KejapJudi Privacy Policy – Malaysian Player Personal Data Protection

KejapJudi ("we", "Platform" or "KejapJudi") is committed to protecting and respecting the privacy of all users who register and use our online entertainment platform. This Privacy Policy explains in detail how we collect, process, store and protect your personal information in the context of your use of the kejapjudi.live website, our mobile app and all related services.

This policy applies to all individuals who interact with KejapJudi — whether as a website visitor, registered member, or former member. By accessing or using the KejapJudi platform, you acknowledge that you have read and fully understood this Privacy Policy.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data privacy regulations. If you have any questions about how we handle your data, our privacy team is ready to assist.

KejapJudi collects various types of data depending on how you interact with our platform. The following are the categories of data we collect:

We may also collect data you provide voluntarily, such as information you submit through feedback forms or customer satisfaction surveys. In all cases, we only collect data that is relevant and necessary for the stated purpose.

The data we collect is used exclusively for the following legitimate and stated purposes:

• Account Management: Creating and maintaining your account, verifying your identity through the KYC process and enabling secure access to the platform.
• Transaction Processing: Processing deposits, managing withdrawals and maintaining accurate and responsible financial records.
• Platform Security: Detecting and preventing fraud, hacking, money laundering and activities that violate our Terms and Conditions.
• Customer Support: Responding to enquiries, resolving complaints and providing effective technical support to our users.
• Legal Compliance: Meeting the legal and regulatory obligations imposed on us, including AML (Anti-Money Laundering) requirements.
• Platform Improvements: Analysing usage patterns to identify areas for improvement and deliver a better user experience.
• Marketing Communications: Sending information about the latest promotions and offers — only to users who have given consent to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance to players who need it.

KejapJudi processes your personal data on one or more of the following valid legal bases:

• Contract Fulfilment: Processing is required to fulfil the service agreement between you and KejapJudi, including account management and transaction processing.
• Legal Obligation: We are required by law to process certain data, for example for KYC identity verification and AML compliance.
• Legitimate Interest: We have a legitimate interest in processing data for platform security, fraud prevention and service improvement purposes.
• Consent: For specific purposes such as marketing communications, we rely on your explicit consent, which may be withdrawn at any time.

KejapJudi does not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, we may share your data in the following limited circumstances:

• Service Providers: Technical partners who help us operate the platform, such as payment service providers (DuitNow, FPX, Touch 'n Go) and cloud hosting companies. All such parties are bound by confidentiality agreements and are prohibited from using your data for any purpose other than those we specify.
• Legal Obligation: If required by a court order, legal process or competent government authority, we will disclose the necessary data while protecting your privacy rights to the greatest extent possible under the circumstances.
• Legitimate Interest Protection: In circumstances required to prevent fraud, protect the safety of other users, or safeguard KejapJudi's legitimate rights.
• Business Transfer: In the event of a merger, acquisition, or sale of KejapJudi assets, user data may be transferred — however, users will be notified in advance and their rights will continue to be protected.

Protecting your personal data is our top priority. KejapJudi implements multiple layers of technical and organisational security to keep your data safe:

• 256-bit SSL Encryption: All data transmitted between your browser and our servers is encrypted using the latest TLS protocols, ensuring no third party can intercept your data in transit.
• Two-Factor Authentication (2FA): An additional security layer for account access that requires verification via your device or email in addition to your password.
• 24/7 Monitoring: Our systems are continuously monitored by our cybersecurity team to detect any suspicious activity or intrusion attempts.
• Internal Access Controls: Only staff who require access to specific data to perform their duties are permitted to do so. All access is logged and audited on a regular basis.
• Encrypted Data Storage: Sensitive data stored in our databases, such as financial information, is additionally encrypted using AES-256 encryption.
• Regular Security Audits: KejapJudi conducts regular penetration testing and security audits to identify and address any vulnerabilities.

While we take extensive measures to protect your data, no security system is entirely foolproof. In the event of any significant security breach involving your data, we will notify you within the timeframe required by applicable law.

KejapJudi uses cookies and similar tracking technologies to enhance the user experience and analyse how our platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how visitors use our website to help us understand areas that need improvement.
• Functional Cookies: Saving your preferences such as language, display settings and login information to make using the platform easier in future.
• Analytics Cookies: Used by our internal analytics tools to understand usage patterns in an aggregated and anonymised manner, helping us make better decisions about platform development.

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of some parts of the KejapJudi platform. Note: KejapJudi does not use third-party cookies for advertising purposes.

In the course of our operations, your personal data may be processed or stored on servers located outside Malaysia. This may occur when we use cloud computing services or work with international service providers.

When your data is transferred outside Malaysia, KejapJudi ensures equivalent protection is provided through:

• Use of internationally recognised data transfer mechanisms
• Binding data processing agreements with all third-party service providers
• Selection of partners that comply with data protection standards equivalent to Malaysia's PDPA
• Periodic assessments of partner privacy practices to ensure ongoing compliance

Under Malaysia's PDPA and this Privacy Policy, you have the following rights regarding the personal data we hold about you:

KejapJudi retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by law. The following are general data retention guidelines:

• Active Account Data: Retained for the duration your account is active and for a reasonable period thereafter to facilitate any related enquiries or claims.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable financial and tax legal requirements in Malaysia.
• Communication Logs: Customer support communication records are retained for 2 years for quality assurance and dispute resolution purposes.
• Closed Account Data: Following account closure, we retain the minimum data required for the period mandated by law before secure deletion is carried out.

When data is no longer required, it will be securely deleted or anonymised using approved procedures to ensure it cannot be recovered or reused.

The KejapJudi platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

Should we discover that a child's personal data has been collected unintentionally, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that their child has registered on our platform should contact us immediately.

KejapJudi reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements or other legitimate reasons. All changes will take effect as soon as they are published on our website.

For material changes that significantly affect your privacy rights, we will provide advance notice through:

• Email to the address registered in your account
• In-platform KejapJudi notification upon your next login
• Updated as of the date shown in the "Last Updated" section at the top of this page

We encourage you to review this page regularly to stay informed about how we protect your data. Continued use of our platform after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns or complaints regarding how we handle your personal data, or if you wish to exercise any of your data rights, please contact us through the following channels:

• Privacy Email: [email protected] (Please state "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week on the KejapJudi platform
• Target Response Time: Within 5 working days for general enquiries; 30 working days for formal data rights requests

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the Malaysia Personal Data Protection Department or the relevant authority in your jurisdiction.