Judi789 Privacy Policy

This Privacy Policy ("Policy") describes how Judi789 ("the Platform", "we", "us", "our"), accessible at judi789.cam, collects, processes, stores, and protects personal data belonging to users ("you", "Player", "User") of the Platform, including individuals accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations.

Judi789 is committed to handling your personal information with transparency, integrity, and in a manner consistent with the obligations of a responsible online platform. We collect only the data we genuinely need to operate the Platform and deliver a high-quality service to our Players, and we do not sell, rent, or monetise your personal data to third parties for their independent marketing purposes.

This Policy should be read in conjunction with the Judi789 Terms & Conditions, which govern the broader contractual relationship between you and the Platform.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living natural person, including name, identification number, contact details, payment information, and behavioural data.
• "Processing" — Any operation performed on personal data, including collection, storage, organisation, retrieval, use, disclosure, erasure, or destruction, whether automated or manual.
• "Controller" — Judi789, as the entity that determines the purposes and means of processing your personal data.
• "Data Subject" — Any living natural person whose personal data is processed by Judi789, including registered Players and visitors to the Platform.
• "Third Party" — Any entity other than Judi789 and the Data Subject, including payment service providers, identity verification partners, and technology sub-processors.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose, whether expressed by a statement or clear affirmative action.
• "KYC" — Know Your Customer — the identity and age verification process required to validate accounts and comply with anti-money laundering and responsible gambling obligations.

Judi789 collects personal data through several channels in the course of providing the Platform's services. The categories of personal data we collect and the circumstances in which they are collected are set out below:

3.1 Registration & Account Data

When you create a Judi789 Account, we collect information necessary to establish and administer your account, including: full legal name, date of birth, email address, mobile telephone number, residential address, preferred currency (MYR by default), and login credentials.

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we may request and collect documentary evidence including: government-issued photo identification (e.g., MyKad, passport), proof of residential address (e.g., utility bill, bank statement), and documentation evidencing source of funds where applicable.

3.3 Financial & Transaction Data

We collect details of financial transactions conducted on the Platform, including: deposit and withdrawal amounts, transaction dates and times, payment method identifiers (e.g., partial bank account numbers, e-wallet identifiers for DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong), cryptocurrency wallet addresses where applicable, and transaction reference numbers.

3.4 Gameplay & Betting Data

We record data relating to your use of the Platform's gaming and betting features, including: games played, wagers placed, win/loss history, betting markets accessed (including EPL, Liga Super Malaysia, UFC, and other sports markets), session duration, and game preferences.

3.5 Technical & Device Data

We collect technical information about your device and connection when you access the Platform, including: IP address, device type and operating system, browser type and version, session timestamps, referring URLs, and geolocation data (at country/city level, e.g., Kuala Lumpur, Penang, Johor Bahru) where permitted.

3.6 Communications Data

We retain records of communications between you and Judi789, including: live chat transcripts, email correspondence, support ticket submissions, and any feedback or complaints submitted through the Platform.

Judi789 processes your personal data for the following purposes:

Judi789 processes your personal data on the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to fulfil the contract between you and Judi789, including account creation, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC verification, anti-money laundering reporting, and age verification requirements.
• Legitimate Interests: Processing carried out on the basis of Judi789's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud prevention, security monitoring, and service analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities where your prior consent is required, including direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Judi789 does not sell, rent, or trade your personal data to any third party for their independent commercial use. We may, however, share your personal data with the following categories of recipients for the purposes described in this Policy:

• Payment Service Providers: Financial institutions and payment processors (including those supporting DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency payment rails) for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to assist with the authentication of Player identities and documentary verification.
• Technology Sub-Processors: Cloud hosting providers, database operators, content delivery networks, and other technology partners engaged to deliver and maintain Platform infrastructure.
• Game Content Providers: Licensed game studios and sports data providers whose content is delivered through the Platform. Data shared with these parties is limited to what is technically necessary to load and operate the relevant game or market.
• Fraud & Security Partners: Third-party fraud detection, cybersecurity, and risk management service providers engaged to protect the integrity of the Platform and its users.
• Regulatory & Law Enforcement Authorities: Where required or permitted by applicable law, Judi789 may disclose personal data to governmental authorities, regulatory bodies, or law enforcement agencies.

Judi789 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, including for the duration of a Player's Account and for such additional periods as may be required by applicable legal, regulatory, or operational requirements.

