MyJudi takes the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and the rights you hold over your own data as a MyJudi player.
These cards summarise the core privacy principles behind MyJudi's data practices. They are informational overviews only — the full legally binding policy text follows below.
We collect only the personal data strictly necessary to operate your Account, process transactions, and comply with regulatory KYC requirements. We do not harvest data for unnecessary commercial profiling.
All personal data held by MyJudi is encrypted at rest and in transit using industry-standard 256-bit SSL/TLS protocols. Access to your data is restricted to authorised personnel only, on a strict need-to-know basis.
MyJudi does not sell, rent, or trade your personal data with third parties for marketing purposes. Data is shared only with verified service providers essential to platform operations, or where required by law.
You have the right to access, correct, and request deletion of your personal data held by MyJudi. Submit a request via our support team and we will respond within the timeframes set out in this Policy.
We use cookies and similar tracking technologies for session management, platform analytics, and performance optimisation. Our Cookie Policy explains what each category of cookie does and how to manage your preferences.
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law. Data that is no longer needed is securely deleted or anonymised.
MyJudi ("we", "us", "our", "Company") operates the online gaming and sports betting platform accessible at https://myjudi.cam (the "Platform"). This Privacy Policy ("Policy") describes how MyJudi collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the Platform ("you", "Player", "User").
This Policy applies to all personal data collected through the Platform, including data provided during account registration, during the KYC verification process, through Platform transactions, and through your general use of our services. It applies equally to players accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations.
By creating an Account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the Platform.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any other handling of that data. |
| "Data Controller" | MyJudi, the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of MyJudi, under binding contractual obligations, in accordance with our instructions. |
| "Cookies" | Small text files stored on your device by a web browser at the request of a website, used to retain session information, preferences, and analytics data. |
| "KYC" | Know Your Customer — the identity verification process required before withdrawal services are activated on a Player's Account. |
| "Sensitive Data" | A subset of Personal Data requiring heightened protection, including government-issued identification numbers, financial account details, and biometric data submitted during identity verification. |
When you register an Account, complete KYC verification, make deposits or withdrawals, or contact our support team, you provide us with personal data including but not limited to:
When you access and use the Platform, we automatically collect certain technical and behavioural data, including:
MyJudi processes your personal data for the following purposes:
| Purpose | Details |
|---|---|
| Account Management | Creating, maintaining, and managing your Player Account, including authentication, account settings, and communication of account-related notices. |
| Identity Verification (KYC) | Verifying your identity and age (21+) as required under our regulatory obligations and to prevent fraud and underage gambling. |
| Transaction Processing | Processing deposits, withdrawals, and bonus credits via Malaysian payment channels (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, etc.). |
| Regulatory Compliance | Meeting AML, KYC, and other applicable regulatory requirements, including transaction monitoring and suspicious activity reporting. |
| Platform Security | Detecting and preventing fraud, unauthorised access, bonus abuse, and other prohibited conduct as described in our Terms & Conditions. |
| Customer Support | Responding to queries, resolving complaints, and providing technical assistance via live chat and email. |
| Responsible Gambling | Identifying players who may be experiencing problem gambling and administering self-exclusion, deposit limit, and cooling-off requests. |
| Platform Improvement | Analysing usage data and player behaviour (in aggregate or pseudonymised form) to improve Platform performance, features, and user experience. |
| Marketing Communications | Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. You may opt out at any time. |
MyJudi processes personal data under the following legal bases:
MyJudi does not sell, rent, or trade your personal data. We share personal data only in the following circumstances, and only to the minimum extent necessary:
We engage trusted third-party service providers who process data on our behalf under binding data processing agreements. These providers include payment processing partners (supporting Touch 'n Go eWallet, DuitNow, FPX, and other Malaysian payment channels), identity verification service providers, cloud hosting and infrastructure providers, customer support platform providers, and fraud detection services. All such providers are contractually prohibited from using your data for any purpose beyond the specific service they deliver to MyJudi.
