Privacy Policy — How imjudi Handles Your Data

imjudi (referred to in this Policy as "imjudi", "we", "us", or "our") is the data controller responsible for personal data collected through the imjudi platform at imjudi.com ("Platform"). imjudi operates under an international gaming licence and processes personal data in accordance with applicable data protection legislation and our licensing authority's player protection requirements.

This Policy applies to all individuals who access or use the imjudi Platform, including registered account holders ("Players"), visitors who browse the Platform without registration, and individuals who contact imjudi through customer support channels. By using the imjudi Platform, you acknowledge that you have read and understood this Privacy Policy.

imjudi collects the following categories of personal data, to the extent provided by you or generated through your use of the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth;
• Residential address;
• Email address registered to your imjudi account;
• Mobile phone number;
• Copies of identity documents provided for KYC verification (e.g., MyKad, passport).

2.2 Financial Data

• Payment method identifiers (e.g., masked Touch n Go eWallet account reference, Boost account identifier, FPX bank account reference) — imjudi does not store full card numbers or banking login credentials;
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used;
• Wallet balance history;
• Source-of-funds documentation where required under AML compliance procedures.

2.3 Gaming & Behavioural Data

• Bet history, game session records, win/loss data across all imjudi products;
• Live casino session timestamps and duration;
• Sportsbook bet placement records including markets, odds, and stake amounts;
• Responsible gaming tool activations (deposit limit settings, self-exclusion requests, cooling-off periods).

2.4 Technical & Device Data

• IP address at the time of login and transaction;
• Device type, operating system, and browser version;
• Session identifiers and authentication tokens;
• Cookies and similar tracking technologies as described in Section 8.

imjudi collects personal data through the following means:

• Direct provision: information you enter during account registration, KYC document upload, customer support interactions, and responsible gaming tool configuration;
• Automated collection: technical and behavioural data generated automatically through your use of the Platform, including via cookies, session tracking, and server logs;
• Payment processors: transaction confirmation data received from Malaysian payment providers (Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks) and cryptocurrency processors (USDT TRC20);
• Third-party game providers: game session records and outcome data passed from licensed game suppliers whose products are integrated into the imjudi Platform;
• Identity verification services: confirmation data from KYC verification partners where document authentication services are used.

imjudi processes your personal data for the following purposes, each supported by a lawful basis under applicable data protection law:

• Account management and service delivery (Contractual necessity): To create and maintain your imjudi account, process deposits and withdrawals in MYR, and deliver gaming services.
• Identity verification and KYC compliance (Legal obligation): To verify your identity and age (21+), comply with anti-money-laundering (AML) requirements, and satisfy our gaming licence conditions.
• Fraud prevention and security (Legitimate interest): To detect and prevent unauthorised account access, fraudulent transactions, and exploitation of Platform vulnerabilities.
• Responsible gaming monitoring (Legal obligation and Legitimate interest): To identify potential problem gambling behaviour, enforce self-imposed limits, and comply with responsible gaming obligations under our licence.
• Customer support (Contractual necessity): To respond to your queries, resolve disputes, and process complaints.
• Platform improvement and analytics (Legitimate interest): To analyse anonymised usage patterns, improve Platform performance, and optimise user experience.
• Marketing communications (Consent): To send promotional offers and bonus notifications where you have expressly opted in. You may withdraw this consent at any time through your account settings.

imjudi does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Licensed game providers: Game session identifiers are shared with the game suppliers whose products you access. These suppliers are contractually bound to process data only for game delivery purposes and are themselves subject to gaming licence data protection requirements.
• Payment processors: Transaction data is shared with Malaysian payment providers (Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, USDT TRC20) to the extent required to process your requested financial transactions.
• KYC and identity verification partners: Identity document data is shared with accredited verification service providers solely for the purpose of fulfilling our KYC obligations.
• Regulatory and law enforcement authorities: imjudi may disclose personal data where required to do so by our licensing authority, a competent court, or law enforcement agency under applicable legal process.
• Professional advisors: Legal, audit, and compliance advisors who are subject to professional confidentiality obligations.

