🔏 judi2u Privacy Policy

1. Introduction

1.1 This Privacy Policy applies to all personal data collected and processed by judi2u in connection with the operation of the online gaming platform accessible at judi2u.app, including all associated mobile interfaces and customer support channels.

1.2 By registering an account with judi2u or by continuing to use the judi2u platform following publication of this Privacy Policy, you acknowledge that you have read and understood this document and consent to the collection and processing of your personal data as described herein.

1.3 This Privacy Policy should be read in conjunction with judi2u's Terms and Conditions and Responsible Gaming Policy. Capitalised terms not defined in this document have the meanings assigned to them in the judi2u Terms and Conditions.

1.4 judi2u takes the privacy of its players seriously. We are aware that many of our Malaysian players are privacy-conscious, particularly given the sensitivity of financial and identity data associated with online gaming accounts. This policy is designed to be transparent, precise, and practically useful — not a wall of impenetrable legal text.

2. Data Controller

2.1 For the purposes of this Privacy Policy, judi2u is the data controller in respect of the personal data of its Players. This means judi2u determines the purposes for which and the means by which your personal data is processed.

2.2 judi2u's data processing activities are conducted in accordance with the data protection requirements imposed by its international gaming authority licensing jurisdiction. Where judi2u engages third-party processors — such as payment processors, game providers, and identity verification services — those parties operate as data processors acting on judi2u's documented instructions.

2.3 Contact details for data-related enquiries are provided in Section 15 of this Privacy Policy.

3. Data We Collect

3.1 judi2u collects the following categories of personal data from Players:

3.2 judi2u does not collect or store full payment card numbers. Where card payments are facilitated, card data is handled exclusively by the relevant payment processor under PCI-DSS compliance standards.

4. How We Collect Data

4.1 judi2u collects personal data through the following means:

• Direct provision: Data you supply when registering your judi2u account, completing KYC verification, making deposits, or contacting support;
• Automated technical collection: Technical Data collected automatically when you access the judi2u platform, via server logs, session tracking, and cookies (see Section 8);
• Third-party sources: Identity and fraud-screening data received from licensed KYC/AML verification providers; payment confirmation data received from payment processors; and, where applicable, geolocation data from IP intelligence services used for regulatory compliance.

4.2 judi2u does not purchase personal data from data brokers or marketing list providers.

5. Lawful Basis for Processing

5.1 judi2u processes your personal data on the following lawful bases:

• Contract performance: Processing necessary to register and manage your account, process transactions, settle bets, and provide the services described in judi2u's Terms and Conditions;
• Legal obligation: Processing required to comply with judi2u's licensing conditions, including KYC/AML obligations, age verification, player fund segregation reporting, and regulatory audit requirements;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of judi2u's services — where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit opt-in consent. Consent may be withdrawn at any time via your account settings or by contacting judi2u support.

6. How We Use Your Data

6.1 judi2u uses your personal data for the following purposes:

• Registering and managing your judi2u account, including account verification and KYC compliance;
• Processing deposits, withdrawals, and bet settlements in Malaysian Ringgit via your chosen payment method;
• Verifying your age and identity to comply with judi2u's 21+ age restriction and licensing requirements;
• Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited conduct as defined in judi2u's Terms and Conditions;
• Monitoring your gaming activity to identify potential problem gambling indicators and to administer your responsible gaming tool configurations;
• Providing customer support via live chat and email;
• Sending transactional communications — including deposit confirmations, withdrawal notifications, and account security alerts — to your registered email address or phone number;
• Sending promotional communications — including bonus offers, new game announcements, and sportsbook promotions — where you have consented to receive such communications;
• Conducting platform analytics to improve judi2u's user experience, identify technical issues, and develop new features;
• Complying with requests from judi2u's licensing authority, law enforcement agencies, or courts of competent jurisdiction.

7. Data Sharing & Disclosure

7.1 judi2u does not sell, rent, or trade your personal data to third parties for commercial purposes. Your personal data is shared only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: Financial Data is shared with licensed payment processors — including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and bank FPX gateways — solely for the purpose of processing your deposit or withdrawal transaction;
• KYC/AML providers: Identity Data is shared with licensed identity verification and anti-money laundering screening providers to fulfil judi2u's regulatory obligations;
• Game providers: Anonymised or pseudonymised gaming session data may be shared with game providers (such as Pragmatic Play or PG Soft) for game integrity monitoring and technical support purposes;
• Licensing authority: judi2u may be required to disclose player data to its licensing authority as part of regulatory audits or compliance inspections;
• Law enforcement & legal process: judi2u will disclose personal data in response to a lawful court order, subpoena, or formal request from a law enforcement authority with jurisdiction over judi2u's operations;
• Corporate transactions: In the event of a merger, acquisition, or asset sale, player data may be transferred to the successor entity, subject to equivalent privacy protections.

7.2 All third-party processors engaged by judi2u are required to process data solely in accordance with judi2u's documented instructions and to maintain appropriate technical and organisational security measures.

