This Privacy Policy (the "Policy") is issued by joker888 (hereinafter referred to as "joker888", "We", "Us", or "Our") and applies to all personal data processed in connection with your access to and use of the joker888 online casino and sports betting platform accessible at joker888.cam (the "Platform").
joker888 is committed to protecting the privacy and security of all personal data entrusted to us by our Players and visitors. This Policy explains what personal information we collect, the purposes for which we process it, the legal bases on which such processing rests, with whom we may share it, and the rights you hold over your personal data at any time.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, all of which together form the complete framework governing your relationship with joker888. In the event of any inconsistency between this Policy and any other document, this Policy shall govern with respect to personal data processing matters.
By registering an Account, using the Platform, or otherwise providing personal data to joker888, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
Our core commitment: joker888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is collected and processed exclusively to operate the Platform, fulfil regulatory obligations, and improve your experience.
The following terms, when capitalised in this Policy, shall carry the meanings set out below:
| Term | Definition |
|---|---|
| Personal Data | Any information that relates to an identified or identifiable natural person — including name, identification number, contact details, financial information, device identifiers, and behavioural data on the Platform. |
| Processing | Any operation performed on Personal Data, whether by automated or manual means — including collection, storage, use, disclosure, alteration, and deletion. |
| Data Controller | The entity that determines the purposes and means of processing Personal Data. joker888 is the Data Controller for Personal Data collected through the Platform. |
| Data Processor | A third party that processes Personal Data on behalf of joker888, under our instruction and pursuant to a data processing agreement. |
| Consent | A freely given, specific, informed, and unambiguous indication of agreement — communicated by a clear affirmative action — to the processing of your Personal Data for a stated purpose. |
| KYC | Know Your Customer — the identity and age verification procedure required under our anti-money laundering and responsible gambling obligations before a Player may complete their first withdrawal. |
| Player / User / You | Any individual who accesses, registers on, or uses the joker888 Platform, regardless of whether a deposit has been made. |
joker888 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, joker888 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently in accordance with applicable data protection principles and our international licensing obligations.
joker888 operates under international online gaming licensing. Our data processing practices are designed to meet the requirements of internationally recognised data protection standards. Players located in Malaysia should note that the Personal Data Protection Act 2010 (PDPA) of Malaysia may apply to certain aspects of our data processing activities involving Malaysian residents.
For all data privacy enquiries, requests to exercise your rights, or complaints, please contact our Data Privacy team as detailed in Section 15 of this Policy.
joker888 collects the following categories of Personal Data, to the extent necessary and proportionate for the purposes described in Section 6:
| Data Category | Examples of Specific Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, MyKad number or passport number, selfie photograph submitted for KYC. |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam). |
| Account Data | Username, encrypted password, account registration date, account status, self-imposed limit settings, and self-exclusion records. |
| Financial & Transaction Data | Deposit and withdrawal records, transaction amounts in MYR, payment method identifiers (e.g., last four digits of bank account, Touch 'n Go eWallet phone number, Boost ID, GrabPay reference), transaction timestamps. |
| Gaming & Betting Activity | Game history, bet history across sports (Liga Super Malaysia, EPL, UFC, etc.), wager amounts, win/loss records, session duration, game preferences, bonus usage. |
| Device & Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone, and approximate geographic location derived from IP. |
| Usage & Behavioural Data | Pages visited on the Platform, features accessed, click patterns, session timestamps, referring URLs, and search queries made within the Platform. |
| Communications Data | Records of live chat conversations with our support team, email correspondence, and any feedback or complaints submitted to joker888. |
| KYC & Compliance Data | Copies of identity documents, source-of-funds documentation where requested, AML screening results, and politically exposed person (PEP) screening outcomes. |
joker888 does not collect special category data (e.g., health data, ethnic origin, religious beliefs, biometric data) as a matter of course. Where any such data is incidentally disclosed within a support communication, it is treated with the highest level of care and not stored beyond what is strictly necessary.
joker888 collects Personal Data through the following means:
joker888 processes Personal Data only where a lawful basis exists under applicable data protection law. The following table sets out the primary processing purposes and the corresponding legal basis for each:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract — necessary to provide the services you have requested by registering an Account. |
| Identity verification (KYC) and age verification | Legal obligation — required under our international licensing conditions and responsible gambling obligations to verify minimum age (21+) and prevent fraud. |
| Processing deposits and withdrawals in MYR | Performance of contract — necessary to fulfil your transaction instructions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfer. |
| Anti-money laundering (AML) and fraud prevention | Legal obligation — required under applicable AML regulations and our licensing terms; also legitimate interest in protecting the Platform from financial crime. |
| Responsible gambling monitoring and intervention | Legal obligation and legitimate interest — to identify at-risk players and provide appropriate support tools in line with our responsible gambling commitments. |
| Customer support communications | Performance of contract and legitimate interest — to resolve your enquiries and improve service quality. |
| Platform improvement and analytics | Legitimate interest — to understand how Players use the Platform and to improve its functionality, performance, and game offerings. |
| Promotional and bonus communications | Consent — where you have opted in to receive promotional communications. You may withdraw consent at any time via Account settings or by contacting support. |
| Legal and regulatory compliance and record-keeping | Legal obligation — to comply with applicable laws, licensing conditions, and regulatory reporting requirements. |
joker888 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share Personal Data with third parties only in the limited circumstances described below, and only to the minimum extent necessary:
joker888 will never share your Personal Data with third-party marketers, data brokers, social media advertising networks, or any other entity for the purpose of targeted commercial advertising without your explicit consent.
