Privacy Policy JOS77 — Your Personal Data Protection

JOS77 values the trust you place in us. Every time you register an account, make a deposit, play a game, or contact our support team, certain information is shared. We understand this is no trivial matter — personal information is a trust, not just data in a database.

We have therefore drafted this Privacy Policy in plain, easy-to-understand language, so you know exactly what happens to your information from the moment you register until you close your account.

This Privacy Policy is issued by JOS77 and applies to all services provided through the website jos77.bio and the jos77 mobile app. It explains how we handle your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

"Personal data" in this policy refers to any information that can be used to identify you, directly or indirectly — including your name, phone number, email address, financial details, and platform usage data.

JOS77 only collects data required for legitimate purposes. Below are the categories of data we collect and their respective purposes:

The data we collect is used solely for legitimate purposes stated at the time of collection. JOS77 uses your personal data for the following purposes:

• Account Management: To create, verify, and manage your member account, including the required KYC process.
• Transaction Processing: To process deposits, withdrawals, and any financial transactions made through the platform.
• Platform Security: To detect and prevent fraudulent activity, money laundering, and unauthorised access to your account.
• Service Improvement: To analyse usage patterns for the purpose of improving the platform, games, and overall user experience.
• Marketing Communications: To send information about promotions, bonuses, and the latest offers — only if you have given consent to receive such communications.
• Legal Compliance: To fulfil our obligations under Malaysian law and the requirements of relevant regulatory bodies.
• Customer Support: To address enquiries, resolve complaints, and provide the technical assistance you need.
• Responsible Gaming: To monitor gaming patterns and identify members who may need assistance through the program Responsible Gaming ours.

JOS77 does not sell or rent your personal data to any third party. However, in certain limited situations, we may share your data with the following parties:

• Payment Providers: Financial institutions and digital wallet providers that process your transactions. They only receive the data necessary to complete those transactions.
• Game Providers: Third-party game software providers that supply gaming content on our platform. Data shared is limited to what is necessary to run the games only.
• IT Service Providers: Companies that provide the technical infrastructure, hosting, and cloud services to operate the jos77 platform securely.
• Authority: Law enforcement agencies or regulatory bodies where required by Malaysian law or a valid court order.
• Audit & Compliance: Independent auditors or certification bodies that conduct security or compliance reviews on our platform.

JOS77 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. Retention periods depend on the type of data:

• Active Account Data: Retained for the duration your account is active and for up to 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian accounting and financial legal requirements.
• Technical & Security Logs: Retained for 12 months for security incident investigation purposes if required.
• Support Communication Records: Retained for 3 years for quality control and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you personally.

JOS77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. Cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve it. All data is collected anonymously.
• Functional Cookies: Saving your preferences such as language and display settings to provide a more personalised experience.
• Marketing Cookies: Used to display relevant advertisements and measure the effectiveness of our promotional campaigns.

Under Malaysia's PDPA, you have specific rights regarding your personal data. JOS77 fully respects these rights:

JOS77 implements multiple layers of technical and organisational safeguards to keep your personal data secure at all times:

• 256-bit SSL Encryption: All communication between your device and our servers is encrypted using the latest TLS 1.3 protocol.
• Two-Factor Authentication (2FA): An additional security layer to protect your account from unauthorised access.
• 24/7 Monitoring: A continuous security monitoring system that detects and responds to any suspicious activity in real time.
• Internal Access Controls: "Need-to-know" principle — jos77 staff may only access data required for their specific role.
• Penetration Testing: Regular security audits and penetration testing by independent cybersecurity experts to identify and address vulnerabilities.
• Secure Backups: Data is regularly backed up to separate locations and encrypted to ensure service continuity.

In operating the JOS77 platform, your personal data may be transferred to and stored on servers located outside Malaysia. When this occurs, we ensure that:

• The destination country or region provides a level of data protection equivalent to or higher than that of Malaysia.
• Data transfer agreements compliant with PDPA requirements are signed with all relevant parties.
• Data transfers are only carried out to service providers that have been reviewed and approved by the jos77 security team.
• You will be notified of any significant changes to how your data is stored or transferred.

The jos77 platform is restricted to individuals who are of age 18 years and above only. We do not knowingly collect personal data from individuals under the age of 18.

• Should we discover that personal data of underage individuals has been collected without our knowledge, such data will be deleted immediately.
• Accounts found to have been registered by minors will be closed and all funds returned to the parent or legal guardian.
• Parents or guardians who believe their child has registered a jos77 account should contact our support team immediately.

If you have any questions, concerns, or complaints regarding how JOS77 handles your personal data, you may contact our Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 directly on the jos77 platform — the fastest way to get a response.
• Email: [email protected] — for more detailed written enquiries.
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days and resolving issues within 14 business days.

JOS77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant amendments will be communicated to you via:

• In-platform notification on jos77 upon your next login.
• An email will be sent to the address registered on your account at least 7 days before the changes take effect.
• Updating the "Last Updated" date at the top of this page.

Continued use of the jos77 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.