8. Cookies & Tracking Technologies

8.1 judi2u uses cookies and similar tracking technologies on the judi2u.app platform. Cookies are small text files stored on your device that help us recognise you across sessions, maintain your login state, and collect platform analytics data.

8.2 judi2u uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — including session authentication, security tokens, and load balancing. These cookies cannot be disabled without impairing platform functionality;
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming configurations;
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the judi2u platform, which we use to improve the user experience;
• Marketing cookies: Used to deliver relevant promotional content, where you have consented. These cookies may record your visit to the judi2u platform and are subject to your opt-in consent.

8.3 You can manage your cookie preferences via your browser settings. Blocking all cookies may affect your ability to log in to judi2u or use certain platform features.

9. Data Retention

9.1 judi2u retains your personal data for as long as your account remains active and for a period of five (5) years following account closure, or such longer period as may be required by judi2u's licensing authority for AML audit and regulatory compliance purposes.

9.2 Gaming session data and betting history is retained for a minimum of five (5) years from the date of the relevant activity, as required by judi2u's licensing conditions.

9.3 Communications data — including live chat transcripts and support correspondence — is retained for two (2) years from the date of the interaction, or longer where the communication is relevant to an ongoing dispute or regulatory inquiry.

9.4 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with judi2u's data disposal procedures.

10. Data Security

10.1 judi2u implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and judi2u's servers;
• AES-256 encryption for sensitive data at rest, including identity documents and financial records;
• Role-based access controls limiting staff access to personal data to those with a documented operational need;
• Multi-factor authentication for all judi2u staff accessing systems containing player data;
• Regular penetration testing and security audits by independent third-party security professionals;
• An incident response plan providing for prompt notification to affected players and relevant authorities in the event of a confirmed data breach.

10.2 Notwithstanding the security measures described above, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your judi2u login credentials and for enabling two-factor authentication on your account.

11. International Data Transfers

11.1 The judi2u platform is operated from infrastructure hosted in data centres that may be located outside Malaysia. Where your personal data is transferred to jurisdictions outside Malaysia, judi2u ensures that adequate safeguards are in place — including contractual data protection clauses equivalent to the protections required by judi2u's licensing authority — prior to any such transfer.

11.2 Third-party game providers whose servers process gaming session data may be located in various jurisdictions. In each case, judi2u's contracts with such providers require them to maintain data protection standards consistent with those described in this Privacy Policy.

12. Your Rights

12.1 As a judi2u account holder, you have the following rights in relation to your personal data, subject to applicable law and judi2u's regulatory obligations:

• Right of access: You may request a copy of the personal data judi2u holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to judi2u's legal and regulatory retention obligations (see Section 9);
• Right to restriction: You may request that judi2u restrict the processing of your personal data in certain circumstances;
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to judi2u;
• Right to object: You may object to processing of your personal data on the basis of legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

12.2 To exercise any of the above rights, contact judi2u's support team as described in Section 15. judi2u will respond to all verified data rights requests within thirty (30) calendar days. Where a request is complex or voluminous, judi2u may extend this period by a further thirty (30) days, with notice to you.

12.3 Please note that certain rights — particularly the right to erasure — may be limited where judi2u is required to retain data to comply with licensing authority obligations, anti-money laundering legislation, or court orders.

13. Children's Privacy

13.1 The judi2u platform is strictly for adults aged 21+. judi2u does not knowingly collect personal data from persons under the age of 21. If judi2u becomes aware that personal data of a person under 21 has been collected, the relevant account will be immediately suspended, the data will be deleted (subject to any regulatory reporting obligations), and the matter may be referred to relevant child protection authorities where appropriate.

13.2 If you are a parent or guardian and believe that a person under your care has registered a judi2u account, please contact judi2u support immediately via live chat or email. We will investigate and act on all such reports promptly.

14. Changes to This Privacy Policy

14.1 judi2u reserves the right to update this Privacy Policy at any time. Material changes — such as new categories of data collection, new third-party sharing arrangements, or material changes to retention periods — will be communicated to active account holders via registered email prior to taking effect, where practicable.

14.2 The "last updated" date displayed at the top of this page reflects the date of the most recent revision. Continued use of the judi2u platform following publication of any revised Privacy Policy constitutes your acknowledgement of the updated terms.

15. Contact & Complaints

15.1 For any queries, data rights requests, or complaints in relation to this Privacy Policy or judi2u's handling of your personal data, please contact us via:

• Live Chat: Available 24/7 via the judi2u platform — the fastest route for urgent account or data queries
• Email: [email protected] — for formal data rights requests, include "Data Rights Request" in the subject line

15.2 judi2u will acknowledge all data-related complaints within three (3) business days and will provide a substantive response within thirty (30) calendar days.

15.3 If you are not satisfied with judi2u's response to a privacy complaint, you may refer the matter to the supervisory authority or data protection body designated by judi2u's licensing jurisdiction. Contact details for the applicable authority are available upon request from judi2u support.