Introduction
This Privacy Policy ("Policy") sets out the data protection and privacy practices of jstar888 ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://jstar888.cam ("Platform"). This Policy applies to all players, registered users, and visitors ("you", "your") who access or use the Platform in any capacity.
jstar888 takes the protection of personal data seriously. We are committed to handling your personal information with integrity, transparency, and in accordance with applicable data protection laws and our obligations as an internationally licensed gaming operator.
By registering an Account, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the Platform.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, including name, identification number, contact details, IP address, and payment information. |
| "Data Controller" | jstar888, as the entity that determines the purposes and means by which your Personal Data is processed. |
| "Data Processor" | Any third party that processes Personal Data on behalf of jstar888 under a contractual arrangement. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose. |
| "KYC" | Know Your Customer — the identity, age, and source-of-funds verification process required to comply with regulatory obligations. |
| "Cookies" | Small text files placed on your device by the Platform to store session information, preferences, and analytical data. |
Data We Collect
jstar888 collects the minimum Personal Data reasonably necessary to provide the services described on the Platform. The categories of data we may collect include, but are not limited to, the following:
3.1 Identity and Contact Information- Full legal name as appearing on government-issued identification
- Date of birth (to verify the21+ age requirement)
- Residential address, city, and country of residence
- Email address and mobile telephone number
- Copies of identity documents submitted for KYC purposes (e.g., Malaysian IC, passport)
- Payment method details (e.g., Touch 'n Go eWallet account reference, GrabPay account reference, bank account details for FPX and DuitNow transactions, Maybank / CIMB / Public Bank account identifiers)
- Deposit and withdrawal transaction history, including amounts MYR and timestamps
- Cryptocurrency wallet addresses where applicable (BTC, ETH, USDT, BNB)
- Username, Account ID, and login history
- Game participation records, bet history, and wagering activity
- Sports betting selections and stakes
- Bonus and promotion redemption history
- Responsible gambling tool settings (deposit limits, self-exclusion status)
- IP address and approximate geographic location derived therefrom
- Device type, operating system, and browser type and version
- Session duration, page visits, and interaction logs
- Cookie identifiers and similar tracking technologies
- Content of messages sent to jstar888 via live chat, email, or support ticket systems
- Records of complaints, dispute submissions, and their resolutions
How We Collect Your Data
jstar888 collects your Personal Data through the following means:
- Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions, you provide Personal Data to us directly.
- Automatically through the Platform: Technical and device data including IP address, session logs, and cookie data is collected automatically when you access the Platform.
- From payment service providers: When you transact via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, or other integrated payment methods, we may receive transaction confirmation data from those providers.
- From identity verification services: During KYC, we may use third-party identity verification services to validate the authenticity of documents you submit. These services return verification outcomes to jstar888 but do not retain copies of your documents under our data processing agreements.
- From fraud prevention and analytics providers: We may receive risk scoring or behavioural signals from our fraud detection partners to protect the security of the Platform and all users.
