Jawa138 Privacy Policy – Protecting Your Data

01 Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes how jawa138 ("we", "Platform") collects, uses, stores, discloses, and protects your personal information ("User", "you") when you use the jawa138.net website and all related services.

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and forms part of the overall agreement between you and jawa138. By registering or using our platform, you consent to the collection and processing of your personal data as described in this Policy.

This Policy applies to all registered jawa138 users in Malaysia, including those accessing the platform via web browser, mobile app, or any other digital channel provided by jawa138. If you do not agree with any part of this Policy, please discontinue use of the platform and contact us to close your account.

02 Personal Data We Collect

2.1 Data You Provide Directly

When you register and use jawa138, you provide us with the following information directly:

• Full name as per Malaysian MyKad or passport
• Date of birth for age verification (18 years and above)
• An active email address
• A valid Malaysian phone number
• Residential address in Malaysia
• MyKad number or passport (for KYC purposes)
• Payment method details you use (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX)

2.2 Automatically Collected Data

When you use the jawa138 platform, our systems automatically record the following technical information:

• IP address and approximate geographic location
• Browser type and version
• Your device's operating system
• Access time and date
• Pages visited and time spent on each page
• Gaming data including bets, winnings, and transaction records in MYR
• Session and account activity logs

2.3 Data from Third Parties

In certain circumstances, jawa138 may receive information about you from trusted third parties, including identity verification service providers, payment processors such as banks and Malaysian e-wallet providers, and fraud prevention agencies. This data is used solely to verify your identity and ensure the security of financial transactions.

03 How We Use Your Personal Data

Jawa138 uses the personal data collected for the following purposes only. We will not use your data for any other purpose without first obtaining your explicit consent:

3.1 Account Management & Verification

Your data is used to create and manage your jawa138 account, verify your identity during the KYC process, and ensure that only you can access your account. This includes sending verification emails, OTP codes, and important security notifications related to your account.

3.2 Financial Transaction Processing

All deposits and withdrawals made via Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX require your financial information to be processed securely and accurately. Transaction records are retained for accounting, audit, and Malaysian financial regulatory compliance purposes.

3.3 Security & Fraud Prevention

Technical data such as IP addresses, session logs, and activity patterns are used by jawa138's security systems to detect and prevent unauthorised access, fraud, money laundering, and any activity that violates our Terms & Conditions. This protects you and all other users on the platform.

3.4 Service Improvement & Personalisation

Data on your usage habits and game preferences helps us improve the platform, recommend relevant games such as the latest slots or Malaysia Super League football matches, and tailor the interface display to your preferences. This analysis is conducted in aggregate and does not affect individual privacy.

3.5 Marketing Communications

With your consent, jawa138 may send you promotional information, bonus offers, and platform updates via email or SMS. You may opt out of marketing communications at any time through the unsubscribe link in any email or by updating your account settings.

04 Data Sharing & Disclosure

Jawa138 takes seriously its responsibility not to disclose your personal information without legitimate grounds. The following are the limited circumstances under which your data may be shared:

4.1 Trusted Service Providers

We share only the necessary data with third-party service providers that support jawa138's operations, including payment processors, identity verification service providers, server hosting companies, and analytics platforms. All such providers are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.

4.2 Legal Requirements

Jawa138 may disclose user information to relevant Malaysian authorities such as Bank Negara Malaysia, the Royal Malaysia Police, or the courts when required by a valid court order, warrant, or legal obligation. In such cases, we will notify you where permitted by law to do so.

4.3 Business Transfers

In the event of any merger, acquisition, or transfer of jawa138's assets, user data may be transferred as part of the business assets. You will be given advance notice and the option to delete your account before any such transfer takes place.

05 Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit jawa138.net. They allow the platform to remember your preferences, maintain your login session, and deliver a smoother experience when you play slots, live casino, or Sports Betting.

5.2 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session verification, and security. Cannot be disabled.
• Performance Cookies: Collects information on how you use the platform to help us improve site speed and responsiveness.
• Functional Cookies: Remembering your preferences such as language, display settings, and favourite games.
• Analytics Cookies: Used to understand aggregate usage patterns for product improvement purposes. This data does not identify you individually.

5.3 Managing Cookie Preferences

You can manage and delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the jawa138 platform. For guidance on managing cookies in popular browsers such as Chrome, Firefox, or Safari, please refer to the respective browser's help documentation.

06 Data Security

Jawa138 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or inadvertent disclosure:

• Transit Encryption: All data transmitted between your device and jawa138's servers is protected by TLS 1.3 with AES-256 encryption.
• Storage Encryption: Sensitive data such as passwords and financial information is stored in encrypted form using industry-standard hashing algorithms.
• Access Controls: The principle of least privilege is applied — only staff who require access to specific data in order to perform their duties are granted that permission.
• 24/7 Monitoring: jawa138's security systems monitor platform activity around the clock to detect any threats or anomalies promptly.
• Penetration Testing: Regular security audits are conducted by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): We encourage all users to enable 2FA as an additional layer of protection for their accounts.

While jawa138 takes all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach affecting your personal information, we are committed to notifying you within 72 hours of confirming the incident, in line with industry best practices.

07 Data Retention & Deletion

Jawa138 retains your personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by applicable Malaysian law:

• Active Account Data: Retained for as long as your account remains active on jawa138.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• Security Logs: Retained for 12 months for security incident investigation purposes if required.
• Marketing Data: Deleted within 30 days of your unsubscribe request or request for erasure.
• After Account Closure: Personal data no longer required by law will be deleted or anonymised within 90 days of account closure.

When data is no longer needed, jawa138 employs secure deletion methods that ensure data cannot be recovered, including cryptographic erasure for digital data.

08 Your Rights Under PDPA 2010

As a jawa138 user based in Malaysia, you have the following rights under the Personal Data Protection Act 2010:

8.1 Right of Access

You have the right to request a copy of all personal data we hold about you. Submit your request by email to support@jawa138.net with the subject line "Data Access Request". jawa138 will process your request within 21 business days.

8.2 Right to Correction

If you believe any personal information we hold about you is inaccurate or outdated, you have the right to request a correction. Basic details such as your phone number and email address can be updated directly through the profile settings in your jawa138 account.

8.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances, particularly where the data is no longer needed for the purpose it was originally collected. Please note that such a request may result in the closure of your account, as some data is essential for platform operations.

8.4 Right to Object to Marketing Processing

You have the absolute right to object to the processing of your data for direct marketing purposes at any time. Once you exercise this right, jawa138 will cease all marketing communications to you within 5 business days.

09 Children's Privacy

The jawa138 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. Our registration process requires age verification, and any account suspected of belonging to an underage individual will be suspended immediately until valid proof of age is provided.

If you are a parent or guardian who believes your minor child has registered an account on jawa138, please contact us immediately at support@jawa138.net. We will investigate and delete the account along with all associated data within 48 hours of receiving a valid report.

10 Changes to the Privacy Policy

Jawa138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, Malaysian legal requirements, or new platform features. Any changes will take effect immediately upon publication of the latest version on this page.

For material changes — those that significantly affect how we use your personal data — jawa138 will notify you via your registered email or an in-platform notification at least 14 days before the changes take effect. Continued use of the jawa138 platform after such notice constitutes your acceptance of the updated policy.

The "Last Updated" date at the top of this page reflects when this Policy was last reviewed. We recommend checking this page periodically to stay informed on how jawa138 protects your data.

11 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how jawa138 handles your personal data, please contact our Privacy Officer through the following channels:

• Email: support@jawa138.net (subject: "Privacy Inquiry")
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the platform
• Response Time: We guarantee a response within 3 business days for all privacy enquiries

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital. Further information on the JPDP complaints process is available on the ministry's official website.