Privacy Policy

judy88 operates the online gaming platform accessible at judy88.co (the "Platform"), offering live casino, online slots, sports betting, Lucky Bingo, and related gaming services. For the purposes of this Privacy Policy, "judy88", "we", "us", and "our" refer to the licensed entity responsible for the Platform and the processing of personal data described herein.

judy88 serves players across Malaysia, including those accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Sabah, Sarawak, and all other states. All customer support and player communications are conducted in English.

This Privacy Policy applies to all personal data processed in connection with your use of the Platform, whether you are a registered player, a prospective player who has visited the site without registering, or a third party whose data we process in relation to a registered account (for example, during fraud prevention checks).

judy88 collects only the personal data necessary for the purposes described in this Policy. The categories of personal data we collect include:

1. Identity Data: Full legal name, date of birth, nationality, and a copy of government-issued identity documents (such as a Malaysian MyKad or passport) provided during the Know Your Customer (KYC) verification process;
2. Contact Data: Email address and, where provided, mobile phone number;
3. Account Data: Username, encrypted password, account preferences, language settings, communication opt-in status, and responsible gaming configuration;
4. Financial Data: Payment method identifiers (e.g., e-wallet account reference, bank account numbers for FPX transactions), deposit amounts, withdrawal records, and transaction history. judy88 does not store full card numbers or banking credentials;
5. Gaming Activity Data: Game participation history, bet amounts, game outcomes, session durations, and wagering patterns;
6. Technical Data: IP address, device type and operating system, browser type and version, screen resolution, and unique device identifiers;
7. Usage Data: Pages visited on the Platform, navigation paths, click events, session timestamps, and referral source;
8. Communications Data: Records of your communications with judy88 customer support, including live chat transcripts and email correspondence.

judy88 collects personal data through the following means:

1. Direct Collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion;
2. Automated Collection: Data collected automatically when you access the Platform via cookies, server logs, pixel tags, and similar tracking technologies (see Section 8);
3. Third-Party Sources: Data received from payment processors, identity verification providers, fraud prevention agencies, and gaming regulatory authorities in connection with our legal and compliance obligations;
4. Publicly Available Sources: In limited circumstances, data from public registers or directories where relevant to fraud prevention or regulatory compliance.

judy88 processes personal data for the following purposes, each supported by a lawful basis under applicable data protection law:

1. Account Management (Contract Performance): Creating and maintaining your judy88 player account, processing deposits and withdrawals, and delivering the gaming services you have requested;
2. KYC & Age Verification (Legal Obligation): Verifying your identity and confirming that you are 21 years of age or older, as required by international gaming authority licensing conditions and anti-money laundering regulations;
3. AML & Fraud Prevention (Legal Obligation / Legitimate Interest): Monitoring transactions and gaming activity for indicators of money laundering, fraud, bonus abuse, or other prohibited conduct; reporting suspicious activity to regulatory authorities as required by law;
4. Responsible Gaming (Legal Obligation / Legitimate Interest): Monitoring gaming patterns to identify potential problem gambling behaviour; enforcing self-exclusion requests; complying with responsible gaming obligations imposed by licensing conditions;
5. Customer Support (Contract Performance): Responding to your enquiries, resolving disputes, and providing technical assistance;
6. Marketing Communications (Consent): Sending promotional offers, bonus notifications, and product updates where you have provided explicit consent. You may withdraw consent at any time by updating your communication preferences in your account dashboard;
7. Platform Improvement (Legitimate Interest): Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game offerings;
8. Legal Compliance (Legal Obligation): Retaining records as required by applicable gaming, financial, and tax laws.

judy88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

1. Service Providers: We share data with trusted third-party vendors who process data on our behalf, including payment processors (for handling TnG, Boost, GrabPay, FPX, DuitNow, and other Malaysian payment methods), identity verification services, cloud infrastructure providers, and customer support software providers. All service providers are bound by data processing agreements requiring them to maintain appropriate security standards;
2. Game Providers: Game studios whose titles are available on the Platform receive limited technical data (such as session tokens and game parameters) necessary to deliver gameplay. They do not receive your full identity or financial data;
3. Regulatory Authorities: We disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, and courts where required by law or valid legal process;
4. Fraud Prevention Agencies: We share data with industry fraud prevention networks to identify and prevent fraudulent account activity, bonus abuse, and money laundering;
5. Corporate Transactions: In the event of a merger, acquisition, or asset sale involving judy88, player data may be transferred as part of the transaction. Affected players will be notified in advance of any change in data controller.

