Official Data Protection

Myjudi Privacy Policy — Malaysia Member Personal Data Protection

Your privacy is our priority. This document clearly explains how myjudi collects, uses, stores, and protects your personal information — so you can play with complete peace of mind and confidence.

Last Updated: 1 January 2026
Important Note: This Privacy Policy applies to all users of the myjudi platform in myjudi.win. By registering or using our platform, you agree to the collection and use of information as described in this document. Please read it carefully before using our services.

1Introduction & Scope of This Privacy Policy

Myjudi ("we", "us", "Platform") takes the privacy and security of every member's personal information seriously. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

This document outlines in detail:

  • The types of personal information we collect from you
  • The purpose and manner in which we use that information
  • Parties who may receive your information and under what circumstances
  • The security measures we take to protect your data
  • Your rights regarding the personal data we hold about you
  • How to contact us for any privacy-related queries or requests

This policy applies to all services, features, content, and functions provided through the myjudi platform, including the main website, member accounts, financial transactions, gaming activity, and all our communication channels with you.

2Personal Information We Collect

Myjudi collects your personal information through several means — directly from you during registration and platform use, automatically through tracking technologies, and in certain situations from trusted third-party sources. The following are the categories of information we collect:

A. Information You Provide Directly:

  • Identity Information: Full name, identity card number (MyKad), date of birth, gender and nationality
  • Contact Information: Email address, mobile number, and current residential address
  • Financial Information: Bank account number, bank name, e-wallet account number and transaction details
  • KYC Verification Documents: Copies of MyKad, passport, bank statements, or utility bills submitted for identity verification purposes
  • Account Information: Username, password (stored in encrypted hashed form) and account settings
  • Communications: Any messages, complaints, feedback, or enquiries you send to our support team

B. Information Collected Automatically:

  • IP address, web browser type, operating system, and your device's language settings
  • Gaming activity data including games played, session duration, total wagering amounts, and game outcomes
  • Transaction log data including the time, amount, and method of each deposit and withdrawal
  • Cookie data and similar tracking technologies to enhance the user experience
  • General location information based on IP address (not precise GPS location)
myjudi never store credit or debit card information directly. All payments are processed through integrated payment processors that comply with PCI DSS security standards.

3How We Use Your Information

Every piece of information we collect is used for a clear and lawful purpose. myjudi does not use your data for purposes unrelated to the provision of our services. The following are the data use purposes we implement:

Purpose of Use Information Used Requirements
Registration & account management Name, email, password Mandatory
Identity verification (KYC) MyKad, supporting documents Mandatory
Deposit & withdrawal processing Bank details, transaction records Mandatory
Fraud prevention & AML Account activity, transactions Mandatory (legal)
Customer Support Communication history, account details Mandatory
Personalising your gaming experience Gaming activity data Options
Marketing communications Email, phone number With your consent
Platform analytics & improvement Anonymous usage data Legitimate interests

Myjudi will not use your information for third-party marketing purposes without your explicit consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.

4Legal Basis for Data Processing

Every personal data processing activity carried out by myjudi has a solid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). We rely on the following bases depending on the type of processing involved:

  • Contract Performance: Processing required to provide myjudi platform services to you following registration — including account management, transaction processing and game access
  • Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) requirements, identity verification (KYC) and reporting to regulatory authorities
  • Legitimate Interests: Processing for platform security purposes, fraud prevention, risk analysis and service improvement — provided these interests do not override your privacy rights
  • Consent: For certain marketing communications and personalisation purposes, we will obtain your explicit consent beforehand

5Information Sharing & Disclosure

Myjudi does not sell, rent, or trade your personal information to any third party for their own commercial purposes. However, in certain limited situations, we may share your information with the following parties:

  • Payment Service Providers: Payment processors and financial institutions integrated with our platform to facilitate deposits and withdrawals — all parties are bound by strict confidentiality agreements
  • Identity Verification Providers: Third-party KYC services that help us verify member identities in accordance with regulatory requirements
  • Technology Providers: Hosting, cybersecurity, and technical infrastructure companies that help us operate the platform — they process data only under our instructions
  • Regulatory Authority & Law Enforcement: When required by law, court order, or a legitimate request from a law enforcement agency
  • Business Transfers: In the event of a merger, acquisition, or asset sale, member information may be transferred as part of that transaction — you will be notified in advance
All third parties who receive your data are required to comply with data protection standards equal to or higher than our own. myjudi is not responsible for the privacy practices of third parties that are outside our control.

