judiku88 Privacy Policy

This Privacy Policy ("Policy") sets out how judiku88 ("we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data in connection with your use of the judiku88 platform at judiku88.co ("Platform"). It applies to all registered Members and to visitors who access the Platform without registering.

By registering a judiku88 account or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform and contact us to close your account.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together govern your relationship with judiku88. This Policy does not apply to third-party websites or services that may be linked to from the Platform.

judiku88 is the data controller in respect of personal data collected through the Platform. As data controller, judiku88 determines the purposes and means by which your personal data is processed. judiku88 operates under an internationally recognised gaming authority licence, and certain data processing activities are required conditions of that licence.

For all matters relating to the processing of your personal data, including exercising your rights under this Policy, you may contact judiku88's data protection contact point by email at [email protected]. Please include "Privacy" in the subject line of your request. We aim to respond to all data-related enquiries within 14 business days.

judiku88 collects the following categories of personal data, depending on how you use the Platform:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Gender (optional)
• Username chosen by you at registration
• Government-issued identification document details (MyKad number or passport number) collected as part of KYC verification

3.2 Contact Data

• Email address
• Malaysian mobile phone number
• Residential address (required for KYC and regulatory purposes)

3.3 Financial & Transaction Data

• Payment method details (e-wallet identifiers, bank account numbers, FPX reference data) — note: full card or bank account numbers are handled by payment processors, not stored by judiku88
• Deposit and withdrawal transaction histories
• Account balance records

3.4 Gameplay & Behavioural Data

• Bet histories, game session records, wagering patterns
• Bonus and promotion activity logs
• Responsible gaming tool settings and activity (deposit limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, browser type and version
• Session logs including login timestamps and session durations
• Cookie and tracking data as described in Section 8

3.6 Communications Data

• Records of communications between you and judiku88 support, including live chat transcripts and email correspondence
• Dispute or complaint records

judiku88 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make deposits or withdrawals, place wagers, contact support, or update your account settings.
• Automatically: through cookies, web beacons, and server logs when you access or interact with the Platform. See Section 8 for details on cookies.
• From payment processors: transaction confirmation data and payment reference identifiers returned by our integrated Malaysian payment channels (Touch 'n Go, DuitNow, FPX, Boost, etc.).
• From identity verification providers: confirmation of identity document authenticity and sanctions screening results provided by our licensed KYC service providers.
• From fraud prevention services: risk signals and device fingerprinting data from our fraud monitoring partners, used solely to protect the integrity of the Platform and your account security.

judiku88 processes your personal data for the following purposes and on the following legal bases:

6.1 No Sale of Data. judiku88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances.

6.2 Service Providers. judiku88 engages carefully selected third-party service providers who process data on our behalf under binding data processing agreements. Categories of processors include: payment processing providers (Touch 'n Go, Boost, DuitNow, Maybank2u, CIMB, FPX operators), identity verification and KYC service providers, fraud detection service providers, cloud hosting and infrastructure providers, customer support platform operators, and email communication service providers. All processors are required to process data only in accordance with judiku88's instructions and this Policy.

6.3 Gaming Authority. As a condition of our internationally recognised gaming authority licence, judiku88 may be required to disclose Member data, including identity information, transaction records, and gameplay histories, to our licensing authority upon request or as part of routine regulatory reporting.

6.4 Legal Requirements. judiku88 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent fraud, protect the rights of judiku88 or third parties, or comply with anti-money laundering obligations.

6.5 Business Transfers. In the event of a merger, acquisition, or sale of all or a material portion of judiku88's business assets, Member data may be transferred as part of that transaction. Affected Members will be notified of any such transfer and of any changes to this Policy that result from it.

judiku88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and licence obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by our gaming authority licence and applicable anti-money laundering regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial record-keeping requirements.
• Gameplay records: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Communications records: Retained for a minimum of two (2) years, or longer where a dispute remains unresolved.
• Technical and log data: Typically retained for twelve (12) months unless required for an ongoing security investigation.
• Self-exclusion records: Retained for the duration of the exclusion plus a minimum of five (5) years thereafter to prevent re-registration during an active exclusion period.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

The judiku88 Platform uses cookies and similar tracking technologies to operate and improve the service. Cookies are small text files placed on your device by your browser when you visit the Platform.

