Joylink Privacy Policy — Data Protection Trusted by Malaysian Members

Joylink ("we", "our platform") understands that privacy matters deeply to every individual, especially in the context of an online entertainment platform. This Privacy Policy explains transparently and in detail how Joylink collects, processes, stores, and protects the personal information you provide when registering for and using the joylink.ws platform.

As an online casino platform built specifically for the Malaysian market, Joylink operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means all our data management practices comply with the data protection standards established under Malaysian law, giving you legal assurance over how your personal data is handled by Joylink.

This Privacy Policy applies to all users of the Joylink platform — including visitors simply browsing the site, prospective members in the process of registering, and registered members actively using Joylink's services. If you have any questions after reading this document, Joylink's Bahasa Malaysia-speaking support team is available 24 hours a day via live chat or email at support@joylink.ws.

Joylink only collects data that is strictly necessary to provide platform services to you. We do not collect excessive data or data that has no direct relevance to Joylink's operational requirements. The following are the categories of data collected:

Data you provide directly:

• Full name as it appears on your official Malaysian identity document
• An active email address owned and controlled by you
• An active Malaysian mobile phone number
• Date of birth for age verification (must be 18 or above)
• Malaysian bank account or e-wallet details used for deposits and withdrawals — including DuitNow, FPX, Touch 'n Go, GrabPay, Boost, or ShopeePay
• A copy of your identity document (MyKad) when full identity verification (KYC) is required

Automatically collected data:

• The IP address of the device used to access Joylink
• Your device's browser type and operating system
• In-platform activity history — including games played, bet amounts, deposits, and withdrawals
• Login session information including date, time, and session duration
• Cookie data to enhance the user experience on the Joylink platform

Joylink uses your personal data solely for purposes directly related to the delivery of our platform services. We do not use your data for purposes you have not consented to, and we do not carry out personal profiling for third-party marketing purposes.

The specific purposes for which Joylink uses your personal data are as follows:

• Account management: Creating, verifying, and maintaining your Joylink account, including all login functions, security settings, and personal preferences
• Financial transaction processing: Processing all your MYR deposits and withdrawals using your registered Malaysian local payment methods
• Identity and age verification: Ensuring all Joylink members meet eligibility requirements — aged 18 and above and residing in Malaysia
• Fraud prevention and anti-money laundering: Identifying and preventing suspicious or unlawful activity on the platform through transaction data analysis
• Customer support: Helping you resolve account issues, transaction disputes, and technical inquiries efficiently using your account activity history
• Service communications: To send important notices relating to your account — including transaction confirmations, security alerts, and terms updates
• Platform improvements: Analyzing aggregated usage patterns (not individual behavior) to improve the gaming experience on Joylink for all Malaysian members
• Legal compliance: To fulfil legal and regulatory obligations applicable to platform operations in Malaysia

Joylink does not sell, rent, or disclose members' personal data to third parties for commercial purposes. However, in the course of operating the platform, there are limited situations where Joylink may need to share certain data with specific parties:

• Payment service providers: Malaysian payment processing providers such as the DuitNow network, FPX, and e-wallet providers receive only the minimum transaction information necessary to process your deposits and withdrawals. These providers are bound by strict data protection agreements.
• Game providers: International-standard live casino and game providers supporting the Joylink platform may receive anonymous game identifiers that do not reveal your full identity, solely for the purpose of game delivery.
• Legal authorities: Joylink will disclose personal data when required by Malaysian law, court order, or direction from a competent authority — and only to the extent necessary to fulfil such a request.
• Fraud detection: Third-party fraud detection service providers working with Joylink may receive anonymised session and transaction data for the purpose of analysing suspicious activity patterns.

In all of the above situations, Joylink ensures that any party receiving data is bound by confidentiality and data protection obligations that are equal to or higher than the standards we ourselves maintain. No data is shared beyond what is strictly necessary for the stated purpose.

