01 Introduction
elitjp ("Company", "we", "us", "our") operates the online casino and sports betting platform accessible at https://elitjp.cam and its associated digital properties. This Privacy Policy ("Policy") describes the practices by which elitjp collects, processes, uses, stores, and discloses personal data relating to users ("Player", "you", "your") of the platform.
This Policy applies to all personal data collected through your use of the elitjp platform, including account registration, identity verification (KYC), financial transactions, customer support interactions, and general platform activity. By accessing or using the elitjp platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which are incorporated by reference into this document.
Age Restriction: elitjp is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we discover that data has been collected from a person under 21, we will delete it promptly.
02 Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" — any information that identifies or could identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, or online identifiers.
- "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
- "Data Controller" — elitjp, as the entity that determines the purposes and means of processing personal data.
- "Data Subject" — the individual whose personal data is being processed; in this context, a registered Player on the elitjp platform.
- "KYC Data" — identity verification documents and information submitted by a Player for the purpose of Know Your Customer compliance, including government-issued identification (Malaysian IC/MyKad or passport) and payment proof.
- "Cookies" — small text files placed on a user's device by the platform for purposes including session management, analytics, and security.
- "Third-Party Service Providers" — vendors, payment processors, KYC verification partners, and technology providers engaged by elitjp to support platform operations.
03 Data We Collect
elitjp collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party sources where applicable for compliance purposes. The categories of data we collect are described below.
Registration & Account Data
- Full legal name (as it appears on your Malaysian IC or passport)
- Date of birth (to verify that you are aged 21 or above)
- Email address and contact phone number
- Residential address (city, state, postcode)
- Username and encrypted password hash
- Preferred language and communication preferences
Identity Verification (KYC) Data
- Government-issued photo identification (Malaysian MyKad or passport scan)
- Proof of payment method (e.g., screenshot of Touch'n Go eWallet account, bank statement header)
- Selfie or facial verification image (where required for enhanced verification)
Financial & Transaction Data
- Deposit and withdrawal transaction records, amounts, and timestamps
- Payment method identifiers (masked bank account numbers, e-wallet phone numbers)
- Account balance history and bonus redemption records
- Currency denomination (Malaysian Ringgit / MYR, BTC, USDT)
Technical & Usage Data
- IP address, device type, operating system, and browser information
- Session timestamps, page views, and navigation patterns on the platform
- Geolocation data (country and city level) derived from IP address
- Cookies, session tokens, and similar tracking identifiers
Customer Support Data
- Live chat transcripts and email correspondence with the support team
- Complaint records and dispute resolution documentation
- Support ticket content and response history
04 How We Use Your Data
elitjp processes personal data for clearly defined, legitimate purposes. The following table summarises the primary purposes for which we use your data and the corresponding legal basis for each processing activity.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, DOB, contact details | Contractual necessity |
| Identity verification (KYC) | Government ID, payment proof, facial image | Legal obligation; contractual necessity |
| Processing deposits and withdrawals | Financial data, payment identifiers | Contractual necessity |
| Fraud prevention and anti-money laundering | All Account and transaction data | Legal obligation; legitimate interest |
| Responsible gambling monitoring | Betting patterns, session data, account history | Legal obligation; legitimate interest |
| Customer support and dispute resolution | Support correspondence, account records | Contractual necessity; legitimate interest |
| Platform security and abuse prevention | IP address, device data, session logs | Legitimate interest |
| Service improvement and analytics | Aggregated usage and navigation data | Legitimate interest |
| Promotional communications (with consent) | Email address, betting preferences | Consent |
Marketing Communications: We will only send you promotional emails or bonus notifications if you have explicitly opted in during registration or through your Account settings. You may withdraw marketing consent at any time by updating your communication preferences or contacting our support team.
05 Legal Basis for Processing
elitjp processes personal data one or more of the following legal bases, in accordance with applicable data protection principles:
- Contractual Necessity: Processing is necessary to fulfil our contractual obligations to you as a registered player — including managing your account, executing transactions, and providing gaming services.
