Privacy Policy
for joylink365 Players

PDPA-Aligned Effective 1 Jan 2026 Malaysia

1. Introduction

This Privacy Policy ("Policy") governs how joylink365 ("we", "us", "our") collects, processes, stores, and discloses personal data obtained from individuals ("you", "the Player") who access or use the joylink365 platform at https://joylink365.lat and any related mobile applications or services.

joylink365 is committed to safeguarding the privacy and confidentiality of our players across Malaysia — whether you are accessing us from Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Bangsar, or anywhere else in the country. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

If you do not agree with any part of this Policy, please discontinue use of the platform and contact us to close your account and request deletion of your data where applicable.

2. Data Controller

For the purposes of the PDPA and this Policy, joylink365 acts as the data controller in respect of personal data submitted through the platform. We are responsible for deciding the purposes for which personal data is collected and the manner in which it is processed.

All data processing activities are carried out by joylink365 or by carefully vetted third-party service providers acting under our instruction and bound by strict data processing agreements.

3. Data We Collect

joylink365 collects personal data in several ways: directly from you when you register or use our services, automatically when you interact with the platform, and occasionally from third-party verification providers. The categories of data we collect include:

3.1 Registration & Identity Data

• Full legal name as per your Malaysian identity card (MyKad) or passport
• Date of birth (to verify you are aged 21 or above)
• Email address and contact number
• Residential address (including postcode and state within Malaysia)
• Username and account credentials (password stored in hashed form only)
• Copies of identity documents submitted during KYC (Know Your Customer) verification

3.2 Financial & Transaction Data

• Bank account details for payment processing (e.g., Maybank, CIMB, Public Bank, RHB, Hong Leong Bank)
• eWallet identifiers (e.g., Touch n Go eWallet, Boost) where used for deposits or withdrawals
• Transaction history including deposits, withdrawals, and gaming activity
• Cryptocurrency wallet addresses where applicable

3.3 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session logs, page views, and feature interaction records
• Referring URLs and traffic source data

3.4 Communications Data

• Records of support interactions via live chat, WhatsApp, or email
• Survey responses and feedback you voluntarily submit
• Any other correspondence you send to joylink365

4. How We Use Your Data

joylink365 processes personal data only for specified, explicit, and legitimate purposes. We rely on one or more of the following lawful bases for each processing activity:

• Performance of contract — to provide the gaming and sportsbook services you have requested, process deposits and withdrawals, and manage your account.
• Legal obligation — to comply with anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, age verification, and any applicable Malaysian law.
• Legitimate interests — to detect and prevent fraud, maintain platform security, improve our services, and carry out analytics to understand how players use joylink365.
• Consent — to send you promotional communications, personalised offers, or to use optional cookies, where you have explicitly given us permission to do so.

Specifically, we use your data to: verify your identity and age; process your financial transactions in Malaysian Ringgit (MYR); administer bonuses such as cashback promotions; detect suspicious activity; provide 24/7 multilingual customer support; personalise your experience on the platform; and comply with our obligations under applicable law.

5. Sharing of Personal Data

joylink365 does not sell or rent your personal data to any third party. We may share data with carefully selected categories of recipient only where necessary:

• Payment processors and banking partners — to facilitate deposits and withdrawals through Malaysian banks and eWallet providers. These partners are bound by their own regulatory obligations and our data processing agreements.
• Identity verification providers — to carry out KYC and AML checks as required by applicable compliance frameworks.
• IT and infrastructure providers — including cloud hosting and security service providers who process data solely on our behalf under strict contractual controls.
• Regulatory and law enforcement authorities — where we are legally compelled to disclose data, for example in response to a court order or regulatory investigation.
• Responsible gaming support organisations — where you have requested a self-exclusion or referral to a support service, with your knowledge.

6. Cookies & Tracking Technologies

joylink365 uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve your experience. Cookies are small text files stored on your device. We use the following categories:

• Strictly necessary cookies — essential for login sessions, security tokens, and core platform functionality. These cannot be disabled.
• Performance cookies — used to gather anonymised analytics data about how players navigate the platform, helping us identify areas for improvement.
• Functional cookies — used to remember your preferences such as language and display settings.
• Marketing cookies — used only where you have consented, to deliver relevant promotional content related to joylink365 services.

You can manage cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of the joylink365 platform.

7. Security Measures

joylink365 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers
• AES-256 encryption for sensitive data stored at rest
• Multi-factor authentication (MFA) options for player accounts
• Regular penetration testing and vulnerability assessments
• Role-based access controls limiting internal staff access to personal data
• Continuous monitoring for suspicious activity and automated breach detection

While we apply industry-leading security standards, no system is entirely immune to risk. We encourage players to use strong, unique passwords and to enable MFA on their joylink365 accounts for an additional layer of protection.

8. Data Retention

joylink365 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Malaysian law. Our retention schedules are as follows:

• Account and identity data — retained for the duration of your account relationship plus a minimum of five (5) years after account closure, to meet AML and KYC regulatory requirements.
• Transaction records — retained for a minimum of seven (7) years in compliance with applicable financial record-keeping laws.
• Support communications — retained for up to three (3) years from the date of the interaction.
• Marketing consent records — retained until you withdraw consent, plus a short period thereafter to evidence compliance.
• Technical logs — typically retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or rendered irrecoverably anonymous.

9. Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by joylink365:

• Right of access — you may request a copy of the personal data we hold about you.
• Right of correction — you may request that we correct any inaccurate or incomplete personal data.
• Right to withdraw consent — where processing is based on your consent (e.g., for marketing communications), you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to limit processing — in certain circumstances, you may request that we restrict the processing of your data, for example while a correction request is being assessed.
• Right to data portability — where technically feasible, you may request that we provide your data in a structured, machine-readable format.

To exercise any of these rights, please contact our Data Protection team. We will respond to verified requests within thirty (30) days. We may need to verify your identity before processing your request to protect against unauthorised access.

Please note that certain rights may be subject to exceptions or limitations under Malaysian law, for example where data retention is mandated by AML or other regulatory requirements.

10. Minors & Age Restriction

If we discover that personal data of a person under the age of 21 has been collected, we will promptly close the associated account, forfeit any balances in accordance with our Terms & Conditions, and delete the personal data without undue delay. If you believe a minor has registered on our platform, please contact us immediately at [email protected].

11. International Data Transfers

joylink365's primary data infrastructure is hosted within secure data centres. Certain third-party service providers (such as cloud infrastructure or KYC verification partners) may process your data in jurisdictions outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to apply equivalent data protection standards
• Selection of recipients located in jurisdictions with adequacy determinations or equivalent protections
• Regular due diligence reviews of third-party data handling practices

By using joylink365, you acknowledge that your data may be processed in other countries as described above, subject always to the protections described in this Policy.

12. Changes to This Policy

joylink365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operations, legal requirements, or best practice. When we make material changes, we will notify registered players via email or a prominent in-platform notice at least fourteen (14) days before the changes take effect.

The "Effective Date" at the top of this Policy indicates when the current version was last updated. Continued use of the joylink365 platform after the effective date of any revision constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically to stay informed.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way joylink365 handles your personal data, please reach out to our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the joylink365 platform
• WhatsApp: Available 24/7 — contact details provided upon account login
• Response time: We aim to acknowledge all privacy-related enquiries within 72 hours and resolve them within 30 days.

If you remain dissatisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (JPDP), which oversees enforcement of the PDPA.