Privacy Policy

Privacy Policy jomkis — Your Data Is Always Protected

Jomkis prioritises the privacy of every member. This Policy clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010.

Updated: 1 January 2026

Quick Summary: jomkis does not sell your personal data to anyone. We only collect information that is strictly necessary to operate the platform securely and meet legal requirements. Your privacy is our priority.

01 Introduction and Scope of This Policy

This Privacy Policy ("Policy") details how jomkis ("we", "Platform") collects, processes, uses, stores, and protects your personal data as a user or prospective user of the jomkis platform.

This Policy applies to all individuals who access the jomkis website, use the jomkis mobile app, register a member account, or interact with any services provided by jomkis. By using our platform, you agree to the data processing practices described in this Policy.

Jomkis fully complies with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. In the event of any conflict between a translated version of this Policy and the original language version, the original language version shall prevail.

02 Types of Personal Data We Collect

Jomkis collects various categories of personal data depending on how you interact with our platform. The following is a comprehensive list of data we may collect:

Data Category Example Information How Collected
Identity Information Full name, date of birth, identity card number, gender Account registration, KYC
Contact Information Phone number, email address, residential address Registration, profile forms
Financial Information Bank account number, bank name, deposit and withdrawal transaction records Payment processing
Technical Information IP address, device type, web browser, operating system, device ID Automatically during use
Activity Data Betting history, game records, game preferences, login timestamps Automatically during use
KYC Documents Copies of ID card, bank statements, verification selfie Account verification process
Communication Live chat records, support emails, submitted complaints Support interactions

jomkis does not collect credit card numbers directly. All card transactions are processed by third-party payment processors that hold their own PCI-DSS certification. jomkis only receives transaction confirmation and does not store full card details.

03 Purposes for Using Personal Data

Jomkis only processes your personal data for legitimate and transparent purposes. We do not use your data for unrelated purposes without first obtaining your additional consent. The following are the primary purposes of our data processing:

  • Account Management: To register, verify, manage, and maintain your member account on the jomkis platform.
  • Transaction Processing: To process deposits, withdrawals, and all financial transactions accurately and securely.
  • KYC and AML Compliance: To fulfil the Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements mandated by the relevant authorities.
  • Platform Security: To detect, investigate, and prevent fraud, hacking, account misuse, and other suspicious activities.
  • Service Improvement: To analyse usage patterns for the purpose of improving game quality, platform performance, and the overall user experience.
  • Service Communications: To send important notifications related to your account, transactions, security updates, and policy changes.
  • Customer Support: To provide effective assistance whenever you contact the jomkis support team.
  • Responsible Gaming: To monitor gaming patterns and identify signs of addiction in order to safeguard member wellbeing.
  • Marketing (with consent): To send promotional information, bonuses, and exclusive offers — only if you have consented to receive them.

The legal bases underpinning our data processing include: performance of a contract with members, compliance with legal obligations, jomkis's legitimate interests in securing the platform, and voluntary consent from members for marketing purposes.

04 Data Sharing and Disclosure

Jomkis does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, in the course of legitimate platform operations, we may need to share certain information with the following parties:

  • Payment Service Providers: FPX, TNG eWallet, GrabPay, Boost and partner banks that securely process your financial transactions.
  • Game Providers: Casino and sports game development companies that provide game content within the jomkis platform — only the minimum data required for game operations is shared.
  • KYC and Anti-Fraud Services: Third-party identity verification providers that help us authenticate documents and prevent fraud.
  • Technical Infrastructure Providers: Cloud, hosting and cybersecurity service providers that enable the jomkis platform to operate reliably and securely.
  • Regulatory Authority: Government agencies, licensing bodies, or law enforcement authorities when required by Malaysian law or a valid court order.

All third parties that receive data from jomkis are subject to strict data processing agreements. They are prohibited from using your data for any purpose other than what is specified in those agreements.

jomkis will never ask you to share your password via email, SMS, or live chat. If you receive such a request, it did not come from jomkis — please report it to our support team immediately.