Joylink continually invests in cybersecurity infrastructure to ensure our members' personal and financial data is protected at all times. The security measures we employ include:

• 256-bit SSL/TLS Encryption: All communications between your browser and Joylink's servers are protected using 256-bit SSL/TLS protocol — the same standard used by banking institutions in Malaysia
• Data encryption at rest: Sensitive information such as passwords and financial details is stored in encrypted form using modern encryption algorithms — Joylink itself cannot read your password in its original form
• Two-factor authentication (2FA): Joylink supports and encourages the use of two-factor authentication via SMS OTP to protect your account from unauthorised access
• 24/7 security monitoring: Joylink's cybersecurity team continuously monitors our systems to identify and respond to any threats or suspicious activity
• Internal access controls: Only Joylink staff who require access to specific data to carry out their authorized duties are permitted to access it, in accordance with the principle of least privilege
• Regular security audits: The Joylink platform undergoes independent security audits on a regular basis to ensure there are no exploitable vulnerabilities in our systems

The Joylink website uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions smoothly, and understand how members interact with our content. Cookies are small text files stored in your browser when you visit the Joylink website.

Types of cookies used by Joylink:

• Essential cookies: Required for core Joylink platform functions such as maintaining your login session, remembering your language preference, and ensuring deposits process smoothly. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Helps Joylink understand how specific pages are used by members so we can identify areas for improvement. Data collected is aggregated and does not identify you individually.
• Functional cookies: Remembering your preferences such as interface settings and preferred language so you don't have to reconfigure them every time you log in to Joylink.

You can manage or disable cookies through your browser settings at any time. However, disabling essential cookies may affect your ability to fully use certain features of the Joylink platform.

Under Malaysia's Personal Data Protection Act 2010, you as a Joylink member have the following rights regarding your personal data held by us:

To exercise any of the above rights, you may contact the Joylink support team via in-platform live chat or by emailing support@joylink.ws, clearly stating your request. Joylink will process your request within 14 business days. In cases where a request requires more in-depth investigation, Joylink will keep you informed of its progress within that period.

The Joylink platform is strictly for individuals aged 18 and above. Joylink does not knowingly collect or store any personal information from individuals under the age of 18. All account registrations require age verification, and Joylink reserves the right to request documentary proof of age at any time.

Should Joylink discover that personal information belonging to an individual under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who find that their underage child has attempted to register at Joylink are requested to contact us immediately at support@joylink.ws.

Joylink retains members' personal data for as long as the account remains active and for as long as it is needed to provide our services. After an account is closed, Joylink may still need to retain certain records for a specified period to fulfil legal obligations, including:

• Financial transaction records: Retained for a minimum of 7 years in accordance with the Companies Act and Malaysian financial legislation requirements
• Identity verification records (KYC): Retained for a minimum of 5 years after account closure for anti-money laundering compliance purposes
• Customer support communication history: Retained for 2 years for reference and resolution of any disputes that may arise at a later date
• Security activity log: Retained for 1 year for security investigation and fraud prevention purposes

Upon expiry of the applicable retention period, Joylink will securely dispose of or destroy the relevant personal data using industry-standard procedures that ensure the data cannot be recovered or accessed by any party after destruction.

Joylink reserves the right to modify, supplement, or amend this Privacy Policy at any time to reflect changes in our practices, relevant Malaysian legislation, or improvements in how we protect member data. We are committed to informing members of any material changes to this Privacy Policy.

When Joylink makes material changes to this Privacy Policy, we will notify you via an in-platform notice on Joylink and/or by email to the address registered to your account at least 7 days before the changes take effect. The latest version of this Privacy Policy is always available on this page, clearly dated at the top.

Your continued use of the Joylink platform after any amendments to the Privacy Policy take effect constitutes your acceptance of the revised terms. If you do not agree with any amendment, you may choose to close your Joylink account before the amendment comes into effect.

Effective Date: 1 January 2026 | Version: 3.1 | Last Updated: June 2026

If you have any questions, concerns, or complaints regarding how Joylink handles your personal data, or if you wish to exercise any of the privacy rights outlined in this Privacy Policy, please contact us through the following channels:

• Privacy email: support@joylink.ws — please state "Data Privacy Inquiry" in your email subject line
• Live chat: Available 24 hours a day, 7 days a week directly within the Joylink platform after logging in
• Target response time: Joylink aims to respond to all privacy-related enquiries within 14 business days of receipt

Joylink's Malay-speaking support team handling privacy enquiries is specially trained in Malaysia's Personal Data Protection Act 2010 and will ensure your request is processed correctly and within the stipulated timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.