Privacy Policy Jiliraja — Your Data Protection

1. Introduction

Jiliraja cares about the privacy of every user who trusts our platform. We understand that personal information is a valuable asset and we are fully committed to ensuring your data is managed responsibly, transparently, and securely.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and covers all data processing activities carried out by Jiliraja — including our official website, mobile app, and all customer service channels.

We encourage you to read this document carefully. If any section is unclear or you would like further clarification, our privacy team is available to assist you at any time.

2. Information We Collect

Jiliraja collects various categories of personal data to enable us to provide a complete, secure service tailored to your needs as a user. The data we collect falls into three main categories:

A. Registration & Identity Information

• Full name as per official documents
• Date of birth and gender
• Identity card number or passport number
• Current residential address
• Active mobile phone number
• Valid email address

B. Financial Information

• Bank account number for withdrawal purposes
• Deposit and withdrawal transaction records
• Betting and gaming activity history
• Registered e-wallet details

C. Technical & Usage Information

• IP address and general geographic location
• Device type, operating system, and web browser
• Cookie and login session data
• Usage patterns and pages visited
• Session time and duration logs on the platform

3. How We Use Your Data

All data collected by jiliraja has a clear and lawful purpose. We do not use your data for any purpose not stated in this Privacy Policy. The following are the primary purposes for which your personal data is used:

If you do not wish to receive marketing communications from jiliraja, you may withdraw your consent at any time through your account settings or by contacting our support team.

4. Legal Basis for Data Processing

Jiliraja ensures that every personal data processing activity has a valid legal basis in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). The legal bases we rely on are as follows:

• Contract fulfilment — Processing necessary to fulfil the agreement between you and jiliraja, including account management, transaction processing, and the provision of betting services.
• Legal obligation — Processing necessary to meet compliance requirements such as KYC procedures, anti-money laundering (AML) prevention, and reporting to the relevant authorities.
• Legitimate interest — Processing for platform security, fraud prevention, and internal analytics to improve our services.
• Consent — Processing for marketing and promotional communications, which requires your explicit consent beforehand.

5. Data Sharing with Third Parties

Jiliraja does not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. However, there are certain situations where we need to share data with trusted parties to ensure the platform operates smoothly:

• Payment service providers — Required financial data is shared with registered and trusted payment gateways and partner banks to process your deposits and withdrawals.
• Identity verification providers — KYC information may be processed through third-party identity verification platforms that comply with industry security standards.
• Relevant authorities — jiliraja will disclose data when required by law or upon a valid request from law enforcement agencies.
• Technical infrastructure providers — Cloud and hosting service providers used by jiliraja may have limited access to data for technical maintenance purposes.

All third parties involved in processing jiliraja user data are bound by strict data protection agreements and are only permitted to use such data for specified purposes. jiliraja takes responsibility for ensuring all partners adhere to the established privacy standards.

6. Data Security

We invest seriously in cybersecurity infrastructure to ensure your personal data is protected at all times. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmission between your device and jiliraja's servers.
• Data-at-rest encryption for all personal and financial information stored in our databases.
• Layered access control based on the principle of least privilege — only staff who require the data to perform their duties are permitted to access it.
• 24/7 security monitoring and an active intrusion detection system (IDS).
• Regular security testing and audits conducted by independent parties.
• Two-factor authentication (2FA) is available for all user accounts.
• A tested incident response procedure to handle any data breaches quickly and effectively.

7. Data Retention Period

Jiliraja retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. The following are our general data retention guidelines:

• Active account data — Retained for as long as your account is active and for a minimum of five (5) years after account closure for legal compliance purposes.
• Financial transaction records — Retained for seven (7) years in compliance with Malaysia's financial and tax legal requirements.
• KYC Documents — Retained for five (5) years after the end of the business relationship in accordance with AML requirements.
• Support communication logs — Retained for two (2) years for reference and dispute resolution purposes.
• Technical analytics data — Stored in anonymised form for twelve (12) months.

Upon expiry of the retention period, your data will be securely deleted or anonymised in a form that can no longer be identified. The data deletion process is carried out in accordance with established security procedures.

8. Cookies & Tracking Technology

The jiliraja platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential cookies — Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Preference cookies — Saves your preferences such as language, time zone, and display settings for a smoother repeat experience.
• Analytics cookies — Helps us understand how users interact with the platform so we can make continuous improvements. This data is collected anonymously.
• Security cookies — Detects suspicious activity and assists our security systems in identifying unauthorized access attempts.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the Jiliraja platform. For more information on managing cookies, please refer to your web browser's help documentation.

9. Your Rights as a User

In accordance with Malaysia's PDPA and international data protection best practices, you have the following rights regarding your personal data held by jiliraja:

• Right of access — You have the right to request a copy of the personal data we hold about you at any time.
• Right to rectification — If your personal data is inaccurate or incomplete, you have the right to request that we correct it.
• Right to erasure — You have the right to request the deletion of your personal data under certain circumstances, subject to legal obligations that prevent such deletion.
• Right to withdraw consent — You may withdraw consent for any consent-based processing at any time without affecting the validity of processing carried out prior to withdrawal.
• Right to lodge a complaint — You have the right to lodge a complaint with Malaysia's Personal Data Protection Department if you believe your privacy rights have been violated.

To exercise any of the rights above, please contact our privacy team via email or Live Chat within the platform. We will process your request within thirty (30) business days from the date of receipt.

10. Children's Data

The jiliraja platform is strictly limited to individuals aged eighteen (18) and above. We do not knowingly collect, store, or process any personal data from minors or underage individuals.

If we discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered an account on jiliraja are requested to contact us immediately.

11. Privacy Policy Amendments

Jiliraja reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, applicable legal requirements, or the latest technological developments.

You will be notified of any material amendments via an in-platform notification or your registered email at least seven (7) days before the changes take effect. It is your responsibility to review this page periodically to ensure you are always aware of the latest version of our Privacy Policy.

Continued use of the jiliraja platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

12. Contact Us

For any inquiries, requests, or complaints regarding this Privacy Policy or how jiliraja handles your personal data, please contact our Data Protection Officer team through the following channels:

Jiliraja is committed to handling every privacy-related inquiry with seriousness and professionalism. We value your trust and will always strive to provide clear, satisfactory responses within the stipulated timeframe.