Joli77 Privacy Policy – Your Personal Data Protection

Welcome to the joli77 Privacy Policy. This document explains how the joli77 platform ("we", "Platform") collects, stores, processes, and protects the personal information you provide when using our services.

This Privacy Policy applies to all users and registered members of the joli77 platform, including those who access the platform via the website, mobile app, or any other official channels we provide. It covers all activities related to the use of joli77 services, from the account registration process through to your daily gaming activities.

Joli77 is committed to handling your personal information responsibly, transparently, and securely. We never sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent.

We collect various types of information depending on how you interact with the joli77 platform. Generally, the data collected falls into three main categories:

1. Information You Provide Directly

• Full name, date of birth, and IC or passport number
• Email address, phone number, and residential address
• Bank account or e-wallet information for deposit and withdrawal purposes
• Identity verification documents submitted during the KYC process
• Any additional information you share when communicating with our support team

2. Information Collected Automatically

• IP address, device type, operating system, and browser version
• In-platform activity data including games played, session duration, and betting records
• Cookie information and similar tracking technologies
• Access logs and technical data related to platform usage

3. Information from Third Parties

• Verification data from licensed payment processors
• Information from credit check agencies or identity verification services (where applicable)
• Publicly available data obtained lawfully for fraud prevention purposes

Every piece of data we collect is used for a specific and legitimate purpose. The table below outlines the primary purposes for which your data is used:

We will not use your data for any purpose beyond those listed above without first notifying you and, where required, obtaining your fresh consent.

Joli77 does not sell or rent your personal data to any third party. However, there are certain situations where we need to share some of your information with selected parties in order to provide our services to you in full.

Parties That May Receive Your Data:

• Licensed Payment Processors: To facilitate your deposit and withdrawal transactions securely and efficiently
• Game Providers: Minimum information required to access games from our licensed providers
• Technology Service Providers: Cloud infrastructure, cybersecurity, and analytics companies that help us operate the platform
• Competent Authorities: Law enforcement agencies or regulatory bodies where required by Malaysian law
• Auditors and Legal Advisors: In compliance, financial audit, or legitimate legal proceedings

All third parties we work with are required to comply with strict data security standards and are not permitted to use your data for their own purposes outside the scope of their agreement with joli77.

The joli77 platform uses cookies and similar tracking technologies to enhance your experience while using our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login, session management, and account security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform so we can continuously improve the user experience.
• Functional Cookies: Remembering your preferences and settings such as language, region, and display preferences.
• Analytics Cookies: Used to analyze platform traffic and usage patterns in an aggregated and anonymized manner.

You can manage cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some joli77 platform features.

The security of your personal data is joli77's highest priority. We employ multiple layers of security technology and organisational procedures to protect your information from unauthorised access, loss, or misuse.

Security Technologies We Use:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected with industry-grade SSL encryption
• Data Encryption at Rest: Sensitive data such as payment information and KYC documents are stored in encrypted format
• Two-Factor Authentication (2FA): Additional security layers available for all member accounts
• 24/7 Monitoring: A round-the-clock threat monitoring system to detect suspicious activity
• Regular Security Testing: Security audits and penetration testing conducted periodically by independent third parties
• Internal Access Controls: Only authorised staff with a legitimate need may access member personal data

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. In the event of any security incident affecting your data, we will notify you within the timeframe required by law and take immediate action to minimise any impact.

As a data subject under Malaysia's PDPA, you have certain rights regarding the personal information we hold about you. joli77 fully respects and facilitates the exercise of these rights.

To exercise any of the above rights, please contact our data protection team via email or live chat. We will process your request within 14 business days of receipt.

Joli77 does not retain your personal data longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law.

In general, data retention periods are as follows:

• Active Account Data: Retained for the duration that your account remains active and operational
• Financial Transaction Records: Minimum 7 years after the transaction, in line with Malaysia's financial legal requirements
• KYC Documents: Minimum 5 years after the business relationship ends for AML compliance purposes
• Support Communication Logs: 3 years from the date of last communication
• Technical Data & System Logs: Between 90 days and 12 months depending on the type of data
• Account Closed: Minimum data is retained for 5 years after account closure for audit and compliance purposes

Once the retention period expires, your data will be securely deleted or anonymised in accordance with our industry-standard procedures.

Joli77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate business reasons.

When material changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear notice on the platform's home page for at least 14 days
• Sending notifications to registered members via email or in-platform alerts
• In cases of highly material changes, we may request fresh consent from you

Your continued use of the joli77 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, please stop using the platform and contact our support team to close your account.

If you have any questions, concerns, or complaints about how joli77 handles your personal data, we encourage you to contact our Data Protection Officer (DPO) directly.

We commit to responding to every privacy-related inquiry within 14 business days. For more complex cases, we will provide progress updates every 7 days until the matter is resolved.

• General enquiries related to privacy and data usage
• Request to access, correct, or delete your personal data
• Complaints related to data breaches or unauthorized use of data
• Request to opt out of marketing communications

If you are not satisfied with our response, you have the right to file a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory authority.