Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out how joker188, accessible at joker188.cam ("the Platform", "we", "us", "our"), collects, uses, stores, discloses and protects personal information relating to users ("you", "your") of the Platform.

joker188 operates as an English-language online entertainment and information hub aimed at adult users, including players based in Malaysia. We recognise that privacy is a fundamental right and are committed to handling personal data with integrity, proportionality and care.

This Policy should be read alongside the joker188 Terms and Conditions and the Responsible Gambling Policy, which together constitute the complete agreement governing your use of the Platform.

If you have questions or concerns about how joker188 processes your personal data, please refer to the Contact Us section at the end of this Policy.

Definitions

For the purposes of this Privacy Policy, the following terms are used consistently:

"Personal Data"

Any information relating to an identified or identifiable natural person, including name, email address, phone number, payment details, device identifiers and behavioural data associated with a specific account.

"Processing"

Any operation performed on Personal Data, including collection, storage, organisation, use, disclosure, alteration and deletion.

"Data Controller"

The entity that determines the purposes and means of processing Personal Data — in this context, joker188 acting through its operating entity.

"Data Processor"

A third party that processes Personal Data on behalf of the Data Controller, such as payment service providers, identity verification vendors and cloud-hosting services.

"User" / "Data Subject"

Any natural person who accesses, registers on or uses the joker188 Platform and whose Personal Data is collected and processed.

"Consent"

A freely given, specific, informed and unambiguous indication of agreement by the Data Subject to the processing of their Personal Data for a stated purpose.

"Cookies"

Small text files placed on a user's device by a website, used to store session information, preferences and analytics data.

"KYC"

Know Your Customer — the identity and age-verification process required of account holders, which involves the submission and processing of identity documents and related data.

Data We Collect

joker188 collects only the personal data necessary for the purposes described in this Policy. The categories of data we may collect include:

joker188 does not intentionally collect special-category data (such as health, racial, religious or biometric information) unless it is voluntarily provided by the user in the context of a responsible-gambling interaction or KYC process.

Data Processing

joker188 processes personal data for the following purposes:

• Account Administration: Creating, verifying, maintaining and securing user accounts, including processing KYC documentation to confirm identity and age eligibility (21+ only).
• Service Delivery: Enabling access to games, sports betting information, promotional content, VIP features and all other Platform services.
• Payment Processing: Processing MYR-denominated deposit and withdrawal transactions through connected payment service providers, including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX and supported e-wallets.
• Compliance and Legal Obligations: Meeting anti-money-laundering (AML) requirements, responding to lawful regulatory enquiries and maintaining mandatory records as required by applicable law.
• Security and Fraud Prevention: Monitoring account activity to detect, investigate and prevent fraud, collusion, bonus abuse, money laundering and other prohibited conduct described in the Terms and Conditions.
• Responsible Gambling: Administering deposit limits, self-exclusion requests, reality checks and other player-protection tools in accordance with the Responsible Gambling Policy.
• Customer Support: Responding to enquiries, complaints and support requests submitted via live chat, email or other available channels.
• Platform Improvement: Analysing aggregated usage data to understand platform performance, improve user experience and inform development priorities.
• Marketing Communications: Where explicit consent has been provided, sending promotional offers, bonus notifications and relevant Platform updates by email or other agreed channels. Users may withdraw consent at any time.

Legal Basis for Processing

joker188 processes personal data on the following legal bases, depending on the purpose of each processing activity:

• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML/KYC obligations and mandatory record-keeping duties.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML/KYC obligations and mandatory record-keeping duties.
• Legitimate Interests: Processing undertaken in pursuit of joker188's legitimate business interests, where those interests are not overridden by the data subject's rights — including security monitoring, fraud prevention and Platform analytics.
• Consent: Processing based on the explicit, freely given consent of the data subject, principally for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing

joker188 does not sell, rent or trade personal data to third parties for commercial marketing purposes. We may share personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data-protection agreements:

• Payment Service Providers: Banks, e-wallet operators and payment intermediaries involved in processing MYR transactions on the Platform, including DuitNow, FPX and supported Malaysian financial institutions.
• Identity Verification Providers: Third-party KYC and age-verification services used to confirm account eligibility and comply with AML requirements.
• Technology and Hosting Providers: Cloud infrastructure, database and software-as-a-service providers necessary for Platform operation and data storage.
• Customer Support Platforms: Live-chat and helpdesk software providers used to manage and respond to user support requests.
• Legal and Regulatory Authorities: Law enforcement agencies, courts, regulators and other public bodies where joker188 is required by law to disclose data or where disclosure is necessary to protect Platform integrity.
• Professional Advisers: Legal counsel, auditors and compliance consultants, subject to binding confidentiality obligations.

In all cases, joker188 requires that third-party recipients implement appropriate technical and organisational security measures and process personal data only in accordance with documented instructions.

