Privacy Policy

This Privacy Policy ("Policy") is published by JOS55 ("JOS55", "we", "us", or "our"), the operator of the online casino and sports betting platform available at https://jos55.lat (the "Platform"). This Policy applies to all individuals who access the Platform, whether as registered members or as visitors browsing the site.

JOS55 takes data privacy seriously and is committed to handling your personal information with transparency, care, and respect. This Policy describes the categories of personal data we collect, the purposes for which it is processed, the basis on which processing is conducted, and the rights you hold in relation to your data.

This Policy should be read alongside our Terms & Conditions, which govern your use of the JOS55 Platform. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

JOS55 primarily serves users located in Malaysia. References in this Policy to applicable law include the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the collection and processing of personal data in commercial transactions involving Malaysian data subjects.

The following definitions apply throughout this Privacy Policy:

JOS55 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

3.1 Registration and Account Data

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number
• Preferred username
• Residential address (city, state, postcode — including Malaysian cities such as Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)

3.2 Identity Verification (KYC) Data

• Scanned copy or photograph of government-issued photo identification (Malaysian NRIC, passport)
• Proof of address documentation (utility bill, bank statement)
• Payment method ownership evidence (e.g., Touch 'n Go eWallet screenshot, bank account statement)
• Selfie or live facial verification data, where applicable

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and methods
• Payment method identifiers (e-wallet account number, bank account details — stored in tokenised form)
• Transaction reference numbers
• Account balance history
• Cryptocurrency wallet addresses used for transactions

3.4 Gaming and Betting Activity Data

• Bet and wager history (including sports betting markets, casino game sessions, and mix parlay selections)
• Game session duration and frequency
• Bonus and promotion usage history
• Responsible gambling tool settings (deposit limits, self-exclusion status)

3.5 Technical and Device Data

• IP address and approximate geolocation
• Browser type, version, and language settings
• Operating system and device type
• Session timestamps and login history
• Referral URL and navigation path within the Platform

3.6 Communications Data

• Live chat transcripts with JOS55 support agents
• Email correspondence with JOS55 support or compliance teams
• Feedback and complaint submissions

JOS55 collects your personal data through the following channels:

1. Directly from you: When you register an account, complete the KYC process, make a deposit or withdrawal request, contact customer support, or respond to surveys or promotions.
2. Automatically through Platform use: Via cookies, server logs, and analytics tools that capture technical data about your device, browser, and navigation behaviour on the Platform.
3. From payment processors: When you initiate a transaction via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or bank transfer, our payment processing partners share transaction confirmation data with JOS55.
4. From KYC verification providers: Third-party identity verification services used to confirm the authenticity of documents submitted during the KYC process may provide verification results to JOS55.
5. From publicly available sources: For fraud prevention and compliance purposes, JOS55 may cross-reference publicly available information, such as sanctions lists or politically exposed persons (PEP) databases.

JOS55 processes your personal data for the following specific purposes:

JOS55 processes your personal data on the following legal bases in accordance with applicable data protection law, including the Malaysian Personal Data Protection Act 2010 (PDPA):

• Performance of a Contract: Processing is necessary to deliver the services you have requested by registering a JOS55 account and agreeing to our Terms & Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC verification, AML reporting duties, and responsible gambling requirements.
• Legitimate Interests: Processing is carried out in pursuit of JOS55's legitimate business interests — including fraud prevention, platform security, and service improvement — where such interests are not overridden by your privacy rights.
• Consent: Processing is based on your explicit, freely given, and informed consent — in particular, for marketing communications and any non-essential cookies or tracking technologies.

Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

JOS55 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share your personal data only in the following limited and controlled circumstances:

1. Payment Processing Partners: Your transaction data is shared with Malaysian payment gateway providers and financial institutions (including processors supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and cryptocurrency networks) to facilitate deposits and withdrawals.
2. KYC and Identity Verification Providers: Document and identity data submitted during KYC verification is processed by contracted third-party verification service providers under strict data processing agreements.
3. Fraud Prevention and AML Services: Data may be shared with third-party fraud detection and anti-money laundering screening services to protect the integrity of the Platform and comply with financial crime prevention obligations.
4. Regulatory and Law Enforcement Authorities: JOS55 will disclose personal data to relevant governmental or regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive.
5. Professional Advisers: Lawyers, auditors, and compliance consultants engaged by JOS55 may access personal data on a need-to-know basis in the course of providing professional services, subject to confidentiality obligations.
6. Business Succession: In the event of a merger, acquisition, restructuring, or sale of JOS55's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections as set out in this Policy.

All third-party processors engaged by JOS55 are contractually required to process personal data only in accordance with JOS55's instructions, maintain appropriate security standards, and comply with applicable data protection law.

JOS55 uses cookies and similar tracking technologies to support Platform functionality, maintain session security, and analyse usage patterns. The following categories of cookies are used on the Platform:

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair Platform functionality. Consent-based cookies (functional, analytical, and marketing) may be withdrawn at any time through your browser or by contacting JOS55 support.

JOS55 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulation. The following retention principles apply:

• Active Account Data: Personal data associated with an active JOS55 account is retained for the duration of the account relationship.
• Closed Account Data: Following account closure, personal data is retained for a minimum of five (5) years to comply with anti-money laundering record-keeping requirements and to facilitate the resolution of any outstanding disputes or regulatory inquiries.
• KYC Documents: Identity and verification documents are retained for a minimum of five (5) years from the date of submission, in accordance with applicable AML legislation.
• Transaction Records: Financial transaction history is retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Live chat and email correspondence is retained for a minimum of two (2) years from the date of the interaction.
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained indefinitely to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

JOS55 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the JOS55 Platform;
• Encrypted storage of sensitive data fields including payment identifiers and identity document data;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments of the Platform infrastructure;
• Multi-factor authentication requirements for administrative access to internal systems;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a high risk to your rights, JOS55 will notify affected individuals and relevant authorities as required by applicable law, without undue delay.

As a data subject and JOS55 member, you hold the following rights in relation to your personal data. These rights may be subject to certain conditions and limitations under applicable law:

To exercise any of the above rights, please contact the JOS55 Data Protection team via live chat or at the email address set out in Section 15. We will acknowledge all rights requests within 5 business days and provide a substantive response within the timeframes required by applicable law.

JOS55 is strictly a 21+ platform. The Platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21 years.

As part of our account registration process and KYC verification, JOS55 takes active steps to verify the age of all registered members. Any account found to belong to an individual under the age of 21 will be immediately suspended, all associated balances will be placed on hold, and the matter will be escalated to our compliance team.

If you become aware that a minor has registered an account on JOS55 or has provided personal data to our Platform, please notify us immediately via live chat or at the contact details listed in Section 15.

The JOS55 Platform does not contain links to external third-party websites in its standard navigation or content. However, payment gateway redirect flows — such as those used for DuitNow, FPX, or bank transfer authentication — may temporarily redirect you to an external banking or payment provider interface.

JOS55 is not responsible for the privacy practices or content of any third-party websites or services you access in connection with payment processing. We recommend reviewing the privacy policy of any payment provider interface you interact with during a deposit or withdrawal transaction.

JOS55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform operations. When material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this page;
• Notify registered account holders via their registered email address with reasonable advance notice of material changes;
• Display a prominent notification on the Platform where appropriate.

Your continued use of the JOS55 Platform following the effective date of an amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to any changes, you must discontinue use of the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how JOS55 protects your personal data.

For all privacy-related inquiries — including data access requests, correction requests, consent withdrawals, and data deletion requests — please contact the JOS55 Data Protection team through the following channels: