Privacy Policy judi89 – Member Personal Data Protection

Scope and Application of This Policy

This Privacy Policy is issued by judi89 and applies to all users, visitors, and registered members who access the website judi89.fun, the judi89 mobile app, and any related services we operate. By registering or continuing to use our platform, you agree to the data collection and processing practices described in this document.

This document was drafted to comply with Malaysia Personal Data Protection Act 2010 (PDPA) and is intended to provide full transparency on how your personal data is handled at every stage of your journey with judi89 — from initial registration through to account closure.

This policy should be read together with the judi89 Terms & Conditions and Responsible Gaming Policy, all of which form a comprehensive agreement between you and our platform. In the event of any conflict between those documents regarding privacy matters, this Privacy Policy shall take precedence.

Information We Collect

Judi89 collects various types of information to ensure a smooth, secure and personalised gaming experience. The types of information we collect are as follows:

Registration & Identity Information:

• Full name as it appears on your official identification document.
• Date of birth (for age verification as required by law).
• IC number or passport number for the KYC (Know Your Customer) process.
• Email address and mobile number for account communications.
• Full address for identity verification and financial processing.

Financial Information:

• Bank account name and number registered for deposits and withdrawals.
• Digital wallet details (Touch 'n Go, GrabPay and others) used for transactions.
• Historical records of all deposit, withdrawal and bonus transactions that have been processed.

Platform Usage Information:

• Gaming session records, including games played, session duration and wagering outcomes.
• IP address, device type, operating system, and browser used.
• Login data including time, date, and approximate geographic location.
• Your game preferences and account settings that you have configured.

How We Use Your Information

All information collected by judi89 is used for legitimate and transparent purposes. The table below summarises the primary purposes of processing your data and the applicable legal basis:

We will not use your data for any purpose other than those stated above without obtaining your prior consent. If you do not wish to receive marketing communications, you may opt out at any time through your account settings.

Information Sharing and Disclosure

Judi89 does not sell or rent your personal data to any party. However, under certain limited circumstances, your information may be shared with the following parties for legitimate operational purposes:

• Payment Service Provider: Financial institutions, banks, and digital wallet operators that process your transactions. They receive only the information needed to complete those transactions.
• Licensed game providers: Game studios and software providers that supply games within the judi89 platform. Minimum technical information required for game functionality may be shared.
• KYC Service Provider: Third-party identity verification companies that assist us in meeting legal requirements and preventing fraud.
• Legal authority: Government agencies, regulatory bodies, or law enforcement authorities when required by law or court order.
• Professional advisors: Lawyers, auditors and consultants bound by their professional confidentiality obligations.

All third parties with whom we share data are required to comply with data protection standards equivalent to this Privacy Policy. They may only use that data for the specified purposes and are not permitted to process your data for their own purposes.

Data Security & Storage

Judi89 implements a comprehensive multi-layered security framework to ensure your personal data is always protected against unauthorised access, loss, destruction or disclosure:

• Encryption in transit: All communications between your browser and the judi89 server are secured with TLS 1.3 encryption and SSL 256-bit certificates.
• Encryption at rest: Sensitive data such as passwords and financial information is stored in encrypted form using industry-standard encryption algorithms.
• Access controls: Only authorised personnel with a legitimate business need may access members' personal data. All access is logged and monitored.
• Continuous monitoring: Threat detection systems and security monitoring operate 24 hours a day, 7 days a week to detect any suspicious activity.
• Periodic Security Testing: Internal security audits and penetration testing are conducted regularly by independent security experts.

Data Retention Period: judi89 retains your personal data for the duration of your active account, and up to seven (7) years after account closure to comply with legal requirements relating to financial records and anti-money laundering. Data that is no longer needed will be securely deleted using verified erasure methods.

Use of Cookies and Tracking Technologies

Judi89 uses cookies and similar tracking technologies to enhance platform functionality and user experience. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are critical to site operation.
• Functional cookies: Storing your preferences such as language, display theme and account settings so you do not need to re-enter them each time.
• Analytics cookies: Helping us understand how users interact with the platform so we can improve the gaming experience. This data is collected in aggregate and cannot identify individuals.
• Performance cookies: Monitoring page load times and platform technical performance to ensure a smooth and fast experience.

You can manage and delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of some parts of the platform. For more information on managing cookies, refer to your browser's help guide.

Please be informed that judi89 does not use third-party cookies for advertising purposes, and we do not permit external advertising networks to collect your data through our platform.

Your Rights as a Data Subject

Under the Malaysia Personal Data Protection Act 2010, you have the following rights regarding the personal data held by judi89:

• Right of access: You have the right to request a copy of the personal data we hold about you. This request will be processed within 21 working days.
• Right to rectification: If your data is inaccurate or outdated, you may request a correction at any time through your profile settings or customer support.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. Such requests are subject to our legal retention obligations.
• Right to object: You may object to the processing of your data for direct marketing purposes or on grounds of legitimate interest in certain situations.
• Right to restrict processing: In certain circumstances, you may request that we restrict how we use your data while a dispute is being resolved.
• Right to data portability: You have the right to receive the personal data you provided to us in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, contact our Privacy Officer via email at the platform's support section or through live chat within your account. We will verify your identity before processing any request to ensure the security of your data.

International Data Transfers

In operating its global operations, judi89 may need to transfer your personal data to other countries, including for server processing, technical support, or compliance with licensed software providers. Such transfers only occur under the following circumstances:

• The recipient country maintains a level of data protection comparable to Malaysia's PDPA.
• Recipients have agreed to binding data processing contracts requiring them to uphold comparable protection standards.
• The transfer is necessary for the performance of a contract between you and judi89 (for example, processing international payment transactions).

Judi89 ensures that all international data transfers are carried out with appropriate safeguards and in accordance with applicable legal requirements. You may contact us for more information on the protective measures applied to any such transfers.

Protection of Children's Information

Judi89 is an online gambling platform exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from minors.

As part of our KYC process, every new account undergoes strict age verification using official identification documents. Should we find that data belonging to a minor has been collected without our knowledge, the account in question will be closed immediately and all related data will be securely deleted.

Contact Our Privacy Officer

Judi89 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this privacy policy and handling any privacy-related enquiries or complaints.

If you have any questions, concerns, or complaints regarding how we handle your personal data, you may reach us through the following channels:

• Live Chat: Available 24/7 within the judi89 platform after logging in to your account.
• Support email: [email protected] (plain text only — no clickable link).
• FAQ Page: Visit FAQ section us for answers to frequently asked questions about privacy.

We are committed to responding to all privacy enquiries within 14 working days. For more complex complaints requiring thorough investigation, we will keep you informed of progress within that period and provide an estimated resolution timeline.

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department or any relevant regulatory authority under Malaysian law.