In general, the following retention periods apply:

• Account & Registration Data: Retained for the lifetime of the Account and for a period of at least five (5) years following Account closure, in accordance with applicable anti-money laundering retention obligations.
• Transaction & Financial Records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC Documentation: Retained for the duration of the Account relationship and for at least five (5) years following Account closure.
• Communications Records: Support communications and complaint records are retained for a period of three (3) years from the date of the interaction.
• Marketing Preferences: Records of your consent or opt-out status for marketing communications are retained for as long as required to demonstrate compliance, and for at least three (3) years following any opt-out.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised, unless retention is required by an applicable court order or ongoing legal proceeding.

Judi789 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve performance, and analyse usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, login authentication, and security features. These cookies cannot be disabled without materially affecting Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and error events — to enable us to improve performance and user experience.
• Functional Cookies: Used to remember your preferences, such as language selection, preferred currency display, and notification settings, to provide a more personalised experience.
• Marketing Cookies: Used to deliver relevant promotional content within the Platform based on your usage patterns and account activity. These cookies are only deployed where you have given your consent, which may be withdrawn at any time through your account settings or browser preferences.

You may control the use of non-essential cookies through your browser settings or through the Judi789 cookie preference centre, accessible from your account settings. Please note that disabling certain cookies may affect the functionality or performance of parts of the Platform.

Judi789 employs a layered approach to data security, implementing technical and organisational measures proportionate to the sensitivity of the data we hold and the risks associated with its processing. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Judi789 Platform.
• Encryption at rest for sensitive personal data including KYC documents and financial records.
• Role-based access controls limiting internal access to personal data to staff with a documented operational need.
• Multi-factor authentication requirements for internal systems that store or process Player data.
• Regular independent security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Incident response procedures enabling prompt detection, containment, and notification of any personal data breach in accordance with applicable obligations.

As a Data Subject whose personal data is processed by Judi789, you hold the following rights in respect of your information. These rights may be subject to applicable legal limitations and exemptions, but Judi789 is committed to facilitating their exercise wherever possible:

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update many data fields directly through your Account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Please note that this right is subject to legal and regulatory retention obligations, particularly in respect of financial and KYC records.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, including where you contest the accuracy of the data or have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is carried out on the basis of your consent or a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to marketing communications, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact our Data Team via the contact details set out in Section 14. Judi789 will acknowledge all rights requests within five (5) business days and will respond substantively within thirty (30) calendar days.

The Judi789 Platform is strictly intended for adults aged 21 years and above. Judi789 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of the account registration process, and Judi789 reserves the right to request documentary proof of age from any User at any time.

If Judi789 becomes aware that personal data has been collected from an individual below the age of 21, we will take immediate steps to: suspend the relevant Account, void any associated wagers, return deposited funds to the original payment method where technically feasible, and permanently delete all personal data associated with that account.

If you have reason to believe that a minor has registered an Account on the Judi789 Platform, please notify us immediately via the contact details in Section 14.

Judi789 operates using infrastructure and third-party service providers that may be located in jurisdictions outside of Malaysia. Where your personal data is transferred to, stored in, or processed in a jurisdiction outside of Malaysia, Judi789 will implement appropriate safeguards to ensure that such transfers comply with applicable data protection principles and that your data is afforded a standard of protection equivalent to that required under applicable Malaysian data protection law.

Appropriate safeguards for international transfers may include: contractual data processing agreements with receiving parties, standard contractual clauses, and assessments of the adequacy of the data protection framework in the recipient jurisdiction. Details of the specific safeguards applicable to any international transfer may be obtained by contacting us using the details in Section 14.

Judi789 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform features, or data processing practices. The "Last Updated" date at the top of this document will be revised whenever material changes are made.

Where changes to this Policy are material — meaning they significantly affect how your personal data is processed or your rights in respect of it — Judi789 will provide advance notice via email or prominent in-Platform notification before the changes take effect, wherever technically practicable.

Your continued use of the Platform following the effective date of any Policy amendment constitutes your acknowledgment of the revised Policy. If you do not agree to the amended terms, you should cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

Archived versions of previous Privacy Policies are available upon request by contacting our support team using the details in Section 14.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Judi789, please contact us through the following channels. All privacy-related requests and enquiries are handled by our dedicated Data Team:

Judi789 takes all privacy concerns seriously and is committed to resolving any complaint or request promptly and fairly. If you are not satisfied with our response, you may have the right to raise a complaint with the relevant data protection authority in your jurisdiction.