MyJudi may disclose personal data to competent authorities, regulators, law enforcement agencies, or courts where required to do so by applicable law, regulation, legal process, or enforceable governmental request. Where legally permitted, we will endeavour to notify you of such disclosure.
In the event of a merger, acquisition, restructuring, or sale of all or part of MyJudi's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the applicable privacy terms before your data is transferred or subjected to a different privacy policy.
MyJudi operates infrastructure that may involve the transfer of personal data to jurisdictions outside Malaysia. Where such transfers occur, we implement appropriate safeguards to ensure that your personal data receives a level of protection equivalent to that applicable in Malaysia, including:
You may contact us at the details set out in Section 14 to request information about the specific safeguards applied to international transfers of your personal data.
MyJudi retains personal data for no longer than necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | For the duration of your Account plus 5 years following account closure, unless a longer period is required by law. |
| KYC / identity verification documents | Minimum 5 years from the date of submission, or longer as required under applicable AML regulations. |
| Financial transaction records | Minimum 7 years from the date of each transaction, in accordance with financial record-keeping requirements. |
| Customer support communications | 3 years from the date of the most recent interaction, unless a dispute remains unresolved. |
| Marketing preferences | Until you withdraw consent or close your Account, whichever occurs first. |
| Device and usage logs | 13 months from the date of collection, following which logs are aggregated and anonymised. |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup or archival systems, the data will be isolated and protected from further processing until deletion is completed.
MyJudi uses cookies and similar technologies — including web beacons and local storage — to operate the Platform, maintain your session, remember your preferences, and analyse Platform usage. We categorise our cookies as follows:
You may manage or withdraw your consent to non-essential cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing certain features. Instructions for managing cookies are available through your browser's help documentation.
Subject to applicable law, you have the following rights in relation to your personal data held by MyJudi. To exercise any of these rights, please contact us at the details provided in Section 14. We will respond to all verified requests within 30 calendar days unless the complexity or volume of requests requires a reasonable extension, of which you will be notified.
We may require you to verify your identity before processing a data rights request. This is to ensure that personal data is not disclosed to, amended by, or deleted at the request of an unauthorised party.
MyJudi implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:
Notwithstanding these measures, no method of electronic transmission or storage is completely secure. While we take all reasonable steps to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights, we will notify you and, where applicable, the relevant supervisory authority, within the timeframes required by law.
The MyJudi Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated Account.
If you are a parent or guardian and believe that a minor has created an Account or submitted personal data to MyJudi, please contact us immediately at [email protected] so that we may take appropriate action without delay.
Age verification is enforced through our KYC process. Any Account for which age cannot be satisfactorily verified will be suspended pending successful verification or permanently closed if verification fails.
MyJudi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Players by email to the address associated with their Account and/or by publishing a notice on the Platform at least seven (7) days before the changes take effect.
The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you should cease use of the Platform and request account closure.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the MyJudi data team through the following channels:
For formal data subject access requests, erasure requests, or objections to processing, please submit your request in writing to our email address with the subject line "Data Rights Request — [Account Username]". We will acknowledge receipt within 5 business days and respond in full within 30 calendar days.
Under applicable data protection law, you hold the following rights with respect to personal data that MyJudi processes about you. Submit any request via our support team.
Request a copy of all personal data we hold about you, along with information about how it is processed and for what purposes.
Request correction of any inaccurate or incomplete personal data we hold. Update your profile details at any time through Account Settings.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is contested.
Receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.
Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time without affecting prior lawful processing.
Lodge a complaint with the relevant data protection authority if you believe your data rights have been violated and we have not addressed your concern satisfactorily.
Play Responsibly — For players aged 21 and above only. Your personal data is handled with the same care we apply to your gaming experience. For information on responsible gambling tools, self-exclusion, and deposit limits, visit our Responsible Gambling page. For questions about data practices, see our Terms & Conditions.
Our support team is available 24/7 to assist with any data privacy queries, access requests, or concerns. We respond to all formal data rights requests within 30 calendar days.
By using MyJudi, you confirm that you have read and understood this Privacy Policy. See also our Terms & Conditions and Responsible Gambling policy. For players aged 21 and above only.