Last Updated: 1 January 2026

Privacy Policy jos007 – Malaysian Player Data Protection

Jos007 treats your privacy as a trust, not merely a legal obligation. This policy clearly sets out what data we collect, why we need it, and how we protect it – in plain, straightforward language.

PDPA 2010 Compliant 256-bit SSL No Data Selling
jos007 Data Protection Summary
Data Encryption
256-bit SSL — banking-grade standard
Legal Compliance
Full Malaysia PDPA 2010
Third-Party Data Sales
Never — an absolute commitment
Unsolicited Marketing
Not sent — opt-in only
Financial Data Storage
Separate account, no saved cards
Contact our DPO
support@jos007.best

Jos007's Six Privacy Commitments to Players

The core principles governing how jos007 handles every piece of data you entrust to us

Bank-Grade Encryption

All data travelling between your device and jos007's servers is protected by 256-bit SSL encryption – the same security standard used by Maybank and CIMB. Your data is never transmitted in plain text at any stage.

No Sale of Personal Data

Jos007 never sells, rents, or shares player personal data with any third party for marketing purposes. Your data belongs to you — we use it solely to deliver the services you request.

Compliant with Malaysia PDPA 2010

Jos007's data processing operations are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews and continually update our practices in line with the latest guidelines from the Department of Personal Data Protection Malaysia.

Full Control in Your Hands

Jos007 players have the right to access, correct, and under certain circumstances request the deletion of their data. You can also manage your marketing communication preferences at any time through your account settings without needing to contact support.

No Card Details Stored

Jos007 does not store your credit or debit card numbers in our systems. All payments are processed through PCI DSS-compliant third-party payment providers. We only accept funds via secure methods such as Touch 'n Go, GrabPay, DuitNow, and FPX.

Consent-Based Marketing

Jos007 does not send you marketing communications without your explicit consent. Promotional emails, offer notifications, and marketing messages are only sent to players who have opted in during registration or through their account settings.

How Your Data Is Handled at jos007

A brief overview of the player data lifecycle — from collection through protection to deletion

1
Collection

Data is collected only during registration, transactions, and platform use.

2
Encryption

Data is encrypted immediately with 256-bit SSL before being stored.

3
Storage

Financial data is stored separately from personal data using a layered protocol.

4
Use

Used solely to operate the service, for KYC, and for fraud prevention.

5
Deletion

Data is deleted in accordance with the retention schedule or upon a valid player request.

1

Introduction & Scope of Privacy Policy

This Privacy Policy explains how jos007, which operates at jos007.best, collects, uses, protects, and manages your personal information as a player or user of our platform. This policy applies to all registered players, website visitors, and any individual who interacts with jos007 services in any capacity.

Jos007 takes its responsibilities as a data controller seriously under Malaysia's Personal Data Protection Act 2010 (PDPA). We don't comply with the law simply because we have to – we genuinely believe that protecting player privacy is the foundation of the long-term trust we want to build with our Malaysian player community.

Important Note: This Privacy Policy forms part of the jos007 Terms and Conditions. By registering for or using the jos007 platform, you agree to the data processing practices described in this document. If you do not agree, please do not proceed with registration and contact us at support@jos007.best with any enquiries.

This policy applies to all data collected through the jos007.best website, any jos007 mobile applications that may be launched in the future, and any official jos007 communication channels including support email and in-platform live chat.

2

Personal Data We Collect

Jos007 only collects data that is strictly necessary to provide the services you request and to fulfil our legal obligations. We do not collect data in excess of what is required.

2.1 Registration & Identity Data

  • Full name as shown on MyKad or passport
  • Date of birth (for 18+ age verification)
  • MyKad or passport number (required for KYC)
  • Active email address
  • A valid Malaysian phone number
  • Account password (stored as an unreadable hash)

2.2 Financial & Transaction Data

  • Deposit and withdrawal records (date, amount, payment method)
  • Bank account or e-wallet holder name for KYC verification
  • Complete transaction history for compliance and dispute resolution purposes

Jos007 not storing your credit card number, debit card number, or internet banking password. All financial transactions are processed by third-party payment providers that are PCI DSS compliant.

2.3 Gaming Activity Data

  • Betting and gaming history (Baccarat, Poker, slots, Sports Betting, and more)
  • Responsible gaming limits you have set for yourself
  • Bonus and promotion records you have received
  • Your VIP programme status and tier

2.4 Technical Data

  • The IP address of the device used to access the platform
  • Web browser type and operating system
  • Login and logout timestamps
  • Cookie and session data (see Section 7)
3

How We Collect Your Data

Jos007 collects your personal data through the following methods:

3.1 Directly from You

Most of the data we hold is data you provided to us directly – when registering an account, completing the KYC process, making a deposit or withdrawal, contacting customer support, or filling out a feedback form. You always know what data you are giving us in these situations.

