Judikiss Privacy Policy – Malaysia User Data Protection

01Introduction & Scope of This Policy

This Privacy Policy is issued by judikiss and applies to all users who access or use the judikiss platform — including the official website, Android and iOS mobile apps, and all related digital services provided under the judikiss brand.

Judikiss operates in full compliance with the Malaysia Personal Data Protection Act 2010 (PDPA). We believe that transparency in data handling is the foundation of user trust. That is why we have written this Privacy Policy in plain, easy-to-understand language rather than lengthy and confusing legal text.

By using the judikiss platform, you agree to the processing of your personal data as described in this policy. If you do not agree, please stop using the platform and contact us regarding any appropriate action on your existing data.

02Personal Data We Collect

Judikiss collects your personal information through various means as you interact with our platform. The following are the categories of data we collect:

We also collect data you provide voluntarily, such as communication preferences and feedback about our services. All data collection is carried out lawfully and with your consent given at registration.

03How We Use Your Personal Data

Judikiss uses collected personal data solely for legitimate and necessary purposes. Below is the complete list of how your data is used:

• Account management — to create, verify, and manage your judikiss account, including the mandatory KYC process.
• Transaction processing — to process deposits, withdrawals, and all financial transactions securely in MYR.
• Service delivery — to allow you to access and enjoy all games and services within the judikiss platform.
• Security and fraud prevention — to detect and prevent fraudulent activity, money laundering, and platform abuse.
• Legal compliance — to fulfil legal and regulatory obligations applicable to the judikiss platform.
• Service communications — to send transaction notifications, account updates, and important security information.
• Product improvement — to analyse usage patterns in aggregate (without identifying individuals) for the purpose of improving platform quality.
• Customer Support — to help you resolve issues, answer enquiries, and improve your user experience.

04Legal Basis for Data Processing

Every processing of personal data by judikiss has a valid legal basis under the Malaysia Personal Data Protection Act 2010 (PDPA):

• Your consent — for marketing communications and preferences you have set yourself. You may withdraw this consent at any time.
• Contract performance — data required to process transactions, manage accounts, and deliver the services you use.
• Legitimate interests — for security purposes, fraud prevention, risk analysis, and service improvements that benefit users.
• Legal obligations — compliance with anti-money laundering requirements, KYC, financial reporting, and directives from relevant authorities.

Judikiss will not process your personal data for purposes inconsistent with those stated without notifying you in advance and obtaining appropriate consent where required.

05Data Sharing & Disclosure

Judikiss does not sell, rent, or share users' personal data with third parties for marketing purposes. However, there are certain circumstances in which we may need to share your data:

• Authorised service providers — payment providers (such as FPX and DuitNow gateways), cloud service providers, and security solution providers that help us operate the platform. All such parties are bound by confidentiality agreements and only process data for purposes specified by judikiss.
• Legal requirements — where required by Malaysia law, court order, or lawful directive from authorities such as Bank Negara Malaysia or law enforcement agencies.
• Protection of judikiss rights — to prevent fraud, enforce the Terms and Conditions, or protect the safety of other users on the platform.
• Business transfer — in the event of a merger, acquisition, or asset sale, user data may be transferred as part of that process, subject to equivalent privacy protections.

06Data Retention & Security Measures

Judikiss implements strong technical and organisational security measures to protect your personal data from unauthorised access, loss, or accidental disclosure:

• 256-bit SSL Encryption — all communication between your device and judikiss servers is encrypted using the latest TLS protocol.
• Data encryption at rest — sensitive data such as financial details and KYC documents are stored in encrypted format.
• Strict access controls — only judikiss staff with a legitimate business need are permitted to access users' personal data, and all access is logged and monitored.
• Two-factor authentication (2FA) — available for all user accounts to add an extra layer of login security.
• 24/7 security monitoring — a threat detection system operating around the clock to identify and respond to any suspicious activity.

Your personal data is retained for as long as necessary to fulfil the purpose of collection, or as required by law — typically 7 years for financial records for compliance purposes. Once the retention period ends, your data will be securely deleted or anonymized.

07Cookies, Logs & Tracking Technologies

The judikiss platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.

• Session cookies — required to maintain your login session during an active session. This cookie is automatically deleted when you close your browser.
• Preference cookies — stores your preferences such as language and display settings for a better user experience.
• Security cookies — helps us detect suspicious activity and protect your account from unauthorised access.
• Analytics cookies — collects aggregated information about how users interact with the platform for product improvement purposes. This data cannot be used to identify individuals.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of some parts of the judikiss platform. Cookies required for security and core functionality cannot be turned off.

08Your Rights as a judikiss User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and judikiss's internal policies, you have the following rights regarding your personal data:

• Right to access — you have the right to request a copy of the personal data we hold about you.
• Right to rectification — you have the right to request that we correct any inaccurate or incomplete personal data.
• Right to erasure — in certain circumstances, you have the right to request that we delete your personal data, subject to applicable legal retention obligations.
• Right to restrict processing — you have the right to request that we restrict how we process your data in certain circumstances.
• Right to object — you have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to withdraw consent — for processing based on your consent, you may withdraw it at any time without affecting the validity of prior processing.

09Child Data Protection

The judikiss platform is intended for adults aged 18 and above. judikiss does not knowingly collect or process personal data of children under the age of 18.

If we discover that a child's personal data has been collected without proper age verification, we will take immediate action to delete the information and terminate the account in question. Parents or guardians who are aware that their child has registered a judikiss account are requested to contact our support team immediately.

10Changes to This Privacy Policy

Judikiss reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or technology used.

When material changes occur, judikiss will notify registered users via their registered email or in-platform notifications at least 14 days before the changes take effect. The last updated date is always displayed at the top of this document for your reference.

We encourage you to review this Privacy Policy periodically. Continued use of the judikiss platform after changes take effect will be considered acceptance of the updated policy.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how judikiss handles your personal data, there are several ways to reach us:

• In-platform live chat — the fastest way to get a response — the judikiss support team operates 24/7.
• Privacy email — [email protected] — for specific enquiries relating to privacy and data protection.
• FAQ Section — visit the FAQ us for answers to the most frequently asked privacy questions.

We are committed to responding to all privacy-related enquiries within 3–5 business days. For more complex cases involving data deletion requests or formal complaints, the processing period is up to 21 business days.