Privacy Policy My Judi – Your Personal Data Protection

My judi ("we", "our platform") is an online entertainment platform operating in Malaysia via myjudi.ws. We believe privacy is more than a legal obligation — it is a fundamental right of every user. This Privacy Policy has been crafted with full transparency to explain exactly how your personal data is handled.

This Privacy Policy applies to all registered members, website visitors, and anyone who interacts with any my judi service. It is in full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary legislation governing how companies in Malaysia collect, process, and store personal data.

When we refer to "personal data", we mean any information that can be used to identify you directly or indirectly — including your name, phone number, email address, financial information, and platform usage data.

My judi collects the following categories of personal data for legitimate purposes and platform operations:

2.1 Identity Data

• Full name as stated on your MyKad or passport
• Date of birth for age verification purposes (18 years and above)
• MyKad / passport number for the KYC (Know Your Customer) process
• Identity document photo if requested during the account verification process

2.2 Contact Data

• Email address for account communications and notifications
• Malaysian phone number for SMS verification and support
• Residential address for specific KYC requirements

2.3 Financial Data

• eWallet Information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) — registered phone number only
• Bank account information Malaysia for transfers via FPX, Maybank2u, or CIMB Clicks
• Transaction history — deposits, withdrawals, and betting records in RM

2.4 Technical & Usage Data

• IP address, device type, operating system, and web browser
• Login and logout session data
• Game history and betting activity on the my judi platform
• User preferences and account settings

My judi collects personal data through several transparent methods:

My judi uses members' personal data solely for legitimate and transparent purposes, as follows:

• Account Management: Creating, verifying, and maintaining your my judi member account
• Transaction Processing: Process deposits and withdrawals in MYR securely and efficiently
• Identity Verification (KYC): Comply with Malaysian legal requirements for identity verification to prevent fraud and money laundering
• Platform Security: Detect and prevent fraudulent activity, multi-account usage, and other security threats
• Customer Support: Assist with and resolve any enquiries or complaints you submit
• Experience Personalisation: Recommending games, promotions, and relevant content based on your preferences and gaming history
• Important Communications: Sending account notifications, security updates, and important information about my judi services
• Legal Compliance: Fulfil obligations under the PDPA 2010 and other applicable Malaysian laws
• Marketing (with consent): Sending promotional information and exclusive offers — only to members who have given explicit consent

My judi does not sell, rent, or trade members' personal data to any third party for marketing purposes. However, in certain circumstances, data may be shared with the following parties:

5.1 Technology Service Providers

Game providers (Evolution Gaming, Pragmatic Play, SA Gaming, etc.) receive only the minimum data required to deliver their gaming services. All providers are bound by strict confidentiality agreements.

5.2 Payment Processors

Payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers (Maybank, CIMB) receive the information necessary to process financial transactions. They are subject to their own privacy policies and Malaysian financial regulations.

5.3 Authorities

My judi will disclose the required data to the relevant Malaysian authorities when required by law, court order, or official investigation — for example, in cases involving fraud, money laundering, or cybercrime.

My judi implements multiple layers of technical and organisational security measures to protect members' personal data:

• 256-bit SSL Encryption: All communications between your device and my judi's servers are encrypted using TLS 1.3 with 256-bit keys
• Data-at-Rest Encryption: Sensitive data stored in databases (such as financial information) is encrypted using AES-256
• Two-Factor Authentication (2FA): Members can enable 2FA for an additional layer of protection when logging into their account
• Internal Access Controls: Only authorised my judi staff who require access to specific data are permitted to do so — on a strict "need-to-know" basis.
• Security Auditing: my judi's systems are regularly audited by independent security experts to identify and address vulnerabilities
• 24/7 Monitoring: An intrusion detection system (IDS) monitors suspicious activity on the my judi platform around the clock

My judi only retains personal data for as long as it is needed for the stated purpose or as required by Malaysian law:

• Active account data: Retained for as long as your account remains active on the my judi platform
• Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysian tax and financial legal requirements
• Security logs: Retained for 12 months for security monitoring and investigation purposes
• KYC Records: Retained for the period required under Malaysia's anti-money laundering laws
• Support communications: Retained for 24 months for quality control and complaint resolution reference

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.

When you close your my judi account, we will initiate the data deletion process within 30 days, unless the data must be retained to fulfil the legal obligations stated above.

As a data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by my judi:

To exercise any of the above rights, please submit a written request to support@myjudi.ws with the subject line "Privacy Rights Request". my judi will process your request within 21 working days.

The my judi website uses cookies and similar tracking technologies to enhance your experience, analyse platform usage, and deliver more relevant content. The following types of cookies are used:

You can manage or disable optional cookies through your web browser settings. However, disabling essential cookies may affect certain features on the my judi platform.

The my judi platform integrates third-party services including game providers (Evolution Gaming, Pragmatic Play, SA Gaming, Microgaming, NetEnt, Playtech) and payment providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX). Your interactions with these services are also subject to their respective privacy policies.

My judi is not responsible for the privacy practices of these third parties. We recommend reviewing the privacy policy of each relevant provider for a more complete understanding.

The my judi platform is strictly inappropriate and prohibited for individuals under the age of 18. We do not knowingly collect personal data from children or minors. Should we discover that data belonging to someone under 18 has been collected inadvertently, we will take immediate steps to delete it.

If you suspect a minor has registered on the my judi platform, please contact us immediately at support@myjudi.ws so that prompt action can be taken.

In the event of a security breach that may impact my judi members' personal data, we will respond according to the following procedures:

• Within 24 hours: The my judi security team will identify and contain the breach
• Within 48 hours: A full risk assessment will be conducted to determine the level of impact
• Within 72 hours: Affected members will be notified via their registered email address, and a report will be submitted to the Department of Personal Data Protection Malaysia if required
• Follow-up actions: Recovery and prevention measures will be implemented, and members will be kept regularly informed of case developments

My judi reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new Malaysian legal requirements.

Any material changes — such as changes to the types of data collected or new purposes of use not previously disclosed — will be communicated to members via:

• Email notification to your registered email address
• Notifications on the my judi platform whenever you log in
• Updates to this page with a new "Last Updated" date

Continued use of the my judi platform after any amendments take effect will be deemed as your acceptance of those changes. If you do not agree with the amendments, please discontinue use and contact us to close your account.

If you have any questions, concerns, or wish to exercise your rights under PDPA 2010 regarding your personal data held by my judi, please contact our Data Protection Officer:

For privacy rights-related requests, please use the email subject "Privacy Rights Request – [Your Full Name]" and include your account number to help speed up processing.