Privacy Policy

1. Data Controller

judilink, operated at judilink.org, is the data controller responsible for your personal data collected through this platform. As the data controller, judilink determines the purposes and means of processing your personal information. For all data-related enquiries, you may contact us using the details provided in Section 13 of this Policy.

2. Personal Data We Collect

judilink collects the following categories of personal data from registered users and platform visitors:

2.1 Identity and Contact Data

• Full legal name as provided at registration;
• Date of birth (for age verification in compliance with the 21+ requirement);
• Email address;
• Malaysian mobile phone number;
• Residential address (where required for enhanced verification).

2.2 Financial Data

• Deposit and withdrawal transaction records;
• Payment method identifiers (e.g., masked bank account references, e-wallet identifiers for Touch 'n Go, Boost, GrabPay, DuitNow, or FPX);
• Account balance history;
• Bonus and promotional transaction records.

2.3 Technical and Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Login timestamps and session durations;
• Platform navigation patterns and game interaction logs;
• Cookie identifiers and session tokens.

2.4 Identity Verification Data

• Government-issued identification documents (e.g., MyKad, passport) submitted for KYC purposes;
• Selfie or video verification images where requested.

judilink does not collect sensitive personal data (such as biometric data beyond KYC images, health data, or religious affiliation) and does not request such information from Users.

3. How We Collect Your Data

judilink collects personal data through the following means:

• Direct submission: Information you provide when registering an Account, completing identity verification, making a deposit or withdrawal, or contacting customer support;
• Automated collection: Technical data collected automatically when you access the judilink platform, including IP address, device information, and session activity via cookies and server logs;
• Third-party sources: In limited circumstances, judilink may receive verification data from identity verification service providers or payment processors in connection with KYC or fraud prevention processes.

4. Purposes and Legal Basis for Processing

judilink processes your personal data for the following purposes and on the following legal bases:

• Account management and service delivery — necessary for the performance of the contract between judilink and the User;
• Identity and age verification — necessary for compliance with legal obligations, including the 21+ age requirement;
• Payment processing and fraud prevention — necessary for the performance of the contract and for the protection of judilink's legitimate business interests;
• Responsible gaming management — processing deposit limits, self-exclusion requests, and player protection obligations, based on legal obligation and legitimate interests;
• Anti-money laundering (AML) compliance — required under applicable financial crime regulations and gaming licensing conditions;
• Customer support — necessary for the performance of the contract and legitimate customer service interests;
• Platform improvement and analytics — based on judilink's legitimate interest in improving service quality, conducted with anonymised or aggregated data wherever practicable;
• Marketing communications — sent only with your explicit consent, which may be withdrawn at any time.

5. Sharing of Personal Data

judilink does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Personal data may be shared in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals via DuitNow, Touch 'n Go eWallet, Boost, FPX, GrabPay, and similar channels. These processors operate under their own privacy policies and applicable data protection standards;
• Identity verification providers: Where third-party KYC services are used to verify identity documents in compliance with regulatory requirements;
• Regulatory and law enforcement authorities: Where judilink is legally required to disclose information to comply with applicable laws, court orders, or the directions of a competent regulatory authority;
• IT and infrastructure service providers: Third-party hosting, security, and platform infrastructure providers who process data on judilink's behalf under contractual data processing agreements.

All third parties with whom judilink shares data are required to handle that data in a manner consistent with applicable privacy standards and judilink's data processing requirements.

6. International Data Transfers

The judilink platform serves Malaysian users and stores the majority of player data on infrastructure located within or proximate to the Asia-Pacific region. In circumstances where personal data must be transferred to service providers or infrastructure located outside Malaysia, judilink ensures that appropriate contractual safeguards are in place to protect your data during such transfers, consistent with applicable data protection obligations. You may request details of such safeguards by contacting our support team.

7. Data Retention

judilink retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. Specifically:

• Account and identity data is retained for the duration of your Account and for a period of no less than five (5) years following Account closure, in compliance with AML and gaming regulatory requirements;
• Financial transaction records are retained for a minimum of seven (7) years;
• Technical and usage logs are retained for up to two (2) years;
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Security of Your Personal Data

judilink implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the judilink platform;
• Hashed and salted storage of account passwords — plaintext passwords are never retained;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Incident response procedures for data security events.

While judilink employs robust security practices, no system is entirely immune to risk. You are responsible for maintaining the confidentiality of your judilink Account credentials and for notifying us immediately upon suspecting any unauthorised access.

9. Cookies and Tracking Technologies

judilink uses cookies and similar tracking technologies to operate core platform functionality, maintain your logged-in session, and understand how Users interact with the platform. The categories of cookies used include:

• Essential cookies: Required for the judilink platform to function. These cannot be disabled without affecting core functionality such as session authentication;
• Functional cookies: Remember your preferences (such as language and display settings) across sessions;
• Analytics cookies: Collect anonymised data about how Users navigate the platform, used to improve the judilink experience. No personally identifiable information is included in analytics reporting.

You may manage or restrict non-essential cookies through your browser settings. Disabling essential cookies will affect your ability to use the judilink platform.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by judilink:

• Right of access: You may request a copy of the personal data judilink holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: In certain circumstances, you may request deletion of your personal data, subject to judilink's legal retention obligations;
• Right to restriction: You may request that judilink restrict the processing of your data in defined circumstances;
• Right to data portability: Where processing is based on consent or contract performance, you may request a copy of your data in a structured, machine-readable format;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the judilink support team via live chat or by email. judilink will respond to verified requests within thirty (30) calendar days.

11. Children and Minors

The judilink platform is strictly for individuals aged 21 years and above. judilink does not knowingly collect personal data from persons under the age of 21. If judilink becomes aware that an Account has been registered by a minor, that Account will be immediately closed, all balances will be subject to review, and any data collected will be deleted in accordance with our data retention obligations. If you believe a minor has registered on the judilink platform, please contact us immediately.

12. Changes to This Privacy Policy

judilink reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Where changes are material, we will notify registered Users by email and post a notice on the platform before the revised Policy takes effect. The "Last updated" date at the top of this page indicates when the most recent revision was made. Continued use of the judilink platform following any update constitutes acceptance of the revised Privacy Policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by judilink, please contact us through the following channels:

• Live Chat: Available 24/7 from within the judilink platform after signing in
• Email: [email protected]

We aim to acknowledge all privacy-related requests within two (2) business days and to resolve them within thirty (30) calendar days. For complex requests, we may require additional time and will communicate any extension to you within the initial thirty-day window.

For matters relating to responsible gaming and account self-exclusion, please also refer to the Responsible Gaming page.