Privacy Policy

We recognise that privacy is a fundamental right. Every Malaysian player who chooses to open a Jayabaji account is placing a degree of trust in us — trust we take seriously. This Policy explains, in plain and practical terms, exactly how your information is handled from the moment you first visit our website to the point at which your account is closed and your data is securely erased.

We recognise that privacy is a fundamental right. Every Malaysian player who chooses to open a Jayabaji account is placing a degree of trust in us — trust we take seriously. This Policy explains, in plain and practical terms, exactly how your information is handled from the moment you first visit our website to the point at which your account is closed and your data is securely erased.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. By using the Platform, you confirm that you have read and accepted the terms of this Policy.

The following terms carry specific meanings throughout this Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, transmission, erasure, or destruction.
• "Data Controller" means Jayabaji, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of Jayabaji under a data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their Personal Data for a stated purpose.
• "KYC Data" means identity and age verification documents including government-issued ID, proof of address, and payment method evidence, required for regulatory compliance.
• "Cookies" means small data files placed on your device by the Platform to enable functionality, remember preferences, and support analytics.

Jayabaji collects Personal Data across several categories depending on how you interact with the Platform. The table below summarises what we collect and why:

Your Personal Data is collected through the following channels:

• Direct input: Information you voluntarily provide when registering, completing KYC, making deposits or withdrawals, claiming bonuses, contacting support, or filling in any Platform form.
• Automated technologies: Cookies, web beacons, and server logs that passively collect technical and usage data as you interact with the Platform. See Section 10 for full cookie details.
• Payment processors: When you transact via Maybank2u, CIMB Clicks, FPX, DuitNow, Touch 'n Go eWallet, GrabPay, or Boost, those processors may share transaction confirmation data with us for reconciliation purposes.
• Third-party verification services: Identity verification and fraud screening partners may provide confirmation data in response to our KYC checks.
• Responsible gambling tools: Data generated when you set deposit limits, activate cooling-off periods, or request self-exclusion is recorded as part of our duty of care obligations.

Jayabaji relies on the following legal bases to process your Personal Data, depending on the processing activity in question:

• Contractual Necessity: Processing required to deliver the services you have requested, including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, age verification obligations, and licensing requirements imposed by our operating licence authority.
• Legitimate Interests: Processing in our legitimate business interests, such as fraud prevention, security monitoring, platform performance analytics, and responsible gambling monitoring — provided those interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent — such as for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Your Personal Data is used by Jayabaji for the following specific purposes:

• Account creation and management: Setting up, maintaining, and securing your Jayabaji member account throughout its lifetime.
• Identity and age verification: Confirming that you are who you say you are, and that you meet the 21+ age requirement, in compliance with our licensing obligations.
• Payment processing: Facilitating deposits and withdrawals through your preferred Malaysian payment method — including MYR transactions via DuitNow, FPX, Maybank2u, CIMB Clicks, TNG eWallet, Boost, and GrabPay.
• Customer support: Responding to queries, resolving disputes, and providing account assistance through live chat, email, and our internal ticketing system.
• Fraud prevention and security: Detecting and preventing unauthorised access, money laundering, bonus abuse, multi-accounting, and other fraudulent activity.
• Responsible gambling monitoring: Identifying behavioural patterns that may indicate problem gambling and proactively engaging players who may benefit from support tools.
• Marketing communications: Sending promotional emails, SMS, or push notifications about bonuses, new game releases, Liga Super Malaysia specials, EPL promotions, and other offers — only where you have given consent or where permitted under legitimate interests.
• Platform improvement: Analysing usage patterns to improve site navigation, game lobby performance, mobile experience, and payment flow.
• Regulatory compliance: Maintaining transaction records, KYC files, and correspondence logs as required by applicable gaming and financial regulations.