Legal Basis for Data Processing
jstar888 processes your Personal Data only where we have a lawful basis to do so. The applicable legal bases for our data processing activities are as follows:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and maintenance | Performance of contract — necessary to provide the gaming service you have requested |
| Processing deposits and withdrawals in MYR | Performance of contract — necessary to execute financial transactions |
| KYC identity and age verification | Legal obligation — required to comply with applicable regulations and our operating licence |
| Anti-money laundering and fraud detection | Legal obligation and legitimate interests — required by law and necessary to protect the Platform |
| Responsible gambling monitoring and intervention | Legal obligation and legitimate interests — required by our regulatory obligations and duty of care |
| Customer support communications | Performance of contract and legitimate interests — necessary to resolve enquiries |
| Promotional and marketing communications | Consent — only where you have opted in to receive such communications |
| Platform analytics and improvement | Legitimate interests — to improve the functionality and user experience of the Platform |
How We Use Your Personal Data
jstar888 uses your Personal Data for the following specific purposes:
- To create, manage, and maintain your registered Account on the Platform
- To verify your identity and age as part of the KYC process, including confirming the 21+ age requirement
- To process deposits via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and supported cryptocurrencies
- To process withdrawal requests to your verified payment method in MYR
- To provide access to casino games, sports betting markets, live football betting, and other Platform services
- To administer bonuses, promotions, VIP tier benefits, and the referal programme
- To monitor gaming activity for responsible gambling purposes, including applying self-imposed limits and self-exclusion restrictions
- To detect, investigate, and prevent fraudulent, abusive, or prohibited activities on the Platform
- To comply with anti-money laundering obligations, financial crime reporting requirements, and applicable regulatory mandates
- To respond to your support queries, complaints, and dispute submissions
- To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts
- To send promotional communications where you have provided consent, including information about new games, bonuses, and tournaments
- To improve the performance, stability, and user experience of the Platform using aggregate analytical data
Data Sharing & Disclosure
jstar888 does not sell, rent, or trade your Personal Data to any third party. We may share your data with carefully selected third-party service providers and, where legally required, with regulatory or law enforcement authorities, strictly under the conditions described below.
7.1 Service Providers and Data ProcessorsWe engage trusted third-party vendors to perform certain operational functions on our behalf. These include payment processing partners (including Malaysian e-wallet providers and banking institutions), KYC and identity verification services, fraud detection and risk management providers, customer support software operators, and cloud infrastructure and hosting providers. All such third parties are contractually obligated to process your data only in accordance with our instructions and this Policy, and to maintain appropriate security standards.
7.2 Legal and Regulatory Disclosurejstar888 may disclose your Personal Data to competent authorities — including regulatory bodies, law enforcement agencies, financial intelligence units, or courts of law — where required by applicable law, court order, regulatory directive, or where jstar888 has a reasonable and good-faith belief that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of jstar888; (c) prevent or investigate possible wrongdoing in connection with the Platform; or (d) protect the personal safety of Platform users or the public.
7.3 Business TransfersIn the event of a merger, acquisition, asset sale, or restructuring involving jstar888 or any part of its business, your Personal Data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and any material change to this Privacy Policy that results therefrom.
Data Retention
jstar888 retains your Personal Data for as long as your Account remains active and for such additional periods as are required by applicable law or regulatory obligation. The following general retention principles apply:
- Active Account data: Retained for the duration of your Account registration and service relationship with jstar888.
- KYC and identity verification records: Retained for a minimum of five (5) years following Account closure, in compliance with applicable anti-money laundering legislation.
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations.
- Communication and support records: Retained for a minimum of three (3) years from the date of the last relevant communication.
- Technical and log data: Typically retained for twelve (12) months for security monitoring and fraud prevention purposes, then anonymised or deleted.
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in manner that prevents re-identification. Where anonymisation is not technically feasible, data will be disposed of using industry-standard secure deletion methods.
Cookies & Tracking Technologies
jstar888 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain session continuity, and analyse aggregate Platform usage patterns.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for Platform operation, authentication, and session management. Cannot be disabled. | Session |
| Functional | Stores your preferences such as language, display settings, and Platform layout choices. | Up to 12 months |
| Analytical | Collects aggregate data on page visits, navigation paths, and feature usage to help improve the Platform. | Up to 24 months |
| Security | Used for fraud detection, bot prevention, and identifying suspicious activity patterns. | Session to 30 days |
You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may impair certain Platform functionality, including the ability to maintain a logged-in session. For detailed cookie management instructions, refer to the help documentation of your browser.
Data Security
jstar888 implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes, but is not limited to:
- 256-bit SSL/TLS encryption for all data in transit between your device and our servers
- Encryption of Personal Data and financial records stored in our databases at rest
- Role-based access control ensuring that only authorised personnel with a specific operational need may access Player data
- Multi-factor authentication requirements for internal system access by jstar888 staff
- Regular penetration testing and independent security audits of the Platform infrastructure
- Automated intrusion detection and threat monitoring systems operating around the clock
- Data segmentation ensuring that Player financial data is isolated from operational systems
While jstar888 employs industry-leading security practices, no digital system can be guaranteed completely secure against all threats. You are responsible for maintaining the security of your own Account credentials and for notifying us promptly if you suspect any unauthorised access to your Account.
10.1 Data Breach ResponseIn the event of a personal data breach that poses a material risk to affected individuals, jstar888 will take immediate steps to contain and assess the breach, notify affected Players without undue delay where required, and report the incident to the relevant regulatory authority within the timeframes prescribed by applicable law.
Your Data Rights
As a data subject, you hold the following rights in relation to the Personal Data that jstar888 holds about you. These rights may be subject to certain limitations and conditions under applicable data protection law.
Request a copy of the Personal Data we hold about you, including the categories of data, purposes of processing, and any third parties it has been shared with.
Request correction of any inaccurate or incomplete Personal Data we hold about you. Account holders may update some data directly through their profile settings.
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to processing.
Request that we provide your Personal Data in a structured, commonly used, machine-readable format that you can transfer to another service provider.
Object to the processing of your Personal Data where we rely on legitimate interests as the legal basis, or to opt out of direct marketing communications at any time.
To exercise any of the above rights, please submit a written request to our support team at [email protected] (plain text — not a clickable link) or via live chat. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days, subject to notification.
Children's Privacy
The jstar888 Platform is strictly intended for users who are 21 years of age or older. We do not knowingly collect, solicit, or process Personal Data from individuals under the age of 21.
In the event that jstar888 becomes aware that Personal Data has been collected from an individual below the minimum age requirement, we will take immediate steps to delete that data from our systems, close the associated Account, and void any transactions conducted in connection therewith.
Account holders are responsible for ensuring that their Account credentials are not shared with or accessible to any person under the age of 21 within their household. If you have reason to believe that a minor has registered on jstar888 using false information, please notify us immediately at [email protected] (plain text).
Third-Party Links
The jstar888 Platform does not contain links to external third-party websites beyond the payment and service integrations necessary to deliver our gaming services. Where any such integrations exist, they operate in accordance with the respective third party's privacy policies. jstar888 bears no responsibility for the data protection practices of any third-party provider whose services are accessed through or in connection with the Platform.
We encourage you to review the privacy policies of all third-party services you engage with in connection with your use of the Platform, including but not limited to Touch 'n Go eWallet, GrabPay, Boost, and banking institutions involved in DuitNow and FPX transactions.
International Data Transfers
jstar888 may transfer your Personal Data to servers or service providers located outside of Malaysia where this is necessary for the operation of the Platform. Such transfers may include cloud hosting infrastructure, fraud detection systems, and KYC processing services located in other jurisdictions.
Where Personal Data is transferred internationally, jstar888 ensures that adequate protections are in place, including contractual data processing agreements incorporating appropriate data transfer safeguards, to ensure that the data receives a standard of protection equivalent to that applicable in the originating jurisdiction.
By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia where necessary for the purposes described in this Policy.
Amendments to This Policy
jstar888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or operational procedures. The "Last Updated" date at the top of this document will be revised accordingly.
Material changes to this Policy — particularly those that affect your rights or how data is used — will be communicated to registered Players via email notification or a prominent in-platform notice prior to the changes taking effect. We encourage you to review this Policy periodically to stay informed about how jstar888 protects your data.
Your continued use of the Platform following the publication of any amended Privacy Policy constitutes your acceptance of the updated terms. If you object to any changes, you should cease using the Platform and may request Account closure as provided in our Terms and Conditions.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which jstar888 processes your Personal Data, please contact us using the following details:
- Data Enquiries Email: [email protected] (plain text — not a clickable link)
- Live Support: Available 24 hours a day, 7 days a week via live chat on the Platform
- Response Timeframe: Acknowledgement within 5 business days; substantive response within 30 calendar days
- Service Coverage: Serving players across Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and throughout Malaysia
For matters relating to responsible gambling, self-exclusion, or deposit limit settings, please visit our dedicatedResponsible Gambling page.