judi24 Privacy Policy

1

About This Privacy Policy

This Privacy Policy ("Policy") describes how judi24 ("judi24", "we", "us", "our") collects, uses, stores, discloses, and protects personal data that we obtain from and about individuals ("you", "your") who access or use the judi24 website at https://judi24.win and all associated services (collectively, the "Platform").

This Policy is intended to comply with applicable data protection legislation, including the Personal Data Protection Act 2010 of Malaysia ("PDPA"). By registering an account on or otherwise using the judi24 Platform, you acknowledge that you have read and understood this Policy and that your personal data will be processed in accordance with its terms.

This Policy should be read alongside judi24's Terms and Conditions, available at judi24.win/terms-conditions. Where there is any conflict between this Policy and the Terms and Conditions with respect to data privacy matters, this Policy shall prevail.

2

Data Controller

For the purposes of applicable data protection legislation, judi24 is the data controller in respect of the personal data collected through the Platform. As data controller, judi24 is responsible for determining the purposes and means by which your personal data is processed.

If you have any questions about how judi24 handles your personal data, or wish to exercise any of your data subject rights, you may contact the judi24 Data Protection team via the support contact information set out in Section 14 of this Policy.

3

Personal Data We Collect

judi24 may collect the following categories of personal data from or about you:

3.1 Identity and Contact Data:

• Full legal name as it appears on your Malaysian NRIC or passport;
• Date of birth and age verification documentation;
• Email address and Malaysian mobile phone number;
• Residential address, including postcode and state within Malaysia;
• Copies of identity documents submitted for KYC verification purposes.

3.2 Account and Transaction Data:

• judi24 account username and encrypted password;
• Deposit and withdrawal transaction history, including payment method details (e.g., Touch n Go eWallet, Boost, FPX, bank account references);
• Betting and gaming history, including game selections, wager amounts, and outcomes;
• Bonus and promotion activity;
• Account balance and wallet history.

3.3 Technical and Usage Data:

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration and page interaction data collected via cookies and analytics tools;
• Login timestamps and authentication method used.

3.4 Communications Data:

• Records of communications between you and judi24 support, including live chat transcripts and email correspondence;
• Feedback, complaints, and survey responses submitted by you.

4

How We Collect Personal Data

judi24 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact judi24 support, or participate in a promotion;
• Automatically: Through cookies, web beacons, and similar tracking technologies when you access and interact with the judi24 Platform;
• From third parties: From payment processors, identity verification services, and fraud prevention partners in connection with the provision of services on the Platform;
• From publicly available sources: To the extent permitted by law, from publicly accessible databases for the purposes of KYC compliance or fraud prevention.

5

Purposes and Legal Basis for Processing

judi24 processes your personal data for the following purposes and on the following legal bases:

• Account registration and management — necessary for the performance of the contract between you and judi24;
• Identity verification and KYC compliance — necessary to comply with legal obligations under applicable anti-money laundering and gaming regulation;
• Processing deposits, withdrawals, and gameplay — necessary for the performance of the contract;
• Fraud prevention and security monitoring — necessary for judi24's legitimate interests in protecting the Platform and its players;
• Customer support and dispute resolution — necessary for the performance of the contract and for judi24's legitimate interests;
• Regulatory reporting — necessary to comply with legal obligations;
• Platform analytics and improvement — necessary for judi24's legitimate interests in improving service quality;
• Marketing communications — based on your consent, which you may withdraw at any time by contacting judi24 support.

6

Disclosure of Personal Data

judi24 does not sell, rent, or trade your personal data to third parties for marketing purposes. judi24 may disclose your personal data to the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors and banking partners (including Touch n Go eWallet, Boost, FPX, Maybank, CIMB, and Public Bank) to facilitate deposits and withdrawals;
• Identity verification and KYC service providers to verify your identity and age as required by applicable regulations;
• Fraud prevention and security partners to detect, investigate, and prevent fraudulent activity on the Platform;
• Game content providers and software licensors to the extent necessary to provide gaming services;
• Legal, regulatory, and law enforcement authorities where required by applicable law or upon receipt of a lawful request;
• Professional advisers including lawyers, auditors, and insurers, under obligations of confidentiality.

All third-party data processors engaged by judi24 are contractually required to process personal data only in accordance with judi24's instructions and in compliance with applicable data protection law.

7

International Data Transfers

judi24 may transfer your personal data to recipients located outside Malaysia in connection with the provision of the Platform's services — for example, to game content servers or payment processing infrastructure hosted in other jurisdictions. Where such transfers occur, judi24 takes steps to ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection law, including the use of contractual data protection clauses.

8

Data Retention

judi24 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements;
• Transaction and gaming history is retained for a minimum of five (5) years for financial and regulatory compliance purposes;
• Communications and support records are retained for a period of three (3) years;
• Technical and usage data is retained for a maximum of thirteen (13) months for analytical purposes.

Where personal data is no longer required for any purpose and there is no legal obligation to retain it, judi24 will securely delete or irreversibly anonymise that data.

9

Cookies and Tracking Technologies

judi24 uses cookies and similar tracking technologies on the Platform to:

• Maintain your login session and account preferences (essential cookies);
• Analyse aggregate usage patterns to improve Platform performance and user experience (analytical cookies);
• Detect and prevent fraudulent activity (security cookies).

judi24 does not use third-party advertising cookies or serve targeted advertisements based on cross-site tracking. You may control cookie settings through your browser, but disabling essential cookies may impair the functionality of the judi24 Platform, including your ability to log in and access your account.

10

Security of Personal Data

judi24 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and judi24's servers;
• Encryption of sensitive personal data at rest, including payment details and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Two-factor authentication options for judi24 player accounts.

Notwithstanding the above, no method of internet transmission or electronic storage is completely secure. While judi24 takes reasonable steps to protect your personal data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, judi24 will notify you and relevant authorities as required by applicable law.

11

Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in respect of your personal data held by judi24:

• Right of access: You may request a copy of the personal data judi24 holds about you;
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected;
• Right to erasure: You may request deletion of your personal data, subject to judi24's legal retention obligations;
• Right to restrict processing: You may request that judi24 restrict processing of your personal data in certain circumstances;
• Right to data portability: You may request that personal data you have provided to judi24 be transferred to you or another controller in a structured, commonly used, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing;
• Right to object: You may object to processing carried out on the basis of judi24's legitimate interests in certain circumstances.

To exercise any of the above rights, please contact judi24 support via live chat or the contact details in Section 14. judi24 will respond to all legitimate requests within thirty (30) days. We may need to verify your identity before processing your request.

12

Children and Minors

The judi24 Platform is strictly intended for adults aged 21 and above. judi24 does not knowingly collect personal data from individuals under the age of 21. If you become aware that a minor has provided personal data to judi24 or has accessed the Platform, please contact judi24 support immediately. Upon confirmation, judi24 will take steps to delete the relevant account and associated personal data as promptly as possible.

13

Changes to This Privacy Policy

judi24 reserves the right to update this Privacy Policy at any time. Updated versions will be published on this page with a revised "Last Updated" date. Where changes are material, judi24 will notify registered players by email or in-platform notification. Your continued use of the judi24 Platform following publication of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how judi24 protects your personal data.

14

How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or judi24's handling of your personal data, please contact the judi24 Data Protection team via live chat support, available 24/7 on the judi24 Platform, or by email at support@judi24.win.

judi24 will acknowledge your enquiry promptly and provide a substantive response within thirty (30) days. If you are not satisfied with judi24's response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction.