Privacy Policy

This Privacy Policy ("Policy") is published by judi888 ("we", "us", "our", or "the Platform") and applies to all persons who visit, register on, or use the services available at https://judi888.cam. It sets out the basis on which any personal data we collect from you — or that you provide to us — will be collected, processed, stored, disclosed, and otherwise handled.

judi888 operates as an online casino and sports betting platform serving Malaysian players and users across the region. In providing our services, we necessarily collect and process certain categories of personal information. We take our responsibility to protect that information extremely seriously and are committed to doing so in accordance with applicable data protection laws and best practices.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy. By accessing or using the judi888 Platform, you confirm that you have read, understood, and consent to the collection and use of your personal data as described in this Policy.

For the purpose of this Privacy Policy, the following terms carry the meanings set out below unless the context otherwise requires:

• "Personal Data" — Any information relating to an identified or identifiable natural person. This includes name, identification number, contact details, IP address, device identifiers, and financial transaction records.
• "Data Controller" — judi888, which determines the purposes and means of processing your personal data in connection with the operation of the Platform.
• "Data Processor" — Any third party that processes personal data on judi888's behalf, including payment processors, identity verification services, and cloud infrastructure providers.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, transmission, restriction, erasure, or destruction.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data, as signified by a clear affirmative action.
• "KYC" — Know Your Customer; the identity and age verification process conducted by judi888 to confirm a Player's identity in compliance with responsible gambling obligations.

We collect personal data in the categories described in the table below. The data collected varies depending on whether you are a visitor browsing the Platform without an account, a registered Player, or a Player undergoing KYC verification.

We collect only the minimum data necessary for the purposes described in Section 5. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly required for age verification and responsible gambling compliance.

judi888 collects personal data through the following channels and means:

• Direct Provision: Data you voluntarily submit when registering an Account, completing KYC verification, updating your account profile, making deposits or withdrawal requests, or contacting our customer support team via live chat or email.
• Automated Technologies: Data collected automatically as you navigate the Platform, including through cookies, web beacons, pixel tags, and server log files. This includes your IP address, browser fingerprint, device identifiers, and navigation behaviour.
• Payment Processors: When you initiate a deposit or withdrawal using Malaysian payment methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, or Public Bank, our payment processing partners may share transaction confirmation data with us to reconcile your account balance.
• Identity Verification Partners: During KYC verification, data from your submitted identity documents is processed by our compliance systems to confirm your name, date of birth, and identity document authenticity.
• Third-Party Analytics: Aggregated, anonymised usage data may be collected through analytics tools to help us understand platform performance and user experience patterns. This data does not identify individual users.

We process your personal data for the following specific, explicit, and legitimate purposes:

• Account Management: To create, maintain, verify, and administer your judi888 Account, including authentication, password resets, and account communications.
• Service Delivery: To provide the gaming, betting, and customer support services you request via the Platform, including processing deposits and withdrawals in Malaysian Ringgit (MYR) and crediting game winnings.
• Identity & Age Verification (KYC): To verify that you are who you claim to be, that you are at least 21 years of age, and that your payment methods are legitimately registered in your name — as required by our responsible gambling and anti-fraud obligations.
• Financial Compliance & Anti-Fraud: To monitor transactions for patterns indicative of fraud, money laundering, multiple account abuse, or other prohibited activities. This is a legal obligation under applicable anti-money laundering frameworks.
• Responsible Gambling: To monitor betting patterns that may indicate problem gambling behaviour, to administer deposit limits and self-exclusion requests, and to communicate with Players about responsible gambling resources where appropriate.
• Customer Support: To respond to enquiries, resolve complaints, process refunds, and maintain records of support interactions for quality assurance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to identify technical issues, improve platform performance, and enhance the user experience for Malaysian players.
• Legal Compliance: To comply with any applicable legal obligation, court order, regulatory requirement, or law enforcement request to which judi888 is subject.
• Direct Communications: Where you have provided consent or where permitted by applicable law, to send you promotional communications about bonuses, new games, and Platform updates. You may withdraw consent for marketing communications at any time by contacting our support team.

judi888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between judi888 and you as a registered Player — including account creation, service delivery, payment processing, and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and regulatory record-keeping duties.
• Legitimate Interests: Processing necessary for judi888's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent as the legal basis for processing — in particular for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

judi888 does not sell, rent, or trade your personal data to third parties. We may share your personal data with third parties only in the following limited and controlled circumstances:

