Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by JDL77 ("JDL77", "we", "us", "our"), the operator of the online gaming and sports betting platform located at https://jdl77.cam (the "Platform"). This Policy explains how JDL77 collects, processes, stores, shares, and protects the personal data of individuals who access or use the Platform ("Player", "you", "your").

JDL77 takes its data protection obligations seriously. This Policy has been prepared in accordance with generally recognised data protection principles, and we are committed to ensuring that your personal information is handled with care, integrity, and full transparency.

By registering for an account on JDL77 or by using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not accept the terms of this Policy, you should not use the Platform.

This Policy should be read in conjunction with JDL77's Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference into the overall legal framework governing your relationship with JDL77.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a specific living individual, whether directly (e.g., full name, NRIC number) or indirectly (e.g., IP address, device identifier, account number).
• "Processing" — Any operation or set of operations performed on personal data, including but not limited to: collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, and deletion.
• "Data Controller" — JDL77, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — A third party engaged by JDL77 to process personal data on JDL77's behalf and under JDL77's documented instructions (e.g., payment processors, identity verification providers).
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" — Know Your Customer; the regulatory and responsible gaming process by which JDL77 verifies a Player's identity, age, and source of funds where required.
• "Cookie" — A small text file stored on your device by a website or application for the purpose of retaining information between sessions or tracking usage behaviour.

Data We Collect

JDL77 collects the following categories of personal data from players, depending on the nature of their interaction with the Platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — players must be 21 or above)
• Malaysian MyKad number or passport number
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and mobile phone number
• Username and encrypted account password

3.2 Financial & Transaction Data

• Deposit and withdrawal transaction history, denominated in MYR
• Payment method identifiers — including bank account details associated with FPX/DuitNow, eWallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), and bank names (Maybank, CIMB, Public Bank, Hong Leong)
• Cryptocurrency wallet addresses where applicable (USDT, BTC)
• Account balance history and wagering records

3.3 KYC Verification Documents

• Copies of government-issued photo identity documents (Malaysian MyKad, passport)
• Proof of address documentation (utility bills, bank statements)
• Proof of payment method ownership where required for withdrawal verification

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps, login history, and platform activity logs
• Game history and betting activity records
• Cookie identifiers and session tokens (see Section 9)

3.5 Communications Data

• Content of live chat, email, and support ticket interactions with JDL77 customer support
• Records of marketing communication preferences and unsubscribe requests
• Complaint and dispute records

How Data Is Collected

JDL77 collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide during account registration, KYC verification, deposit and withdrawal requests, support interactions, and promotional opt-ins.
• Automatically via the Platform: Technical and usage data collected through cookies, server logs, and analytics tools when you access and interact with the JDL77 Platform.
• From payment processors: Transaction confirmation data and payment method validation information shared by FPX, DuitNow, eWallet providers, and other payment partners in the course of processing your transactions.
• From identity verification providers: Results of document authenticity checks, age verification outcomes, and AML screening results from third-party KYC service providers engaged by JDL77.
• From fraud prevention services: Risk signals and behavioural data from fraud detection partners used to protect the integrity of the Platform and all player accounts.

Legal Basis for Processing

JDL77 processes personal data only where a valid legal basis exists. The primary legal bases on which JDL77 relies are as follows:

How We Use Your Data

JDL77 uses the personal data it collects for the following specific purposes:

6.1 Account Administration

To create, maintain, and administer your JDL77 account, including processing login requests, storing preferences, managing Balance, and communicating account-related notifications such as deposit confirmations and withdrawal approvals.

6.2 Identity Verification & Compliance

To verify that you meet JDL77's age requirement (21 years or above) and to fulfil our KYC obligations. Identity documents submitted are retained in accordance with our data retention policy (Section 10) and accessed only by authorised compliance personnel. This processing is mandatory — accounts that fail KYC will have withdrawal privileges suspended until verification is completed satisfactorily.

6.3 Payment Processing

To process deposits and withdrawals via your nominated Malaysian payment methods, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels. Financial transaction data is shared with the relevant payment processors solely to complete the transaction.

6.4 Fraud Prevention & Platform Security

To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct. This includes automated analysis of transaction patterns, login behaviour, and gameplay activity.

6.5 Responsible Gambling

To monitor account activity for indicators of problem gambling behaviour, enforce self-exclusion requests, apply deposit and session limits you have set, and communicate responsible gambling resources where appropriate.

6.6 Customer Support

To respond to your enquiries, resolve disputes, process complaints, and provide assistance through our 24/7 support channels in English, Bahasa Melayu, and Mandarin. Support interactions are logged for quality assurance and training purposes.

6.7 Marketing Communications

Where you have provided consent or where legitimate interests apply, to send you promotional offers, bonus notifications, and platform updates. You may withdraw consent for marketing at any time by contacting support or using the unsubscribe link in any marketing email. Players who have self-excluded are automatically removed from all marketing lists.

6.8 Platform Analytics & Improvement

To analyse aggregated usage patterns, improve platform performance, identify technical issues, and develop new features. Where analytics data includes personal identifiers, it is pseudonymised wherever technically feasible.

Data Sharing & Disclosure

JDL77 does not sell your personal data. We share data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: Transaction data is shared with FPX operators, DuitNow network providers, eWallet platforms (Touch 'n Go eWallet, Boost, GrabPay), Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency processing services solely for payment execution purposes.
• Identity verification providers: KYC document data and biometric information (where applicable) are shared with licensed third-party identity verification services engaged by JDL77.
• Fraud prevention and AML services: Risk-related data may be shared with fraud detection vendors and anti-money laundering screening providers under strict data processing agreements.
• Technology and infrastructure providers: Platform hosting, cloud storage, and content delivery providers operating on JDL77's behalf under documented data processor agreements.
• Legal and regulatory authorities: Where JDL77 is subject to a valid legal obligation, court order, or regulatory requirement, personal data may be disclosed to law enforcement or competent authorities. JDL77 will, where legally permitted, notify affected players of such disclosures.
• Business transfers: In the event of a merger, acquisition, or sale of JDL77's business or assets, player data may be transferred to the acquiring entity. Affected players will be notified prior to data transfer and the acquiring party will be bound to equivalent data protection standards.

Payment Data

JDL77 takes the security of financial data with the utmost seriousness. Payment processing on the Platform is handled through certified third-party payment gateways. JDL77 does not store full card numbers, full bank account credentials, or eWallet login credentials on its own servers.

When you make a deposit or request a withdrawal, your payment details are transmitted directly to the relevant payment processor using encrypted channels. JDL77 retains only the minimum payment reference data necessary to maintain transaction records, dispute resolution capability, and regulatory compliance — for example, a masked bank account number, eWallet identifier, or transaction reference code.

All financial transaction data is retained for a minimum period required by applicable anti-money laundering regulations and is accessible only to authorised JDL77 finance and compliance personnel.

Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are used to retain session information, preferences, and browsing behaviour to improve your experience and enable certain platform functionalities.

9.2 Cookies Used by JDL77

JDL77 uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Used to remember your preferences (e.g., language settings, display preferences) between sessions to improve usability.
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how players use the Platform — pages visited, time on page, and navigation paths. This data is used solely to improve the Platform experience.
• Fraud Prevention Cookies: Used by our security systems to identify and flag unusual or suspicious device behaviour that may indicate fraudulent activity.

9.3 Managing Cookies

You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies may prevent you from logging into your account or using core Platform features. JDL77 does not use third-party advertising cookies or retargeting pixels that track your behaviour across external websites.

Data Retention

JDL77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following indicative retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised in such a manner that it can no longer be associated with any identifiable individual.

Data Security

JDL77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and JDL77's servers
• Encryption at rest for all sensitive personal and financial data stored on JDL77's infrastructure
• Role-based access controls ensuring that employee access to personal data is limited to what is strictly required for their specific function
• Two-factor authentication (2FA) for all JDL77 system administrator access
• Regular third-party penetration testing and security audits of the Platform and supporting infrastructure
• Continuous monitoring of server access logs and anomaly detection systems
• A formal incident response procedure for handling data security breaches, including notification obligations to affected players where required

Your Rights

Subject to applicable law, you hold the following rights in respect of your personal data held by JDL77. To exercise any of these rights, contact us using the details in Section 16.

• Right of Access: You may request a copy of the personal data JDL77 holds about you, along with information about how it is processed. We will respond within a reasonable timeframe, generally within 30 days of a verified request.
• Right to Rectification: If you believe that any personal data held about you is inaccurate or incomplete, you may request that it be corrected or updated. Minor corrections (such as address changes) can typically be made directly through your Account settings.
• Right to Erasure: You may request that JDL77 delete your personal data in certain circumstances — for example, where the data is no longer necessary for its original purpose and no overriding legal obligation requires its retention. Note that JDL77 may be required to retain certain categories of data (e.g., financial records) for regulatory compliance periods.
• Right to Data Portability: Where processing is based on consent or contract performance, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, JDL77 will cease processing your data for that purpose immediately.
• Right to Restrict Processing: In certain circumstances, you may request that JDL77 restrict the processing of your personal data pending resolution of a dispute about its accuracy or the lawfulness of processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

Minors & Age Verification

JDL77 strictly prohibits the use of its Platform by any person under 21 years of age. JDL77 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of the KYC process for all registered accounts.

Where JDL77 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, JDL77 will immediately:

• Suspend the associated Account pending investigation
• Delete or anonymise the personal data collected from the underage individual to the extent permitted by applicable law
• Forfeit any Balance held in the Account in accordance with JDL77's Terms & Conditions

Parents and legal guardians are encouraged to use parental control software and to monitor the online activities of minors in their care to prevent access to online gambling platforms. JDL77 supports responsible access and takes underage gambling prevention seriously.

International Data Transfers

As an online gaming platform serving players in Malaysia and internationally, JDL77 may transfer personal data to and process it in countries outside Malaysia. Such transfers occur where JDL77's infrastructure, third-party processors, or service providers operate from other jurisdictions.

Where personal data is transferred internationally, JDL77 takes steps to ensure that appropriate safeguards are in place to maintain the protection of your data to a standard equivalent to that afforded within Malaysia. These safeguards may include contractual data protection clauses, data processor agreements, and assessment of the recipient jurisdiction's data protection framework.

Policy Amendments

JDL77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. Material changes — those that meaningfully affect your rights or our data processing activities — will be communicated to you via email to your registered address and/or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the date on which the most recent version was published. We encourage you to review this Policy periodically to stay informed about how JDL77 protects your personal data. Your continued use of the Platform following notice of any amendment constitutes your acceptance of the revised Policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about the way JDL77 handles your personal data, please contact us through the following channels:

• Email: [email protected] — for privacy-related queries, please mark your subject line "Privacy Request"
• Live Chat: Available 24/7 on the Platform — average response time under 5 minutes
• Support Languages: English, Bahasa Melayu, and Mandarin
• Response Commitment: JDL77 will acknowledge privacy-related data subject requests within 5 business days and respond substantively within 30 calendar days

We serve players from across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other states and territories. Our support team is equipped to handle privacy queries in your preferred language.