Privacy Policy

This Privacy Policy ("Policy") is published by JRCasino ("we", "us", or "our"), the operator of the online gaming platform accessible at jrcasino.cam. This Policy describes how JRCasino collects, processes, stores, discloses, and protects personal data provided by or collected about users ("you", "your", or "Player") in connection with your use of our website, mobile applications, and all associated gaming and account services.

This Policy forms part of JRCasino's broader legal framework, which also includes ourTerms & Conditions. By registering an account or using any part of the JRCasino platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

JRCasino is committed to processing personal data responsibly, transparently, and in compliance with applicable data protection standards under our international licensing obligations. We understand that privacy is a particularly sensitive matter in the context of online gaming, and we are committed to handling all player data with the highest degree of care and discretion.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means JRCasino, the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" means a third party that processes personal data on behalf of JRCasino under a data processing agreement, such as payment gateway providers and KYC verification services.
• "Sensitive Personal Data" includes information relating to financial account details, government-issued identification numbers, and any other data category that carries elevated privacy risk.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a specified purpose.
• "Data Subject" means the individual natural person whose personal data is being processed — in the context of this Policy, the registered Player.

JRCasino collects personal data through multiple channels in connection with the operation of our platform. The categories of data we collect, and the contexts in which we collect them, are set out in the table below:

JRCasino relies on the following lawful bases when processing your personal data:

1. Contractual Necessity: Processing required to perform the contract between JRCasino and the Player, including account creation, deposit and withdrawal processing, game provision, and customer support.
2. Legal Obligation: Processing required to comply with applicable regulatory obligations under our international gaming licence, anti-money laundering (AML) requirements, and Know Your Customer (KYC) obligations — including identity verification and transaction monitoring.
3. Legitimate Interests: Processing necessary to pursue JRCasino's legitimate business interests, including platform security, fraud prevention, system performance monitoring, and responsible gambling programme operations, where such interests are not overridden by your fundamental rights and freedoms.
4. Consent: Where we process personal data for purposes not covered by the above bases — such as sending promotional emails or sharing certain technical data with analytics providers — we will obtain your explicit consent beforehand. You may withdraw consent at any time by contacting our support team.

JRCasino uses your personal data for the following specific purposes:

• Account Management: Creating, operating, and maintaining your player account, including processing login authentication and account security functions;
• Payment Processing: Processing deposits via Touch'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, GrabPay, Boost, and other supported Malaysian payment channels, and processing withdrawal requests to your verified payment method;
• KYC & Compliance: Verifying your identity and age (21+ requirement), conducting AML checks, and fulfilling reporting obligations to our licensing authority;
• Game Provision: Delivering casino games, sports betting markets, live dealer tables, and all other platform features you access during your sessions;
• Responsible Gambling: Operating deposit limits, self-exclusion tools, reality checks, and session time restrictions; identifying and reaching out to players who may be showing signs of problem gambling behaviour;
• Customer Support: Responding to your support queries, complaints, and dispute submissions;
• Security & Fraud Prevention: Detecting and preventing fraud, unauthorised access, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience;
• Promotions: Where you have consented, communicating relevant promotional offers, bonus notifications, and platform updates via email or in-platform notifications.

JRCasino does not sell, lease, or trade your personal data to any third party for their own commercial or marketing purposes. We may share your personal data with the following categories of third parties solely to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: Malaysian and international payment processors (including DuitNow network participants, FPX gateway operators, Touch 'n Go, Boost, GrabPay, and bank partners) required to process your deposits and withdrawals. These providers receive only the transaction data necessary to execute the payment.
• KYC & Identity Verification Providers: Third-party identity verification services that assist JRCasino in confirming player identity, verifying government-issued documents, and conducting AML screening. All such providers are bound by strict data processing agreements.
• Licensing & Regulatory Authorities: Our international gaming licensing authority and any other competent regulatory body to which JRCasino is legally obliged to report, including cases of suspected money laundering or fraud.
• IT Infrastructure & Hosting Providers: Cloud hosting and infrastructure providers that host the JRCasino platform and associated data. These providers operate under contractual data protection obligations and may not use player data for their own purposes.
• Law Enforcement: In the event of a legally valid demand from a competent law enforcement authority — including where required to prevent, investigate, or prosecute fraud, money laundering, or other criminal activity.
• Business Transfers: In the event that JRCasino undergoes a merger, acquisition, or sale of substantially all of its assets, player data may be transferred to the acquiring entity, subject to the protections set out in this Policy continuing to apply.

