Privacy Policy

This Privacy Policy ("Policy") describes how janda303 ("we", "us", "the Platform", "janda303"), the operator of the online gaming and sports betting platform accessible at janda303.cam, collects, uses, stores, shares and protects personal data relating to individuals who register for or use our services ("you", "the Player", "the Data Subject").

janda303 takes its obligations as a data controller seriously. We are committed to handling all personal data fairly, lawfully and transparently, in accordance with applicable data protection principles. This Policy is designed to give you clear, honest information about our data practices so that you can make informed decisions about sharing your personal information with us.

By creating an account on janda303, depositing funds, or using any feature of the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including name, identification number, location data, online identifiers or factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction — whether or not by automated means.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, janda303 is the Data Controller for all Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a binding data processing agreement.
• "Sensitive Personal Data" means a subset of Personal Data requiring heightened protection, including financial account data, identity document details and biometric verification data submitted during KYC processes.
• "Consent" means a freely given, specific, informed and unambiguous indication of a data subject's agreement to the processing of their Personal Data for a defined purpose.
• "Data Breach" means a confirmed security incident resulting in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data transmitted, stored or otherwise processed by janda303.

janda303 acts as the Data Controller in respect of all Personal Data collected through the Platform at janda303.cam. As Data Controller, janda303 determines the purposes for which your Personal Data is collected and the manner in which it is processed.

Where janda303 engages third-party service providers to process Personal Data on its behalf — for example, payment processors, identity verification service providers, or platform analytics providers — those third parties act as Data Processors under binding contractual agreements that prohibit them from using your data for any purpose beyond the specific service they provide to janda303.

Any questions, requests or complaints relating to janda303's role as Data Controller should be directed to our Privacy team using the contact details set out in Section 16 of this Policy.

janda303 collects Personal Data through several channels: directly from you during registration and account operation, automatically through your use of the Platform, and from trusted third-party verification service providers where required for KYC compliance. The categories of data we collect are set out in the table below.

janda303 does not collect special category Personal Data (as defined under applicable data protection law) beyond the categories strictly required for identity verification and AML compliance. We do not collect data relating to racial or ethnic origin, religious beliefs, political opinions, health (beyond responsible gambling indicators voluntarily provided), or sexual orientation.

janda303 processes your Personal Data for the following specific purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your account profile and provide you with access to Platform services.
• Transaction Processing: To process deposits and withdrawals in Malaysian Ringgit (RM) and cryptocurrency (BTC/USDT) via your chosen payment method, and to maintain accurate financial records for each transaction.
• KYC and Identity Verification: To verify your identity and address in compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) regulatory obligations. KYC processing is mandatory before withdrawals are released.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent transactions, unauthorised account access, bonus abuse, collusion, match-fixing participation and other prohibited activities described in the Terms & Conditions.
• Legal and Regulatory Compliance: To meet janda303's obligations under applicable law, including AML/CTF reporting requirements, regulatory requests from competent authorities, and records retention obligations.
• Customer Support: To respond to your queries and complaints, manage support tickets and maintain records of communications necessary for dispute resolution.
• Responsible Gambling: To implement and monitor responsible gambling tools including deposit limits, loss limits, cool-down periods and self-exclusion requests. Responsible gambling data is processed exclusively in your interest and is never used for marketing purposes.
• Platform Improvement: To analyse aggregated usage patterns, identify technical issues and improve the functionality, security and user experience of the Platform.
• Direct Marketing (with consent): Where you have provided explicit consent, to send promotional communications about bonuses, new games and Platform features. You may withdraw this consent at any time by contacting support or using the unsubscribe function in any marketing email.

janda303 processes your Personal Data only where a valid legal basis exists. The legal bases applicable to our key processing activities are:

• Contractual Necessity: Processing necessary to perform the contract between you and janda303 — specifically, to create your account, process transactions and provide gaming services.
• Legal Obligation: Processing necessary to comply with applicable law — particularly AML/CTF obligations, KYC document retention requirements and regulatory reporting duties.
• Legitimate Interests: Processing necessary for janda303's legitimate interests in operating a secure, fraud-free platform, provided those interests are not overridden by your fundamental rights and freedoms. This basis applies to fraud prevention, security monitoring and aggregated platform analytics.
• Consent: Processing based on your freely given consent, specifically for direct marketing communications. You retain the right to withdraw consent at any time without affecting the lawfulness of any prior processing.
• Vital Interests: In exceptional circumstances, processing that is necessary to protect life — for example, sharing information with emergency services or welfare organisations in relation to a self-harm or gambling addiction crisis.

janda303 does not sell, rent or trade your Personal Data to third parties for commercial purposes. We share your data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: We share financial transaction data with the payment processors required to complete your chosen deposit or withdrawal method — including DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay and cryptocurrency gateway providers. These processors act as Data Processors under binding agreements.
• Identity Verification Providers: KYC documents and identity data are shared with certified identity verification service providers solely for the purpose of verifying your account. Documents are not retained by these providers beyond the verification window.
• Regulatory and Law Enforcement Authorities: janda303 will disclose Personal Data to competent regulatory or law enforcement authorities where required by applicable law, court order or binding regulatory direction. We will use reasonable efforts to notify you of any such request to the extent legally permissible.
• Fraud Prevention Networks: Where fraudulent activity is confirmed or strongly suspected, we may share relevant account and transaction data with shared fraud prevention networks to protect the broader industry and prevent the re-registration of confirmed fraudsters on other platforms.
• Business Successors: In the event of a merger, acquisition or transfer of all or substantially all of janda303's business assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

Some of janda303's third-party Data Processors — including cloud infrastructure providers, game studio technical partners and identity verification providers — may be located or process data outside Malaysia. Where Personal Data is transferred internationally, janda303 takes appropriate steps to ensure an equivalent level of protection is maintained, including:

• Relying on standard contractual clauses (SCCs) or equivalent data transfer safeguards agreed between janda303 and the receiving processor.
• Ensuring receiving parties operate under data protection regimes that provide substantively equivalent protections to those described in this Policy.
• Restricting the scope of any international data transfer to the minimum data necessary for the specific processing purpose.