3.2 Automatically While You Use the Platform

When you browse jos007.best or play games, our systems automatically record technical data such as your IP address, browser type, pages visited, and session duration. This data is used primarily for security purposes — to detect suspicious login attempts and protect your account from unauthorised access.

3.3 Through Cookies and Similar Technologies

Jos007 uses cookies as described in detail in Section 7. You can manage cookies through your browser settings, though this may affect certain platform functions.

We Do Not Purchase Data: Jos007 does not purchase, receive, or use any personal data about you obtained from third-party sources for marketing or profiling purposes. All data we hold comes directly from your interactions with our platform.

4

Purposes for Processing Personal Data

Jos007 processes your personal data solely for the following legitimate purposes:

4.1 Account Management & Service Delivery

This is the primary purpose — enabling us to create and manage your account, process deposits and withdrawals, record gaming activity, manage your VIP programme, and provide effective customer support. Without this processing, we simply cannot deliver jos007 services.

4.2 Identity Verification (KYC) & Regulatory Compliance

Jos007 is required under its licence conditions and applicable laws to carry out Know Your Customer (KYC) procedures. This includes verifying your identity, confirming you are aged 18 or above, and monitoring transactions to detect potential money laundering. Data collected for compliance purposes is retained in accordance with the relevant legal requirements.

4.3 Fraud Prevention & Account Security

Technical data such as IP addresses and login patterns is used to detect and prevent unauthorised access to your account, identify bot or automated activity, and block bonus abuse or gaming system exploitation. This is to protect both you and the integrity of the jos007 platform.

4.4 Platform Improvements & Player Experience

Usage data analysed in aggregate (without individual identification) helps us understand usage patterns, identify areas for improvement, and make better product decisions. For example, we may find that a significant number of players encounter difficulty with a particular process and use that as the basis for improvements.

4.5 Service Communications

Jos007 uses your email address and phone number to send you important communications relating to your account — such as transaction confirmations, security notifications, updates to our terms, and responses to support enquiries. These service communications cannot be unsubscribed from as they are essential to the operation of your account.

4.6 Marketing (With Consent Only)

If you opted in to receive marketing communications during registration or through your account settings, jos007 may send you information about new promotions, bonuses, or exclusive offers. You can unsubscribe from marketing communications at any time via the unsubscribe link in our emails or through your account settings.

5

Data Sharing with Third Parties

Jos007 does not sell players' personal data to anyone, under any circumstances. This is our absolute commitment. That said, there are limited situations where we need to share certain data with trusted third parties:

5.1 Payment Service Providers

To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX, we are required to share the necessary transaction details with the relevant payment service providers. This sharing is limited strictly to the information needed to process the specific transaction.

5.2 Game Software Providers

Third-party game providers offering their games through the jos007 platform may receive the minimum technical data required to deliver your gaming experience. All software providers partnering with jos007 are required to uphold data protection standards equivalent to those set out in this Privacy Policy.

5.3 Authorities & Regulatory Bodies

Jos007 may be required to disclose player data to law enforcement authorities, regulators, or courts when mandated by applicable law. In such cases, we will disclose only the minimum data necessary and, where not prohibited by law, will endeavour to notify the affected player.

Our Guarantee: All third parties that receive jos007 player data are bound by strict data protection agreements. We conduct due diligence on all service providers before sharing any player data with them, and we continuously monitor their compliance with data protection obligations.

6

Data Security Measures We Have Implemented

Jos007 invests seriously in security infrastructure to protect our players' data. The key security measures we have implemented include:

6.1 Data Encryption in Transit and at Rest

All data transmitted between your browser and jos007 servers is encrypted using TLS 1.3 with a 256-bit SSL certificate. Data stored in our databases is also encrypted using AES-256. This means that even if someone were to intercept the communication, the data they obtain would be completely unreadable.

6.2 Strict Access Controls

Access to player data within jos007's internal systems is restricted on a least-privilege basis — only staff who genuinely need access to specific data to carry out their assigned duties are permitted. All access is logged and subject to periodic audits.

6.3 Financial Data Segregation

Players' financial data (transaction records, bank account details) is stored in systems completely separate from general personal data, protected by layered security protocols. This minimises risk in scenarios where one system may be compromised.

6.4 24/7 Security Monitoring

Jos007 conducts continuous security monitoring to detect intrusion attempts, unusual activity, and emerging security threats. Our security team constantly updates our defences based on the latest identified threat landscape.

