure, for anti-money laundering (AML) compliance purposes.
• Customer support communication logs — Live chat transcripts, emails, and support tickets are retained for 3 years for dispute resolution and service improvement purposes.
• Cookies and analytics data — Usage data collected through analytics cookies is stored in anonymised aggregate form for 24 months. Individual session data is deleted within 30 days of the session ending.
• Account data for accounts closed at the player's request — When a player voluntarily closes their account, personal data not subject to legal retention requirements will be deleted or anonymised within 90 days of the closure date.

Once the applicable retention period has elapsed, data will be securely deleted or anonymised so that it can no longer be linked to any individual. The deletion process is carried out automatically by jus22's systems and is audited on a regular basis.

8 Contact Us for Privacy Matters

If you have any questions, concerns, or complaints about how jus22 handles your personal data, we encourage you to reach out to us directly. Our team is ready to assist and will treat every privacy inquiry with the seriousness it deserves.

jus22 Data Protection Officer:

For matters specifically relating to privacy and data protection, you may contact jus22's Data Protection Officer at:

• Email: support@jus22.best (with the subject line "Data Privacy Enquiry")
• Live Chat: Via the live chat button within the jus22 platform, available 24 hours a day, 7 days a week

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex cases requiring internal investigation, we will provide an update within 14 business days.

If you are not satisfied with jus22's response to your privacy complaint, you have the right to escalate your complaint to the Personal Data Protection Commissioner of Malaysia under the PDPA 2010.

Jus22 reserves the right to amend this privacy policy from time to time to reflect changes in business practices, legal requirements, or new technologies. Any material changes will be communicated to players via in-platform notifications or by email to their registered address. The "effective date" at the top of this document will be updated whenever changes are made.