International Data Transfers

The joker188 Platform operates under international licensing and may utilise service providers and infrastructure located in jurisdictions outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that available in the data subject's country of residence, joker188 will put in place appropriate safeguards, which may include:

• Standard contractual clauses approved by relevant data-protection authorities;
• Binding data-processing agreements with service providers that impose equivalent obligations;
• Transfer to jurisdictions recognised as providing adequate data protection by applicable regulatory frameworks.

Users who require further information about the safeguards applied to any specific international transfer may submit a request using the contact details in the Contact Us section.

Cookies and Tracking Technologies

joker188 uses cookies and similar tracking technologies to support Platform functionality, security and performance monitoring. The following categories of cookies may be placed on your device:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, authentication tokens and security identifiers. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember user preferences such as language settings, display options and previously entered form data, improving the usability of the Platform across visits.
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how users interact with the Platform — including pages visited, session duration and navigation paths — to help joker188 improve performance and content quality.
• Security Cookies: Used to detect and prevent fraudulent activity, protect user accounts from unauthorised access and support compliance monitoring.

joker188 does not use third-party advertising cookies or cookies that track users across unrelated external websites for commercial profiling purposes.

Most web browsers allow you to manage or block cookies through browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain Platform features. Refer to your browser's help documentation for guidance on cookie management.

Data Retention

joker188 retains personal data only for as long as is reasonably necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory or audit obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of the account relationship and for a reasonable period thereafter to support dispute resolution and regulatory audit requirements.
• Financial Transaction Records: Retained for a minimum period as required by applicable anti-money-laundering regulations and tax obligations, typically a minimum of five years from the date of the relevant transaction.
• KYC Documentation: Retained for the period required by applicable AML and identity-verification obligations following account closure.
• Support Communications: Retained for a reasonable period to support quality assurance, dispute resolution and regulatory compliance.
• Marketing Consent Records: Retained for the duration of consent and for a reasonable period after consent is withdrawn, to demonstrate compliance.
• Responsible Gambling Records: Self-exclusion and player-protection records are retained for extended periods to ensure that exclusion requests are honoured and to support regulatory compliance.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with joker188's data-lifecycle management procedures.

Data Security

joker188 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Security measures in place include, but are not limited to:

• Encryption of data in transit using TLS/SSL protocols and encryption of sensitive data at rest;
• Access controls limiting internal access to personal data on strict need-to-know basis;
• Regular security assessments and monitoring of Platform infrastructure for vulnerabilities;
• Multi-factor authentication and session timeout controls for user accounts and administrative systems;
• Contractual requirements imposed on all data processors to maintain equivalent security standards.

While joker188 takes reasonable steps to protect your personal data, no online system is entirely immune to security risks. Users are encouraged to use strong, unique passwords, enable available account security features and never share login credentials with a third party.

In the event of a personal data breach that poses a risk to users' rights and freedoms, joker188 will take prompt remedial action and notify affected users and relevant authorities as required by applicable law.

User Rights

Subject to applicable legal requirements and joker188's legitimate operational needs, you may exercise the following rights in relation to your personal data:

To exercise any of the rights listed above, please contact joker188 using the details provided in the Contact Us section. joker188 will respond to verified requests within a reasonable timeframe consistent with applicable regulatory requirements. Identity verification may be required before any request is processed.

Protection of Minors

The joker188 Platform is strictly intended for adults aged 21 and above. joker188 does not knowingly collect, process or retain personal data from individuals under the age of 21.

If joker188 becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be suspended immediately, all associated data will be reviewed, any deposits will be returned subject to verification, and the data will be deleted in accordance with this Policy and applicable legal requirements.

If you believe that a person under 21 may have accessed the Platform or provided personal data to joker188, please notify us immediately using the contact details in the Contact Us section.

Parents and guardians are encouraged to make use of internet content-filtering tools and parental-control software to help prevent underage access to online gambling platforms.

Policy Amendments

joker188 reserves the right to update or amend this Privacy Policy at any time. Revised versions will be published on this page with an updated review date. Continued use of the Platform following publication of a revised Policy constitutes acceptance of the changes.

Where amendments involve a material change to how joker188 processes personal data, we will make reasonable efforts to notify affected users via a prominent Platform notice or through the registered contact information held on the user's account, prior to the change taking effect.

We encourage users to review this Policy periodically to stay informed of any changes in how joker188 manages personal information.

Contact Us

For any questions, concerns or requests relating to this Privacy Policy or joker188's handling of your personal data, please contact our support team through the following channel:

Email: [email protected] (plain text — this address is not a clickable link)

Our team is available seven days a week, with a target first response of3–5 minutes via live chat and within one business day for email correspondence. Malaysian users may correspond in English, Bahasa Melayu or Mandarin Chinese.

For matters relating to responsible gambling, self-exclusion or problem-gambling support, please visit our dedicated Responsible Gambling page for further guidance and available resources.