Jiliraja Privacy Policy – Malaysian User Data Protection

Jiliraja collects two main types of information from users – information you provide directly and information collected automatically as you use the platform.

Information you provide directly:

• Full name, date of birth and gender upon account registration
• Email address and mobile number for communication and verification
• Residential address details for identity verification (KYC)
• Identity documents such as a national ID or passport for the KYC process
• Preferred payment method details for deposits and withdrawals
• Any information you share when contacting our customer support

Information collected automatically:

• IP address, device type, operating system, and browser type used
• Log data recording your activity on the platform, including games played and access times
• Cookie data that helps us personalise the platform experience for you
• General geolocation data for regional verification and account security purposes

Jiliraja uses collected data solely for legitimate purposes directly related to providing platform services. Below is a summary table outlining the purposes of data use:

Jiliraja does not use your data to make automated decisions that significantly affect you without human involvement. Every major decision, such as account closure or withdrawal suspension, involves a manual review by our team.

Jiliraja does not sell users' personal data to any third party. However, there are limited circumstances where data must be shared to ensure the platform operates safely and effectively:

• Payment service providers – to process your deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, and other methods
• KYC service providers – to verify your identity documents in order to meet compliance requirements
• Game providers – account information required to access games from third-party providers integrated within the platform
• Statutory authorities – when required by law or a valid court order

All third parties we work with are bound by strict confidentiality agreements and are required to protect your data to the same high standards as jiliraja itself.

User data security is something we take extremely seriously at jiliraja. We continuously invest in security infrastructure to ensure your information is always protected against potential threats.

Key security measures we have implemented:

• 256-bit SSL encryption for all data communications between client and server
• Passwords stored using one-way hashing with random salt – no one, including jiliraja staff, can view your password in plain text
• Two-factor authentication (2FA) available for all accounts as an additional security layer
• Real-time account activity monitoring to detect suspicious login patterns
• Periodic security audits by independent third parties to identify and address any vulnerabilities
• Strict internal access controls – jiliraja staff may only access data required for their specific role

Jiliraja uses cookies and similar technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies – required for the platform to function properly, including login sessions and language preferences. These cookies cannot be disabled.
• Performance cookies – collects information on how you use the platform to help us improve the overall experience
• Functional cookies – remembers your preferences such as display settings and game selections for a more personalised experience
• Analytical cookies – helps us understand aggregate platform usage patterns to make better-informed improvement decisions

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect overall platform functionality.

As a jiliraja user, you have full rights over your personal data. These rights can be exercised at any time by contacting our support team:

Jiliraja retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. Retention periods vary by data type:

• Active account data – retained for the duration of your active account plus the required period after account closure for compliance purposes
• Financial transaction records – retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements
• KYC Documents – retained for the duration of the active account and for the period stipulated by compliance requirements after account closure
• Log and analytics data – retained for up to 12 months in identifiable form, after which they are anonymised
• Customer Support Correspondence – retained for 3 years for reference and service improvement purposes

Once the retention period expires, data is securely deleted or anonymised so it can no longer be linked to any individual.

Jiliraja does not provide services to individuals under the age of 18. We do not knowingly collect or process personal data from minors. Strict age verification is enforced during registration to prevent underage use of the platform.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

Jiliraja reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any amendments take effect upon publication on our website.

For significant and material amendments, we will notify you via email or in-platform notification before the changes take effect. Continued use of the jiliraja platform after the effective date of such amendments constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Updated" date at the top of this document will always reflect the date of the latest amendment.