Privacy Policy

1. Introduction

Judiku ("we", "us", "our", or "the Company") operates the online gaming platform accessible at judiku.cam (the "Platform"). This Privacy Policy (the "Policy") sets out, in clear and accessible terms, how the Company collects, processes, stores, protects, and uses personal data belonging to individuals ("Users", "you", or "your") who register, access, or use the Platform and its associated services.

This Policy applies to all Users of the Judiku Platform, including registered members, prospective members who browse the Platform without registering, and all persons who contact Judiku via any support channel, whether by live chat or by email to [email protected].

We are committed to processing personal data lawfully, fairly, and transparently. By registering an account or using any part of the Judiku Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with the terms of this Policy, you must discontinue use of the Platform immediately.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or indirectly, including name, identification number, contact details, financial account information, and online identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, whether or not by automated means — including collection, storage, use, disclosure, deletion, or any other handling of such data.
• "Data Controller" means Judiku, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of Judiku and under Judiku's instructions.
• "Cookies" means small text files stored on a User's device by a web browser, used to remember session information and preferences.
• "KYC" means Know Your Customer procedures, comprising identity verification documentation requirements imposed by anti-money laundering (AML) and responsible gaming compliance obligations.
• "Account" means a registered member account on the Judiku Platform.
• "Platform" means the Judiku website, mobile interface, and all associated gaming and betting services available at judiku.cam.

3. Data We Collect

Judiku collects only the personal data that is necessary for the legitimate operation of the Platform, fulfilment of our legal obligations, and delivery of a safe and high-quality gaming experience. The categories of personal data we collect include:

3.1 Identity & Registration Data

• Full legal name as it appears on your MyKad or passport
• Date of birth (to verify you are aged 21 or above)
• Gender
• Nationality and country of residence
• Government-issued identification number (e.g., MyKad IC number)

3.2 Contact Data

• Email address
• Malaysian mobile phone number
• Residential address (where provided for KYC or correspondence purposes)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., registered e-wallet phone number, bank account number last four digits, cryptocurrency wallet addresses)
• Account balance and transaction history
• Bonus and promotional credit history

3.4 KYC Verification Documents

• Scanned or photographed copy of government-issued identity document (MyKad front and back, or passport)
• Proof of address documentation (where requested)
• Selfie or facial photograph (where required for liveness verification)

3.5 Gaming & Behavioural Data

• Game session logs, bet history, wagering totals, and win/loss records
• Sports betting activity including markets, stakes, and outcomes
• Platform feature usage patterns and navigation behaviour
• Responsible gambling preferences and limit settings

3.6 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration and log timestamps
• Cookie identifiers and tracking pixel data

3.7 Communications Data

• Records of live chat conversations with our support team
• Email correspondence directed to [email protected]
• Feedback, complaints, or enquiries submitted through the Platform

4. How We Collect Your Data

We collect personal data through the following means:

4.1 Directly From You

When you register an account on the Judiku Platform, complete KYC verification, make a deposit via any of our supported Malaysian payment methods (including Touch 'n Go eWallet, Boost eWallet, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, USDT TRC20, BTC, or ETH), place bets, contact our support team, or interact with any promotional feature on the Platform.

4.2 Automatically Through Platform Use

Technical and behavioural data is collected automatically when you access the Platform. This is done using cookies, web beacons, server logs, and similar tracking technologies embedded in the Platform. This data collection is necessary for platform security, fraud prevention, session management, and performance analytics.

4.3 From Third-Party Service Providers

We may receive data from third-party payment processors (such as FPX gateway providers), identity verification services, fraud screening tools, and game software providers. Such data is received solely for the purposes of completing transactions, verifying identity, and ensuring platform integrity.

5. How We Use Your Data (Data Processing)

Judiku processes your personal data for the following specific purposes:

6. Legal Basis for Processing

Judiku processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the account agreement with you — including account setup, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) legislation, know your customer (KYC) requirements, age verification obligations (21+), and regulatory reporting duties.
• Legitimate Interest: Processing carried out in pursuit of Judiku's legitimate business interests — including fraud detection, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your rights and interests.
• Consent: Processing carried out with your freely given, specific, informed, and unambiguous consent — principally in relation to opt-in marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

Judiku does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We disclose personal data only in the following limited circumstances:

7.1 Payment Service Providers

We share necessary transaction data with payment processors to facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency networks. Payment data shared is limited to what is required to process the specific transaction.

7.2 Identity Verification Providers

We engage third-party KYC and identity verification service providers to assist with document verification and liveness checks. These providers process identity data solely under our instructions and in accordance with applicable data protection law.

7.3 Game Software Providers

Game providers whose titles are hosted on the Judiku Platform may receive pseudonymised gaming session data (such as session ID, stake, and game result) for the purpose of game certification, dispute resolution, and regulatory audit. No directly identifiable personal data such as full name or ID number is shared with game providers unless required for a specific dispute.

