Privacy Policy juara404 – Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") is published by juara404 and applies to all users who access or use the juara404.best platform and all related services provided by juara404 to Malaysian players.

Juara404 takes our responsibility to protect your privacy seriously. We understand that when you provide us with personal information during registration or while using the platform, you are placing your trust in us. We honour that trust through the strict implementation of appropriate technical and organisational measures.

This policy is in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant subsidiary regulations. Any changes to Malaysian data protection law that affect our practices will be reflected in an update to this Privacy Policy within a reasonable timeframe.

Juara404 collects various types of personal data depending on how you use the platform. The categories of data we collect are as follows:

Juara404 collects your personal data through the following methods:

• Account Registration: When you complete the juara404 registration form, you provide basic information such as your name, email address, Malaysian phone number, and date of birth directly.
• Identity Verification (KYC): During the account verification process or when required for security purposes, you may be asked to upload a photo of your MyKad or passport along with a selfie for identity verification.
• Financial Transactions: Each time you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or any other Malaysian payment method, transaction information is collected automatically.
• Platform Usage: juara404's systems automatically record all activity on the platform, including bets placed, games played, and login and logout times.
• Cookies and Similar Technologies: The juara404 platform uses cookies and similar tracking technologies to collect usage data that helps us improve your experience.
• Customer Support Communications: When you contact the juara404 support team via live chat or email, those conversations are recorded for quality and security purposes.

Juara404 uses collected personal data solely for legitimate purposes permitted under Malaysian law. The primary purposes are as follows:

• Service Provision: Processing account registrations, deposits via Malaysian e-wallets, withdrawals, and all Sports Betting and casino wagering activity on the juara404 platform.
• Identity & Age Verification: To verify that all juara404 members are valid individuals aged 18 and above who meet all applicable eligibility requirements.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and platform abuse.
• Customer Support: To enable juara404's support team to provide effective assistance to members regarding their accounts, transactions, and technical issues in Bahasa Malaysia.
• Platform Improvements: Analysing platform usage patterns to identify areas for improvement and enhance the overall experience for Malaysian players.
• Service Communications: Sending important notifications regarding your account, transactions, terms changes, and security updates via email or SMS to your Malaysian phone number.
• Legal Compliance: Meeting reporting and disclosure obligations required under Malaysian law, including PDPA 2010 and anti-money laundering regulations.
• Responsible Gaming: To monitor gaming patterns in order to identify members who may need responsible gaming support and to provide appropriate assistance.

Juara404 does not sell, rent, or disclose your personal data to third parties for their own commercial or marketing purposes. However, in certain limited situations, juara404 may need to share some of your data with third parties that are necessary to deliver our services:

• Malaysian Payment Processors: Required transaction information is shared with payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and Malaysian banks offering FPX services, solely for the purpose of processing your transactions.
• Technical Service Providers: Companies providing juara404 with technical infrastructure, server hosting, and cybersecurity services may have limited access to data as necessary to carry out their functions.
• Regulatory Bodies & Authorities: juara404 will disclose personal data to Malaysian authorities where required by law, court order, or direction from a legitimate enforcement body.
• Audit & Compliance: Independent third-party audit bodies that verify the fairness of juara404's games and RNG compliance may have limited access to data strictly for audit purposes.

In all cases where data is shared with third parties, juara404 ensures that those parties are bound by strict confidentiality agreements and may only use the data for the specified purpose. All relevant third parties are assessed and verified for data protection compliance before any data sharing takes place.

Juara404 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. The key measures we have in place are:

• Data Encryption in Transit: All data transmitted between your browser and juara404's servers is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate. Your browser's address bar will display a padlock icon confirming a secure connection.
• Data Encryption at Rest: Sensitive data, including identity and financial information stored in juara404's databases, is encrypted using AES-256 standards.
• Strict Access Controls: Access to members' personal data within juara404's internal systems is restricted to staff with a legitimate and verified business need. All access is logged and monitored.
• Two-Factor Authentication (2FA): juara404's internal systems require two-factor authentication for all staff who access user data. We also encourage members to enable 2FA on their accounts.
• Regular Security Audits: juara404's system security is regularly audited by independent third-party information security experts to identify and address any potential vulnerabilities.
• Incident Response Plan: juara404 has a comprehensive incident response plan in place. In the event of a data breach affecting members' personal information, we will notify affected members and the relevant authorities within the timeframe required by Malaysian law.

