1. Introduction
Japan168 ("the Platform", "we", "us", "our") operates the online sports betting and live casino service accessible at japan168.cam. We are fully committed to protecting the privacy and personal data of every individual ("User", "you", "your") who registers, browses, or interacts with our Platform.
This Privacy Policy ("Policy") sets out in clear and formal terms the categories of personal data we collect, the purposes for which that data is processed, the legal bases that justify processing, the circumstances in which data may be shared with third parties, and the rights available to Users in respect of their personal information.
Japan168 processes personal data in accordance with applicable international data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. We do not sell personal data to third parties for their independent marketing purposes.
2. Definitions
The following terms carry the meanings assigned below throughout this Policy:
- "Personal Data"
- Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, IP address, device identifiers, and behavioural data.
- "Processing"
- Any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
- "Data Controller"
- Japan168, which determines the purposes and means by which Personal Data collected through the Platform is processed.
- "Data Processor"
- A third party that processes Personal Data on behalf of Japan168 under a written agreement, such as payment processors, KYC verification providers, and cloud hosting services.
- "KYC" (Know Your Customer)
- Identity and age verification procedures requiring Users to submit government-issued documentation — such as a Malaysian MyKad or passport — to confirm eligibility before withdrawals are processed.
- "Cookies"
- Small text files placed on a User's device by the Platform to store session information, preferences, and anonymised behavioural data.
- "Sensitive Personal Data"
- A subset of Personal Data warranting heightened protection, including information relating to health, financial circumstances relevant to responsible gambling assessments, or government-issued identity document numbers.
3. Data We Collect
Japan168 collects Personal Data through several distinct channels. The categories of data collected are described below:
3.1 Registration Data
When you create a Japan168 account, we collect the information you provide directly, including:
- Full legal name;
- Date of birth (for age verification — 21+ only);
- Email address and, where provided, mobile phone number;
- Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam);
- Preferred currency (Malaysian Ringgit / MYR); and
- Username and encrypted password credentials.
3.2 KYC and Identity Verification Data
To comply with anti-money laundering obligations and to verify age eligibility, we may collect:
- Copies of government-issued identification (Malaysian MyKad, passport, or driving licence);
- Proof of residential address (utility bill, bank statement, or equivalent document dated within three months); and
- Source of funds documentation where required by our compliance programme.
3.3 Financial Transaction Data
When you deposit or withdraw funds through the Platform, we process payment-related data including:
- Payment method identifiers (e.g., masked account or wallet reference numbers associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or USDT wallet addresses);
- Transaction amounts in MYR and, where applicable, cryptocurrency equivalents;
- Transaction timestamps and processing status records.
3.4 Platform Usage Data
We automatically collect technical and behavioural data as you use the Platform, including:
- IP address and approximate geolocation derived therefrom;
- Device type, operating system, browser type, and version;
- Pages visited, time spent on each page, and navigation paths;
- Sports markets browsed (e.g., Liga Super Malaysia, EPL, UFC), wager amounts, and game session durations;
- Login timestamps and session activity logs.
3.5 Support and Communications Data
When you contact Japan168 support via live chat, email, or any other channel, we retain records of that correspondence including the content of messages exchanged and any attachments submitted.
4. Data Processing
Japan168 uses Personal Data for the following specific purposes:
| Purpose | Data Category Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, device identifiers | Contractual necessity |
| Age and identity verification (KYC) | KYC documents, registration data | Legal obligation; contractual necessity |
| Payment processing and fraud prevention | Financial transaction data, IP address | Contractual necessity; legitimate interests |
| Delivering sports betting and casino services | Platform usage data, account data | Contractual necessity |
| Responsible gambling monitoring | Platform usage data, transaction data | Legal obligation; legitimate interests |
| Customer support | Communications data, account data | Contractual necessity; legitimate interests |
| Anti-money laundering compliance | Financial data, KYC data, usage data | Legal obligation |
| Platform security and abuse prevention | Usage data, IP address, login logs | Legitimate interests |
| Personalised promotions (where consented) | Usage data, account data | Consent |
| Analytics and platform improvement | Anonymised usage data | Legitimate interests |
5. Legal Basis for Processing
Japan168 relies on the following legal bases when processing Personal Data:
5.1 Contractual Necessity
Processing is necessary to perform the contract between Japan168 and the User — specifically, to register accounts, authenticate users, facilitate wagering activity, process payments, and manage withdrawals. Without this processing, Japan168 cannot deliver the services described in the Terms & Conditions.