7.4 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required or compelled to do so, or where disclosure is necessary to prevent or detect crime, protect the safety of individuals, or defend Judiku's legal rights.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's assets, personal data held by Judiku may be transferred to the successor entity. You will be notified of any such transfer in advance where reasonably practicable.

8. Cookies & Tracking Technologies

The Judiku Platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, analyse usage patterns, and improve platform performance. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred game categories, and responsible gambling limit configurations.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform — including page visit frequency, navigation paths, and feature usage. This data helps us improve the Platform experience.
• Security & Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, unauthorised account access, and other security threats. These are a necessary component of the Platform's security infrastructure.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may limit your ability to use all features of the Platform. Strictly necessary and security cookies cannot be disabled as they are integral to the operation of your account.

9. Data Retention

Judiku retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Specific retention periods vary by data category:

• Account and identity data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, in accordance with anti-money laundering and regulatory record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years in compliance with applicable financial recordkeeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Gaming and session logs: Retained for a minimum of three (3) years for dispute resolution and audit purposes.
• Communications data (live chat, email): Retained for two (2) years unless a longer period is required for an ongoing dispute or investigation.
• Marketing data: Retained for the period of your opt-in consent, plus a reasonable period after withdrawal to demonstrate compliance with marketing laws.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry best practices.

10. Data Security

Judiku implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption across all data transmission between your device and the Judiku Platform.
• Encrypted storage of sensitive personal and financial data at rest using industry-standard encryption protocols.
• Strict access controls ensuring that personal data is accessible only to authorised staff who require it for their specific job function.
• Regular security audits and penetration testing of the Platform's infrastructure.
• Two-factor authentication (2FA) available to all registered Users for account protection.
• Continuous monitoring of Platform systems for anomalous activity, fraud indicators, and security incidents.

While we take all reasonable steps to protect your personal data, no internet-based system is entirely immune to security risks. In the event of a personal data breach that is likely to result in high risk to your rights and freedoms, we will notify affected Users and relevant authorities in accordance with applicable data protection law.

11. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in relation to your personal data held by Judiku:

1. Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed. We will respond to verified access requests within a reasonable period.
2. Right to Rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many basic profile details can be updated directly through your account settings; for identity and KYC data corrections, please contact support.
3. Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is unlawful. Note that this right is subject to our legal retention obligations — we may be required to retain certain data notwithstanding an erasure request.
4. Right to Restriction of Processing: You may request that we limit the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing pending verification of legitimate grounds.
5. Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
6. Right to Object: You have the right to object to the processing of your personal data where it is carried out on the basis of legitimate interest, including profiling for direct marketing purposes.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact us via live chat on the Platform or by emailing [email protected]. We may need to verify your identity before processing your request. We will respond within a reasonable timeframe and in accordance with applicable law.

12. Children's Privacy

The Judiku Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Registration by minors is prohibited and constitutes a violation of our Terms & Conditions.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe that their child may have accessed the Platform and provided personal data are encouraged to contact us immediately at [email protected].

13. Cross-Border Data Transfers

In operating a digital platform that serves users across Malaysia, Judiku may transfer personal data to data processors and service providers located outside of Malaysia. Such transfers are conducted in accordance with applicable data protection requirements and are subject to appropriate safeguards to ensure that your personal data receives an adequate level of protection.

Where personal data is transferred to third-party processors, those processors are bound by data processing agreements that restrict their use of your data to the specific purposes for which it was transferred and require them to maintain appropriate security measures.

14. Third-Party Links & Services

The Judiku Platform may contain references to third-party services, including payment gateways and game providers. When you interact with third-party payment services — such as the Touch 'n Go eWallet interface, Boost payment gateway, GrabPay, DuitNow, FPX, or cryptocurrency networks — you are temporarily leaving the Judiku environment and interacting with that third party's own systems and privacy practices.

Judiku is not responsible for the privacy practices, security standards, or data handling of third-party platforms. We recommend reviewing the privacy policies of any third-party services you use in connection with your Judiku account.

15. Amendments to This Policy

Judiku reserves the right to update or amend this Privacy Policy at any time. Material changes to the Policy will be communicated to registered Users via email or via a prominent notice on the Platform, with advance notice where reasonably practicable. The "Last Updated" date at the top of this Policy will reflect the effective date of the most recent revision.

Your continued use of the Platform following the effective date of any amendments constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you must cease using the Platform and request closure of your Account.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact the Judiku Data Privacy team using the following channels:

• Live Chat: Available 24/7 directly on the Judiku Platform — the fastest route for urgent privacy matters.
• Email: [email protected] — please include "Privacy Policy Query" in the subject line. We aim to respond within 5 business days.

Our support team serves players across Malaysia — including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and beyond — around the clock.