Privacy Policy jommega — Protection of Our Users' Personal Data

Welcome to jommega's Privacy Policy. This document explains in detail how jommega ("we", "the platform") collects, uses, stores, and protects your personal information when you use our platform — whether via the website jommega.com or the jommega mobile app.

We are committed to ensuring that every user's privacy is respected and protected. This Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices that we voluntarily uphold.

By registering and using Jommega's services, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, you are advised not to continue using the platform. If you have any questions, our support team is available 24 hours a day.

Jommega only collects information necessary to provide a safe, orderly, and quality service. The categories of data we collect include:

We do not collect sensitive information such as biometric data, political views, or religious affiliation. Your credit card details are not stored on jommega's servers — all payment processing is handled by registered and trusted third-party payment providers.

Your data is collected through several different channels:

• Account registration — Information you provided when creating a new account at jommega.
• Platform usage — Activities, games, and transactions carried out while you are logged in.
• Identity verification (KYC) — Documents you submitted during the account verification process.
• Support communications — Conversations you have had with our customer support team.
• Cookies and similar technologies — Technical data collected automatically via your browser or app.
• Payment providers — Transaction information shared by payment providers when you make a deposit or withdrawal.

Jommega processes your personal information only for legitimate, clearly stated purposes. The primary purposes for processing your data include:

• Account management — Create, verify, and maintain your account on the jommega platform.
• Contract fulfilment — Process deposits, withdrawals, and all related financial transactions.
• Legal compliance — Fulfil obligations under the PDPA, anti-money laundering (AML) requirements, and KYC procedures.
• Fraud detection — Identify, investigate, and prevent fraudulent activity or platform abuse.
• Service improvement — Analyse usage patterns to improve platform quality and user experience.
• Marketing communications — Send relevant promotional information and offers (with your consent only).
• Customer Support — Handle your enquiries, complaints, and requests for assistance.

We will not process your data for any purposes beyond those stated above without first obtaining your consent.

Jommega does not sell, rent, or trade your personal information to any third party. However, under certain circumstances, we may share data with the following parties on a legitimate need basis:

• Payment providers — DuitNow, FPX, Touch 'n Go, Boost, GrabPay, and other payment partners required to process your transactions.
• Game providers — Limited information required by game software providers to enable access to their games.
• Statutory Authority — Where required by court order, police investigation, or other valid legal obligation.
• IT service providers — Hosting companies, software developers, and cybersecurity providers that help operate our platform, subject to strict confidentiality agreements.

Jommega invests seriously in security infrastructure to ensure your personal data is always protected. The technical and organisational security measures we practise include:

• 256-bit SSL encryption for all data transmitted between your device and jommega's servers.
• Data encryption at rest for sensitive information including passwords (stored in hashed form) and KYC documents.
• Role-based access control ensuring that only authorised personnel can access user data, and only to the extent required for their duties.
• 24/7 security monitoring by automated intrusion detection systems and the IT security team.
• Regular security audits by independent third parties to identify and address any system vulnerabilities.
• Two-factor authentication (2FA) available for all accounts as an added layer of security.

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. Should any security incident involving user data occur, we will notify affected users within a reasonable timeframe as required by law.

As a jommega user, you have the following rights regarding your personal data under Malaysia's PDPA and jommega's policies:

Jommega uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns. The types of cookies we use:

• Essential Cookies — Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Preference Cookies — Save your preferences such as language and display settings for convenience on future visits.
• Analytics Cookies — Helps us understand how users interact with the platform for improvement purposes. Data is collected in aggregate and without identifying information.
• Functional Cookies — Enables certain features such as live support chat to function properly.

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies may affect platform functionality. For more details on the cookies we use, refer to the Cookie Settings page in your account dashboard.

The jommega platform is intended for users aged 18 and above only. We do not knowingly collect, process, or store personal information from individuals under the age of 18.

If we find that we have collected data from a minor, we will take immediate action to delete that information and close the account in question without notice. If you believe we may be holding data from a minor, please contact us immediately.

Jommega retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by law:

• Active account data — Retained for as long as your account is active and for a set period after account closure as required by the PDPA.
• Financial transaction records — Retained for a minimum of 7 years in accordance with Malaysia's tax and financial regulatory requirements.
• KYC Documents — Retained for the period mandated by applicable anti-money laundering regulations.
• Support communication logs — Retained for 2 years for reference and dispute resolution purposes.
• Analytics data — Collected anonymously and may be retained indefinitely in aggregate form.

Once the designated retention period has ended, your data will be securely deleted or anonymised using industry-standard procedures.

Jommega reserves the right to update or amend this Privacy Policy from time to time when changes in laws, industry practices, or our business operations require a policy update.

When we make significant changes to this Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the home page or your account dashboard.
• Sending email notifications to all registered users (for significant changes).

Continued use of the jommega platform after any Privacy Policy changes take effect will be considered your acceptance of the updated version. We recommend reviewing this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact jommega's Data Protection Officer (DPO) through the following channels: