jc66 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") applies to all personal data collected and processed by jc66 ("jc66", "we", "us", or "our") in connection with the operation of the jc66 Platform at jc66.org and any associated services. The Policy applies to all registered users, prospective users, and visitors to the Platform.

jc66 acts as the data controller for the personal data described in this Policy. We are committed to processing personal data fairly, lawfully, and transparently, in accordance with applicable data protection legislation including the Malaysian Personal Data Protection Act 2010 (PDPA) and the data protection requirements of the international gaming authority under which jc66 is licensed.

By using the jc66 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must not use the jc66 Platform.

2. Data We Collect

jc66 collects personal data through various means during the course of your relationship with us. The categories of data we collect include:

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data) except where expressly required by applicable law or our licensing obligations, and only with appropriate safeguards in place.

3. How We Use Your Data

jc66 uses the personal data we collect for the following purposes:

• Account management: To create, verify, administer, and maintain your jc66 account, including processing deposits and withdrawals to payment methods including Touch n Go eWallet, Boost, and FPX bank transfers.
• Identity verification (KYC): To verify your identity and age (21+) as required by our licensing obligations and to comply with anti-money laundering (AML) and counter-terrorism financing (CTF) legislation.
• Service delivery: To provide access to jc66 products including the Sportsbook, Live Casino, and Slots; to process bets, calculate and pay winnings; and to personalise the Platform experience.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bot usage, and other prohibited conduct; to protect the integrity of the jc66 Platform.
• Responsible gaming: To monitor gaming patterns and identify indicators of problem gambling; to implement self-imposed limits, cooling-off periods, or self-exclusion requests; and to comply with responsible gaming obligations under our licence.
• Legal compliance: To meet our obligations under applicable laws and our gaming licence, including reporting obligations to regulatory and law enforcement authorities where required.
• Marketing communications: Where you have consented, to send you information about jc66 promotions, bonus offers, and new products. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the functionality, performance, and security of the jc66 Platform.

4. Legal Basis for Processing

jc66 processes personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your jc66 account and deliver the services you have requested.
• Legal obligation: Processing required to comply with applicable law, including AML/CTF legislation, licensing conditions, tax obligations, and orders from competent authorities.
• Legitimate interests: Processing carried out for jc66's legitimate business interests, including fraud prevention, security, platform improvement, and responsible gaming monitoring — where those interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, including marketing communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Cookies & Tracking Technologies

The jc66 Platform uses cookies and similar tracking technologies to operate and improve the site. Cookies are small text files placed on your device when you visit jc66.org. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Remember your preferences such as language and region settings to personalise your jc66 experience.
• Analytics cookies: Used to understand how visitors interact with jc66.org — page views, session duration, navigation paths. Data is aggregated and anonymised where possible.
• Marketing cookies: Used to deliver relevant promotional content related to jc66 products and offers, subject to your consent.

You may manage your cookie preferences through your browser settings at any time. Disabling non-essential cookies will not affect your ability to use core jc66 Platform features, though some personalisation functionality may be reduced.

6. Data Sharing & Disclosure

jc66 does not sell your personal data to third parties. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment processors: Touch n Go eWallet, Boost, FPX banking partners, and cryptocurrency exchange providers — to process your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and AML screening services engaged to verify your identity and screen against regulatory watchlists.
• Gaming technology providers: Platform infrastructure, game providers, and live casino streaming suppliers who process data solely under our instruction and pursuant to data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, court order, or our licensing obligations, we will disclose personal data to competent regulatory bodies, law enforcement agencies, or tax authorities.
• Professional advisors: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations.

Any third party receiving your personal data from jc66 is contractually required to protect it with security standards equivalent to or exceeding those applied by jc66, and to use the data only for the specific purpose for which it was shared.

7. International Data Transfers

As an internationally licensed gaming operator, jc66 may transfer personal data to countries outside Malaysia in connection with the operation of the Platform. Where such transfers occur, jc66 ensures that adequate safeguards are in place, including:

• Transfer to countries with data protection laws deemed adequate by the relevant regulatory framework;
• Use of standard contractual clauses approved by relevant data protection authorities;
• Data processing agreements with recipients that impose equivalent data protection obligations.