6.1 The imjudi Platform is operated under an international gaming licence and certain of our service providers — including game suppliers and technical infrastructure providers — may process your data in jurisdictions outside Malaysia.

6.2 Where personal data is transferred outside of Malaysia, imjudi ensures that appropriate safeguards are in place for such transfers, including contractual protections equivalent to applicable data protection standards. Transfers to game providers and payment processors are governed by data processing agreements that impose obligations consistent with our data protection commitments.

6.3 By using the imjudi Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy, subject to the safeguards described herein.

7.1 imjudi retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal, regulatory, and gaming licence obligations.

7.2 In practice, account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under our gaming licence. KYC documentation is retained for a minimum of five (5) years following the completion of the relevant KYC process or account closure, whichever is later.

7.3 Where data is retained solely for regulatory compliance purposes following account closure, access to that data is restricted to authorised compliance personnel and is not used for any commercial, marketing, or analytical purpose.

7.4 Data that is no longer required and is not subject to a mandatory retention obligation is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

8.1 imjudi uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that help us operate the Platform efficiently and improve your user experience.

8.2 imjudi uses the following categories of cookies:

• Essential cookies: Required for the Platform to function, including session authentication, maintaining your login state, and security protections. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences, such as language settings and interface configurations, to personalise your Platform experience between sessions.
• Analytics cookies: Used to collect anonymised information about how Players use the Platform, including pages visited and session duration, to help us improve Platform performance and content.

8.3 imjudi does not use advertising or third-party behavioural tracking cookies for the purpose of serving targeted advertisements on other websites.

8.4 You may manage cookie preferences through your browser settings. Disabling essential cookies will affect Platform functionality, including your ability to maintain an authenticated session.

9.1 imjudi implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Measures in place include:

• TLS encryption for all data in transit between your device and imjudi's servers;
• Encryption of sensitive data fields at rest within imjudi's databases;
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented business need;
• Two-factor authentication (2FA) available on all imjudi player accounts;
• Automated monitoring for anomalous login patterns and transaction activity indicative of account compromise;
• Regular security reviews and vulnerability assessments of Platform infrastructure.

9.2 Notwithstanding these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. imjudi will not be held liable for unauthorised access to your account arising from your failure to maintain adequate credential security practices.

Subject to applicable law and our legitimate regulatory obligations, you have the following rights in respect of your personal data held by imjudi:

• Right of access: You may request a copy of the personal data imjudi holds about you;
• Right of rectification: You may request correction of inaccurate or incomplete personal data;
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal obligation requires its retention;
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances, including where you contest its accuracy or object to processing;
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time through your account settings without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our data protection team at: [email protected]. We will respond to verified requests within 30 days of receipt.

11.1 The imjudi Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. Registration is prohibited for minors, and imjudi enforces age verification through KYC document checks prior to processing withdrawals.

11.2 If imjudi becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account permanently closed. Any funds in the account will be returned following identity verification under imjudi's minor account closure procedure.

The imjudi Platform does not contain links to third-party external websites beyond the game content delivered through integrated licensed game supplier platforms. imjudi is not responsible for the privacy practices of any third-party game supplier, payment processor, or any other external service whose data processing activities are governed by their own privacy policies. imjudi's Privacy Policy applies solely to data processing conducted directly by imjudi.

13.1 imjudi may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our gaming licence requirements. Material changes will be communicated to registered Players via a notice on the Platform or by email to the registered account address no fewer than fourteen (14) days prior to the effective date of the change.

13.2 The "Last updated" date at the top of this Policy indicates when the most recent revision took effect. Your continued use of the imjudi Platform after the effective date of any revision constitutes your acceptance of the updated Policy. We recommend reviewing this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or imjudi's data processing practices, please contact our data protection team through the in-platform live chat (available 24/7) or by email at: [email protected]

Please note: the above email address is displayed as plain text only and is not a clickable link. Copy it manually into your email client to contact us.

imjudi aims to acknowledge all privacy-related written enquiries within 48 hours and to provide a substantive response within 30 days of receiving a verified request.