5.2 Legal Obligation
Certain processing activities are required to comply with applicable law, including KYC identity verification, anti-money laundering checks, age restriction enforcement (21+), and the maintenance of transaction records for regulatory audit purposes.
5.3 Legitimate Interests
Japan168 processes certain data to pursue legitimate business interests, including fraud detection, platform security, responsible gambling risk assessment, and improving the quality of the Japan168 user experience. Where legitimate interests are relied upon, Japan168 conducts a balancing assessment to confirm that such interests are not overridden by the rights and freedoms of Users.
5.4 Consent
Where Japan168 processes data for purposes beyond those described above — such as sending optional promotional communications — we will request your explicit consent at the point of collection. You may withdraw consent at any time by contacting support or adjusting your account notification preferences.
6. Data Sharing with Third Parties
Japan168 does not sell, rent, or trade Personal Data to independent third parties for their own marketing purposes. We share data with external parties only in the specific circumstances described below:
6.1 Payment Service Providers
To process deposits and withdrawals, Japan168 shares necessary financial and identity data with authorised payment processors supporting channels such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank, CIMB, and cryptocurrency payment gateways. These providers operate under binding data processing agreements and are authorised to use your data solely for transaction fulfilment.
6.2 KYC and Compliance Providers
Japan168 engages specialist third-party KYC and identity verification services to authenticate documents submitted by Users. These providers process identity data on Japan168's behalf and are contractually prohibited from using that data for any independent purpose.
6.3 Technology and Infrastructure Partners
Cloud hosting providers, content delivery networks, game studios, and platform analytics tools may access platform data in the course of providing contracted services. All such providers are bound by data processing agreements requiring compliance with applicable data protection obligations.
6.4 Regulatory and Legal Disclosures
Japan168 may disclose Personal Data to regulators, law enforcement bodies, or courts where required by applicable law, court order, or regulatory direction — including in connection with anti-money laundering investigations, fraud detection, or licensing compliance audits.
7. Data Retention
Japan168 retains Personal Data only for as long as it is necessary to fulfil the purposes described in this Policy or as required by applicable law and regulatory obligations.
- Active account data is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
- KYC documentation is retained for a minimum of five (5) years from the date of submission or from the date of the last transaction, whichever is later.
- Financial transaction records are retained for a minimum of five (5) years for regulatory compliance purposes.
- Platform usage and behavioural data in identifiable form is retained for up to two (2) years, after which it may be anonymised and retained for analytical purposes without retention limits.
- Support correspondence is retained for up to three (3) years from the date of the interaction unless a longer period is required due to a pending complaint or legal matter.
Upon expiry of applicable retention periods, Japan168 will securely delete or anonymise Personal Data in a manner that prevents reconstruction or re-identification.
8. Data Security
Japan168 implements industry-standard technical and organisational measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include, without limitation:
- Transport Layer Security (TLS) encryption for all data transmitted between the User's device and our servers;
- Encryption of stored sensitive data fields, including identity document references and financial credentials;
- Role-based access controls limiting staff access to Personal Data on a need-to-know basis;
- Regular security assessments and vulnerability testing of platform infrastructure;
- Multi-factor authentication options available for User accounts; and
- Incident response procedures to detect, contain, and notify Users of data breaches where legally required.
