Privacy Policy Jago11 — Malaysian Player Data Protection

Jago11 collects your personal information through several channels as you interact with our platform. We only collect what is necessary — nothing more, nothing less. Below are the categories of data we collect and the reasons why:

Information You Provide Directly

• Registration Information: Full name (as per IC), Malaysian phone number, email address, date of birth, and password.
• Identity Verification (KYC) Information: A copy of your Identity Card (IC) or Passport, a selfie for facial verification (for accounts requiring enhanced KYC), and proof of residential address where required.
• Payment Information: Bank account or e-wallet details used for deposits and withdrawals — including the account number and account holder name, which must match your jago11 account information. We do not store your e-wallet password or PIN.
• Support Communications: Records of conversations via Live Chat, email, and Telegram with the jago11 support team are retained for reference and service quality improvement.

Automatically Collected Information

• Technical Data: IP address, browser type, operating system, screen resolution, and device data used to access jago11.
• Gaming Activity Data: Betting history, games played, session duration, account balance, deposit and withdrawal transactions, and platform usage patterns.
• Cookie Data: jago11 uses session and persistent cookies to maintain your login, remember your preferences, and analyse aggregated platform usage patterns for continuous improvement.
• Location Data: General location information (at city or state level) derived from your IP address to ensure regional compliance and account security. jago11 does not track your precise GPS location.

Personal data collected by jago11 is used only for legitimate and necessary purposes. Here is a clear explanation of each intended use:

Jago11 does not use your personal data for any purpose other than those stated in the table above without first obtaining your additional consent. Any changes to the purposes for which your data is used will be communicated to you via email or in-platform notification prior to implementation.

Jago11 does not sell, rent, or commercialise players' personal data to any third party. However, in the course of normal platform operations, we may need to share certain information with the following parties for legitimate and limited purposes:

Payment Service Providers

When you make a deposit or withdrawal using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks, the necessary transaction details are shared with the relevant provider to process your payment. This sharing is kept to the minimum required to complete the transaction.

Game Service Providers

Some games on jago11 are provided by third-party software providers. In this context, certain data such as game session IDs and betting balances may be shared with the relevant providers to ensure games function correctly. These providers are bound by strict data confidentiality agreements.

Statutory Authorities

Jago11 may be required to disclose personal data to Malaysian authorities when mandated by law, court order, or a valid request from a law enforcement agency — including in the context of fraud or money laundering investigations. We do not disclose information beyond what is required by those legal obligations.

Protecting your personal data is one of the most important responsibilities we carry as a platform trusted by over 500,000 Malaysian players. jago11 employs multiple layers of security to keep your data safe at all times:

• Encryption in Transit: All communication between your browser or app and jago11's servers is encrypted using TLS 1.3 with a 256-bit SSL certificate — ensuring your data cannot be intercepted or read in transit.
• Encryption at Rest: Sensitive data such as payment information and KYC documents are stored in encrypted form on jago11 servers. Even in the event of unauthorised server access, the data cannot be read without the encryption key.
• Internal Access Controls: Only jago11 staff who require access to specific data to perform their duties are permitted to do so. All access is logged and continuously monitored. Passwords and access credentials are updated on a regular basis.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect any unusual activity or unauthorised attempts to access player data. Any security incidents are resolved promptly.
• Regular Security Testing: jago11 conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities before they can be exploited.

Data Retention Period

Jago11 retains your personal data for as long as necessary to fulfil the original purpose for which it was collected, or as required by Malaysian law. In general:

• Active account data: Retained for the duration of the account and an additional 7 years after closure (AML and Malaysian tax requirements).
• Financial transaction records: Retained for 7 years from the date of the transaction in accordance with Malaysian legal requirements.
• Support communication records: 2 years from the date of last communication.
• Cookie and analytics data: 90 days for session data; up to 2 years for preference cookies.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by jago11. These rights may be exercised at any time by contacting our privacy team:

Jago11 uses cookies and similar tracking technologies to keep the platform running smoothly and to enhance the user experience. Below is an explanation of the types of cookies we use:

Cookies We Use

• Session Cookies (Essential): Required to maintain your login during an active session. Expires automatically when you close your browser. Cannot be disabled without affecting core platform functionality.
• Preference Cookies: Saves your language settings, display theme, and game preferences for a more personalised experience. You can delete these cookies without affecting core functionality.
• Security Cookies: Helps detect suspicious login activity and protect your account from unauthorised access. These cookies are essential for account security.
• Analytics Cookies: Collects usage data in aggregated and anonymised form to help the jago11 team understand how the platform is used and to make improvements. This data contains no personally identifiable information.

