Judilink Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out the basis on which Judilink ("Judilink", "We", "Us", "Our") collects, processes, stores, and shares personal data in connection with the operation of the website located at https://judilink.cam and all associated services (collectively, "the Platform").

We are committed to protecting your privacy and handling your personal data with the care, transparency, and respect it deserves. This Policy explains your rights, our obligations, and the safeguards we have in place to ensure your information is treated securely and in accordance with applicable data protection laws.

This Policy applies to all visitors, registered members, and anyone who interacts with the Platform in any capacity. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

Definitions

In this Privacy Policy, the following definitions apply unless the context requires otherwise:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For this Platform, the Data Controller is Judilink.
• "Data Processor" — a third party that processes Personal Data on behalf of Judilink under a data processing agreement.
• "Data Subject" — the identifiable natural person to whom Personal Data relates — in the context of this Policy, that means you, the User.
• "Cookies" — small text files stored on your device by a website for session management, preference storage, or analytics purposes.
• "KYC" — Know Your Customer, the process by which Judilink verifies the identity and financial background of registered Players.
• "Services" — all products and features offered by Judilink, including sports betting, live casino, slots, and related platform services.

Data Controller

Judilink acts as the Data Controller in respect of Personal Data collected from Users of the Platform. As Data Controller, Judilink is responsible for determining why and how your Personal Data is processed and for ensuring that all processing activities comply with applicable data protection legislation.

Where Judilink engages third-party service providers to process Personal Data on its behalf — such as payment processors, game studio providers, analytics platforms, or compliance services — those parties act as Data Processors and are bound by contractual data processing agreements that require them to maintain appropriate data protection standards.

Personal Data We Collect

Judilink collects only the Personal Data that is necessary to deliver our Services, comply with our legal obligations, and operate our Platform securely. The categories of Personal Data we may collect include:

We do not collect sensitive categories of Personal Data (such as health, religious, or political data) except where voluntarily disclosed in the context of responsible gambling support requests, in which case the information is handled with the utmost care and used only for the stated purpose.

How We Collect Personal Data

We collect your Personal Data through the following channels:

• Direct Interactions: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, or contacting our support team.
• Automated Technologies: Technical data collected automatically as you navigate the Platform, including via cookies, server logs, and analytics tools.
• Payment Providers: Transaction confirmation data received from payment processors such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank.
• Third-Party Verification Services: Identity and fraud screening data received from licensed KYC and AML compliance providers used to verify your account.
• Regulatory Sources: Information received from regulatory authorities or law enforcement agencies in connection with our legal compliance obligations.

Data Processing & Use

Judilink processes your Personal Data for the following purposes:

• Account Management: To create, maintain, and manage your Judilink Account, including authentication, profile updates, and Account security.
• Service Delivery: To process bets, settle winnings, manage deposits and withdrawals, and deliver the full range of gaming services available on the Platform.
• KYC and AML Compliance: To verify your identity, confirm your age (21+), and screen transactions for money laundering or other financial crime in line with our regulatory obligations.
• Responsible Gambling: To monitor your gaming activity for signs of problem gambling behaviour and to apply responsible gambling tools, including deposit limits and self-exclusion, where appropriate.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat, email, or other support channels.
• Platform Improvement: To analyse user behaviour and platform performance in order to improve our products, fix bugs, and enhance the overall experience for Malaysian players.
• Marketing Communications: Where you have provided consent, to send you promotional offers, new feature announcements, and personalised recommendations. You may withdraw consent at any time.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and lawful requests from regulatory or law enforcement authorities.

Legal Basis for Processing

Judilink processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and Judilink — including Account registration, bet processing, and payment handling — is necessary for the fulfilment of our contractual obligations.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and regulatory reporting.
• Legitimate Interests: Processing conducted to protect the Platform from fraud, to ensure the security of our systems, and to improve our Services, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as direct marketing communications, where we have obtained your prior explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Personal Data

Judilink does not sell, rent, or trade your Personal Data. We may share your Personal Data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Service Providers: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and cryptocurrency network processors — solely for the purpose of processing deposits and withdrawals in MYR or crypto.
• KYC and Compliance Partners: Licensed identity verification, fraud screening, and AML compliance service providers who assist us in meeting our regulatory obligations.
• Technology and Infrastructure Providers: Cloud hosting, content delivery network, and IT infrastructure partners who process data on our behalf under data processing agreements.
• Game Studio Partners: Licensed game content providers who may receive game session data necessary to deliver and settle game outcomes on the Platform.
• Regulatory and Law Enforcement Authorities: We may disclose Personal Data where required to do so by law, court order, or lawful request from a competent regulatory or law enforcement authority.
• Professional Advisors: Lawyers, accountants, and auditors where necessary for legal, financial, or compliance-related purposes, subject to professional confidentiality obligations.

