judiku Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how judiku ("we", "us", "our", "judiku") collects, processes, stores, and discloses personal data obtained from individuals ("you", "User") who access or use the judiku website at judiku.co and all associated services, including the judiku sportsbook, judiku Casino, slots, and account management features (collectively, the "Platform").

judiku is committed to handling personal data responsibly, lawfully, and with respect for individuals' privacy rights. This Policy is drafted in compliance with applicable data protection legislation and the requirements of the international gaming authority licensing frameworks under which judiku operates. By registering an account or using the judiku Platform, you acknowledge that you have read, understood, and accept the practices described in this Policy.

2. Data Controller

judiku is the data controller responsible for personal data collected through the judiku Platform. As data controller, judiku determines the purposes and means by which personal data is processed. All data protection queries, access requests, and complaints should be directed to the judiku Data Protection contact, details for which are set out in Section 15 of this Policy.

3. Personal Data We Collect

judiku collects the following categories of personal data depending on how you interact with the Platform:

Category	Examples	Source
Identity Data	Full legal name, date of birth, nationality, government-issued ID number	Provided by you during registration or verification
Contact Data	Email address, Malaysian mobile telephone number, residential address	Provided by you during registration or account updates
Financial Data	Payment method type, transaction amounts, deposit/withdrawal history, e-wallet identifiers	Generated during Platform transactions; payment details processed via third-party gateways
Technical Data	IP address, browser type, device identifiers, operating system, session timestamps	Collected automatically when you access the Platform
Usage Data	Betting history, game play data, pages visited, search queries, clickstream data	Generated automatically through your use of the Platform
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Generated when you contact judiku support
Verification Data	Copies of identity documents, proof of address, payment method ownership evidence	Provided by you in response to KYC/AML verification requests

judiku does not collect sensitive special categories of personal data (such as health, biometric, or criminal records) unless specifically required for regulatory compliance purposes and only with your explicit consent or as otherwise permitted by law.

4. How We Use Your Personal Data

judiku processes personal data for the following purposes:

• Account administration: To create, manage, and maintain your judiku account, including identity verification, password management, and account security.
• Service delivery: To operate and provide the judiku sportsbook, live casino, and slots services, process bets and wagers, and manage deposits and withdrawals.
• Payments processing: To facilitate MYR transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and card networks. Payment credentials are handled through tokenised third-party payment gateways and are not stored on judiku's own servers.
• Legal and regulatory compliance: To fulfil obligations under anti-money laundering (AML) legislation, know-your-customer (KYC) requirements, age verification mandates, and the conditions of judiku's gaming licence, including mandatory player activity reporting.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and abuse of the judiku Platform.
• Responsible gaming: To monitor player behaviour for indicators of problem gambling, enforce self-exclusion elections, and apply deposit and session limits set by the user.
• Customer support: To respond to enquiries, resolve disputes, and handle formal complaints submitted through judiku's support channels.
• Platform improvement: To analyse aggregated usage data for the purpose of improving the judiku Platform, personalising content, and enhancing user experience.
• Marketing communications: To send promotional offers, bonus notifications, and product updates to users who have not opted out of marketing communications. See Section 13 for opt-out details.

5. Legal Bases for Processing

judiku processes your personal data only where a lawful basis exists under applicable data protection law. The primary legal bases relied upon by judiku are:

• Contractual necessity: Processing is necessary to perform the contract between you and judiku — i.e., to provide the betting and gaming services you have registered to use.
• Legal obligation: Processing is required to comply with AML, KYC, age verification, and gaming licence obligations imposed on judiku by applicable law and regulatory authorities.
• Legitimate interests: judiku processes certain data (such as Technical Data and Usage Data) on the basis of its legitimate interests in operating a secure, compliant, and commercially viable gaming platform, provided those interests are not overridden by your fundamental rights.
• Consent: Where judiku relies on consent (e.g., for certain marketing communications or optional data collection), you may withdraw consent at any time by contacting judiku support or updating your account preferences.

6. Data Sharing and Disclosure

judiku does not sell your personal data to third parties. judiku may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: Third-party payment gateway operators processing MYR transactions on behalf of judiku, including e-wallet providers and FPX banking network operators.
• Identity verification providers: Third-party KYC and AML service providers used to verify identity documents and screen against sanctions lists as required by judiku's licensing obligations.
• Game software providers: Licensed casino and slot game studios whose software is integrated into the judiku Platform. These providers may receive anonymised session data necessary to deliver their games.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers supporting the operation of the judiku Platform.
• Regulatory and law enforcement authorities: judiku may disclose personal data to gaming regulatory authorities, financial intelligence units, tax authorities, or law enforcement agencies where required by law or court order.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by judiku in connection with legal, regulatory, or financial matters.

All third-party service providers engaged by judiku are subject to data processing agreements requiring them to handle personal data only for the specified purpose and in accordance with applicable data protection standards.

7. International Data Transfers

The judiku Platform and some of its third-party service providers may process personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, judiku ensures that appropriate safeguards are in place, which may include standard contractual clauses approved under applicable data protection frameworks, adequacy decisions, or equivalent binding protection mechanisms.

8. Data Retention

judiku retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your judiku account and for such additional period as required by law. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required under AML and gaming licence obligations.
• Financial transaction records are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.
• Customer support communications are retained for three (3) years following resolution of the relevant matter.
• Technical and usage data may be retained in aggregated, anonymised form beyond these periods for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with judiku's data disposal procedures.

9. Cookies and Tracking Technologies

judiku uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management, login state, and security tokens. These cannot be disabled without impairing Platform functionality.
• Analytical cookies: Used to collect aggregated data about Platform usage, including page visits, session duration, and navigation paths, to inform Platform improvements.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to personalise your judiku experience.
• Marketing cookies: Used where you have consented to receive personalised promotional content. These may include pixels or tracking tags that monitor interaction with judiku marketing materials.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the judiku Platform. judiku's cookie practices are consistent with the requirements of its international gaming authority licensing frameworks.

10. Security Measures

judiku implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include 256-bit SSL/TLS encryption for all data in transit between your browser and the judiku Platform, tokenised payment credential handling through certified payment gateways, role-based access controls limiting internal access to personal data on a need-to-know basis, regular penetration testing and vulnerability assessments, and incident response procedures for detecting and responding to data security events.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your judiku account credentials. If you believe your account has been compromised, you must notify judiku support immediately.

11. Your Privacy Rights

Subject to applicable data protection law and the requirements of judiku's regulatory obligations, you may have the following rights with respect to your personal data held by judiku:

• Right of access: To request a copy of the personal data judiku holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data where there is no legitimate or legal basis for continued processing. Note that judiku is required by law to retain certain data (particularly AML and KYC records) for defined minimum periods, which may limit the exercise of this right.
• Right to restrict processing: To request that judiku restricts the processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: To receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: To object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact judiku's support team. judiku will respond to all verified requests within thirty (30) days. Identity verification may be required before processing requests to prevent unauthorised data access.

12. Children's Privacy

The judiku Platform is strictly for adults aged 21+. judiku does not knowingly collect personal data from individuals under the age of 21. If judiku becomes aware that personal data has been collected from a person under the minimum age, such data will be deleted immediately and the associated account closed. If you believe a minor has registered on the judiku Platform, please contact support immediately.

13. Marketing Communications

judiku may send you promotional emails, SMS notifications, and in-Platform messages regarding offers, bonuses, and new features on the judiku Platform. You may opt out of marketing communications at any time by: (a) clicking the unsubscribe link in any marketing email; (b) updating your communication preferences in judiku account settings; or (c) contacting judiku support directly.

Opting out of marketing communications does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and mandatory regulatory notices, which judiku will continue to send regardless of marketing preferences.

14. Changes to This Privacy Policy

judiku reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance, or judiku's data processing practices. Material updates will be communicated to registered users via the email address associated with their judiku account and/or by a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the judiku Platform following notification of changes constitutes acceptance of the revised Policy.

15. Contact and Data Protection Enquiries

For all privacy-related queries, data subject rights requests, or complaints regarding judiku's handling of personal data, please contact the judiku support team. The judiku support email address is displayed as plain text on the Platform. judiku is committed to resolving all privacy complaints promptly and to the satisfaction of the affected individual. If you are not satisfied with judiku's response, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.