You can manage your cookie settings through your web browser. Most modern browsers such as Chrome, Firefox, and Safari allow you to view, delete, and block cookies. However, disabling essential cookies may affect the functionality of the jago11 platform. For more information on how to manage cookies on your device, refer to the help documentation of your browser.

As jago11 involves real financial transactions, we take financial data protection extremely seriously. The following are the specific measures we take to safeguard your financial information:

• PCI-DSS Standards: All card transaction processing at jago11 complies with the Payment Card Industry Data Security Standard (PCI-DSS), ensuring your card data is handled to the highest security standards in the industry.
• Payment Data Tokenisation: Sensitive payment details such as full bank account numbers are not permanently stored on jago11's servers — instead, secure tokens are used for transaction reference purposes.
• Fund Segregation: Player funds are held in accounts that are separate from jago11's operational funds. This ensures your money is protected even in the unlikely event of an unexpected financial issue on the platform's end.
• Real-Time Fraud Monitoring: Every deposit and withdrawal transaction goes through real-time automated fraud checks to detect any suspicious activity before it is processed.

Deposits and withdrawals at jago11 are supported exclusively through certified local Malaysian payment methods — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX via Maybank2u and CIMB Clicks. Restricting to these local payment methods not only ensures convenience for users but also strengthens transaction security, as all these providers operate under Bank Negara Malaysia regulations.

In the context of global online entertainment platform operations, some player data may be processed outside Malaysia — particularly when involving international gaming software providers or technology infrastructure services. jago11 takes appropriate measures to ensure that any cross-border data transfers are carried out with adequate safeguards:

• All third-party providers that receive data from Malaysian players are bound by data processing agreements requiring protection standards at least equivalent to Malaysia's PDPA.
• Sensitive data such as IC copies and identity verification information is stored preferentially on servers located in the Asian region to minimise cross-border transfers.
• Data transfers to countries without equivalent data protection laws are only carried out with adequate additional contractual safeguards in place.

If you have concerns about the transfer of your personal data outside Malaysia, you may contact our privacy team for more information on the protective measures currently in place.

While jago11 takes all reasonable steps to protect player data, no system can be entirely free from risk. In the event of a data breach involving players' personal data, jago11 is committed to:

• Identifying and containing any breach as quickly as possible once it is detected.
• Notifying affected players within 72 hours after a breach is identified, via email and in-platform notifications.
• Reporting material breaches to the relevant authorities in Malaysia in accordance with legal requirements.
• Providing clear information to affected players regarding the type of data involved, the potential risks they may face, and the steps they can take to protect themselves.
• Conducting a thorough investigation and implementing preventive measures to ensure a similar breach does not occur again.

Transparency is our priority in situations like this. We will not conceal or delay notification to affected players in order to protect the platform's reputation — players' interests always come first.

Jago11 has appointed a Data Protection Officer responsible for ensuring compliance with this Privacy Policy and handling all privacy-related enquiries from players. If you have any questions, concerns, or complaints regarding how jago11 handles your personal data, please contact us through the following channels:

• Privacy Email: support@jago11.asia (subject: "Privacy Policy Enquiry")
• Live Chat: Available 24/7 within the jago11 platform — state "privacy enquiry" to be directed to the relevant team
• Telegram: @jago11support

All privacy enquiries are handled in strict confidence. We commit to acknowledging receipt of your enquiry within 24 hours and provide a substantive response within 14 business days. For complaints that cannot be resolved internally, you have the right to refer the matter to Malaysia's Department of Personal Data Protection (JPDP).