International Data Transfers

In operating a global Platform serving Malaysian players, some Personal Data may be transferred to, stored in, or processed in countries outside of Malaysia. Where such transfers occur, Judilink ensures that adequate safeguards are in place to protect your data to a standard at least equivalent to that applicable in Malaysia.

Safeguards we rely upon for international transfers include:

• Data processing agreements incorporating appropriate data protection clauses.
• Transfers to countries recognised as providing an adequate level of data protection by applicable regulatory standards.
• Technical security measures including encryption in transit and at rest.

If you would like further information about the specific safeguards applicable to any particular international transfer of your Personal Data, please contact us at [email protected].

Data Retention

Judilink retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. Our general data retention principles are as follows:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AML record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with regulatory financial record-keeping obligations.
• KYC Documentation: Retained for the period specified by our licensing authority, typically five (5) years from the date of submission or Account closure.
• Behavioural and Game Activity Logs: Retained for up to two (2) years from the date of the activity, unless required for longer retention for dispute resolution or regulatory purposes.
• Marketing Consent Records: Retained for the period during which consent is active, plus a period of three (3) years following withdrawal of consent for audit purposes.
• Support Communications: Retained for up to three (3) years from the close of the relevant support case.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that renders it incapable of being re-identified.

Cookies & Tracking Technologies

The Judilink Platform uses cookies and similar tracking technologies to ensure proper functionality, improve performance, and deliver a personalised experience for Malaysian players. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication, bet slip management, and security tokens. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect anonymous information about how Users interact with the Platform, enabling us to identify performance issues and improve the overall experience.
• Functional Cookies: Used to remember your preferences, such as language settings, deposit method preferences, and display configurations, so that your experience is consistent across visits.
• Marketing and Targeting Cookies: Used where you have consented to receive tailored promotional content. These are only deployed with your prior consent and can be withdrawn at any time.

You can control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies may impair the functionality of the Platform. For further information about managing cookies, please consult your browser's help documentation.

Your Rights as a Data Subject

Subject to applicable data protection law and any overriding legal obligations Judilink is subject to, you have the following rights in relation to your Personal Data:

• Right of Access: You may request a copy of the Personal Data Judilink holds about you, along with information about how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected. You can update certain data directly in your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where consent has been withdrawn, or where processing is unlawful — subject to any overriding legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing of your Personal Data carried out on the basis of Judilink's legitimate interests, including objecting to direct marketing at any time.
• Rights Related to Automated Decision-Making: You have the right to request human review of any significant decision made solely through automated processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time, without prejudice to the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. We will respond to valid requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day period.

Children's Privacy

The Judilink Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21. Age verification is conducted as part of our KYC process for all registered Accounts.

If Judilink discovers or is informed that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account without delay. If you believe a person under 21 has registered an Account on our Platform, please notify us immediately at [email protected].

Security Measures

Judilink implements appropriate technical and organisational security measures to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data stored in our databases, including payment method references and KYC documentation.
• Role-based access controls, ensuring that Personal Data is accessible only to authorised personnel with a documented business need.
• Multi-factor authentication required for administrative access to backend systems.
• Regular security assessments, penetration testing, and vulnerability management procedures.
• Incident response procedures to detect, report, and address any Personal Data breaches in accordance with applicable legal requirements.

While we take all reasonable steps to protect your Personal Data, no method of electronic transmission or storage is 100% secure. We encourage you to take steps to protect your own Account security, including using a strong and unique password and enabling two-factor authentication where available.

Third-Party Links

The Judilink Platform may contain references to third-party services, including payment providers and game content platforms. Please note that these third parties operate under their own independent privacy policies. Judilink is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of the Platform.

Changes to This Privacy Policy

Judilink reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the nature of our Services. When material changes are made, we will notify registered Users via email or a prominent notice on the Platform prior to the changes taking effect.

The effective date of the current version of this Policy is stated at the top of this page. Your continued use of the Platform following notification of any update constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you should cease using the Platform and request Account closure.

This Policy and all previous versions are available on this page at https://judilink.cam/privacy-policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please do not hesitate to get in touch with our Data Protection team using the contact details below:

We take all privacy enquiries seriously and will acknowledge your message within two (2) business days. Formal data rights requests will be processed within 30 calendar days as described in Section 12 of this Policy.