05 Data Security Measures

Jomkis continually invests in robust cybersecurity infrastructure to ensure your personal data is always protected from unauthorised access, breaches, or misuse. Among the security measures we implement:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and jomkis servers.
  • AES-256 encryption for sensitive personal data stored in our databases.
  • Two-factor authentication (2FA) available for all member accounts as an additional layer of security.
  • 24/7 security monitoring by jomkis's in-house cybersecurity team.
  • Regular penetration testing by independent security auditors to identify and close system vulnerabilities.
  • Role-based access control (RBAC) ensuring only authorized personnel can access member personal data.
  • Data separation between production and development environments to prevent exposure during technical work.
  • A clear incident response procedure in the event of any data breach — including the obligation to notify members within the stipulated timeframe.

While jomkis takes all reasonable security measures, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe — use a strong password, enable 2FA, and never share your login credentials with anyone.

06 Data Retention Period

Jomkis retains your personal data only for as long as necessary to fulfil the original purpose of collection and to meet applicable legal obligations. Our core principle is simple: we do not keep data longer than needed.

Data Type Retention Period Reason
Active account data Throughout the active account period Service management
Financial transaction records 7 years after transaction Financial regulatory compliance
KYC Documents 5 years after account closure AML/KYC Requirements
Support communication logs 3 years Dispute resolution
Marketing data (with consent) Until consent is withdrawn Voluntary consent
Technical and security logs 12 months Platform Security

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be personally linked to you. Anonymised data may be retained for internal analytics purposes without a time limit.

07 Cookies, Tracking Technologies and Analytics

The jomkis platform uses cookies and similar tracking technologies to ensure a smooth, secure, and personalised user experience. The following are the types of cookies used:

  • Necessary Cookies (Required): These cookies are required for core platform functions such as login authentication, session security and language preference management. They cannot be disabled.
  • Performance Cookies: Helps us understand how visitors interact with the platform — frequently visited pages, time spent and navigation paths. This data is used in aggregate form to improve site performance.
  • Functional Cookies: Stores user preferences such as display settings, preferred language and remembered login details (if you enable the "remember me" feature).
  • Analytics Cookies: Used to analyse traffic and user behaviour for the continuous improvement of the jomkis platform.

You can control or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the jomkis platform, including the possibility of being unable to log in to your account. We recommend that you do not disable essential cookies while using the jomkis platform.

08 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and the privacy principles we uphold, you have the following rights regarding your personal data held by jomkis:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You can request the correction of any inaccurate or incomplete personal data.

Right to Erasure

You can request the deletion of your personal data, subject to applicable legal obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

Right to Data Portability

You can request your data in a machine-readable format for transfer to another provider.

To exercise any of the above rights, please contact the jomkis support team via live chat or email. We will process your request within 14 business days. In complex cases, this period may be extended to up to 30 days with advance notice to you.

09 Cross-Border Data Transfers

In some operational scenarios, your personal data may be processed or stored on servers located outside Malaysia — for example, by cloud service providers or international game providers. jomkis ensures that any such data transfers are carried out with adequate safeguards.

The steps we take to protect international data transfers include:

  • Data processing agreements (DPA) compliant with international standards with all overseas service providers.
  • Use of internationally recognised Standard Contractual Clauses to ensure a level of protection equivalent to Malaysian law.
  • Regular security assessments of all overseas data processing partners to ensure ongoing compliance.
  • Data encryption before any cross-border transfer is performed.

Jomkis will not transfer your personal data to any country or territory that lacks adequate data protection standards without first obtaining your consent or ensuring appropriate contractual safeguards are in place.

10 Children's Privacy and Age Restrictions

The jomkis platform is not intended for children or individuals under the age of 18. jomkis actively prevents underage access through a strict KYC process during registration and periodic age verification checks.

Jomkis does not knowingly collect personal data from individuals under the age of 18. If we discover that a minor's personal data has been collected without proper age verification, we will take immediate action to:

  • Close the relevant account immediately.
  • Delete all personal data associated with that account.
  • Return any deposited funds to the original payment method where identifiable.

If you are aware that someone under the age of 18 has registered on the jomkis platform, please notify us immediately through the available support channels.

Parents and guardians who discover a child using the jomkis platform or any online betting platform are urged to take immediate action and seek professional help if necessary.

