imjudi Privacy Policy

1. About This Privacy Policy

This Privacy Policy applies to all personal data collected and processed by imjudi in connection with your use of the imjudi platform, including the website at imjudi.net, all associated subdomains, and any services or features offered through those channels.

By registering an account on imjudi or by continuing to use the platform, you acknowledge that you have read this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree to this Privacy Policy, you must discontinue use of the platform immediately.

This policy should be read alongside the imjudi Terms & Conditions, which govern the overall relationship between imjudi and its users.

2. Data Controller

For the purposes of applicable data protection legislation, imjudi is the data controller responsible for personal data collected through the platform. imjudi determines the purposes and means by which personal data is processed and is accountable for that processing.

All privacy-related enquiries, data subject access requests, and complaints may be directed to imjudi's data protection contact at: [email protected]

3. Personal Data We Collect

imjudi collects personal data through several channels in the course of providing its services to Malaysian players. The categories of personal data we may collect include:

3.1 Registration Data

• Full legal name as it appears on a government-issued identity document
• Date of birth (for age verification purposes)
• Email address
• Malaysian mobile phone number
• Residential address
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., MyKad, passport)
• Proof of address documentation
• Source of funds documentation where required by compliance obligations

3.3 Financial Data

• Payment method details including e-wallet identifiers (Touch 'n Go, Boost, GrabPay), DuitNow references, and bank account information used for FPX transactions
• Transaction history including deposit amounts, withdrawal requests, and MYR wallet balances

3.4 Behavioural and Technical Data

• IP address, device type, browser type and version, and operating system
• Login timestamps and session duration data
• Betting history, game play records, and session logs
• Responsible gaming settings and limit configurations applied to the account

3.5 Communications Data

• Records of communications with imjudi's customer support team, including live chat transcripts and email correspondence
• Survey responses and feedback submitted voluntarily by the user

4. How imjudi Uses Your Personal Data

imjudi processes personal data for the following purposes:

• Account management: creating, maintaining, and administering your imjudi account and associated MYR wallet.
• Identity and age verification: confirming that you meet the 21+ age requirement and verifying your identity in accordance with our KYC obligations.
• Transaction processing: handling deposits, withdrawals, and bonus crediting in Malaysian Ringgit.
• Fraud prevention and security: detecting and preventing fraudulent activity, money laundering, and breaches of the imjudi Terms and Conditions.
• Regulatory compliance: meeting obligations under applicable anti-money laundering (AML), counter-financing of terrorism (CFT), and gaming regulatory requirements.
• Customer support: responding to enquiries, resolving disputes, and providing technical assistance.
• Responsible gaming: monitoring for indicators of problem gambling and administering self-imposed limits, cooling-off periods, and self-exclusions.
• Service improvement: analysing platform usage data in aggregated and anonymised form to improve product features and user experience.
• Marketing communications: sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may withdraw consent at any time via your account settings.

5. Legal Basis for Processing

imjudi relies on the following legal bases for processing your personal data:

• Contractual necessity: processing required to fulfil the imjudi Terms and Conditions, including account administration and payment processing.
• Legal obligation: processing required to comply with AML, KYC, and gaming regulatory obligations.
• Legitimate interests: processing for fraud prevention, security monitoring, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: processing for direct marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

imjudi does not sell, rent, or trade your personal data to third-party advertisers or marketing organisations. We may share your personal data with the following categories of recipients where necessary:

• Payment service providers: e-wallet operators (Touch 'n Go, Boost, GrabPay), DuitNow, and FPX-connected banks for the processing of deposits and withdrawals.
• KYC and identity verification service providers: third-party services engaged to assist with document verification and age confirmation.
• Game technology providers: certified game studios and live casino operators whose titles are offered through the imjudi platform, where session data must be passed for game functionality.
• Regulatory and law enforcement authorities: where imjudi is required by law, court order, or competent authority to disclose personal data.
• Professional advisers: lawyers, auditors, and compliance consultants engaged by imjudi under obligations of confidentiality.

All third-party service providers engaged by imjudi are contractually required to process personal data only in accordance with imjudi's instructions and to maintain appropriate data security standards.

7. Cookies and Tracking Technologies

imjudi uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential cookies: required for the platform to function correctly, including maintaining your login session and remembering your preferences.
• Analytics cookies: used in anonymised or aggregated form to understand how users interact with the platform and to identify areas for improvement.
• Security cookies: used to detect and prevent fraudulent access attempts and to support two-factor authentication flows.

You may configure your browser to refuse or delete cookies; however, doing so may impair the functionality of the imjudi platform, including your ability to maintain a logged-in session. imjudi does not use third-party advertising cookies or share browsing data with ad networks.

8. Data Retention

imjudi retains personal data for as long as your account remains active and for such additional period as is required to fulfil our legal, regulatory, and compliance obligations. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
• KYC documentation is retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Marketing preference data is retained until withdrawal of consent or account closure.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with imjudi's data disposal procedures.

9. Data Security

imjudi employs a range of technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the imjudi platform.
• Encrypted storage of passwords using industry-standard salted hashing algorithms; plaintext passwords are never stored.
• Two-factor authentication (2FA) available for all user accounts via OTP to registered Malaysian mobile numbers.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular third-party penetration testing and security audits.
• Automated anomaly detection systems monitoring for unusual account activity.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. imjudi will notify affected users and relevant authorities promptly in the event of a confirmed personal data breach in accordance with applicable notification requirements.

10. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by imjudi:

• Right of access: you may request a copy of the personal data imjudi holds about you.
• Right to rectification: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable retention obligations.
• Right to restriction: you may request that imjudi restrict the processing of your personal data in certain circumstances.
• Right to data portability: you may request that imjudi provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: you may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact imjudi's support team at [email protected]. imjudi will respond to all verified data subject requests within 30 days. Identity verification may be required before requests are processed.

11. International Data Transfers

In the course of providing its services, imjudi may transfer personal data to service providers located outside Malaysia. Where such transfers occur, imjudi ensures that appropriate safeguards are in place to protect your personal data, including contractual obligations on recipient entities to apply data protection standards equivalent to those described in this Privacy Policy.

12. Minors and Under-21 Restriction

The imjudi platform is strictly prohibited to individuals under the age of 21. imjudi does not knowingly collect personal data from persons under 21 years of age. If imjudi becomes aware that a minor has provided personal data or created an account, all associated data will be deleted and the account closed immediately. If you believe a minor has accessed the platform using your details, please contact imjudi support immediately.

13. Links to Third-Party Sites

The imjudi platform does not contain outbound links to third-party websites. In the event any such links are present in informational content, imjudi is not responsible for the privacy practices of those external sites. This Privacy Policy applies solely to data collected through the imjudi platform.

14. Changes to This Privacy Policy

imjudi reserves the right to update this Privacy Policy at any time. Where changes are material, imjudi will notify registered users via the email address on their account or via an in-platform notification prior to the change taking effect. The date of the most recent revision is displayed at the top of this page. Continued use of the platform following notification of any amendment constitutes acceptance of the revised Privacy Policy.

15. Contact Us

For all privacy-related enquiries, data subject requests, or concerns regarding imjudi's data handling practices, please contact us at:

Email: [email protected]
Support hours: 24 hours a day, 7 days a week, via live chat (available after sign-in) or email.
Response time: imjudi aims to acknowledge all privacy enquiries within 48 hours and to resolve them within 30 calendar days.

If you are dissatisfied with imjudi's response to a privacy concern, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.