9. Cookies & Tracking Technologies
Japan168 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and gather anonymised analytics data. The following cookie categories are used:
9.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function. They manage authentication sessions, protect against cross-site request forgery, and maintain your login state. These cookies cannot be disabled without impacting your ability to use Japan168.
9.2 Analytical Cookies
Anonymised usage data collected through analytical cookies helps Japan168 understand how Users navigate the Platform — which pages they visit, how long sessions last, and which features are most commonly used. This data is aggregated and is not used to identify individual Users.
9.3 Functional Cookies
Functional cookies remember your preferences, such as language settings, display options, and preferred sports categories (for example, Liga Super Malaysia or EPL match listings), to provide a more personalised experience on return visits.
9.4 Managing Cookies
You may configure your browser to refuse all cookies or to alert you when a cookie is being placed. Please note that disabling strictly necessary cookies will prevent you from accessing the full functionality of Japan168. Analytical and functional cookies may be disabled without preventing basic account access.
10. International Data Transfers
Japan168 operates within an international technical infrastructure. As a result, Personal Data may be transferred to and processed in jurisdictions outside Malaysia, including countries where data protection laws may differ from those applicable in your country of residence.
Where such transfers occur, Japan168 implements appropriate safeguards to ensure that Personal Data receives a standard of protection consistent with applicable international data protection principles. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy determinations where available.
By using the Japan168 Platform, you acknowledge and agree to the transfer of your Personal Data as described in this clause, subject to the safeguards set out above.
11. User Rights
Subject to applicable law and verification of your identity, Japan168 Users hold the following rights in respect of their Personal Data:
11.1 Right of Access
You have the right to request a copy of the Personal Data that Japan168 holds about you, together with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
11.2 Right to Rectification
If any Personal Data held by Japan168 is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain registration details directly within your account settings or by contacting support.
11.3 Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and no overriding legitimate interest exists. This right is subject to exceptions including mandatory regulatory retention periods.
11.4 Right to Restriction of Processing
You may request that Japan168 restrict the processing of your Personal Data in certain circumstances, such as while the accuracy of the data is being contested or while an objection to processing is being assessed.
11.5 Right to Data Portability
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your Personal Data in a structured, commonly used, and machine-readable format.
11.6 Right to Object
You have the right to object to the processing of your Personal Data where Japan168 relies on legitimate interests as its legal basis. Japan168 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
11.7 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time without prejudice to the lawfulness of processing conducted prior to withdrawal.
12. Minors and Age Restriction
Parents and guardians who believe that a person under 21 in their care has registered on Japan168 are encouraged to contact us immediately at [email protected] so that the account can be investigated and closed without delay.
13. Third-Party Links and Services
The Japan168 Platform may from time to time reference or integrate third-party services, such as game studios and payment gateways. Japan168 is not responsible for the privacy practices of those third parties. Users who interact directly with third-party services should review the applicable privacy policies of those providers independently.
Japan168 does not endorse the data practices of any third-party provider and accepts no liability for any loss or damage arising from a User's reliance on or interaction with a third-party service.
14. Policy Amendments
Japan168 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Where amendments are material, we will provide reasonable advance notice by publishing a prominent notice on the Platform homepage or by emailing the address registered on your account.
The effective date displayed at the top of this Policy indicates when the current version came into force. Continued use of the Platform following the effective date of an amendment constitutes your acceptance of the revised Policy. If you do not agree with the updated terms, you should cease using the Platform and request account closure.
15. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or Japan168's data processing practices, please contact our Data Protection team using the details below. All correspondence will be handled in confidence and in accordance with this Policy.
Email: [email protected]
Subject line: "Privacy Policy Enquiry" or "Data Subject Request"
Response Commitment: General privacy enquiries are acknowledged within 2 business days. Formal data subject access requests are responded to within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 30 days with prior notification.
For responsible gambling-related concerns, including requests for self-exclusion or deposit limit adjustments, please visit our dedicated Responsible Gambling page or contact support directly via live chat.