- Legal Obligation: We are required by applicable laws and regulations — including anti-money laundering requirements, KYC obligations, and responsible gambling regulations — to collect and retain certain categories of personal data.
- Legitimate Interest: We process certain data where we have a legitimate interest in doing so, provided that interest does not override your fundamental rights. This includes fraud prevention, platform security, and service improvement activities.
- Consent: Where processing is not required on the above grounds — such as for marketing communications or optional personalisation features — we will seek your explicit consent and honour any withdrawal of that consent promptly.
06 Data Sharing & Disclosure
elitjp does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may share your data with trusted third parties strictly in the following circumstances:
- Payment Processors: To process deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong Bank, and cryptocurrency networks (BTC/USDT). Only the minimum necessary transaction data is shared.
- KYC Verification Partners: Identity document data may be shared with licensed third-party KYC verification service providers solely for the purpose of verifying your identity. These providers are bound by strict confidentiality agreements and data processing terms.
- Regulatory and Law Enforcement Authorities: We may disclose personal data to competent regulatory bodies, courts, or law enforcement agencies where required or permitted by applicable law — including in cases of suspected money laundering, fraud, or other criminal activity.
- Technology and Infrastructure Providers: Hosting, cloud infrastructure, and platform technology partners may have access to technical data as part of their service delivery. All such providers are contractually obligated to maintain data confidentiality.
- Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections being maintained.
No Third-Party Marketing: Your personal data will never be sold or provided to any third party for their own marketing, advertising, or profiling purposes. elitjp does not participate in data brokerage activities.
07 Data Retention
elitjp retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:
- Account Data: Retained for the duration of your active Account plus a period of five (5) years following permanent account closure, in accordance with anti-money laundering record-keeping obligations.
- KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable regulatory authority.
- Transaction Records: Retained for a minimum of five (5) years from the date of the relevant transaction.
- Customer Support Records: Retained for three (3) years from the date of resolution of the relevant support interaction.
- Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period to demonstrate compliance with consent obligations.
- Technical Logs: Typically retained for ninety (90) days, unless a longer retention period is required for security investigation purposes.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.
08 Cookies & Tracking Technologies
elitjp uses cookies and similar tracking technologies on its platform for a range of purposes. By continuing to use the platform after being notified of our cookie practices, you consent to the use of cookies as described below.
Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without affecting your ability to use the platform.
- Functional Cookies: Remember your preferences, language settings, and account configurations to personalise your experience across sessions.
- Analytics Cookies: Help us understand how players interact with the platform — which pages are visited most, where users drop off, and how features are used. Data is aggregated and anonymised where possible.
- Security Cookies: Support fraud detection, bot prevention, and suspicious activity monitoring across sessions and devices.
You may manage cookie preferences through your browser settings. Note that disabling certain cookie categories may impair platform functionality. elitjp does not use cookies to display third-party advertising or to track your activity outside of the elitjp platform.
09 Data Security
elitjp implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes the following controls:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and our servers.
- Encryption of sensitive data fields at rest, including password hashes and KYC document storage.
- Access controls limiting internal data access to authorised personnel on a need-to-know basis, with audit logging of all access events.
- Regular security vulnerability assessments and penetration testing of platform infrastructure.
- Secure, geographically redundant data storage with backup and recovery procedures.
- Multi-factor authentication requirements for internal system access by elitjp staff.
While we apply industry-standard security practices, no online platform can guarantee absolute security against all threats. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected Players promptly and in accordance with applicable notification obligations.
Report a Security Concern: If you believe your Account has been compromised or you have identified a potential security vulnerability on the elitjp platform, please contact us immediately at [email protected] or via live chat. We take all security reports seriously and investigate them promptly.
10 Your Rights
As a data subject, you have a number of rights in relation to your personal data held by elitjp. These rights may be subject to certain limitations and conditions under applicable law, including where the exercise of a right conflicts with our legal obligations (such as anti-money laundering record-keeping requirements).
