Privacy Policy

This Privacy Policy ("Policy") describes how jokerscm ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "the Player") who access or use the jokerscm online gaming platform available at jokerscm.cam.

jokerscm is committed to handling personal data with care, transparency, and in full compliance with applicable data protection and privacy legislation. This Policy has been prepared in accordance with internationally recognised data protection principles and is designed to give you clear, accessible information about your privacy rights and our data handling practices.

By registering an account with jokerscm, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, please discontinue your use of the Platform and contact our support team to close your account.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means jokerscm, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of jokerscm, under contract and subject to strict data protection obligations.
• "Sensitive Personal Data" means a subset of Personal Data warranting enhanced protection, including identity document numbers, financial account details, and health-related information.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data for a stated purpose.
• "Platform" means the jokerscm website, mobile web application, and all associated services accessible at jokerscm.cam.
• "KYC" means Know Your Customer — the identity and age verification process required to comply with anti-money laundering obligations and to confirm player eligibility.

jokerscm collects personal data through several channels. The categories of data we collect, and the contexts in which we collect them, are described below:

3.1 Registration and Account Data

When you create a jokerscm account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Malaysian IC number (MyKad) or passport number
• Residential address
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred language and currency (MYR)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to verify player age and identity, we may request:

• A copy of your government-issued photo identification (Malaysian MyKad, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within the last three months)
• A live selfie or photo holding your identification document
• Source of funds documentation in certain circumstances

3.3 Financial and Transaction Data

When you make deposits or withdrawals on the Platform, we collect and retain records of:

• Payment method type and identifier (e.g., Touch 'n Go eWallet account reference, DuitNow registered number, FPX bank name, USDT wallet address)
• Transaction amounts in Malaysian Ringgit (MYR) or equivalent cryptocurrency value
• Transaction timestamps and reference numbers
• Deposit and withdrawal history

jokerscm does not store full bank account numbers, credit or debit card numbers, or full digital wallet credentials. Payment processing is handled by certified third-party payment providers.

3.4 Technical and Usage Data

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session duration, pages visited, and features used
• Referring URL and exit pages
• Log files and error reports

3.5 Communications Data

If you contact our customer support team via live chat or email at [email protected], we retain a record of the content of that communication, including timestamps, the nature of the query, and any resolution provided. This data is used to improve service quality and for staff training purposes.

3.6 Responsible Gambling Data

We maintain records of any responsible gambling tools you activate, including deposit limits, self-exclusion requests, session time limits, and cooling-off periods. This data is treated with particular care and is retained to ensure your limits are honoured even if your account is subsequently closed and reopened.

jokerscm uses the personal data it collects for the following purposes:

jokerscm does not use personal data for automated individual decision-making that produces significant legal effects, other than fraud screening processes. Where automated processing is used for fraud detection, you have the right to request human review of any decision that affects your account.

jokerscm processes your personal data under the following legal bases, depending on the specific activity involved:

• Contract Performance: Processing necessary to deliver the services you have contracted with jokerscm to receive — including account management, gameplay, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC identity verification requirements, financial reporting obligations, and responsible gambling regulations.
• Legitimate Interests: Processing carried out in the legitimate interests of jokerscm or a third party, provided those interests are not overridden by your rights and interests. This includes fraud prevention, security monitoring, platform performance analytics, and service improvement initiatives.
• Consent: Processing activities for which jokerscm has obtained your explicit, informed, and freely given consent — most notably, direct marketing communications via email or SMS. You may withdraw this consent at any time by contacting support or using the unsubscribe function in any marketing communication.

jokerscm does not sell, rent, or trade your personal data to third parties for commercial purposes. We disclose personal data only in the following limited circumstances:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction and identity data with our certified payment processing partners. These include providers supporting DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX (including integrations with Maybank, CIMB, Public Bank, and Hong Leong), and USDT cryptocurrency processing networks. All payment processors operate under contractual data protection obligations consistent with this Policy.

6.2 Identity Verification Providers

We engage licensed third-party KYC and identity verification service providers to verify the identity and age of players during account registration and when withdrawal thresholds are reached. These providers process identity documents and biometric data under strict contractual and regulatory controls.

6.3 Regulatory and Law Enforcement Authorities

jokerscm may disclose personal data to governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory directive — including in connection with AML investigations, fraud inquiries, or responsible gambling enforcement actions.

6.4 Group Companies and Affiliates

jokerscm may share data with affiliated companies within its corporate group for purposes of platform operations, compliance, and fraud prevention. All intra-group data transfers are governed by binding data processing agreements that require equivalent data protection standards.