6.5 Your Security Responsibilities

While jos007 does everything we can on our end, your account security also depends on your own actions. We recommend using a strong, unique password for your jos007 account, never sharing your login credentials with anyone, signing out when using a shared device, and contacting us immediately if you suspect any unauthorised activity on your account.

7

Cookies & Tracking Technologies

Jos007 uses cookies and similar technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

7.1 Necessary Cookies (Cannot Be Disabled)

These cookies are essential for the platform to function properly. They include session cookies that maintain your login state, security cookies that prevent CSRF attacks, and basic preference cookies. The platform will not function correctly without them.

7.2 Analytics Cookies (Can Be Disabled)

We use analytics cookies to understand how players use our platform — which pages are visited most frequently, which features are most popular, and where players may encounter issues. This data is collected in aggregate and cannot be used to identify individuals. You can disable analytics cookies through your account settings.

7.3 Preference Cookies (Can Be Disabled)

Preference cookies store your personal settings such as your selected language, display layout, and interface preferences. Disabling these cookies means you will need to reset your preferences each time you access the platform.

No Third-Party Advertising Cookies: jos007 does not use advertising cookies or cross-site tracking technologies. We do not share your browsing behaviour data with advertising networks or social media platforms. Our cookies operate exclusively within the jos007.best domain.

8

Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by jos007:

8.1 Right of Access

You have the right to know what personal data we hold about you and to request a copy of it. Data access requests can be submitted by email to support@jos007.best, stating the type of data you wish to access. We will respond within 21 working days.

8.2 Right to Rectification

If the personal data we hold is inaccurate or outdated, you have the right to request a correction. Basic information such as your email address or phone number can be updated directly through your account settings. For corrections to identity information (name, date of birth), please contact our support team with the relevant supporting documents.

8.3 Right to Withdraw Marketing Consent

If you have previously consented to receive marketing communications, you may withdraw that consent at any time via the unsubscribe link in any marketing email or through the communication settings in your account. Withdrawing marketing consent does not affect essential service communications.

8.4 Right to Erasure (Right to be Forgotten)

Under certain circumstances, you may request the deletion of your personal data. However, this right is not absolute — jos007 may need to retain certain data to fulfil legal obligations (such as KYC records and financial transaction records required under anti-money laundering laws). We will clearly explain exactly what data can be deleted and what must be retained in our response to your request.

How to Exercise Your Rights: For all data protection rights requests, please email support@jos007.best with the subject line "Personal Data Rights Request" and include your account number along with details of your request. We will verify your identity before processing any request to ensure the security of your data.

9

Data Retention & Deletion

Jos007 does not retain your personal data indefinitely. We have a clear retention policy based on operational and legal requirements:

9.1 Active Account Data

For as long as your jos007 account remains active, we retain all data relevant to the management of your account. An account is considered active as long as there has been at least one login within the past 24 months.

9.2 Data After Account Closure

After your account is closed, jos007 retains the minimum records necessary to fulfil our legal obligations. KYC records and financial transaction records are retained for 7 years in accordance with Malaysia's anti-money laundering legislation. Other personal data not required for legal compliance is deleted within 6 months of account closure.

9.3 Technical Data & Logs

Technical access logs and session data are typically deleted after 90 days. Security logs related to investigated security incidents may be retained longer until the investigation is concluded.

10

Cross-Border Data Transfers

In the course of its operations, jos007 may need to transfer your personal data to servers or service providers operating outside Malaysia. This may occur in the context of cloud computing infrastructure used to run the platform.

When cross-border data transfers occur, jos007 ensures that:

  • The recipient country or entity maintains a level of data protection comparable to Malaysia's PDPA
  • A binding data protection agreement is in place before any transfer takes place
  • Transfers are limited to the minimum data necessary for the specific operational purpose
  • Service providers outside Malaysia are required to adhere to privacy standards equivalent to those we uphold

Sensitive financial data and KYC records are stored on servers located in strictly controlled zones with additional protections, regardless of the physical server location.

11

Changes to This Privacy Policy

Jos007 reserves the right to update or modify this Privacy Policy from time to time. Changes may be required by legislative amendments, shifts in business practices, or feedback from players and stakeholders.

When we make material changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending email notifications to all registered players at least 14 days before changes take effect
  • Displaying a prominent notice within the platform throughout the notice period
  • Maintains an archive of previous versions of the Privacy Policy, available on request through customer support

Your continued use of the jos007 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the effective date.

