jibets Privacy Policy

jibets ("we", "us", "our") is the operator of the online gaming platform accessible at jibets.app. jibets is licensed and regulated under an applicable international gaming authority and serves Players primarily based in Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and the broader Malaysian market.

For the purposes of applicable data protection legislation, jibets is the data controller in respect of personal data collected through the jibets Platform. This Privacy Policy applies to all personal data processed by jibets in connection with the operation of the Platform, including data collected via the website, live chat, email correspondence, and payment processing.

Questions about this Policy or your personal data held by jibets should be directed to our Data Protection contact at [email protected] (plain text — not a clickable link).

jibets collects personal data that is necessary to operate the Platform, comply with regulatory obligations, and provide a personalised gaming experience. The categories of data we collect include:

• Full legal name, date of birth, and gender
• Email address and mobile phone number
• Residential address (city, state, postcode)
• Username and encrypted password hash
• Preferred currency (MYR)

• Government-issued photo identity document (e.g. MyKad, passport)
• Proof of address documentation where required
• Source-of-funds documentation for high-value transactions
• Facial biometric scan for liveness check where required by our KYC provider

• Payment method identifiers (e.g. Touch 'n Go eWallet account reference, DuitNow registered mobile number, FPX bank selection)
• Transaction history: deposit amounts, withdrawal amounts, timestamps
• Bonus credit and wagering activity records

jibets does not store full card numbers or bank account credentials. Payment processing is handled by PCI-DSS compliant third-party payment processors.

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited, games played, bets placed, and game outcomes
• Referring URL and search terms where applicable
• Cookie identifiers and similar tracking technologies (see Section 6)

• Live chat transcripts with jibets customer support
• Email correspondence with jibets
• Feedback submitted via surveys or in-platform prompts

jibets uses the personal data it collects for the following purposes:

jibets processes personal data under the following legal bases:

• Contractual necessity: Processing required to perform the Player Account agreement, including account management, game provision, deposits, and withdrawals.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, gaming licensing requirements, KYC obligations, and regulatory reporting duties.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications, certain cookies, and any processing activity for which jibets has explicitly requested and obtained your consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jibets does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

We share data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include KYC and identity verification providers, payment processing partners (for Malaysian e-wallets including Touch 'n Go, DuitNow, FPX), game platform providers, cloud infrastructure providers, and live chat software providers.

jibets may disclose personal data to gaming regulators, law enforcement agencies, financial intelligence units, or other governmental authorities where required by applicable law or valid legal process. We will notify you of such disclosures where legally permitted to do so.

In the event of a merger, acquisition, or sale of all or part of jibets' business, Player data may be transferred to the acquiring entity as part of the transaction. Affected Players will be notified prior to any such transfer and the incoming controller will be bound by terms no less protective than this Policy.

jibets uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and analyse usage patterns. The types of cookies we use are:

• Strictly necessary cookies: Essential for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without affecting core functionality.
• Functional cookies: Remember your preferences such as language, currency, and game lobby settings to provide a more personalised experience on jibets.
• Analytics cookies: Collect anonymised or pseudonymised usage data to help us understand how Players navigate the Platform and identify areas for improvement.
• Marketing cookies (consent-based): Track interactions to enable relevant promotional communications. These are only placed with your explicit consent and can be withdrawn at any time via your cookie preferences.

You may manage cookie preferences at any time through your browser settings. Disabling certain cookies may affect the functionality of the jibets Platform.

jibets retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Key retention periods are as follows:

• Active account data: Retained for the duration of the Account relationship and for a minimum of five (5) years following account closure, in accordance with AML and gaming licensing requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of seven (7) years for financial regulatory compliance purposes.
• Communications data: Live chat transcripts and email records retained for up to three (3) years from the date of the interaction.
• Marketing data: Retained until consent is withdrawn or for up to two (2) years from the date of last interaction with jibets, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an individual.

jibets implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the jibets Platform
• Passwords stored using industry-standard one-way cryptographic hashing with salting — never stored in plain text
• Two-factor authentication (2FA) available on all Player Accounts
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis
• Regular penetration testing and vulnerability assessments of Platform infrastructure
• Segregated Player fund accounts to protect financial balances
• Incident response procedures with mandatory breach notification to regulators and affected Players in accordance with applicable law

While jibets takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. We encourage Players to use strong, unique passwords and to enable 2FA on their jibets Account.

Subject to applicable law and certain exceptions, you have the following rights in respect of your personal data held by jibets:

• Right of access: Request a copy of the personal data jibets holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jibets' legal retention obligations.
• Right to restriction of processing: Request that jibets limit the processing of your personal data in certain circumstances.
• Right to data portability: Receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Withdraw consent for any processing activity based on consent, at any time, without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact jibets via live chat or at [email protected]. jibets will respond to verifiable requests within 30 days. We may request identity verification before processing access or deletion requests.

The jibets Platform is strictly restricted to individuals aged 21 years and above. jibets does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data belonging to an underage individual has been collected, we will immediately close the associated Account, return any deposited funds to the verified payment source, and permanently delete the underage individual's personal data from our systems.

If you believe that a minor has registered an Account on jibets, please contact us immediately at [email protected] so that we can take immediate action.

jibets' infrastructure and some of our third-party service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, jibets ensures that appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards may include binding contractual clauses, adequacy decisions, or other approved transfer mechanisms.

By using the jibets Platform, you acknowledge that your personal data may be transferred to and processed in countries other than Malaysia, in accordance with this Policy.

jibets reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Players via email notification or a prominent notice on the Platform at least 14 days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. Continued use of the jibets Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with any material change, you should close your Account before the effective date.

For any enquiries relating to this Privacy Policy, your personal data, or the exercise of your data protection rights, please contact the jibets Data Protection team through either of the following channels:

• Live Chat: Available 24/7 from the jibets Platform dashboard — for urgent account and data queries
• Email: [email protected] — for formal data subject access requests and privacy complaints

jibets aims to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 days. For complex requests, we will notify you of any extension of this timeline in advance.