11 Changes to This Privacy Policy

Jomkis reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

For significant and material changes, jomkis will notify members through:

  • In-platform notifications when you log in to your jomkis account.
  • Email to the address registered in your account, if the changes involve significant privacy rights.
  • A banner or pop-up notice on the jomkis website within 30 days before the changes take effect.

Continued use of the jomkis platform after any Privacy Policy changes are published will be considered your acceptance of the amended terms. We recommend reviewing this Privacy Policy periodically, at least once every three months, to stay informed of how we manage your personal data.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how jomkis handles your personal data, please do not hesitate to contact us through the following channels:

  • Live Chat: Available 24/7 directly within the jomkis platform — the fastest way to get an immediate response from our team.
  • Privacy Email: [email protected] — for written enquiries that require documentation or a written record for reference.
  • Official Telegram: The official jomkis Telegram channel for instant communication in Bahasa Melayu.

The jomkis Privacy Team will respond to all enquiries within 3 business days. For more complex requests such as data access or data deletion requests, the response period is within 14 business days. We are committed to resolving every enquiry transparently and professionally.

If you are not satisfied with the response received, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for PDPA compliance in Malaysia.

jomkis takes every privacy-related complaint seriously. No complaint will be treated as trivial, and every issue will be thoroughly investigated by a qualified team before a response is provided.

Why Your Data Welcome to jomkis

Jomkis builds trust through actions, not just words. Here are our concrete commitments to protecting your privacy every day.

256-bit SSL Encryption

All data transmitted between your device and jomkis servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.

Two-Factor Authentication (2FA)

Jomkis provides 2FA for all member accounts. By enabling 2FA, your account is protected by an additional layer of security even if your password is compromised — keeping your identity safe.

No Data Sales

Jomkis has never and will never sell, rent, or transfer your personal data to advertisers or third parties for their own marketing purposes. Your data belongs to you.

Malaysia PDPA Compliance

The entire jomkis data processing system is designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA), providing you with robust legal protection.

24/7 Security Monitoring

The jomkis cybersecurity team monitors the platform continuously around the clock. Any suspicious activity is detected and acted upon in real time to protect your account.

Full Control in Your Hands

Through your jomkis account settings, you can manage your privacy preferences, withdraw marketing consent, request a copy of your data, or initiate an account deletion at any time.

Frequently Asked Questions Privacy-Related

Answers to the most frequently asked questions by jomkis members regarding data protection and privacy.

Absolutely not. jomkis has never sold, rented, or transferred members' personal data to any third party for their own marketing or commercial purposes. Your data is only shared with service providers that assist in operating the jomkis platform — and all such parties are bound by strict confidentiality agreements.

Yes, you have every right to request a copy of your personal data. Contact the jomkis support team via live chat or email at [email protected] stating your data access request. We will process the request within 14 business days and deliver your data report in a readable format.

All financial information is transmitted via 256-bit SSL encryption channels. jomkis does not store full credit card numbers — all card transactions are processed by PCI-DSS certified payment processors. Bank account data is stored in encrypted form, accessible only to authorised personnel.

When an account is closed, jomkis will delete personal data that is not legally required to be retained. However, KYC documents are kept for 5 years and financial transaction records are kept for 7 years after account closure — these are mandatory requirements under Malaysian financial and AML laws that we are obligated to follow.

You can unsubscribe from marketing communications at any time by clicking the "Unsubscribe" link at the bottom of any promotional email from jomkis, or by updating your communication preferences in your jomkis account settings. The unsubscribe request will take effect within 48 hours. You will still receive important account-related notifications that cannot be disabled.

Yes. jomkis operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We uphold all principles stipulated under the PDPA, including the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Data Integrity Principle, Access Principle, and Data Transfer Principle. Our Privacy Policy is updated regularly to reflect any changes in applicable privacy laws.
Trusted Platform

Your Data Is Safe — Start Your Gaming Experience

Now that you understand jomkis's commitment to protecting your privacy, register today and enjoy casino games, sports, and fish shooting games in a safe, fair and responsible environment alongside over 500,000 active members across Malaysia.

18+ only. Please play responsibly.

Bahasa Melayu