As joker888 operates under international licensing and utilises global technology infrastructure, your Personal Data may be transferred to and processed in countries outside Malaysia. Such transfers may involve countries whose data protection laws differ from those applicable in Malaysia.
Where we transfer Personal Data internationally, we ensure that appropriate safeguards are in place to protect your data — including contractual protections through standard data protection clauses incorporated into our agreements with Data Processors, or other legally recognised transfer mechanisms. We do not transfer your data to any jurisdiction that we consider to provide an inadequate level of data protection without first implementing appropriate compensating safeguards.
For further information about the safeguards applied to specific international transfers of your Personal Data, please contact our Data Privacy team using the details in Section 15.
joker888 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention principles apply:
Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data destruction procedures. Where data cannot be immediately deleted due to technical constraints, it will be quarantined and rendered inaccessible until secure deletion is possible.
The joker888 Platform uses cookies and similar tracking technologies to enable core functionality, support security measures, and improve your experience. The following categories of cookies are used:
You may manage your cookie preferences at any time through your browser settings. Please note that disabling optional cookies will not affect your ability to use the core gambling and betting features of the Platform. Disabling strictly necessary cookies may impair functionality.
Subject to applicable data protection law and certain legal limitations, you hold the following rights with respect to your Personal Data held by joker888. To exercise any of these rights, please contact our Data Privacy team as detailed in Section 15:
Request a copy of all Personal Data joker888 holds about you, together with information about how it is processed.
Request correction of any inaccurate or incomplete Personal Data we hold about you.
Request deletion of your Personal Data where processing is no longer necessary, or where you withdraw consent — subject to legal retention obligations.
Request that we restrict processing of your data in certain circumstances — e.g., while we verify the accuracy of data you have contested.
Receive your Personal Data in a structured, machine-readable format and, where technically feasible, request direct transfer to another controller.
Object to processing based on legitimate interests, including profiling for responsible gambling purposes, where your particular circumstances warrant it.
Where processing is based on consent (e.g., marketing communications), withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with the competent data protection supervisory authority in your jurisdiction if you believe your data rights have been infringed.
joker888 will respond to all verifiable data rights requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by a further thirty days, notifying you of the extension within the initial response window. We may need to verify your identity before processing certain requests.
Please note that certain data rights are subject to limitations where retention is required by applicable legal obligations — for example, AML record-keeping requirements may override a request for erasure of transaction records within the mandatory retention period.
joker888 implements a comprehensive range of technical and organisational security measures designed to protect your Personal Data from unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes, but is not limited to:
Notwithstanding the above measures, no internet-based data transmission or storage system is completely secure. You are also responsible for maintaining the security of your Account by choosing a strong password, enabling two-factor authentication where available, and logging out of your Account when not in use — particularly on shared devices.
joker888 strictly prohibits access to and use of the Platform by any person under the age of 21 years. The Platform is not directed at, and does not knowingly collect Personal Data from, minors.
All Account registrations require confirmation that the applicant is aged 21 or over, and KYC verification is mandatory before a Player may complete their first withdrawal. This verification process is designed, in part, to prevent underage gambling.
If joker888 discovers or has reason to believe that Personal Data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will immediately suspend the relevant Account, delete the associated Personal Data to the extent legally permissible, and handle any funds on the Account in accordance with our Terms & Conditions.
🔞 21+ Only. If you are a parent or guardian and believe that your child has accessed joker888 or provided their personal data to us, please contact our support team immediately at [email protected] and we will take prompt action.
joker888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the structure of our business. Material changes will be communicated to registered Players via a notice displayed on the Platform and/or by email to the address registered on your Account.
Changes will take effect on the date indicated in the updated Policy, which will always be accessible at joker888.cam/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement of and agreement to the revised terms.
We recommend that you review this Policy periodically to remain informed of how joker888 protects your Personal Data. Where a change is material and requires your renewed consent, we will seek that consent before the change takes effect.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how joker888 has handled your Personal Data, please contact our Data Privacy team through the following channels:
If you are not satisfied with joker888's response to your privacy complaint or exercise of data rights, you have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction. Malaysian residents may contact the Personal Data Protection Department (JPDP) of Malaysia for guidance on their rights under the Personal Data Protection Act 2010 (PDPA).
Six principles that guide how joker888 handles every piece of data you share with us
joker888 does not sell, rent, or trade your Personal Data to third-party marketers, data brokers, or advertisers. Your information is collected solely to operate the Platform and fulfil our regulatory obligations — nothing more.
All data transmitted between your device and the joker888 Platform is protected by 256-bit SSL/TLS encryption. Sensitive stored data — including financial records and identity documents — is encrypted at rest using industry-standard protocols.
You hold the right to access, correct, download, restrict, or request deletion of your Personal Data at any time. We respond to verified data rights requests within 30 calendar days — no bureaucratic runaround.
We collect only the data that is genuinely necessary for each stated purpose. Where aggregated or anonymised data will serve the same analytical purpose, we use it in preference to identifiable Personal Data.
We share transaction data exclusively with verified Malaysian payment partners — Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank — all bound by data processing agreements and their own regulatory obligations.
Our data security infrastructure undergoes regular independent audits and penetration testing. In the event of a data breach, we follow a documented incident response procedure and notify affected parties within legally required timeframes.
Our Data Privacy team is reachable 24/7 through live chat. You can also review our full Terms or learn how we approach responsible gambling — all linked below.
🔞 For players aged 21 and above only. Gambling involves risk. Please play responsibly.