By using the jc66 Platform, you acknowledge that your personal data may be processed in countries outside Malaysia. jc66 will always maintain the protections described in this Policy regardless of where your data is processed.

8. Data Retention

jc66 retains personal data for as long as necessary to fulfil the purposes described in this Policy, including compliance with our legal obligations. Specific retention periods include:

• Account and KYC records: Retained for a minimum of 5 years following account closure, as required by AML legislation and our licensing conditions.
• Transaction and betting records: Retained for a minimum of 5 years for financial audit and regulatory compliance purposes.
• Support and communications records: Retained for up to 3 years following the resolution of the relevant matter.
• Marketing consent records: Retained until withdrawal of consent plus 1 year for evidence purposes.
• Technical and usage data: Aggregated anonymised data may be retained indefinitely; identifiable session data is retained for up to 12 months.

Upon expiry of the applicable retention period, jc66 will securely delete or anonymise personal data in accordance with our data destruction procedures.

9. Your Data Rights

Subject to applicable law and our legal and regulatory obligations, you have the following rights with respect to your personal data held by jc66:

• Right of access: You may request a copy of the personal data jc66 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You can update most information directly in your jc66 account settings.
• Right to erasure: You may request deletion of your personal data, subject to our retention obligations under applicable law and our licensing conditions.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances.
• Right to data portability: You may request a copy of data you have provided to us in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.

To exercise any of the above rights, please contact us at [email protected]. We will respond within 30 days of receiving your request. Identity verification may be required before we can act on your request.

10. Children's Privacy

The jc66 Platform is strictly restricted to persons aged 21 and above. jc66 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a user is under 21, the account will be immediately closed, all balances will be returned net of any applicable bonuses, and all related personal data will be deleted in accordance with our data destruction procedures.

If you believe that a person under 21 has registered on jc66, please notify us immediately at [email protected] so that we can take appropriate action.

11. Security Measures

jc66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jc66 Platform;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
• Multi-factor authentication requirements for staff accessing internal systems;
• Regular penetration testing and security audits by independent third-party security professionals;
• Automated anomaly detection systems that flag unusual access patterns or data exfiltration attempts;
• Incident response procedures with defined escalation paths and notification obligations.

Notwithstanding the above, no data transmission over the internet or storage system can be guaranteed as 100% secure. If you become aware of any security vulnerability affecting the jc66 Platform, please notify us immediately at [email protected].

12. Third-Party Services

The jc66 Platform may contain references to or integrations with third-party services, including payment providers (Touch n Go eWallet, Boost, FPX), game suppliers, and analytics tools. This Privacy Policy applies only to data processed by jc66 directly. Third-party services are governed by their own privacy policies, and jc66 is not responsible for the privacy practices of third parties.

Where jc66 engages third-party data processors, those processors are required by contract to process data only on jc66's instructions and to maintain appropriate security standards. jc66 conducts due diligence on third-party processors prior to engagement and periodically thereafter.

13. Changes to This Policy

jc66 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform functionality. Where changes are material, we will notify registered users by email or by a prominent notice on the jc66 Platform prior to the changes taking effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the jc66 Platform after the effective date of any revised Policy constitutes your acceptance of those changes. If you do not accept the revised Policy, you must cease using the Platform and may close your account by contacting our support team.

14. Contact & Data Enquiries

For any questions, concerns, or requests related to this Privacy Policy or to the personal data jc66 holds about you, please contact our data team using the details below. Please reference "Privacy Enquiry" in your message subject for prompt handling.

• Email: [email protected]
• Live Chat: Available 24/7 on the jc66 Platform
• WhatsApp: Available 24/7 via our Platform

We target acknowledgement of all privacy-related enquiries within 5 business days and substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we will notify you of any extension within the initial 30-day period.