6.5 Professional Advisors

Personal data may be disclosed to our legal advisors, auditors, and accountants on a strictly need-to-know basis, and subject to professional confidentiality obligations, where required in connection with legal proceedings, regulatory audits, or financial reporting.

jokerscm uses cookies and similar tracking technologies to enhance your experience on the Platform, ensure its proper technical functioning, and understand how players interact with our services.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, session settings, and last-used payment method.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform, enabling us to identify areas for improvement.
• Responsible Gambling Cookies: Used to enforce deposit limits, session time reminders, and self-exclusion status across sessions and devices.

7.2 Managing Cookies

You may adjust your cookie preferences through your web browser's settings at any time. Note that disabling cookies categorised as Strictly Necessary may prevent you from accessing certain features of the Platform, including logging into your account. Instructions for managing cookies are available in the help documentation of all major browsers.

jokerscm retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our retention periods are as follows:

• Account and Registration Data: Retained for a minimum of five (5) years following the date of account closure, to comply with AML, financial reporting, and audit obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the last transaction, as required under anti-money laundering legislation.
• Transaction Records: Retained for a minimum of seven (7) years to satisfy financial regulatory and audit requirements.
• Customer Support Communications: Retained for three (3) years from the date of the communication, for quality assurance and dispute resolution purposes.
• Responsible Gambling Records: Retained indefinitely for self-exclusion records, and for a minimum of five (5) years for other responsible gambling activity records, to ensure continuity of player protection.
• Technical and Usage Data (Logs): Retained for a maximum of twelve (12) months, after which they are deleted or anonymised.
• Marketing Preferences: Retained until consent is withdrawn or the account is closed, whichever is earlier.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

jokerscm takes the security of your personal data seriously. We implement a layered combination of technical, administrative, and physical safeguards designed to protect personal data against unauthorised access, disclosure, alteration, or destruction.

Our security measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the jokerscm Platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored in our systems is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised personnel only, based on role-based access controls and the principle of least privilege. All access is logged and auditable.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. Internal systems with access to player data require 2FA for all authorised staff.
• Penetration Testing: Our Platform undergoes regular security assessments and penetration testing by qualified third-party security professionals to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response procedure. In the event of a data breach affecting your personal data, we will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

While we employ robust security measures, no online system is completely immune to security threats. You are responsible for maintaining the confidentiality of your account credentials. If you suspect your account has been accessed without authorisation, contact support immediately.

You have the following rights in relation to the personal data that jokerscm holds about you. To exercise any of these rights, please contact our support team at [email protected] or via live chat.

jokerscm will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by up to an additional 60 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for reasonable data rights requests.

jokerscm does not knowingly collect personal data from individuals under the age of 21. Access to the Platform is strictly restricted to players who are 21 years of age or older. Age verification is conducted during the registration process and as part of the KYC procedure prior to processing withdrawals.

If we become aware that personal data has been collected from an individual who is under 21, we will immediately suspend the associated account, initiate an investigation, and delete all personal data associated with the account, subject to any legal obligations that require its retention.

If you have reason to believe that a person under the age of 21 has registered an account on jokerscm, please contact our support team immediately at [email protected] so that we may take appropriate action.

The jokerscm Platform may contain references to third-party services — for example, payment provider portals accessed during transactions. jokerscm does not operate these third-party services and is not responsible for their privacy practices or content.

When you interact with a third-party service — such as completing a transaction via your Maybank online banking portal or a Touch 'n Go eWallet interface — your use of that service is governed by that third party's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party services you access in connection with your jokerscm account.

In the course of providing the Platform's services, personal data may be transferred to, and processed in, countries outside of Malaysia. This may occur when we use cloud infrastructure providers, KYC verification services, or other third-party data processors with servers or operations located outside Malaysia.

Where personal data is transferred internationally, jokerscm ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Policy. Such safeguards may include contractual data protection clauses, binding corporate rules, or transfers to countries deemed to provide an adequate level of data protection.

jokerscm reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we provide. The most current version of this Policy will always be available at jokerscm.cam/privacy-policy and will display the date of the most recent update at the top of the page.

Where changes to this Policy are material — for example, where we introduce a new category of data collection, a new purpose for processing, or a new category of third-party recipient — we will make reasonable efforts to notify registered players by email or via an in-platform notification.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the updated terms. If you do not agree with any amendment, please cease using the Platform and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data jokerscm holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected] — Please include "Privacy Request" in the subject line for faster routing. Responses within 24–48 hours on business days.
• Live Chat: Available 24/7 directly on the Platform. Average response time under 5 minutes. Please ask to be connected to the Data Protection team for privacy-specific enquiries.

Our support team operates on Malaysian time (MYT, UTC+8) and is able to assist in English, Bahasa Melayu, and Mandarin. We serve players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and nationwide.