6Data Security & Protection Measures

Myjudi implements multiple layers of technical and organisational security to protect your personal information from unauthorised access, loss, misuse, or accidental disclosure. Key security measures we employ include:

  • Data-in-Transit Encryption: All communication between your browser and myjudi's servers is protected with TLS 1.3 encryption and banking-grade 256-bit SSL certificates
  • Data-at-Rest Encryption: Sensitive information such as passwords is stored using bcrypt hashing algorithms that cannot be decrypted
  • Role-Based Access Control: Only authorised staff with a legitimate business need may access member personal information, and every access is logged for audit purposes
  • Two-Factor Authentication: myjudi supports two-factor authentication (2FA) on all member accounts for an extra layer of protection
  • 24/7 Monitoring: Continuous security monitoring detects and alerts our team to any suspicious or unusual activity
  • Regular Security Testing: Independent security audits and penetration testing are conducted regularly to identify and address vulnerabilities
  • Environment Segregation: Production and development data are fully separated to prevent exposure of real data during the development process

While we take all reasonable precautions, no security system is completely foolproof. In the event of a data breach affecting your information, we are committed to notifying you within the timeframe required by applicable law.

7Data Retention Period

Myjudi retains your personal information only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. Our general data retention guidelines are as follows:

  • Active Account Data: Retained for the duration your account is active, plus the required period following closure to meet legal obligations
  • Financial Transaction Records: Retained for a minimum of seven (7) years from the transaction date, in accordance with Malaysian financial and tax legal requirements
  • KYC Documents: Retained for a minimum of five (5) years after the business relationship ends, in accordance with AML requirements
  • Support Communication Logs: Retained for three (3) years for service quality and dispute resolution purposes
  • Marketing Data: Retained until you withdraw consent or request deletion

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you as an individual.

8Cookie & Tracking Technology Policy

Myjudi uses cookies and similar tracking technologies to enhance platform functionality, understand usage patterns, and personalise your experience. The following are the types of cookies we use:

You can manage cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality.

9Your Privacy Rights as a Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you. myjudi is committed to respecting and facilitating the exercise of these rights:

Right of Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Request correction of any inaccurate or outdated information we hold about you.

Right to Erasure

Request deletion of your personal data under certain circumstances, subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes or on the basis of legitimate interests.

Right to Restriction

Request restriction of your data processing while a review or dispute is being handled.

Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another service.

To exercise any of the above rights, please submit a written request to our privacy team at [email protected]. We will process your request within 30 business days and may require identity verification before doing so.

10Children's Data Protection

The myjudi platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

Should we discover that a child's personal information has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question. If you believe your child or any minor has registered on our platform, please contact us immediately at [email protected].

Parents and guardians are encouraged to use appropriate parental control software and monitor their children's online activity to ensure they do not access platforms unsuitable for their age.

11Amendments to This Privacy Policy

Myjudi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or developments in data protection technology. Each new version will be published on this page with an updated "Last Updated" date.

For material amendments — such as changes to how we use your data or new rights you may have — we will notify you via an in-platform notification or your registered email at least 14 days before the changes take effect.

Continued use of the myjudi platform after any amendments take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the amendments, please stop using the platform and contact us to close your account.

12Contact Us for Privacy Enquiries

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, our privacy team is here to help:

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 on the myjudi platform
  • Response Time: Privacy-related requests will be responded to within 30 business days

For enquiries related to Terms and Conditions or Responsible Gaming, please visit the relevant page for more information.

Myjudi's Commitment to Your Privacy

Six core data protection principles we uphold to keep your information safe at all times.

Bank-Grade Encryption

All your personal and financial data is protected with TLS 1.3 encryption and 256-bit SSL — the same security technology used by leading banking institutions in Malaysia. No one can intercept or read your information in transit.

Strict Access Control

Only authorised staff with a legitimate business need may access member personal data. All access is logged and regularly audited. Our staff undergo data protection training and are bound by strict confidentiality agreements.

No Data Sales

Myjudi has never and will never sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data belongs to you — we use it solely for purposes you have consented to.

Malaysia PDPA Compliance

Myjudi's privacy policies and practices are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We continuously monitor legal developments and update our practices as required.

Regular Security Audits

Myjudi's security infrastructure undergoes regular independent audits and penetration testing by third-party cybersecurity experts. Any identified vulnerabilities are promptly addressed to ensure ongoing protection.

Full Control in Your Hands

You have full control over your personal data. Access, correct, delete, or download your data at any time via your account settings or by contacting our privacy team. Your rights are fully respected.

Your Privacy, Our Priority

Play with Peace of Mind — Your Data Is Always Protected

Myjudi is built on a foundation of trust. Every security measure we implement, every policy we uphold — all of it is designed to ensure you can enjoy the best gaming experience without worrying about the safety of your personal information. Join over 500,000 trusted members today.

256-bit SSL encryption active
Malaysia PDPA Compliance
Data is not sold to third parties
Full data control in your hands
Bahasa Melayu