Privacy Policy 365 JoyLink — Malaysia Player Data Protection

Welcome to the 365 joylink Privacy Policy page. We understand that in today's digital world, trust is the most valuable asset. When you choose to play with us, you entrust us with your personal information — and we take that responsibility very seriously.

This Privacy Policy explains in detail how 365 JoyLink ("we", "Platform" or "company") collect, use, store, share and protect your personal information when you use our website at 365joylink.app or our official mobile app.

This document is drafted in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and global online gaming industry best practices. By using the 365 joylink platform, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy.

365 JoyLink only collects information that is strictly necessary to provide you with a safe, fair and personalised experience. We collect information through three primary channels:

a) Information You Provide Directly

• Full name as stated on official documents.
• National identity card number (MyKad) or passport number.
• Date of birth for age verification.
• Active email address and mobile phone number.
• Bank account details or e-wallet payment methods you have registered.
• KYC supporting documents such as copies of identification cards or bank statements.

b) Information Collected Automatically

• IP address and approximate location information derived from IP.
• Device type, operating system, and web browser version used.
• Game session data including login times, games played and total wagering amounts.
• Platform activity logs for security and fraud detection purposes.
• Cookie data and similar tracking technologies (see Section 5).

c) Information from Third Parties

• Identity verification data from approved KYC service providers.
• Payment verification information from our financial transaction processors.
• Blacklist screening records from anti-fraud and anti-money laundering agencies.

Every piece of information we collect has a clear and legitimate purpose. 365 joylink uses your data exclusively for the following purposes:

• Account management: Creating, verifying, and securely managing your member account, including the login process and two-factor authentication.
• Transaction processing: Securely processing deposits and withdrawals via your chosen payment methods such as FPX, Touch 'n Go, GrabPay, and Boost.
• Legal compliance: Meeting KYC requirements, anti-money laundering (AML) obligations, and reporting responsibilities to the relevant authorities.
• Platform security: Detecting and preventing fraudulent activity, bot usage, collusion, and any breach of terms of service.
• Experience personalisation: Personalising game recommendations, promotions, and content based on your preferences and gaming habits.
• Service communications: Sending important notifications regarding your account, transactions, latest promotions, and platform updates.
• Responsible gaming: Monitoring gaming habits to identify signs of problem gambling and offering appropriate game limit tools.
• Platform improvements: Analysing aggregate (non-individual) usage data to improve the performance, design, and user experience of 365 joylink.

365 JoyLink does not sell or rent your personal data. However, in certain circumstances, we need to share information with selected third parties to ensure our services function properly and securely:

• Payment processors: Transaction information is shared with registered and licensed payment gateway providers to securely process your deposits and withdrawals.
• KYC service providers: Identity data is shared with approved identity verification companies to meet legal requirements.
• Game service providers: Limited game session data shared with game software providers (such as slot and Live Casino providers) to enable gameplay.
• Legal authorities: We may be required to disclose your information if directed by a court, law enforcement agency, or regulatory body with jurisdiction.
• Technology partners: Cloud service, IT infrastructure, and analytics providers bound by strict confidentiality agreements, processing data solely on behalf of 365 joylink.

All third parties we work with are bound by strict data processing agreements and are only permitted to use your information for purposes designated solely by 365 joylink.

365 JoyLink uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use our platform (pages visited, time spent) to help us improve performance.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details for a more convenient experience.
• Analytics Cookies: Enabling us to understand aggregate usage patterns through licensed analytics tools for continuous improvement.

You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect certain features within the 365 JoyLink platform.

We continuously invest in security infrastructure to ensure your data is always protected. The technical and organisational security measures we implement at 365 joylink include:

• Data encryption in transit using TLS 1.3 and SSL 256-bit protocols.
• Data encryption at rest for all sensitive information.
• Two-factor authentication (2FA) for member accounts and internal systems.
• 24/7 threat monitoring and intrusion prevention.
• Regular security audits conducted by independent cybersecurity experts.
• Strict role-based access control (RBAC) for internal staff.
• A comprehensive incident response plan in the event of a data breach.

Under Malaysia's PDPA and 365 JoyLink's commitment to privacy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team via email at [email protected]. We will process your request within 30 business days.

365 JoyLink retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or to comply with applicable legal obligations. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active and up to 7 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in compliance with the Financial Services Act and AML/KYC regulations.
• Activity and security logs: Retained for 2 years for security investigation and audit purposes.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.
• Customer support records: Retained for 3 years after resolution for reference and service improvement purposes.

Once the retention period has expired, your data will be deleted or anonymised in a secure and irreversible manner.

The 365 joylink platform may contain links to third-party websites or services such as game software providers and payment partners. Please take note of the following:

• 365 JoyLink is not responsible for the privacy policies or data handling practices of any third-party websites.
• Each third-party website has its own privacy policy, which you should review before using it.
• The presence of links to third-party sites does not mean 365 joylink endorses or validates their content or privacy practices.

365 JoyLink reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. When significant changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to all registered members via email or in-app notifications.
• Displaying a clear notice on the 365 joylink homepage for a minimum of 30 days.

Your continued use of the 365 joylink platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the 365 joylink Data Protection Officer (DPO) via:

• Email: [email protected] (Response within 3 business days)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the 365 joylink website or app.
• Supported Languages: Bahasa Melayu and English.

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (PDPD) Malaysia which is the relevant regulatory authority in this country.