JRCasino operates under an international online gaming licence. As a result, certain personal data may be processed and stored on servers located outside of Malaysia, including in the jurisdiction of our licensing authority and in data centres operated by our infrastructure providers.

Where personal data is transferred to jurisdictions outside Malaysia, JRCasino takes appropriate measures to ensure that the transfer is conducted in a manner that maintains an adequate level of data protection equivalent to that described in this Policy. Such measures include:

• Executing data processing agreements that incorporate appropriate security and confidentiality obligations with all international processors;
• Ensuring that international recipients of personal data are bound by equivalent privacy standards;
• Applying technical safeguards (including end-to-end encryption) to all cross-border data transfers.

JRCasino maintains a comprehensive information security programme designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and JRCasino's servers is protected by256-bit SSL/TLS encryption, the same standard used by major international financial institutions;
• Encryption at Rest: Sensitive personal data stored on JRCasino's servers is encrypted at rest using industry-standard algorithms;
• Access Controls: Access to personal data within JRCasino's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to periodic review;
• Penetration Testing: JRCasino conducts regular third-party penetration tests and vulnerability assessments to identify and remediate security weaknesses;
• Incident Response: JRCasino maintains a documented data breach response procedure. In the event of a data breach that poses a material risk to your rights, you will be notified without undue delay in accordance with applicable obligations.

While JRCasino takes all reasonably practicable steps to protect your personal data, no online system can guarantee absolute security. You are also responsible for maintaining the security of your account credentials and should contact us immediately if you suspect your account has been compromised.

JRCasino retains personal data for as long as is necessary to fulfil the purposes described in this Policy, to maintain the contractual relationship with you, and to comply with applicable legal and regulatory retention obligations.

Specific retention periods applicable to key data categories are as follows:

• Account and identity data: Retained for the duration of your active account and for a minimum of5 years following account closure, as required by AML and gaming regulatory obligations;
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in accordance with applicable financial record-keeping requirements;
• KYC documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later;
• Gameplay logs: Retained for a minimum of 3 years from the date of each session, for dispute resolution and regulatory audit purposes;
• Support correspondence: Retained for a minimum of 2 years from the date of the last interaction, for quality assurance and complaints handling purposes.

Upon expiry of the applicable retention period, personal data is either permanently deleted from JRCasino's systems or anonymised in such a manner that it can no longer be associated with an individual data subject.

JRCasino uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit our website. Cookies allow the platform to recognise your device on subsequent visits, maintain your session, and remember certain preferences.

The following categories of cookies are used on the JRCasino platform:

JRCasino does not use cross-site advertising cookies, retargeting pixels, or third-party marketing trackers. You may manage cookie preferences through your browser settings at any time. Please note that disabling essential cookies may impair the functionality of the JRCasino platform.

As a data subject whose personal data is processed by JRCasino, you hold the following rights. These rights are subject to certain limitations — for example, we cannot delete data we are legally required to retain. However, we will always respond to your request in writing and explain the basis for any limitation.

JRCasino's platform and services are strictly intended for individuals aged21 years and above. JRCasino does not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21 years of age, that account will be immediately suspended, all associated data will be handled in accordance with our responsible gambling obligations, and the matter will be reviewed in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under 21 in your care has accessed or registered on JRCasino, please contact our support team immediately so that we may investigate and take appropriate action.

JRCasino reserves the right to amend this Privacy Policy at any time. Where amendments are material — for example, changes to the categories of data collected, the purposes for which data is used, or the parties with whom data is shared — JRCasino will notify registered Players via email to their registered address and/or via a prominent notice on the Platform, at least 14 days prior to the amendment taking effect.

Minor, non-material amendments (such as typographical corrections or clarifications that do not alter the substance of the Policy) may be published without advance notice. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision.

Continued use of the JRCasino platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with any amended terms, you should cease use of the platform and contact support to close your account.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by JRCasino, please contact our support team through the following channels. All privacy-related queries are handled with priority, in strict confidence, and by personnel specifically trained in data protection obligations.

For full details of your player rights and obligations, please also refer to our Terms & Conditions. For responsible gambling support resources and self-exclusion requests, visit our Responsible Gambling page.