judy88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by law:

1. Active Accounts: All account data is retained for the duration of the player's account relationship with judy88;
2. Closed Accounts: Following account closure, judy88 retains identity, financial, and transaction records for a minimum of five (5) years to satisfy anti-money laundering, gaming licensing, and tax record-keeping obligations;
3. Self-Excluded Accounts: Identity records of self-excluded players are retained for the duration of the self-exclusion period plus five (5) years to prevent re-registration in breach of self-exclusion;
4. Marketing Data: Consent records and marketing communication preferences are retained for as long as the account exists and for three (3) years following account closure;
5. Support Communications: Customer support transcripts are retained for three (3) years from the date of the interaction.

When data is no longer required, judy88 securely deletes or anonymises it using industry-standard data destruction procedures.

judy88 implements technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the Platform's servers;
• Hashed and salted storage of account passwords — your plain-text password is never stored anywhere in our systems;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Optional two-factor authentication (2FA) available to all registered players, strongly recommended;
• Automatic session expiry after thirty (30) minutes of inactivity;
• Login location monitoring with email alerts for access from new devices or IP addresses.

While judy88 takes all reasonable precautions to protect your personal data, no internet transmission or electronic storage system can be guaranteed to be completely secure. If you become aware of any actual or suspected security incident affecting your judy88 account, please contact us immediately at [email protected].

judy88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit the site. We use the following categories of cookies:

1. Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and load balancing cookies. These cannot be disabled without impairing Platform functionality;
2. Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming configurations across sessions;
3. Analytics Cookies: Collect anonymised, aggregated data about how visitors use the Platform — which pages are visited, how long sessions last, and which features are used most frequently. This data informs Platform improvements;
4. Marketing Cookies: Used only where you have provided consent to receive personalised promotional communications. These track which promotions you have seen or interacted with to avoid repetitive messaging.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not prevent access but will limit personalisation features. judy88 does not use cookies to track your activity outside of the Platform or to sell data to advertising networks.

Subject to applicable law and certain conditions, you have the following rights with respect to your personal data held by judy88:

1. Right of Access: You may request a copy of the personal data judy88 holds about you;
2. Right to Rectification: You may request correction of inaccurate or incomplete personal data. Basic account data (email address, contact details) can be updated directly from your account dashboard;
3. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to judy88's legal retention obligations. Note that data required for AML, licensing, or dispute resolution purposes may not be immediately erasable;
4. Right to Restrict Processing: You may request that judy88 restrict processing of your data while a rectification request is pending or where you dispute the lawfulness of processing;
5. Right to Data Portability: You may request a copy of data you have provided to judy88 in a structured, machine-readable format;
6. Right to Object: You may object to processing based on legitimate interest grounds. You may withdraw marketing consent at any time without penalty;
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time by updating your preferences in your account settings or by contacting support.

To exercise any of these rights, contact the judy88 Data team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and respond substantively within thirty (30) calendar days.

The judy88 Platform is strictly intended for adults aged 21 years and over. judy88 does not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of the KYC process, and accounts are suspended pending age confirmation where the registered player's age cannot be verified.

If judy88 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted and the associated account will be permanently closed. If you are a parent or guardian and believe that a minor has registered on the Platform, please contact [email protected] immediately with relevant details so that appropriate action can be taken.

The judy88 Platform may contain references to third-party services, such as payment processors and game studios, whose own privacy practices govern the data they collect in the course of providing their services. judy88 is not responsible for the privacy practices of third-party service providers beyond the contractual data processing obligations we impose on them.

When you make a payment via Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, or any other payment method, your transaction data is processed by the relevant payment provider in accordance with that provider's privacy policy. judy88 receives confirmation of payment outcome and a payment reference identifier but does not receive or store your full banking credentials or e-wallet PIN.

judy88 may update this Privacy Policy from time to time to reflect changes in data processing practices, legal obligations, or Platform functionality. Material changes will be communicated to registered players via email to the registered address, and a prominent notice will be displayed on the Platform for a minimum of seven (7) days before the revised policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, please cease use of the Platform and contact us to close your account.

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by judy88, please contact us:

1. Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate
2. Live Chat: Available 24/7 through the Platform's live chat interface
3. Response Commitment: Privacy-related enquiries are acknowledged within 48 hours and substantively responded to within 30 calendar days

If you are not satisfied with judy88's response to a data rights request or privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or gaming regulatory body in the jurisdiction applicable to your situation. judy88 takes all formal complaints seriously and will cooperate fully with regulatory investigations.