Privacy Policy

1. Introduction

jomcuci ("we", "us", "our") operates the online gaming platform accessible at jomcuci.win (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who access or use our Platform, including registered members, prospective members, and visitors.

This Privacy Policy ("Policy") describes how jomcuci collects, uses, stores, and discloses personal data in connection with the Platform and our gaming services. It applies to all personal data processed by jomcuci regardless of the medium through which such data is collected.

By registering an account with jomcuci or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the Platform and contact us to close your account.

2. Personal Data We Collect

2.1 Registration Data

When you create a jomcuci account, we collect: full legal name, date of birth, email address, Malaysian mobile number, residential address, and a chosen username. This information is required to establish and maintain your account and to satisfy our Know Your Customer (KYC) obligations.

2.2 Identity Verification Data

To comply with KYC and anti-money laundering (AML) requirements, we may request copies of: Malaysian Identity Card (MyKad) or passport, proof of residential address (such as a utility bill or bank statement), and payment method verification documents. These documents are used solely for identity verification purposes and are handled in accordance with our data security standards.

2.3 Transaction and Financial Data

We collect records of all deposits, withdrawals, and gaming transactions conducted through your account. This includes transaction amounts, timestamps, payment method identifiers (such as masked card numbers or registered e-wallet reference IDs), and transaction status. We do not store raw payment card numbers.

2.4 Usage and Technical Data

We automatically collect certain technical information when you access the Platform, including: IP address, browser type and version, device type and operating system, session duration, pages visited, game activity logs, and login timestamps. This data helps us maintain Platform security, investigate disputes, and improve our services.

2.5 Communications Data

Where you contact jomcuci via live chat, email, or any other communication channel, we retain records of those communications for customer service, compliance, and dispute resolution purposes.

2.6 Marketing Preferences

Where you have opted in to receive promotional communications, we retain your stated marketing preferences in order to personalise and manage such communications.

3. How We Use Your Personal Data

jomcuci processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your jomcuci account.
• Service delivery: Processing deposits and withdrawals, providing access to games, and delivering customer support.
• Identity and age verification: Confirming you meet the minimum age requirement of 21 years and verifying your identity in accordance with KYC obligations.
• Regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations.
• Fraud prevention and Platform security: Detecting and preventing unauthorised access, fraudulent activity, and abuse of the Platform.
• Personalisation: Tailoring game recommendations and promotional offers to your gaming preferences, where you have provided consent.
• Marketing communications: Sending promotional emails, SMS, or in-Platform notifications, subject to your stated preferences and applicable opt-out rights.
• Analytics and improvement: Analysing aggregated, anonymised usage data to improve the Platform, game offerings, and user experience.
• Dispute resolution: Investigating and resolving complaints, disputes, or legal claims.

4. Legal Basis for Processing

jomcuci processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract with you — delivering gaming services, processing transactions, and managing your account.
• Legal obligation: Processing required to comply with applicable AML, KYC, responsible gaming, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, Platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

jomcuci does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

5.1 Licensed Service Providers

Third-party providers engaged to deliver specific services on our behalf, including game software providers, payment processors (such as FPX, Touch n Go eWallet operator, and Boost), identity verification services, cloud hosting providers, and customer support platforms. All such providers are contractually bound to process your data only as instructed and to maintain appropriate security standards.

5.2 Regulatory and Law Enforcement Authorities

Where required by applicable law, court order, or regulatory direction, jomcuci may disclose personal data to government authorities, law enforcement agencies, or our licensing authority. We will notify you of such disclosures where permitted by law to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of jomcuci's business, personal data may be transferred as part of the transaction. We will provide reasonable notice and ensure the acquiring party is bound by data protection obligations no less protective than those set out in this Policy.

5.4 Responsible Gaming Partners

Where you have voluntarily enrolled in a self-exclusion programme or where we are required to share data with responsible gaming registries for the protection of vulnerable players, we may share limited identifying information with relevant bodies.

6. Cookies & Tracking Technologies

jomcuci uses cookies and similar technologies (including local storage and session identifiers) on the Platform. These fall into the following categories:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security tokens. These cannot be disabled.
• Functional cookies: Store your preferences such as language, display settings, and region to improve your experience on return visits.
• Analytics cookies: Collect anonymised data on how users navigate the Platform to help us understand usage patterns and improve our services. These are only set where you have provided consent.

You may control optional cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the Platform. We do not use third-party advertising or behavioural tracking cookies on jomcuci.

7. Data Retention

jomcuci retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in accordance with applicable AML and tax record-keeping obligations.
• Identity verification documents are retained for the period required by our licensing authority from the date of your last transaction or account activity, whichever is later.
• Customer communications are retained for three (3) years from the date of the communication for dispute resolution and compliance purposes.
• Marketing preference data is retained until you withdraw consent or close your account, whichever occurs first.

Upon the expiry of the applicable retention period, data is securely deleted or anonymised in accordance with our data destruction procedures.

8. Data Security

jomcuci employs appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jomcuci's servers.
• Encryption of sensitive data at rest, including KYC documents and payment identifiers.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure.
• Intrusion detection systems and real-time alerts for anomalous access patterns.

While we maintain robust security practices, no system is entirely immune to security incidents. In the event of a data breach that poses a material risk to your rights, jomcuci will notify affected individuals and, where required, the relevant regulatory authority within the timeframes prescribed by applicable law.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by jomcuci:

• Right of access: You may request a copy of the personal data jomcuci holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that we limit the processing of your personal data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact jomcuci via email at [email protected] or through the in-Platform live chat. We will respond to verified requests within 30 days. We may require identity verification before processing a data rights request.

10. Children & Minors

The jomcuci Platform is strictly for individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under 21 years of age. If we discover that a minor has registered an account or provided personal data to jomcuci, we will immediately close the account, delete the associated personal data, and return any deposited funds.

Parents and guardians who believe a minor may have accessed jomcuci are encouraged to contact us immediately at [email protected] so that we may take prompt action.

11. International Data Transfers

jomcuci's primary operations and data processing infrastructure are hosted within secure data centre facilities. Where personal data is transferred to or accessed by service providers located outside Malaysia — for example, game software providers or cloud hosting infrastructure — we ensure that appropriate safeguards are in place, including data processing agreements that impose data protection obligations equivalent to those applicable under Malaysian law and this Policy.

By using jomcuci, you consent to the transfer of your personal data outside of Malaysia to the extent necessary for service delivery, subject to the safeguards described above.

12. Amendments to This Policy

jomcuci reserves the right to update this Privacy Policy at any time. Material changes will be communicated via the Platform, by email to your registered address, or by in-account notification prior to the effective date. The date of the most recent revision is displayed at the top of this page.

Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We recommend that you review this Policy periodically to stay informed about how we handle your personal data.

13. Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how jomcuci handles your personal data, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the in-Platform chat function after login.

We will endeavour to respond to all privacy-related enquiries within 30 days. If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

jomcuci · jomcuci.win · [email protected]