• Payment Service Providers: We share transaction data with Malaysian payment processing partners — including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank — to facilitate deposit and withdrawal transactions. These providers are bound by their own privacy policies and data protection obligations.
• Identity Verification Services: We share identity document data with certified KYC compliance service providers for the sole purpose of verifying your identity and age. These providers process data exclusively on our instructions and under confidentiality agreements.
• Cloud Infrastructure & IT Service Providers: We use third-party cloud hosting and data centre services to operate and store Platform data. These providers access data solely as necessary to provide their infrastructure services and are contractually bound to maintain data security.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to competent authorities where required to do so by applicable law, court order, regulatory direction, or legitimate law enforcement request. We will, where legally permitted, notify you of such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of judi888's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

The judi888 Platform uses cookies and similar tracking technologies to operate certain platform features, remember your preferences, and collect anonymised usage data. A "cookie" is a small text file stored on your device when you visit a website.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in and access your Account. For full cookie management options, please consult your browser's help documentation.

judi888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, accounting, or reporting obligations.

• Active Account Data: Retained for the duration of your Account's active status, plus a minimum period of five (5) years following Account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documents: Identity documents submitted during verification are retained for a minimum of five (5) years following their submission, as required by applicable financial compliance obligations.
• Transaction Records: All financial transaction records, including deposits, withdrawals, and bonus transactions, are retained for a minimum of seven (7) years following the date of the transaction.
• Customer Support Records: Live chat transcripts and email correspondence are retained for a period of three (3) years from the date of the interaction unless the subject matter requires longer retention for legal or complaint resolution purposes.
• Marketing Consent Records: Records of your consent to, or withdrawal of consent from, marketing communications are retained for the duration of your Account relationship plus three (3) years.
• Technical & Log Data: Server logs, IP address records, and session data are retained for a period of twelve (12) months for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures, unless a longer retention period is required by law.

judi888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• Encryption in Transit: All data transmitted between your device and the judi888 Platform is encrypted using TLS 1.2 / 1.3 with 256-bit SSL encryption. This protects your login credentials, payment details, and personal information from interception during transmission.
• Encryption at Rest: Sensitive personal data stored on our servers — including identity documents, financial records, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within judi888's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific job functions, and all access is logged and audited.
• Fraud Detection Systems: Automated monitoring systems continuously analyse account activity, login patterns, and transaction behaviour to detect and flag anomalous activity indicative of unauthorised access or fraudulent conduct.
• Data Breach Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, judi888 will take immediate steps to contain the breach, assess its impact, and notify affected Players and relevant authorities in accordance with applicable data protection obligations.

While we take all reasonable precautions to protect your personal data, no method of data transmission over the internet or electronic storage is entirely infallible. We encourage Players to take their own security precautions — including using strong, unique passwords and enabling any available two-factor authentication features.

Subject to applicable data protection law, you have the following rights in respect of your personal data held by judi888. To exercise any of these rights, please contact us using the details set out in Section 14.

judi888 will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further two months, of which you will be notified. We will not charge a fee for responding to rights requests unless the request is manifestly unfounded or excessive.

The judi888 Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from persons under the age of 21.

If we become aware that personal data has been submitted by or on behalf of a person under the age of 21, we will take immediate steps to delete that data from our systems and to permanently close the associated Account. Any deposits made by an underage individual will be returned via the original payment method following identity confirmation.

If you have reason to believe that a minor has registered on the judi888 Platform, please contact our customer support team immediately at the contact details in Section 14. We treat all reports of this nature with the utmost urgency.

judi888 reserves the right to update, revise, or replace this Privacy Policy at any time in response to changes in applicable data protection law, our operational practices, or the nature of the services we provide. The "Last Reviewed" date at the top of this page will be updated to reflect each revision.

Where changes to this Policy are material — for example, where we introduce new categories of data collection or new sharing arrangements — we will make reasonable efforts to notify registered Players via their registered email address or via an in-platform notification prior to the changes taking effect.

Your continued use of the judi888 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed of how we are protecting your personal data. If you do not agree with any revision, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy — including requests to exercise your data rights under Section 11 — please contact the judi888 Privacy and Compliance team using the details below. We serve Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia, and we are committed to responding to all privacy enquiries promptly and transparently.

For general customer support unrelated to data privacy, please use our live chat service available directly within the Platform for the fastest response.