judiku Privacy Policy

1.Introduction

judiku ("we", "us", "our") operates the online gaming platform accessible at judiku.app ("Platform"). This Privacy Policy explains how judiku collects, uses, discloses, and safeguards the personal data of individuals who register an account, visit the Platform, or otherwise interact with judiku's services ("you", "your", "Player").

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should not use the Platform or register an account with judiku.

judiku is committed to protecting your privacy in accordance with the principles of applicable data protection frameworks and the obligations imposed by its international gaming licence. While judiku's Platform is designed for Malaysian players and the interface is in English, the Platform operates under an international licence and is not subject to Malaysian data protection law in any regulatory capacity. This Policy reflects internationally recognised data protection standards.

2.Data We Collect

judiku collects personal data in the following categories:

2.1 Registration Data. When you create a judiku account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to verify your identity, confirm your eligibility to use the Platform (including the 21+ age requirement), and maintain your account.

2.2 Identity Verification Data. To comply with Know Your Customer ("KYC") obligations under our gaming licence, we may collect copies of government-issued identification documents (such as a Malaysian National Identity Card or passport), proof of address, and evidence of payment method ownership.

2.3 Financial Data. We collect transaction records including deposit amounts, withdrawal requests, payment method identifiers (account numbers, eWallet IDs), and MYR balances. We do not store full card numbers or banking credentials — these are handled by our PCI-DSS compliant payment processors.

2.4 Gameplay Data. We collect records of your gaming activity on judiku, including games played, bets placed, outcomes, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, and fraud prevention.

2.5 Technical Data. We automatically collect device information, IP addresses, browser type and version, operating system, referring URLs, and session activity logs when you access the Platform. This data is used for security, fraud detection, and platform performance monitoring.

2.6 Communications Data. If you contact judiku's support team, we retain records of those communications, including chat transcripts, email correspondence, and any information you voluntarily provide during support interactions.

2.7 Marketing Preferences. Where you have consented, we collect your marketing preferences and communication opt-in status to manage promotional communications from judiku.

3.How We Use Your Data

judiku uses your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your judiku account, including authentication and security;
• Identity verification: Fulfilling KYC and age verification requirements under our gaming licence;
• Payment processing: Facilitating deposits and withdrawals in MYR via your chosen payment method, including Touch n Go eWallet, Boost, and bank transfers;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and enforcing self-exclusion arrangements;
• Fraud prevention and security: Detecting and preventing account fraud, collusion, money laundering, and other prohibited activities;
• Platform improvement: Analysing usage patterns to improve the Platform's functionality, performance, and user experience;
• Legal compliance: Meeting obligations under our gaming licence, responding to lawful regulatory or law enforcement requests;
• Marketing (with consent): Sending promotional communications about judiku's products, bonuses, and services where you have opted in.

4.Legal Basis for Processing

judiku processes your personal data on the following legal bases:

4.1 Contractual necessity. Processing required to perform the contract between you and judiku, including account creation, gameplay, and payment processing.

4.2 Legal obligation. Processing required to comply with judiku's obligations under its gaming licence and applicable law, including KYC verification, anti-money-laundering checks, and age verification.

4.3 Legitimate interests. Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics, where those interests are not overridden by your data protection rights.

4.4 Consent. Processing for marketing communications, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5.Data Sharing

judiku does not sell, rent, or trade your personal data. We may share your data with third parties only in the following circumstances:

• Payment processors: To facilitate deposits and withdrawals, relevant transaction data is shared with our payment processing partners, including eWallet providers and banking networks. These partners process data under their own privacy policies and relevant financial regulation;
• Identity verification providers: KYC and age verification data may be shared with certified identity verification service providers;
• Gaming software suppliers: Game providers may receive session and gameplay data necessary to deliver their games through the judiku Platform;
• Regulatory and law enforcement authorities: Where required by law, our gaming licence, or a valid legal order, we may disclose data to relevant authorities;
• Group companies: judiku may share data with affiliated entities within its corporate group for internal administrative purposes, subject to equivalent data protection standards.

All third parties with whom judiku shares data are contractually required to handle that data in accordance with applicable data protection standards and only for the specified purpose.

6.Cookies and Tracking Technologies

judiku uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including session management and authentication;
• Analytics cookies: Used to understand how players interact with the Platform in aggregate, to improve performance and usability;
• Security cookies: Used to detect and prevent fraudulent activity and enforce rate limiting on login attempts.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies may affect your ability to use certain features of the Platform, including login and payment functions.

7.Data Retention

judiku retains your personal data for as long as your account remains active and for such additional period as is required by our gaming licence obligations. Typically, transaction records and KYC documentation are retained for a minimum of five years following account closure, in accordance with anti-money-laundering requirements. Data held solely for marketing purposes is deleted or anonymised upon withdrawal of consent or account closure, whichever is earlier.

8.Security

judiku implements technical and organisational security measures appropriate to the risk of processing your personal data. These include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for data at rest, access controls limiting data access to authorised personnel on a need-to-know basis, regular security assessments, and incident response procedures. In the event of a data breach that poses a risk to your rights and freedoms, judiku will notify affected players in accordance with applicable requirements.

9.Your Rights

Subject to applicable law and the terms of our gaming licence, you have the following rights in relation to your personal data held by judiku:

• Right of access: Request a copy of the personal data we hold about you;
• Right to rectification: Request correction of inaccurate or incomplete data;
• Right to erasure: Request deletion of your data where no overriding legal basis for retention exists;
• Right to restriction: Request that we restrict processing of your data in certain circumstances;
• Right to portability: Receive your data in a structured, machine-readable format;
• Right to object: Object to processing based on legitimate interests;
• Right to withdraw consent: Withdraw marketing consent at any time.

To exercise any of these rights, contact judiku's support team. We will respond within 30 days. Identity verification may be required before we process your request.

10.Children's Privacy

The judiku Platform is strictly restricted to individuals aged 21 and above. judiku does not knowingly collect personal data from individuals under 21 years of age. If we become aware that an account has been registered by a person below the minimum age, we will immediately close the account, suspend any pending transactions, and delete associated personal data except where retention is required for legal compliance purposes.

11.Changes to This Privacy Policy

judiku reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the Platform prior to the change taking effect. The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform following notification of a material change constitutes acceptance of the revised Policy.

12.Contact

For any questions, concerns, or requests relating to this Privacy Policy or judiku's data handling practices, you may contact our team at: [email protected]

Please include "Privacy Request" in the subject line of your message to ensure it is routed to the appropriate team. See also: Terms & Conditions | Responsible Gaming | FAQ.