Jayabaji does not sell, rent, or trade your Personal Data to third parties for their own commercial use. Data sharing is limited strictly to the following categories of recipient:

• Payment service providers: Banks, e-wallet operators, and payment gateways processing your MYR transactions (e.g., Maybank, CIMB, FPX network participants, TNG eWallet, DuitNow infrastructure providers) receive only the data necessary to complete the transaction.
• Game and content studios: Licensed third-party game providers integrated into our lobby receive anonymised session data (e.g., bet amounts, game outcomes) for game integrity purposes; they do not receive your identity data.
• KYC and fraud screening partners: Specialist identity verification and AML screening services process your KYC documents under strict data processing agreements with Jayabaji.
• IT infrastructure providers: Cloud hosting, CDN, and security providers that process data solely as instructed by Jayabaji and are prohibited from independent use of that data.
• Regulatory and legal authorities: Where required by law, court order, or the direction of a competent authority, we may disclose Personal Data. We will inform you of any such disclosure where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and insurers, where strictly necessary and subject to confidentiality obligations.

We retain Personal Data for as long as your account remains open and for defined period thereafter, in accordance with the following schedule:

• Active account data: Retained throughout the lifetime of your account. Account closure does not trigger immediate deletion — see below.
• Post-closure retention: Following account closure, identity, KYC, and transaction records are retained for a minimum of five (5) years to satisfy AML, gaming licence, and financial regulatory obligations.
• Marketing data: Retained until you withdraw consent or opt out of marketing. Opt-out is actioned within 10 business days.
• Support and correspondence data: Retained for three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
• Technical and usage logs: Anonymised or deleted within twelve (12) months unless required for an ongoing security or compliance investigation.

When data reaches the end of its retention period, it is either securely deleted using certified erasure methods or anonymised so that it can no longer be attributed to any individual.

As a Jayabaji player, you have the following rights in respect of your Personal Data. To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond within 30 days of receiving a valid request.

Where a request to exercise any of the above rights is denied — for example, because it conflicts with a legal retention obligation — we will explain the reason clearly in writing.

Jayabaji uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for core Platform functionality — login sessions, security tokens, payment flow state. These cannot be disabled without impairing your experience.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and lobby layout choices. These enhance convenience but are not essential.
• Analytics Cookies: Collect anonymised data on how players navigate the Platform — which pages are visited most, where users drop off in registration, and how games are discovered. We use this data to improve the product.
• Security and Fraud Prevention Cookies: Help us detect bot activity, multiple account attempts, and other abnormal usage patterns that may indicate fraudulent behaviour.

On your first visit to jayabaji.cam, you will be presented with a cookie consent banner. You may accept all categories or configure your preferences. You can also manage cookies at any time via your browser settings; however, disabling strictly necessary cookies will prevent core functions from operating correctly.

Protecting your Personal Data is a core operational priority for Jayabaji. We maintain the following technical and organisational security measures:

• 256-bit SSL/TLS encryption on all data transmissions between your device and our servers — the same standard used by major Malaysian banks including Maybank, CIMB, and Public Bank.
• Data encryption at rest for sensitive Personal Data and KYC documents stored on our servers.
• Two-factor authentication (2FA) available on all player accounts as an additional layer of access protection.
• Role-based access controls ensuring that only authorised Jayabaji personnel with a specific operational need can access player data, with all access events logged.
• Real-time fraud monitoring that flags anomalous transactions, login attempts from unfamiliar locations, and other indicators of account compromise.
• Regular third-party security audits and penetration testing conducted by independent cybersecurity specialists.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Jayabaji will notify affected players without undue delay and, where required, will report the breach to the relevant supervisory authority within 72 hours of becoming aware of it.

Jayabaji is an adult-only platform. We do not knowingly collect or process Personal Data from individuals under the age of 21. Our registration process includes mandatory age declaration and our KYC process requires government-issued identification confirming date of birth before full account access is granted.

If we become aware that Personal Data has been inadvertently collected from a person under 21, we will immediately suspend the relevant account, delete the associated data, and return any deposited funds in accordance with our underage account procedure.

Jayabaji reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, we will notify registered players by email at least 14 days before the changes take effect, and will display a prominent notice on the Platform.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Your continued use of the Platform after a policy update takes effect constitutes your acceptance of the revised terms. If you do not agree with the changes, please close your account before the effective date.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Jayabaji handles your Personal Data, please get in touch through any of the following channels:

For formal data subject access requests or erasure requests, please email us with the subject line "Data Rights Request" and include your registered email address and a brief description of your request. We will respond within 30 days.