Non-Material Changes: Spelling corrections, clarifications to existing language, or additions that do not alter your fundamental rights and obligations may be implemented without specific notification — though the update date will still be refreshed.

12

Contact Us — Data Protection Officer

Jos007 has appointed a Data Protection Officer (DPO) to handle all privacy and data protection enquiries, requests, and complaints. If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal information, please reach out to us through the following channels:

  • Email: support@jos007.best (please state "Data Privacy Enquiry" in the subject line)
  • Live Chat: Available 24/7 in your jos007 account – request to be connected with the privacy team
  • Response Time: General enquiries within 3 working days; formal data rights requests within 21 working days

Jos007 takes every privacy-related complaint seriously. If you feel your complaint has not been adequately addressed after contacting us, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia for an independent review.

We appreciate your trust in jos007, and our commitment is to continue protecting your privacy as a player within our growing community across Malaysia — from Kuala Lumpur and Selangor to Johor Bahru, Penang, Kuching, and Kota Kinabalu.

Summary of Your Data Rights at jos007

A quick guide to your rights under Malaysia PDPA 2010 and how to exercise them

Your Rights What It Means How to Use It Response Time
Right of Access Request a copy of the personal data we hold about you Email us at support@jos007.best 21 working days
Right to Rectification Correct inaccurate or outdated data Account settings or support email 7 business days
Withdraw Marketing Consent Unsubscribe from promotional emails at any time Unsubscribe link or account settings Immediate
Right to Erasure Request deletion of data that is no longer required Email us at support@jos007.best 30 working days
Right to Restrict Processing Restrict the use of your data under certain circumstances Email us at support@jos007.best 14 working days
Right to Complain Lodge a privacy concern with the relevant authority Department of Personal Data Protection Malaysia No time limit

Your Privacy is Protected — Play with Peace of Mind at jos007

With banking-grade data protection, full PDPA compliance, and a strict no-data-sale commitment, you can play at jos007 with complete confidence that your information is safe. Register now and experience the difference.

jos007 Privacy Guarantee
All data fully encrypted with 256-bit SSL
Never sold to any third party
Compliant with Malaysia PDPA 2010
No credit/debit card details stored
Full control of your data in your hands

Deposit & Withdrawal Methods We Support

Touch 'n Go eWallet GrabPay Boost ShopeePay DuitNow Maybank2u CIMB Clicks FPX
Officially Licensed
256-bit SSL
PDPA Compliant
No Data Selling
No Tracking Ads
DPO Available 24/7

Jos007's Commitment to Malaysian Players

This website is intended for adults aged 18 and above only. jos007 fully supports the principles of responsible gaming and player data protection. We are committed to conducting our business in a way that respects the privacy, security, and wellbeing of every player in our community across Malaysia.

Frequently Asked Questions — jos007 Privacy Policy

No, absolutely not. jos007 has never sold, rented, or shared players' personal data with any third party for marketing or commercial purposes. This is an absolute commitment with no exceptions. Your data is shared only with technical service providers directly involved in platform operations (such as payment providers), and only the minimum data necessary for that purpose. All such third parties are bound by strict confidentiality agreements.

jos007 does not store your credit or debit card numbers — all payments are processed through third-party payment providers that comply with PCI DSS standards. Financial data such as transaction records is stored in systems separate from general personal data, encrypted with AES-256, and accessible only to specifically authorised personnel. For transactions made via Touch 'n Go, GrabPay, DuitNow, or FPX, your account details are processed directly by the respective provider — not by jos007 servers.

Yes, you may request the deletion of your personal data by emailing support@jos007.best. However, there are important limitations: KYC records and financial transaction records must be retained for 7 years under Malaysia's anti-money laundering legislation — this is beyond our control and we are unable to delete this data even upon request. Other data not subject to legal retention requirements can be deleted within 30 business days of your request. We will clearly inform you in our response which data can and cannot be deleted.

Upon account closure, jos007 will delete personal data that is no longer required within 6 months. Records that must be retained for legal compliance (KYC and transaction history) will be kept for 7 years as required by applicable law, after which they will be permanently deleted. During this legal retention period, the data is not used for any purpose other than legal compliance and cannot be accessed for marketing or commercial purposes.

jos007 uses three types of cookies: necessary cookies (cannot be disabled — essential for core functions such as maintaining your login session), analytics cookies (can be disabled via account settings — collect aggregated usage data for platform improvement), and preference cookies (can be disabled — store your display preferences). jos007 does not use third-party advertising cookies or cross-site tracking technologies. All our cookies operate exclusively within the jos007.best domain and do not share data with external advertising networks.
Bahasa Melayu