Privacy Policy — mjudi

mjudi ("we", "us", "the Platform") operates the online casino and sports betting platform accessible at mjudi.cam. We take your privacy seriously and are committed to protecting the personal data of all users ("you", "User", "Player") who interact with our services.

This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we process that data, the circumstances under which we may share it, and the rights you have in relation to your information. This Policy applies to all registered Players on the mjudi Platform, including those accessing from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations.

By registering an account with mjudi, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, storage, use, transmission, disclosure, deletion, or any combination thereof.
• "Data Controller" means mjudi, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of and under the instruction of mjudi.
• "KYC" (Know Your Customer) means the identity and age verification process conducted by mjudi in compliance with anti-money laundering and responsible gambling obligations.
• "Cookies" means small text files placed on your device by the Platform that collect and store certain usage data.
• "Sensitive Data" means categories of personal data that require heightened protection, including government-issued identification numbers, financial information, and account credentials.

mjudi collects the following categories of personal data from Players during the course of operating the Platform:

3.1 Identity & Registration Data

• Full legal name as appearing on government-issued identification
• Date of birth (for age verification — you must be 21 or older)
• Nationality and country of residence
• Gender (optional, where provided)
• Government-issued identification document details (e.g., MyKad number, passport number)
• Selfie or biometric photograph submitted for KYC verification

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city and postcode, at minimum)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, timestamps, payment references)
• Payment method details — including Touch 'n Go eWallet identifiers, DuitNow references, FPX transaction IDs, bank account names for Maybank, CIMB, Public Bank, Hong Leong, and other supported Malaysian banks
• Cryptocurrency wallet addresses used for BTC, ETH, USDT, and BNB transactions
• Bonus and promotional credit history

3.4 Betting & Gaming Activity Data

• All sports bets, live casino game records, slot spins, and crash game rounds
• Wager amounts, odds, outcomes, and timestamps
• Game preferences, session durations, and responsible gambling settings

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session logs, access timestamps, and navigation patterns on the Platform
• Cookie identifiers and similar tracking data (see Section 10)

We collect personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, session data, and cookie-derived information.
• Transaction processors: Data received from Malaysian payment service providers (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and others) in connection with deposit and withdrawal transactions.
• Identity verification services: Data obtained from third-party KYC and document verification providers used to confirm your identity and age.
• Fraud and risk monitoring tools: Signals and indicators generated by our anti-fraud and responsible gambling monitoring systems based on your activity patterns on the Platform.

mjudi processes your personal data for the following specific and documented purposes:

• Account creation and management: To register your account, verify your identity, maintain your Player profile, and administer your relationship with mjudi.
• Service delivery: To process bets, manage your Wallet balance, apply bonus credits, execute deposit and withdrawal transactions, and provide access to all Platform features.
• Regulatory and legal compliance: To fulfil anti-money laundering (AML) obligations, conduct KYC verification, respond to lawful requests from regulatory or law enforcement authorities, and maintain mandatory transaction records.
• Fraud prevention and platform security: To detect and prevent fraudulent activity, account abuse, bot usage, unauthorised access, and money laundering.
• Responsible gambling: To monitor betting patterns for signs of problem gambling, enforce self-exclusion and deposit limit instructions, and communicate responsible gambling information to Players.
• Customer support: To respond to your queries, investigate complaints, and resolve disputes.
• Communications: To send account-related notifications, security alerts, and — where you have opted in — promotional communications about offers and platform updates.
• Platform improvement: To analyse aggregated usage data for the purpose of improving Platform features, user experience, and game content.

mjudi processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you agreed to upon registration — including operating your account, processing transactions, and delivering all Platform services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, KYC mandates, and responses to competent authority requests.
• Legitimate interests: Processing carried out for the legitimate operational interests of mjudi, including fraud prevention, platform security, responsible gambling monitoring, and system improvement — where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit consent, specifically in relation to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mjudi does not sell your personal data. We share your data only in the specific circumstances described below, and only to the extent necessary for each stated purpose.

7.1 Service Providers and Data Processors

We engage trusted third-party service providers who act as data processors under our instruction and contractual obligation, including:

• Payment processing partners — Malaysian financial institutions and e-wallet operators (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and others) to facilitate deposits and withdrawals.
• KYC and identity verification providers to confirm your identity and age.
• Cloud infrastructure and data hosting providers who store Platform data under stringent security and confidentiality obligations.
• Customer support platform providers used to manage support queries and communications.
• Fraud detection and risk management technology providers.

7.2 Legal and Regulatory Disclosure

We may disclose your personal data to competent governmental, regulatory, or law enforcement authorities where we are legally required or permitted to do so, including in connection with anti-money laundering investigations, fraud enquiries, or judicial proceedings.

7.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of mjudi's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance.

mjudi retains personal data for the minimum period necessary to fulfil the purposes set out in this Policy, comply with legal obligations, and resolve disputes. The specific retention periods applicable to each data category are set out in the table in Section 3.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for analytical and platform improvement purposes.

Where you have requested account closure, we will retain your data for the minimum period required by our legal and compliance obligations before proceeding with deletion. We will confirm the estimated deletion timeline upon receipt of a verified account closure request.

mjudi implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

9.1 Technical Measures

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• Encryption at rest for all sensitive personal and financial data stored on our infrastructure.
• Real-time intrusion detection and security monitoring systems.
• Multi-factor authentication available and recommended for all Player accounts.
• Regular independent security assessments and penetration testing of Platform infrastructure.

9.2 Organisational Measures

• Strict access controls ensuring that only authorised personnel have access to personal data, on a need-to-know basis.
• Mandatory data protection training for all staff with access to Player data.
• Data breach response procedures with defined notification timelines.

mjudi uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse usage patterns. By using the Platform, you consent to our use of cookies in accordance with this section.

10.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These enable secure login sessions, Wallet balance display, and transaction processing. They cannot be disabled without materially impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gambling tool configurations.
• Analytical cookies: Collect aggregated, anonymised data about how users interact with the Platform to help us improve performance, navigation, and game content.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised account access, and automated bot traffic.

10.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, disabling them through browser settings may prevent you from logging in or accessing core Platform features.

You have the following rights in relation to your personal data held by mjudi. To exercise any of these rights, please contact our support team as described in Section 15.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed. We will respond to such requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most profile information directly from your account settings.
• Right to Erasure: Subject to our legal retention obligations, you may request the deletion of your personal data. Requests will be processed within 30 days, subject to completion of any outstanding compliance checks.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to us for the purpose of transferring it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The mjudi Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process for all accounts.

Where we discover, or have reasonable grounds to believe, that an account belongs to a person under the age of 21, we will immediately suspend the account, notify the account holder, and process the deletion of associated personal data in accordance with applicable law and our responsible gambling obligations.

If you are a parent or guardian and believe a minor has accessed or registered on the mjudi Platform, please contact us immediately at [email protected] so that we may take appropriate action without delay.

The mjudi Platform may contain functional integrations with third-party services, including payment processors and KYC verification providers. These third parties operate under their own privacy policies and data processing terms, which are separate from this Policy.

When you initiate a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or any other payment method, the relevant transaction data is transmitted to and processed by the respective payment service provider under their applicable terms and privacy policies. mjudi is not responsible for the privacy practices of third-party payment processors.

We encourage you to review the privacy policies of any third-party services you engage with in connection with your mjudi account.

mjudi reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or Platform features. Where changes are material, we will provide advance notice to registered Players via email or a prominent Platform notification.

The "Last updated" date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy. We recommend that you review this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the mjudi data support team. We are available 24 hours a day, 7 days a week.