Judilink Privacy Policy – How We Protect Your Personal Data

In operating the Judilink platform, we collect several categories of information from users. Each category is collected only when genuinely necessary for its stated purpose.

Information you provide directly:

• Full name as per a valid identification document (national ID card or passport).
• Date of birth for age verification.
• Active email address registered under your name.
• A valid Malaysian mobile phone number.
• Bank account or digital wallet details for deposit and withdrawal purposes.
• Identity verification documents (KYC) such as copies of identification cards and proof of address.

Information collected automatically:

• IP address and general location information (state/city).
• Device type, operating system, and web browser used.
• Game activity logs including the date, time, and type of games played.
• Financial transaction records including deposits, withdrawals and wagering.
• Login session data including access timestamps and session duration.
• Cookie and tracking technology information as described in Section 4.

Judilink uses collected data solely for purposes related to platform operations and improving user experience. The following is a complete list of data usage purposes:

We do not use your data for automated decision-making that significantly affects your rights or interests without human intervention. Every decision involving account suspension or withdrawal rejection is manually reviewed by our team.

Judilink does not sell, rent, or trade your personal data. However, in certain limited situations, information may be shared with carefully selected third parties:

• Payment service providers: Information required to process financial transactions is shared only with accredited payment gateways. These providers are bound by strict confidentiality agreements.
• Gaming technology providers: Game data required to operate live casino or slot games may be shared with registered game software providers.
• Legal authorities: Judilink will comply with any court orders or lawful requests from law enforcement agencies to disclose user information.
• Audit and compliance: External auditors or accredited licensing bodies may access certain data within the scope of defined compliance reviews.

In all data sharing cases above, we ensure that recipient parties are bound by data protection obligations equivalent to or stricter than our own standards.

Judilink uses cookies and similar tracking technologies to enhance platform functionality and deliver a better experience to users. There are three types of cookies we use:

• Essential Cookies (Required): Required for the platform to function correctly — including login session management, account security, and language preferences. These cookies cannot be disabled.
• Analytics Cookies (Optional): Helps us understand how users interact with the platform so we can make improvements. This data is collected in aggregate form and cannot be individually identified.
• Preference Cookies (Optional): Saving personal settings such as display mode, preferred language, and game preferences so you do not need to reconfigure them each time you log in.

You can manage cookie settings through your account settings panel or through your web browser settings. However, disabling essential cookies may affect platform functionality.

Judilink continuously invests in data security infrastructure to ensure user information remains protected at all times. Among the technical and organisational measures we implement:

• End-to-end encryption for all communications between user devices and judilink servers using the latest TLS 1.3 protocol.
• 24/7 Monitoring by an in-house cybersecurity team that detects anomalies and threats in real time.
• Penetration Testing conducted periodically by independent security firms to identify and remediate any vulnerabilities.
• Automatic Data Backup every day to geographically separate locations to ensure service continuity.
• Security awareness training mandatory for all judilink staff with access to user data.
• Incident Response Procedure that clearly ensures any data breach is handled swiftly and users are notified within 72 hours.

Judilink retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. The following are our data retention guidelines:

• Active account data – retained for the duration the account is active and up to 5 years after account closure for audit and compliance purposes.
• Financial transaction records – retained for a minimum of 7 years in accordance with applicable anti-money laundering regulations.
• Customer support communication logs – retained for 3 years from the date of the last interaction.
• Anonymised analytics data – may be retained indefinitely as it contains no personally identifiable information.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, we use certified destruction methods.

As a judilink platform user, you have the following rights regarding your personal data. All requests can be submitted via our live chat or support email and will be processed within 7 business days:

• Right to Access: You may request a copy of all personal data we hold in relation to your account.
• Right to Rectification: If any information is inaccurate or outdated, you may request a correction immediately.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data, subject to legal obligations that prevent complete deletion.
• Right to Restriction of Processing: You may request that we restrict the processing of your data while any dispute is being resolved.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another platform.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.

In some circumstances, your personal data may be transferred to or processed in countries outside Malaysia, particularly in connection with international game service providers or technical infrastructure. Judilink ensures that any such data transfers are carried out with adequate safeguards:

• Only countries or entities with data protection standards equivalent to or higher than Malaysia's are considered.
• A comprehensive data processing agreement is signed with all third parties involved.
• Recognized data transfer mechanisms such as standard contractual clauses are used where required.

The judilink platform is strictly limited to individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If you discover that your child or someone under your care has registered a judilink account, please contact our support team immediately. We will take action to delete the account and all associated data within 48 hours upon verification.

Judilink applies strict age verification procedures during the registration process and conducts enhanced KYC checks whenever there is doubt regarding a user's age.

Judilink reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or service improvements. When any material amendment occurs, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending email notifications to all active users at least 14 days before an amendment takes effect.
• Displaying a prominent notice within the platform for 30 days after an amendment is published.

Continued use of the judilink platform after the effective date of any amendment constitutes full acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is here to help.

You can reach us via:

• Live Chat: Available 24/7 via the chat icon within the platform.
• Email: [email protected]
• FAQ Page: judilink FAQ contains answers to the most frequently asked privacy questions.

We are committed to responding to all privacy-related inquiries within 2 business days. For official requests related to user rights (access, correction, deletion), the processing period is up to 7 business days.