jom33
Privacy Policy

This Privacy Policy ("Policy") describes how jom33 ("jom33", "we", "us", "our") collects, processes, stores, and protects personal data in connection with your use of the jom33 website at jom33.cam and all associated services, features, and content (collectively, the "Platform").

This Policy applies to all users of the Platform, including registered players, visitors who browse without registering, and individuals who contact our customer support team. By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform generally. In the event of any conflict between this Policy and the Terms & Conditions regarding the handling of personal data, this Policy shall prevail.

In this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify you as an individual, including your name, email address, date of birth, identification documents, payment details, and account activity data.
• "Processing" means any operation performed on personal data, including collection, storage, organisation, structuring, use, disclosure, transfer, or deletion.
• "Data Controller" means jom33, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party engaged by jom33 to process personal data on its behalf (e.g., payment processors, KYC verification providers).
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification process applied to players as required for regulatory compliance and withdrawal processing.
• "Cookies" means small text files stored on your device by a website for purposes including session management, analytics, and user preference retention.
• "Platform" means the jom33 website and all associated services accessible at jom33.cam.

jom33 is the Data Controller in respect of all personal data collected and processed through the Platform. As Data Controller, jom33 is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with this Policy and applicable data protection legislation.

Where jom33 engages third-party Data Processors (such as payment gateways supporting Maybank2u, Touch 'n Go eWallet, DuitNow, and FPX, or identity verification service providers), jom33 ensures that appropriate data processing agreements are in place to govern the scope and security of such processing.

jom33 collects personal data from you in several ways depending on how you interact with the Platform. The categories of personal data we collect are described below.

4.1 Registration Data

When you create a jom33 account, we collect:

4.2 Identity Verification (KYC) Data

For KYC compliance and to process withdrawals, we collect:

4.3 Financial & Transaction Data

In connection with deposits and withdrawals, we collect:

4.4 Usage & Technical Data

When you browse or use the Platform, we automatically collect:

4.5 Support & Communication Data

When you contact our support team, we collect records of your communications, including the content of live chat transcripts, email correspondence, and any attachments submitted to us for support purposes.

jom33 uses your personal data for the following purposes:

jom33 processes your personal data on the following legal bases:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and service delivery.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including KYC and AML requirements, age verification, and regulatory reporting obligations imposed by our gaming licence conditions.
• Legitimate Interests: Processing is necessary for purposes of fraud prevention, platform security, responsible gambling monitoring, and general business analytics, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: For specific processing activities such as marketing communications, we rely on your freely given and revocable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jom33 does not sell, rent, or commercially transfer your personal data to any third party. We may share your personal data with the following categories of recipients in the circumstances described below:

7.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers to assist in delivering the Platform. These include payment processing providers supporting Malaysian methods such as Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, DuitNow, and FPX; identity verification and KYC providers; cloud hosting and data storage providers; fraud detection and security vendors; and customer support software providers. All such providers process data only on jom33's documented instructions under binding data processing agreements.

7.2 Regulatory & Law Enforcement Authorities

jom33 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or government authorities in response to lawful requests, court orders, or where disclosure is otherwise required by applicable law. Such disclosures are made only to the minimum extent necessary.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of jom33's business assets, personal data held by jom33 may be transferred to the acquiring entity, subject to the same protections as set out in this Policy. Players will be notified of any such change in control where required by applicable law.

jom33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

• Active Account Data: Retained throughout the period of your account being active and for a period of 5 years following account closure, in accordance with standard AML and gaming licence retention obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of collection or the date of account closure, whichever is later, as required by applicable regulatory frameworks.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction for financial audit and regulatory compliance purposes.
• Support Communications: Retained for up to 3 years following the resolution of a support query, or longer where the communication relates to an unresolved dispute.
• Marketing Consent Records: Retained for the duration of your opt-in consent and for 2 years following any withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

jom33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Encryption at rest for sensitive data stored in our databases, including KYC documents and payment identifiers.
• Password hashing using industry-standard algorithms — jom33 does not store passwords in plaintext.
• Role-based access controls restricting staff access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing conducted by independent third parties.
• Intrusion detection systems and real-time fraud monitoring across all Platform transactions.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely secure. Players are responsible for maintaining the confidentiality of their own account credentials. In the event of a data breach that poses a risk to your rights and freedoms, jom33 will notify affected users as required by applicable law.

