1. Introduction & Scope of This Privacy Policy
This Privacy Policy describes how jayaslot — an online casino and Sports Betting platform for Malaysian players at jayaslot.run – collect, use, store, disclose and protect your personal information. This document has been prepared to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and jayaslot's commitment to transparency in data management.
This policy applies to all individuals who register a jayaslot account, visit the jayaslot.run website, or interact with any services provided by jayaslot in any capacity. By registering or using the jayaslot platform, you acknowledge that you have read and understood this privacy policy.
This Privacy Policy should be read together with Terms & Conditions jayaslot for a complete overview of the rights and responsibilities of all parties.
2. Personal Data We Collect
Jayaslot collects personal data from you through several channels. The type of data collected depends on how you interact with our platform.
Data you provide directly:
- Full name as shown on your identification document
- An active Malaysian phone number (used for SMS verification)
- The password you chose during registration (stored in encrypted hash form)
- Bank account number or e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) for deposit and withdrawal purposes
- Identity document (MyKad or passport) if requested for identity verification (KYC)
- Communications you send to the jayaslot support team via live chat or email
Automatically collected data:
- IP address of the device used to access the jayaslot platform
- Your web browser type and device operating system
- Login and logout timestamp records
- In-platform gaming and betting activity history
- Deposit and withdrawal transaction history
- Cookie and session data to maintain your login
Important note: jayaslot does not store full credit or debit card numbers. All payments are processed through secure payment gateways — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX internet banking (Maybank2u, CIMB Clicks) — and sensitive payment details never pass directly through jayaslot's servers.
3. Purpose of Data Collection and Use
Jayaslot uses collected personal data for legitimate purposes directly related to delivering our platform services to you. The primary purposes are:
- Account management: Creating and managing your member account, including login, identity verification and account recovery.
- Transaction processing: To securely and accurately process your deposits and withdrawals via your chosen local Malaysian payment method.
- Service provision: To allow you to play casino games, place Sports Betting on Malaysia Super League and EPL football, badminton, virtual sports, e-sports and all other services offered by jayaslot.
- Platform security: Detecting and preventing fraud, unauthorised access, money laundering and other illegal activities that could compromise the security of the platform and its members.
- Customer support: To assist you with any questions, complaints, or technical issues you raise with the jayaslot support team.
- Legal compliance: To fulfil legal obligations under PDPA 2010 and other applicable Malaysian laws.
- Service communications: Sending important notifications about your account, terms updates, platform changes or security information via SMS or in-platform notifications.
- Marketing (with consent): To send you information about jayaslot promotions, bonuses or offers that you agreed to receive upon registration. You may opt out of marketing communications at any time.
4. Legal Basis for Data Processing
Under Malaysia's Personal Data Protection Act 2010 (PDPA), jayaslot processes your personal data on the following legal bases:
- Consent: For marketing activities and other optional data uses, we rely on the explicit consent you provided at registration. You may withdraw this consent at any time.
- Performance of contract: Data processing required to provide you with jayaslot's services — including payment processing and account management — is based on the execution of a contract between you and jayaslot.
- Legal obligation: Certain data processing is required to comply with Malaysian legal obligations, including anti-money laundering (AML) requirements and identity verification.
- Legitimate interests: For platform security, fraud detection and service improvement purposes, jayaslot relies on legitimate interests, provided those interests do not override your fundamental rights.
5. Sharing Data with Third Parties
Jayaslot does not sell or rent your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, there are limited situations where data may be shared with specific third parties:
- Payment service providers: Transaction data required for processing is shared with the following payment gateways – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX – to process your deposits and withdrawals. All these providers maintain their own privacy policies and are bound by confidentiality agreements with jayaslot.
- Game software providers: Limited gameplay data may be shared with game providers for technical operational purposes and fair play verification.
- Legal authorities: If required by a court order or a lawful request from Malaysian authorities, jayaslot may be required to disclose certain data in accordance with its legal obligations.
- Cloud and technical services: Technical infrastructure providers used by jayaslot may have access to data in a limited technical capacity, but are bound by strict data processing agreements.
In all cases of data sharing with third parties, jayaslot ensures that those third parties maintain adequate data security protections and use the data solely for the purposes specified in their agreement with jayaslot.
Data Sharing Schedule: Who, What and Why
| Data Recipients | Data Shared | Purpose | Sold? |
|---|---|---|---|
| E-wallet providers (TnG, GrabPay, etc.) | Phone number, transaction amounts | Payment processing | No |
| Bank (FPX) | Bank account details, amount | Deposit & Withdrawal | No |
| Game Providers | Player ID, game session data | Technical operations | No |
| Malaysian Authorities | Court-ordered data | Legal compliance | Required |
| External Marketing Partners | None | Not Applicable | Never |
6. Data Security
Jayaslot applies multiple layers of technical and organisational safeguards to ensure your personal data remains protected against unauthorised access, disclosure, alteration, or destruction:
- Data encryption in transit: All communications between your device and the jayaslot platform are protected with 256-bit SSL/TLS encryption.
- Data encryption at rest: Sensitive personal data is stored in encrypted form on jayaslot's servers.
- Two-factor authentication (2FA): Available and encouraged for all jayaslot accounts as an added layer of protection during login.
- Internal access controls: Only staff with a legitimate operational need are permitted to access member data, and all access is logged for audit purposes.
- Regular security audits: jayaslot's systems and infrastructure undergo regular security audits by both internal teams and independent third parties.
- Incident response plan: jayaslot has clear procedures in place for handling data security incidents, including notification procedures for the relevant authorities and affected members in accordance with PDPA requirements.
Even with all these security measures in place, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe — use a strong, unique password, enable 2FA, and never share your login credentials with anyone.
7. Data Retention Period
Jayaslot retains your personal data for as long as it is needed for the purposes stated in this privacy policy, or as required under Malaysian law. Specifically:
- Active account data: Retained for as long as your account is active and for 7 years after account closure to meet legal record-keeping requirements.
- Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and anti-money laundering legal requirements.
- Customer support communication logs: Retained for 3 years for reference and resolution of any disputes that may arise.
- Marketing data: Deleted or anonymised as soon as you withdraw consent to receive marketing communications.
- Cookie data: Session cookies are deleted when you close your browser. Preference cookies are stored for up to 12 months or until you clear cookies through your browser settings.
8. Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by jayaslot. All data rights requests can be submitted by email to support@jayaslot.run or via the 24/7 live chat within the jayaslot platform.