The juara404 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and collect usage data that helps us continuously improve the platform. The types of cookies we use are as follows:

• Essential Cookies (Required): These cookies are required for core platform functions such as login authentication, session management, and security. Without them, the platform will not function properly. These cookies cannot be disabled.
• Functional Cookies: These cookies store your preferences such as language, display currency, and other settings to deliver a more personalised and consistent experience each time you visit juara404.
• Analytics Cookies: We use analytics cookies to understand how Malaysian players interact with the juara404 platform — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This information helps us continuously improve the platform.
• Security Cookies: These cookies help juara404's systems identify suspicious activity and protect your account from unauthorised access by detecting unusual usage patterns.

You can manage your cookie settings through your browser settings. However, disabling essential cookies may affect the functionality of the juara404 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by juara404:

• Right of Access: You have the right to request a copy of the personal data held by juara404 about you. Such requests will be processed within 21 business days from the date a complete request is received.
• Right to Rectification: If you find that personal data held by juara404 about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Some information can be updated directly through your account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. However, juara404 may need to retain some data for a specified period for legal compliance and fraud prevention purposes.
• Right to Object to Processing: You may object to the processing of your data for direct marketing purposes at any time. For other purposes, the right to object is subject to specific circumstances.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to that point.

Juara404 retains your personal data for as long as necessary to fulfil the purposes outlined in this Policy, or for as long as required by Malaysian law. Our data retention policy is as follows:

• Active Account Data: For as long as your account remains active with juara404, your personal data and usage records will be retained to enable the continued provision of our services.
• Financial Transaction Records: All deposit and withdrawal transaction records processed via Malaysian e-wallets and FPX bank transfers are retained for a minimum of 7 years, in line with financial reporting and anti-money laundering requirements under Malaysian law.
• Data After Account Closure: Following voluntary account closure, basic account information is retained for 5 years for legal compliance purposes and to prevent re-registration in breach of our terms. After this period, the data will be securely deleted.
• Support Communication Data: Customer support conversation records are retained for 2 years from the date of the last interaction, for quality assurance and historical reference purposes.
• Identity Verification (KYC) Data: Identity verification documents such as MyKad photos collected during the KYC process are retained for the period required under Malaysia's anti-money laundering legislation.

Your personal data is primarily processed and stored on servers located within the Asian region. In certain circumstances, data may be transferred to or processed in other countries that provide an equivalent or higher level of data protection than Malaysia.

Whenever data is transferred outside Malaysia, juara404 ensures that such transfers are protected by appropriate mechanisms, including data transfer agreements that comply with Malaysia's PDPA standards and applicable international standards. We do not transfer data to countries without adequate data protection without additional safeguards in place.

The juara404 platform is strictly for individuals aged 18 and above. juara404 does not knowingly collect personal data from any individual under the age of 18.

All registrants are required to confirm that they are 18 years of age or older at the time of registration. Our identity verification process is designed to identify and block registrations by underage individuals. Should juara404 discover that personal data of a person under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian who believes your minor child has registered or attempted to register with juara404, please contact us immediately at support@juara404.best with the relevant details and we will take appropriate action without delay.

Juara404 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, current legal requirements, or technological developments. The date of the most recent update will always be displayed at the top of this document.

For material amendments — that is, significant changes that affect how we use your data or your rights — juara404 will provide clear notice to members via their registered email address or a prominent in-platform notice at least 14 days before the changes take effect. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Policy.

If you have any questions, concerns, or complaints regarding juara404's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

• Email (Privacy Enquiries): support@juara404.best – state "Privacy Policy Enquiry" in the subject line to expedite processing. Usual response time is 1–3 business days.
• 24/7 Live Chat: Available on the juara404 platform – ideal for general privacy and data enquiries. Average response time under 2 minutes.

Our team handles all privacy enquiries with complete confidentiality and professionalism. We are committed to responding to every privacy-related complaint within 21 business days of receipt, in line with Malaysia's PDPA 2010 requirements.

If you are not satisfied with how juara404 has handled your privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia or the relevant authority under Malaysian law.