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond substantively within 30 days, or soner where practicable. We may require identity verification before processing a data rights request.
11 KYC & Verification Data
Identity verification (Know Your Customer) is a mandatory requirement for all elitjp Players prior to their first withdrawal. The KYC process requires submission of government-issued identification — typically a Malaysian IC (MyKad) or passport — and evidence of your nominated payment method.
KYC documents submitted to elitjp are:
- Processed solely for the purpose of identity and age verification, and anti-money laundering compliance.
- Reviewed by trained compliance staff operating under confidentiality obligations.
- Stored in encrypted form in a secure document management system accessible only to authorised compliance personnel.
- Not shared with third parties other than licensed KYC verification partners operating under binding data processing agreements with elitjp.
- Retained for a minimum of five (5) years from submission, as required by applicable anti-money laundering regulations.
Players are advised not to submit KYC documents through any channel other than the official elitjp platform or verified support email. elitjp will never request sensitive document submission through unofficial channels, third-party messaging apps, or unsolicited communications.
12 Payment Data
elitjp processes financial transactions through verified Malaysian payment partners. All payment data is handled in accordance with the security standards applicable to the relevant payment network. The following applies to payment data processing:
- Full bank account numbers, card numbers, or e-wallet credentials are never stored on elitjp servers. Only masked identifiers (e.g., last 4 digits, account holder name) are retained for transaction reference purposes.
- Deposit and withdrawal records — including amounts, timestamps, and payment method type — are retained as transaction records for compliance and dispute resolution purposes.
- Transaction data is accessible only to authorised finance and compliance staff within elitjp, and to the relevant payment processor for the specific transaction.
- All payment data transmitted to and from elitjp's servers is protected by 256-bit SSL/TLS encryption.
Malaysian payment methods supported by elitjp include:Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank, as well as cryptocurrency channels (BTC and USDT). Each payment provider operates under its own terms of service and privacy practices in relation to data they independently collect.
13 Protection of Minors
elitjp is strictly an adult platform. Access to and use of the platform is prohibited for any person under the age of 21 years. We do not knowingly collect, process, or retain personal data from individuals under 21.
Age verification is conducted as part of the KYC process prior to the first withdrawal. If elitjp identifies at any time that a Player is, or was at the time of registration, under 21 years of age:
- The Account will be immediately suspended and closed.
- All personal data associated with the Account will be deleted from our systems within a reasonable timeframe, subject to any minimum legal retention obligations.
- Any account balance (excluding bonus amounts) will be returned to the originating payment method after identity confirmation.
If you are a parent or guardian and believe that a person under 21 has accessed or registered on the elitjp platform using your payment details or contact information, please contact us immediately at [email protected].
14 Policy Changes
elitjp reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page reflects the most recent revision.
Where changes are material — for example, a significant change in the categories of data we collect, the purposes for which we use data, or our sharing practices — we will notify registered Players via email to the address associated with their Account, and/or through a notice displayed on the platform, with reasonable advance notice prior to the changes taking effect.
Your continued use of the elitjp platform following notification of policy changes constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you should cease using the platform and may request closure of your Account by contacting our support team.
Staying Informed: We recommend reviewing this Privacy Policy periodically. All historical versions of this Policy are available upon request by contacting support.
15 Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data right, or have a privacy-related concern, please contact the elitjp team through the following channels:
- Email: [email protected] — formal data rights requests, privacy complaints, and document submission. Please use the subject line "Privacy Policy Enquiry" or "Data Rights Request".
- Live Chat: Available24 hours a day, 7 days a week, via the elitjp platform. Suitable for general privacy queries and account-level data questions.
elitjp provides support in English to players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We endeavour to acknowledge all privacy-related enquiries within 2 business days and provide a substantive response within 30 calendar days.
For information on self-exclusion, deposit limits, and responsible gambling tools — which involve processing of personal data — please visit our dedicated Responsible Gambling page.