Privacy Policy jinjinjin — Your Personal Data Protection

This Privacy Policy ("Policy") is published by jinjinjin ("Platform", "we") and describes our practices regarding the collection, use, disclosure, and protection of your personal information when you use the website, mobile app, and services provided by jinjinjin.

We are committed to protecting the privacy of every member and visitor on the platform. All our data handling activities comply with the Malaysia Personal Data Protection Act 2010 (PDPA), and we are committed to maintaining high data protection standards across all our operations.

This Policy applies to all information collected through the jinjinjin website, mobile app, email communications, customer support interactions, and any other medium related to our services. By registering or using the jinjinjin platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

Jinjinjin collects various types of personal information for legitimate and specific purposes. The following are the categories of data we collect, along with the purpose of collection:

We only collect data that is strictly necessary for the stated purposes. You are not obligated to provide all requested information; however, failure to do so may limit our ability to provide you with the full range of services.

The personal data we collect is used solely for legitimate, specific, and transparent purposes. jinjinjin uses your information for the following purposes:

• Account Management: Create and manage your member account, including identity verification and login security.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions related to your account securely and promptly.
• Customer Support: Answer enquiries, resolve complaints, and provide the technical assistance you need.
• Platform Security: Detect and prevent fraud, money laundering, unauthorised access, and any activity that violates the law.
• Legal Compliance: Fulfil legal and regulatory obligations including KYC requirements, AML (Anti-Money Laundering), and reporting to authorities when required.
• Service Improvement: Analyse usage patterns to improve the user experience, develop new features, and optimise platform performance.
• Marketing Communications: Send promotional information, exclusive offers, and platform updates — only to members who have given their consent.

Jinjinjin does not sell, rent, or disclose your personal data to third parties for commercial marketing purposes. However, in certain situations, we may share your data with the following parties:

• Payment Service Providers: Trusted financial institutions and payment processors to enable deposit and withdrawal transactions to be processed securely.
• Technical Service Providers: Hosting companies, software providers, and technology partners that assist us in operating the platform — all are bound by strict confidentiality agreements.
• Regulatory Authorities: Government agencies, law enforcement, or regulatory bodies when we are required to do so by law or court order.
• Identity Verification Partners: Certified third-party KYC identity verification services to ensure the identity verification process is conducted securely and accurately.

In all data sharing cases, we ensure that recipients have adequate data protection measures in place and use your data only for the stated purposes.

We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure. These measures include:

• 256-bit SSL Encryption for all data transmissions between the platform and your device.
• Data encryption at rest for all sensitive records stored in our database.
• Role-based access control ensuring that only authorised personnel can access your personal data.
• 24/7 security monitoring with a sophisticated intrusion detection system.
• Regular security audits by an independent third party to identify and address any vulnerabilities.
• Two-factor authentication (2FA) available for all member accounts as an additional layer of security.

While we make every effort to protect your data, no security system can be guaranteed 100% secure. In the event of a data breach that affects your rights, we will notify you within a reasonable timeframe as required by law.

Jinjinjin uses cookies and similar tracking technologies to enhance the user experience, analyse traffic, and ensure platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information on how you use the platform to help us improve performance and the user experience.
• Functional Cookies: Save your preferences such as language and display settings to deliver a more personalised experience.
• Analytics Cookies: Helps us understand aggregate usage patterns for platform development and improvement purposes.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality and your experience on the jinjinjin platform.

As a data subject, you have the following rights under Malaysia's PDPA regarding your personal data held by jinjinjin:

To exercise any of the rights above, contact our privacy team via email at [email protected] or via live chat on the platform. We will respond to your request within 30 business days.

Jinjinjin retains your personal data for as long as your account is active or as long as necessary to provide services to you. After an account is closed, we will retain your data for a set period to fulfil our legal and regulatory obligations:

• Financial transaction records: Minimum 7 years in line with Malaysia's legal requirements on AML and tax reporting.
• Identity verification documents (KYC): 5 years after account closure or the date of the last transaction.
• Customer support communication logs: 2 years for reference and dispute resolution purposes.
• Technical and security log data: 1 year for security analysis and fraud detection purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with established procedures.

The jinjinjin platform is strictly for individuals aged 18 years and above. We do not knowingly collect personal data from minors.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe your child has registered for or used our platform, please contact us immediately so we can take the appropriate action.

Jinjinjin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a prominent notice on the platform or sending an email to all registered members.
• In the case of material changes, we will seek your renewed consent before the changes take effect.

We encourage you to review this Privacy Policy periodically. Continued use of the jinjinjin platform after amendments are published will be considered acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Privacy Officer:

You may also refer to Terms and Conditions us or contact the team Responsible Gaming if your concern relates to that aspect. We are committed to addressing all privacy-related enquiries transparently and in a timely manner.