8.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the Platform to function — session management, login authentication, security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, game lobby view settings, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about Platform usage patterns to help us understand how Members interact with the service and identify areas for improvement. This data does not identify you personally.
• Security cookies: Used by our fraud monitoring systems to identify unusual session behaviour and protect your account from unauthorised access.

8.2 Cookie Control. You can manage or disable cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to and using the judiku88 Platform. Disabling functional cookies may affect your experience. For detailed guidance on managing cookies in major browsers, refer to your browser's help documentation.

judiku88 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed on the Platform. These measures include:

• SSL 256-bit encryption on all data in transit between your browser and judiku88 servers;
• Encryption at rest for sensitive stored data including identity documents and financial records;
• Access controls restricting data access to judiku88 personnel whose roles require it, on a least-privilege basis;
• Two-factor authentication available for all Member accounts and mandatory for relevant administrative functions;
• Regular security assessments including penetration testing and vulnerability scanning;
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable regulatory requirements.

Notwithstanding these measures, no method of electronic transmission or storage is completely secure. judiku88 cannot guarantee absolute security of your data. In the event of a data breach that poses a significant risk to your rights, judiku88 will notify affected Members and, where required, the relevant regulatory authority, in accordance with applicable breach notification requirements.

Subject to applicable law and our regulatory obligations, you have the following rights in respect of the personal data judiku88 holds about you:

• Right of access: You may request a copy of the personal data judiku88 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data. You can update basic account details directly in Account Settings; for changes requiring identity re-verification, contact support.
• Right to erasure: You may request deletion of your personal data. Note that judiku88 is required by its gaming authority licence and applicable law to retain certain data for minimum periods (see Section 7), which may limit this right.
• Right to restrict processing: In certain circumstances, you may request that judiku88 limit the processing of your data while a dispute or request is being assessed.
• Right to data portability: Where processing is based on your consent or contract performance, you may request a structured, machine-readable copy of your data.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw consent at any time without affecting prior processing.
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes, subject to judiku88's overriding legitimate interests and licence obligations.

To exercise any of these rights, please contact judiku88 at [email protected] with "Data Rights Request" in the subject line. We will respond within 14 business days. Identity verification will be required before processing any data rights request.

As part of judiku88's responsible gaming obligations under our gaming authority licence, we process certain Member data for player protection purposes. This includes monitoring of gameplay patterns for indicators of problem gambling behaviour, enforcement of self-exclusion requests and deposit limits set by Members, and communication of responsible gaming information to Members who exhibit relevant behavioural indicators.

Self-exclusion requests submitted through your Account Settings are processed within 24 hours. Self-exclusion records are retained for the exclusion period plus a minimum of five years to prevent re-registration. You may not withdraw a permanent self-exclusion request once confirmed.

Data processed for responsible gaming purposes is used solely to protect Member welfare and fulfil judiku88's licence obligations. It is not used for profiling for marketing purposes. For full information on the responsible gaming tools available to judiku88 Members, please visit our Responsible Gaming page.

The judiku88 Platform is strictly intended for adults aged 21 years and above. judiku88 does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the registration process and again prior to the first withdrawal through the KYC process.

If judiku88 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all associated data will be reviewed, and the Member will be notified. Any funds will be returned in accordance with our Terms and Conditions. If you believe a minor has registered on the judiku88 Platform, please contact us immediately at [email protected].

judiku88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — for example, where we introduce a new purpose for processing or share data with a new category of third party — judiku88 will provide at least 14 days' notice by email to registered Members before the changes take effect. For non-material changes, the updated Policy will be effective immediately upon publication on the Platform.

Your continued use of the judiku88 Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with a material change, you may close your account before the change takes effect by contacting support.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by judiku88, please contact us through the following channel:

judiku88 is committed to resolving privacy-related concerns promptly and transparently. Where you are not satisfied with our response, you may refer the matter to the relevant data protection authority in your jurisdiction or to the gaming authority under whose licence judiku88 operates, details of which are available upon request.