Myjudi Privacy Policy – Your Personal Data Protection

1Introduction & Scope of This Policy

This Privacy Policy describes the privacy practices of myjudi ("we", "our Platform") regarding personal information collected through the website myjudi.onl, the official myjudi mobile app, and all related services (collectively, the "Platform").

We are committed to protecting your privacy and handling your personal data responsibly, transparently, and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable data protection laws.

By registering a myjudi account or using our Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the data collection and usage practices described herein. If you do not agree, please discontinue use of the Platform and contact us to close your account.

This Policy applies to all users of the myjudi Platform, including website visitors, prospective members, registered members, and former members whose data remains in our systems.

2Types of Information We Collect

Myjudi collects your personal information through various means when you interact with our Platform. The following are the categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive data such as your medical information, religious beliefs, or political views.

3How We Use Your Information

The personal data we collect is used solely for legitimate and transparent purposes. The following are the primary purposes for which myjudi uses your data:

• Account Management: Creating and maintaining your account, processing registration, and verifying your identity through the legally mandated KYC process.
• Transaction Processing: Processing all deposits, withdrawals, and fund transfers securely and efficiently through your chosen payment method.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and Platform abuse by irresponsible parties.
• Service Communications: Sending important notifications regarding your account, transaction verification, security updates, and changes to terms of service.
• Customer Support: Responding to inquiries, resolving complaints, and providing the technical assistance you need.
• Responsible Gaming: Monitoring usage patterns to identify problem gambling risks and providing appropriate self-management tools.
• Legal Compliance: Fulfilling reporting obligations to relevant authorities, particularly under the Anti-Money Laundering Act 2001.
• Platform Improvements: Analyzing usage data in aggregate and anonymized form to improve Platform features and the overall user experience.

We do not use your data for automated decision-making that significantly affects your rights without human review. Any important decisions relating to your account involve review by our qualified staff.

4Information Sharing & Disclosure

Myjudi does not sell, rent, or transfer your personal information to third parties for their own marketing purposes. However, in the course of operating the Platform, we may share your information with the following parties under limited circumstances:

• Payment Service Providers: Authorised payment gateways for the purpose of processing your deposits and withdrawals. They receive only the minimum information required to complete the transaction.
• KYC Service Providers: Third-party identity verification companies we engage to conduct KYC checks as required by law.
• Technology Service Providers: Cloud computing, cybersecurity, and technical infrastructure service providers that assist us in operating the Platform. All such providers are bound by strict confidentiality agreements.
• Statutory Authority: Law enforcement agencies, courts, or regulatory bodies when we are required to do so by law or a valid court order.
• Fraud Prevention: Industry bodies or other platforms in the specific context of preventing known fraud or criminal activity related to our Platform.

5Our Data Security Measures

Myjudi invests seriously in security infrastructure to ensure your personal data is protected at all times. The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and myjudi's servers is protected by 256-bit SSL/TLS encryption, equivalent to international banking standards.
• Two-Factor Authentication (2FA): An additional security layer that requires verification through your mobile device each time you log in from a new device.
• 24/7 Monitoring: Our security team monitors Platform activity around the clock to detect and respond to any security threats promptly.
• Strict Access Controls: Only authorised staff who require access to perform their duties may access members' personal data.
• Encrypted Data Backup: All data is regularly backed up to secure locations with full encryption to ensure continuity of service.
• Regular Security Testing: Our platform undergoes regular penetration testing and security audits conducted by independent security experts.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. In the event of any security incident involving your data, we will notify you and the relevant authorities within the timeframe required by law.

6Cookies & Tracking Technology

Myjudi uses cookies and similar tracking technologies to enhance your experience on our Platform. The following are the types of cookies we use:

• Essential Cookies: Required for core Platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance Cookies: Collecting information on how you use the Platform (pages visited, time spent) to help us improve performance and user experience.
• Functional Cookies: Enables the Platform to remember your preferences such as language, location, and display settings to deliver a more personalized experience.
• Analytics Cookies: Used to understand aggregated Platform usage patterns for product improvement purposes. This data is processed anonymously.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the Platform. For detailed instructions on managing cookies, refer to your web browser's help documentation.

7Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by myjudi:

To exercise any of the above rights, contact our Data Protection Officer by email at [email protected]. We will process your request within 30 calendar days of receipt. For complex requests, we reserve the right to extend this period to 60 days with prior notice to you.

8Data Retention Period

Myjudi retains your personal data for as long as your account is active and for a reasonable period thereafter based on applicable business and legal requirements. Specifically:

• Active Account Data: Stored for the duration your account remains active on the myjudi Platform.
• Financial Transaction Records: Stored for a minimum of 7 years after the transaction occurs, in line with the requirements of Malaysia's Anti-Money Laundering Act 2001.
• KYC Documents: Stored for a minimum of 6 years after the business relationship ends, in accordance with regulatory compliance requirements.
• Security Logs: Stored for 2 years for security investigation and fraud detection purposes.
• Support Communications: Stored for 3 years for reference and dispute resolution purposes.
• Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, your data will be securely deleted in accordance with established data disposal procedures, or anonymised if the data is required for statistical or research purposes.

9Changes to This Privacy Policy

Myjudi reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be communicated to you through:

• In-app or on-site notification at least 14 days before changes take effect.
• Email notification to your registered email address for material changes.
• Update the "Updated" date at the top of this document.

Continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account and request data deletion in accordance with your rights under the PDPA.

10Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how we handle your personal data, or wish to exercise any of your rights under the PDPA, please contact our Data Protection Officer (DPO):

We are committed to addressing all privacy enquiries and complaints seriously and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).