jom33 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by the website you visit. We use the following categories of cookies:

• Essential Cookies: Strictly necessary for the operation of the Platform, including session management, login authentication, and security features. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and account display options, to provide a more personalised experience.
• Analytics Cookies: Used to collect anonymised data on Platform usage patterns, including pages visited, session duration, and error rates. This data is used solely to improve Platform performance and user experience.
• Fraud Prevention Cookies: Used to identify unusual access patterns and protect the Platform against fraudulent activity.

jom33 does not deploy third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings, though disabling essential cookies may affect your ability to use certain Platform features.

jom33 is an internationally operating platform and may transfer your personal data to servers or service providers located outside of Malaysia. Where such transfers occur, jom33 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections afforded under this Policy.

Safeguards used for international transfers include contractual clauses with data processors requiring compliance with applicable data protection standards, and selection of processors operating within jurisdictions that maintain adequate data protection frameworks.

Subject to applicable law, you have the following rights in respect of your personal data held by jom33. To exercise any of these rights, please contact our support team at [email protected] with your account username and a clear description of your request.

We will respond to data rights requests within 30 days of receipt, subject to identity verification. In complex cases, this period may be extended by a further 30 days, and you will be informed accordingly. Some rights may be subject to limitations where retention is required by legal obligation or legitimate regulatory purpose.

The jom33 Platform is strictly intended for persons aged 21 years and above. jom33 does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If jom33 discovers or reasonably suspects that personal data has been collected from an individual under the age of 21, the relevant Account will be immediately suspended, the data will be securely deleted, and any associated funds will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.

If you are a parent or guardian and believe that a minor in your care may have created a jom33 Account, please contact us immediately at [email protected].

jom33 may send you promotional communications regarding bonuses, new game launches, VIP programme updates, and platform news. Marketing communications are sent only where you have given your explicit opt-in consent during registration or subsequently through your Account settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by jom33.
• Updating your communication preferences within your Account settings.
• Contacting our support team at [email protected] and requesting removal from marketing lists.

Opting out of marketing communications does not affect your receipt of transactional and service-related messages, such as Account notifications, withdrawal confirmations, and security alerts. These communications are necessary for the operation of your Account and cannot be unsubscribed from while your Account remains active.

The jom33 Platform does not contain links to external third-party websites. However, certain functions of the Platform — such as payment processing via Malaysian providers including Touch 'n Go eWallet, Maybank2u, CIMB Clicks, DuitNow, and others — necessarily involve the transmission of limited data to those third-party processors.

jom33 is not responsible for the privacy practices of third-party payment processors, identity verification providers, or any other third-party service providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

All third-party processors engaged by jom33 are selected on the basis of their ability to demonstrate compliance with applicable data protection standards and are bound by contractual data processing obligations.

jom33 reserves the right to amend this Privacy Policy at any time. All amendments will be published on the Platform at this URL, with the date of the most recent revision shown at the top of this page.

Where an amendment is material — for example, where it significantly changes the purposes for which we process your data or your rights in relation to that data — jom33 will provide prior notice via in-platform notification and, where applicable, by email to the address registered on your Account.

Continued use of the Platform following the publication of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you should discontinue use of the Platform and may request Account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which jom33 processes your personal data, please contact our support team using the details below. All data-related enquiries should be submitted in writing to ensure they are properly tracked and responded to.

This Privacy Policy was last updated on 1 January 2026. Previous versions of this Policy are available upon written request.