No international data transfer conducted by janda303 involves the sale, commercial exploitation or onward transfer of your Personal Data to entities unconnected with the delivery of Platform services.

janda303 retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any legal, regulatory or contractual obligation to retain records for a longer period. Our standard retention schedule is:

At the end of each applicable retention period, Personal Data is securely deleted or anonymised. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for aggregate statistical analysis.

janda303 uses cookies and similar technologies (including session tokens and local storage) to operate the Platform and understand how players use it. A cookie is a small text file placed on your device when you visit a website. We categorise our cookies as follows:

• Strictly Necessary Cookies: Required for the Platform to function. They maintain your login session, remember your language preferences and enable core security features. These cookies cannot be disabled without disrupting your ability to use the Platform.
• Analytics Cookies: Used to collect anonymised data about how players navigate and use the Platform — including pages visited, session duration and technical errors encountered. This data is used exclusively to improve Platform performance and user experience. We do not share analytics data with advertising networks.
• Functional Cookies: Used to remember your Platform preferences across sessions, such as responsible gambling limit settings and display preferences, so you do not need to reconfigure them each visit.

janda303 does not use third-party advertising or re-targeting cookies. You can manage cookie settings through your browser — most browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly.

As a data subject, you hold the following rights in respect of your Personal Data processed by janda303. You may exercise any of these rights at any time by contacting us at the details provided in Section 16:

• Right of Access: You may request a copy of all Personal Data janda303 holds about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: You may request correction of any Personal Data that is inaccurate or incomplete. Where data is used for regulatory compliance purposes, corrections may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where: it is no longer needed for the original purpose; you withdraw consent; or processing is unlawful. This right is subject to overriding legal obligations — we are required by AML/CTF regulations to retain certain records even after account closure.
• Right to Restriction of Processing: You may request that we temporarily restrict processing of your data while a correction request is pending, while a complaint is being investigated, or where you have objected to processing and we are assessing the objection.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format (CSV or JSON).
• Right to Object: You may object to processing based on legitimate interests (including profiling) and to direct marketing. Where you object to direct marketing, we will cease that processing immediately. Where you object to legitimate-interest processing, we will cease unless we can demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a relevant data protection supervisory authority if you believe your rights have not been adequately upheld. We ask that you contact us first to attempt resolution before escalating to a supervisory body.

janda303 will respond to all verified data subject requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days with prior notification. We will not charge a fee for requests unless they are manifestly unfounded or excessive.

janda303 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and janda303's servers is protected by 256-bit SSL/TLS encryption. The Platform operates exclusively over HTTPS — any attempt to access janda303 over an unencrypted HTTP connection is automatically redirected.
• Encryption at Rest: Sensitive Personal Data — including KYC documents, financial account details and identity information — is stored in encrypted form in access-controlled data environments.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to background checks, confidentiality obligations and regular security training.
• Two-Factor Authentication: 2FA is available and strongly recommended for all player accounts. Internal staff accounts with access to player data require mandatory 2FA.
• Penetration Testing and Security Audits: janda303 conducts regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a confirmed Data Breach that is likely to result in a risk to your rights and freedoms, janda303 will notify the relevant supervisory authority within 72 hours of becoming aware, and will notify affected individuals without undue delay where a high risk to individuals is identified.

The janda303 Platform is strictly for use by individuals aged 21 years and above. We do not knowingly collect Personal Data from minors. If we discover — through KYC verification, third-party checks or any other means — that Personal Data has been provided by or on behalf of an individual under the age of 21, we will immediately close the associated account, delete the Personal Data in question and forfeit any account balance in accordance with the Terms & Conditions.

If you have reason to believe that a minor has provided Personal Data to janda303, please contact us immediately at [email protected] so that we can investigate and take appropriate action promptly.

The janda303 Platform may contain references to third-party services — such as Malaysian banking portals accessed when completing FPX or DuitNow transactions — that are not operated by janda303. Once you leave the janda303 Platform to access a third-party service, your data is governed by that third party's own privacy policy, which janda303 does not control and cannot be responsible for.

We recommend reviewing the privacy policies of any third-party service you use in connection with your janda303 account, particularly your chosen payment provider (Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, etc.) and your device's operating system provider.

janda303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. The date of the most recent revision is published at the top of this page.

Where a material amendment to this Policy affects your rights as a data subject — particularly where it introduces a new purpose for processing your data or a new category of recipients — we will provide advance notice via in-platform notification or email, typically no less than 14 days before the amendment takes effect. For urgent amendments required to address security incidents or comply with new regulatory obligations, shorter notice periods may apply.

Continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with an amendment, you should cease using the Platform and contact us to request account closure.

For all queries, requests or complaints relating to this Privacy Policy or janda303's handling of your Personal Data, please contact our Data Privacy team through one of the following channels:

• Email — Data Privacy Requests:  Send your request to [email protected] with the subject line "Data Privacy Request". Please include your registered account username and a clear description of your request. We aim to acknowledge all privacy requests within 24 hours and resolve them within 30 calendar days.
• Live Chat — General Privacy Queries:  Our 24/7 live chat support team at janda303.cam can assist with general questions about this Policy and can escalate formal data subject requests to the Privacy team on your behalf.
• Formal Complaints:  If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. We ask that you contact us first so we have an opportunity to resolve the matter directly.