JiliRaja Privacy Policy – Malaysian Player Data Protection

1 Introduction and Scope of This Policy

JiliRaja takes its responsibility to protect user privacy seriously. This Policy applies to all users who access the JiliRaja platform from any device, including computers, smartphones, and tablets — whether through our official website or mobile app.

We process your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. Every category of data we collect has a clear and lawful purpose, and we will not use it for any other purpose without informing you first.

2 Types of Personal Data We Collect

JiliRaja collects your personal information through several means — directly from you during registration, automatically when you use the platform, and through trusted third parties in certain cases.

The information you provide must be accurate, complete, and up to date. You are responsible for updating your profile information should any changes occur.

3 How We Use Your Data

JiliRaja uses your personal data only for lawful, stated purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and managing your player account, including the required identity verification (KYC) process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently.
• Service Delivery: Providing access to all games, sports betting, live casino, and entertainment services on the JiliRaja platform.
• Security and Compliance: Detecting and preventing fraud, money laundering, and any suspicious or unlawful activity.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to users.
• Service Communications: Sending important notifications related to your account, transactions, and any changes to our terms of service.
• Platform Improvements: Analysing usage patterns to improve the quality, performance, and user experience on the JiliRaja platform.
• Promotions and Bonuses: Offering relevant promotions, bonuses, and rewards based on your activity and preferences — with your consent.

4 Data Sharing and Disclosure

JiliRaja does not sell or trade your personal information. However, in certain limited situations, we may share your data with the following parties:

• Payment Service Providers: Trusted payment processors, banks, and digital wallet providers to enable financial transactions to be processed securely.
• Technical Service Providers: Cloud infrastructure providers, anti-fraud services, and analytics tools that help us operate the platform effectively.
• Regulatory and Legal Bodies: Government authorities, courts, or law enforcement bodies when required by law or court order.
• Licensed Business Partners: Game software providers and content partners working with JiliRaja, subject to strict confidentiality agreements.

Every third party that receives your data is required to meet security and confidentiality standards equal to or higher than our own. We do not permit third parties to use your data for any purpose other than what is specified in their service agreement with JiliRaja.

5 Data Security and Protection

We implement robust technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. The protective measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and JiliRaja's servers is protected with the highest industry-recognised level of encryption.
• Two-Factor Authentication (2FA): An additional security layer is available for all player accounts to prevent unauthorised access.
• Continuous Monitoring: Our systems are monitored around the clock by our internal security team to detect any suspicious activity.
• Internal Access Controls: Only authorized personnel may access player personal data, and all access is logged for audit purposes.
• Regular Security Testing: We conduct regular penetration testing and independent security audits.
• Secure Data Backup: Data is regularly backed up to secure locations to ensure continuous service availability.

While we take all reasonable measures, no digital system can be guaranteed one hundred percent secure. In the event of any data breach affecting your information, we will notify you within the timeframe required by law.

6 Cookies and Tracking Technologies

JiliRaja uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, display settings, and login details for your convenience.
• Analytics Cookies: Helping us understand how users interact with the platform for service improvement purposes.
• Performance Cookies: Optimising platform speed and responsiveness based on real usage patterns.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the JiliRaja platform.

7 Your Rights Regarding Personal Data

As a JiliRaja platform user, you have certain rights regarding the personal data we hold and process. These rights can be exercised by contacting our support team:

• Right to Access: You have the right to request a copy of all personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete data.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data ("right to be forgotten"), subject to our legal obligations.
• Right to Restrict Processing: You may request that we restrict how we process your data in certain circumstances.
• Right to Data Portability: You may request that we provide your data in a machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.

8 Data Retention Period

JiliRaja retains your personal data only for as long as it is needed for the purposes stated in this Policy, or as required by applicable law.

• Active Account Data: Retained for as long as your account is active and for the required period following account closure to meet legal obligations.
• Financial Transaction Data: Retained for a minimum of seven (7) years in line with applicable legal and accounting requirements.
• Activity and Security Logs: Retained for twelve (12) months for security audit and fraud investigation purposes.
• KYC Data: Retained for the period prescribed by applicable anti-money laundering (AML) regulations.
• Support Communication Records: Retained for three (3) years from the date of last interaction.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymize it in accordance with our standard procedures.

9 Cross-Border Data Transfers

As part of operating a global platform, your personal data may be processed or stored on servers located outside Malaysia. JiliRaja ensures that any such data transfers are carried out with adequate safeguards and in compliance with applicable laws.

The protective measures we apply for cross-border data transfers include:

• Using internationally recognised standard data transfer agreements with all recipient parties.
• Ensuring that the recipient country or region maintains an equivalent level of data protection.
• Applying contractual terms that bind our partners to the same data protection standards.

By using the JiliRaja platform, you acknowledge and agree to such data transfers, subject to the protective measures outlined herein.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) team:

• Privacy Email: [email protected]
• General Customer Support: [email protected]
• Response Time: Within 3 business days for general enquiries; 30 days for formal data rights requests.

We also encourage you to refer to the FAQ us for answers to frequently asked questions about privacy and account security. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country.