Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by j2play (hereinafter "j2play", "we", "us", "our") and applies to all personal data collected, processed, stored, or otherwise handled in connection with the j2play online gaming and sports betting platform, accessible at https://j2play.cam (hereinafter "Platform"), including any associated mobile interfaces, sub-domains, and related services.

j2play operates as a premium online entertainment platform serving players across Malaysia, including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam. In the course of providing our services — which include live casino games, sports betting, lottery products, and MYR-denominated payment processing — we necessarily collect and process certain personal information relating to our Members.

We are committed to handling all personal data with the highest standards of care, transparency, and security. This Policy is designed to give you a clear and honest account of our data practices so you can make informed decisions about your use of the Platform.

By registering an account on j2play or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

j2play collects Personal Data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from trusted third-party verification partners as part of our KYC process.

3.1 Registration & Account Data

When you create a j2play account, we collect the following information:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (for age verification — j2play is strictly 21+)
• Email address
• Preferred username and encrypted password
• Preferred currency (Malaysian Ringgit — MYR)
• Country of residence

3.2 Identity Verification (KYC) Data

Prior to your first withdrawal, j2play requires identity verification. We collect copies of government-issued identification documents — specifically a Malaysian MyKad or valid passport. In certain circumstances, we may additionally request proof of address or source-of-funds documentation. These documents are processed by our KYC verification partner and are handled with the highest level of security.

3.3 Financial & Transaction Data

We collect transaction records relating to all deposits and withdrawals on the Platform. This includes the payment method used (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, or cryptocurrency), transaction amounts in MYR or applicable cryptocurrency, transaction timestamps, and reference numbers. We do not store full credit or debit card numbers.

3.4 Gaming & Betting Activity Data

We maintain records of your gaming and betting activity on the Platform, including games played, bets placed, wager amounts, outcomes, and session durations. This data is used for account management, responsible gambling monitoring, bonus tracking, and dispute resolution.

3.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, and session activity logs. This information is used for security monitoring, fraud prevention, and platform optimisation.

3.6 Communications Data

If you contact our support team via live chat or email at [email protected], we retain records of those communications — including timestamps, transcripts, and any attachments you provide — for quality assurance and dispute resolution purposes.

j2play uses the Personal Data we collect for the following purposes:

j2play processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract we have entered into with you — including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing is required for compliance with applicable legal obligations, including KYC/AML requirements and lawful authority requests.
• Legitimate interests: Processing is necessary for j2play's legitimate interests in preventing fraud, maintaining platform security, and improving our services, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as the basis for processing — for example, for certain marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

j2play does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

6.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process Personal Data on our behalf and strictly under our instruction. These include:

• Payment processors: Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), as well as cryptocurrency processing partners, receive transaction data solely for the purpose of processing your deposit or withdrawal.
• KYC verification providers: Our identity verification partner receives copies of your identification documents solely for the purpose of completing the mandatory KYC process.
• Platform technology providers: Software and infrastructure providers supporting the operation of the Platform may process technical and activity data as part of their service delivery.

All third-party Data Processors are contractually bound to process Personal Data only as instructed by j2play and to maintain appropriate security standards.

6.2 Legal & Regulatory Authorities

j2play may disclose Personal Data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful request. j2play will, where legally permissible, notify the affected Member of such a request.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving j2play, your Personal Data may be transferred to the acquiring entity as part of that transaction. In such circumstances, j2play will take reasonable steps to ensure your data continues to be protected in accordance with this Policy, and affected Members will be notified in advance.

j2play uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core functions such as session management, login state persistence, and security features. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: These remember your preferences — such as your preferred display settings or notification preferences — to provide a more personalised experience.
• Analytical cookies: We use anonymised analytics data to understand how Members interact with the Platform — which pages are visited most frequently, where errors occur, and how navigation flows can be improved. No personally identifiable information is contained in analytical data.
• Security cookies: Used to detect fraudulent activity and to protect both the Platform and Members from unauthorised access attempts.

You may control cookie settings through your browser's privacy controls. However, disabling strictly necessary cookies will affect your ability to use the Platform. j2play does not use third-party advertising cookies.

j2play retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised. Where data is anonymised rather than deleted, the resulting anonymised dataset no longer constitutes Personal Data and is not subject to this Policy.

j2play employs a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all connections between your device and the Platform, ensuring that data in transit cannot be intercepted.
• Encrypted storage of sensitive data at rest, including identity documents and financial records.
• Access controls limiting access to Personal Data to only those j2play personnel and authorised processors who genuinely require it to perform their role.
• Intrusion detection and monitoring systems operating continuously to identify and respond to unauthorised access attempts.
• Regular security assessments and penetration testing to identify and remediate vulnerabilities.
• Staff data protection training to ensure all personnel handling Personal Data understand their obligations.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, j2play will notify affected Members in accordance with applicable legal requirements and without undue delay.

As a Data Subject, you hold a number of rights in relation to your Personal Data. j2play is committed to facilitating the exercise of these rights promptly and without undue obstacle. Your rights include:

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will respond to all valid data subject requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reason for it.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where j2play is required by law to retain the data, such as KYC and transaction records retained for AML compliance purposes.

j2play's Platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory component of the account registration process and is rigorously enforced.

If j2play discovers that Personal Data has been collected from a person below the minimum age requirement, that account will be immediately closed, all associated data will be deleted in accordance with applicable law, and any funds held in the account will be returned to the deposit source following completion of any required compliance review.

If you have reason to believe that a minor has registered an account on the Platform, please contact our support team immediately at [email protected]. We take this matter extremely seriously and will investigate all such reports without delay. For information about responsible gambling tools available to protect young people, visit our Responsible Gambling page.

The j2play Platform integrates with third-party payment service providers — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX — to facilitate deposit and withdrawal transactions. When you initiate a payment transaction through any of these channels, you are engaging directly with that provider's payment interface, and that provider's own privacy policy governs the handling of data processed through their platform.

j2play is not responsible for the privacy practices of third-party payment providers or other third-party services. We recommend that you review the privacy policies of any third-party services you use in connection with your j2play account.

The j2play Platform does not contain links to external third-party websites for general browsing purposes. The only third-party interactions are those necessary to facilitate payment processing and identity verification as described above.

j2play reserves the right to update, modify, or replace any part of this Privacy Policy at any time in response to changes in applicable law, our data processing practices, or the services we provide. Where any amendment constitutes a material change to your rights or to how we use your Personal Data, we will provide advance notice — either via email to your registered address or via a prominent notice on the Platform — before the revised Policy takes effect.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you do not agree to the revised Privacy Policy, you may request voluntary account closure as described in our Terms & Conditions. We recommend that you review this Policy periodically to remain informed of how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the manner in which j2play handles your Personal Data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat feature on the Platform. Average first-response time is under 90 seconds.
• Email: [email protected] (plain text — not a hyperlink). Please include "Privacy Policy Enquiry" in your subject line. We aim to respond to all privacy-related email enquiries within 48 hours.

For data subject access requests, rectification requests, erasure requests, or any other exercise of data subject rights as described in Section 10, please clearly state the nature of your request when contacting us so we can route your enquiry appropriately and respond within the required timeframe.