OFFICIAL DOCUMENT

Privacy Policy imjudi — Malaysia Player Data Protection

Imjudi takes the privacy of every member seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal data as a player on the imjudi platform in Malaysia.

Last Updated: 1 January 2026
256-bit SSL Data Encryption
PDPA Compliant Data Protection Act
Zero Sharing No Data Selling
2FA Active Account Security
Privacy Questions?

Contact imjudi's Privacy Officer for any queries relating to your personal data.

privacy@imjudi.bet
Response within 48 working hours

This Privacy Policy applies to all users of the imjudi platform. By using imjudi's services, you agree to the processing of your personal data as described in this document. Please read it carefully.

1
Introduction & Scope of imjudi's Privacy Policy

Imjudi ("we", "platform") is committed to protecting the privacy of every individual who uses our platform. This Privacy Policy outlines our data collection and processing practices, which operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards.

This document describes the types of data we collect when you register and use the imjudi platform, how that data is used, who it may be shared with under specific limited circumstances, how long it is retained, and what rights you hold as the data owner.

The scope of this policy covers all imjudi services — including slots, Live Casino, lottery, Sports Betting for the Malaysia Super League, EPL, badminton, MLBB e-sports, MotoGP Sepang, and all other games available on our platform. It also covers all imjudi communication channels, including the website, mobile app, live chat, and support email.

imjudi has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is a core commitment that cannot be compromised.


2
Personal Data We Collect

Imjudi collects personal data across several categories depending on how you interact with our platform. Below is a detailed breakdown of the data collected:

2.1 Data You Provide Directly

Data CategoryExampleRequirements
Identity InformationFull name, MyKad/passport number, date of birthMandatory (KYC)
Contact InformationMalaysian phone number and email addressMandatory
Account InformationUsername, password (stored in hashed form)Mandatory
Financial InformationE-wallet details and FPX account numbers for withdrawalsMandatory
Address InformationMalaysian residential addressEnhanced KYC
Supporting DocumentsMyKad copy, utility bill, bank statementKYC / Verification

2.2 Automatically Collected Data

  • IP address and city-level geographic location information
  • Device type, operating system, and web browser used
  • Activity history and betting logs within the imjudi platform
  • Session duration, pages visited, and platform usage patterns
  • Technical information for troubleshooting and service improvement

2.3 Data From Third-Party Sources

In certain circumstances, imjudi may receive data from accredited third-party identity verification providers, financial institutions for payment verification purposes, and licensed fraud prevention agencies. All such data is used solely for legitimate, regulated purposes.


3
Purpose of Data Collection & Processing

Imjudi uses your personal data only for purposes that are legitimate, necessary, and clearly identified. Every piece of data collected has a specific reason:

  • Account Management: Creating, maintaining, and enabling secure access to your imjudi account
  • Transaction Processing: Processes deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks, as well as your winnings withdrawals
  • Identity Verification (KYC): Meets legal compliance and anti-money laundering requirements
  • Platform Security: Detecting and preventing fraud, duplicate accounts, and suspicious activity
  • Service Improvement: Analysing usage patterns to improve the interface and gaming experience
  • Service Communications: Sending important information relating to your account, transactions, and platform updates
  • Customer Support: Processes and resolves enquiries or complaints submitted to the imjudi support team
  • Responsible Gaming: Monitoring betting patterns to identify players who may need responsible gambling intervention

imjudi does not use your personal data for any purpose not stated in this section without first obtaining your consent.


4
How imjudi Protects Your Data

Data security is central to how imjudi operates. We continuously invest in security infrastructure to ensure your personal and financial data is protected at every level:

4.1 Technical Safeguards

  • 256-bit SSL Encryption: All communications between your device and imjudi's servers are encrypted using 256-bit SSL — the same standard adopted by Malaysia's leading banks such as Maybank and CIMB
  • Secure Password Storage: Passwords are never stored in their original form — only cryptographic hash values generated using the bcrypt algorithm are retained
  • Two-Factor Authentication (2FA): An additional security layer available to all imjudi accounts to prevent unauthorised access
  • 24/7 Monitoring: imjudi's security systems continuously monitor all platform activity to detect anomalies and security threats
  • Secure Network: imjudi's servers are protected by enterprise-grade firewalls, intrusion prevention systems (IPS), and DDoS protection

4.2 Organisational Safeguards

  • Access to members' personal data is restricted to imjudi staff with a legitimate business need only
  • All imjudi staff who handle personal data are required to sign strict confidentiality agreements
  • Regular data security training is conducted for all relevant personnel
  • Internal and external security audits are conducted regularly to identify and address vulnerabilities

5
Data Sharing — Who Can See Your Data

Imjudi only shares your personal data under very limited circumstances and with parties that hold data protection obligations equivalent to our own. imjudi never sells your data.

5.1 Parties That May Receive Your Data

  • Payment Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks to process your financial transactions
  • Identity Verification Provider: Licensed third-party KYC services to ensure legal compliance
  • Game Provider: Gaming companies such as Pragmatic Play, PG Soft, and Evolution Gaming may receive session IDs — without any personally identifiable information — to enable game access
  • Relevant Authorities: Law enforcement authorities or regulatory bodies when required under Malaysian law

5.2 What We Do Not Do

  • Imjudi does not sell, rent, or trade your personal data to advertisers
  • Imjudi does not share your data with parent companies, subsidiaries, or affiliates for independent marketing purposes
  • Imjudi does not share your financial information with game providers

Every third-party provider that works with imjudi is required to meet data protection standards equivalent to or stricter than imjudi's own policy.


6
Data Storage & Deletion Policy

Imjudi retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by applicable Malaysian law.

6.1 General Retention Period

Data TypeRetention PeriodReason
Active account informationFor as long as the account is activeAccount Operations
Financial transaction records7 years after transactionAML legal requirements
KYC Documents5 years after account closureRegulatory compliance
Betting activity logs3 yearsDisputes & Audits
Support communication records2 yearsReferrals and service quality
Non-essential cookie dataUp to 12 monthsUsage analytics

6.2 Deletion Requests

When your imjudi account is closed and all mandatory retention requirements have been met, your personal data will be permanently deleted or anonymised from our systems. You may request early deletion of data not subject to legal retention obligations by contacting privacy@imjudi.bet.


7
Your Privacy Rights as an imjudi User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and imjudi's internal policies, you have the following rights regarding your personal data. All rights can be exercised by contacting us at privacy@imjudi.bet:


8
imjudi Cookie Policy

The imjudi platform uses cookies and similar tracking technologies to enhance the user experience, analyse traffic, and maintain platform security.

8.1 Types of Cookies We Use

  • Session Cookies (Mandatory): Required for core imjudi platform operations — login, navigation, and account security. Cannot be disabled.
  • Functional Cookies: Remembers your language preference, display settings, and gaming preferences for a better experience
  • Analytical Cookies: Helps us understand how players use the imjudi platform so we can improve it — data is collected anonymously
  • Security Cookies: Detects suspicious login activity and protects your account from unauthorised access

8.2 Managing Your Cookie Preferences

You can manage cookie settings through your web browser. Note: disabling mandatory cookies may affect the functionality of the imjudi platform. Analytical and functional cookies can be disabled without impacting your core gaming experience on imjudi.

imjudi uses cookie data solely to improve our services — not to sell your behavioural profile to third-party advertisers.


9
Payment Information Security

The security of your financial information is imjudi's highest priority. All financial transactions on the imjudi platform — whether deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX Maybank2u and CIMB Clicks — are processed through encrypted, secure channels.

  • Imjudi never stores full credit or debit card numbers in our systems
  • E-wallet account details are stored in a tokenised format that cannot be used directly for transactions without additional verification
  • All payment gateways used by imjudi are providers licensed and approved by Bank Negara Malaysia
  • Withdrawals may only be made to the same payment method used for the deposit, in order to prevent money laundering

10
Cross-Border Data Transfers

In the course of its operations, imjudi may transfer your personal data to servers or third parties operating outside Malaysia. This may occur in the context of cloud service providers, international gaming platforms, or global security systems.

In all such cases, imjudi ensures that:

  • Transfers are only made to countries or providers that offer adequate data protection
  • Strict data processing agreements (DPA) are in place with all recipients of data outside the country
  • Your rights as a data subject are protected to the same standard regardless of where processing takes place

11
Minor User Protection

Imjudi has a strict policy regarding individuals under the age of 18. The imjudi platform is not intended for minors, and we do not knowingly collect personal data from children or adolescents.

If imjudi determines that personal data belonging to an individual under 18 years of age has been collected, that data will be deleted immediately and the account in question will be closed without notice. If you believe a minor has registered an account with imjudi, please inform us immediately at privacy@imjudi.bet.


12
Contact imjudi's Privacy Officer

If you have any questions or concerns, or wish to exercise your privacy rights regarding personal data held by imjudi, please reach out to us through the following channels:

  • Privacy Email: privacy@imjudi.bet
  • General Support Email: support@imjudi.bet
  • Live Chat: Available 24/7 via the imjudi platform

Imjudi will respond to all privacy-related enquiries within 48 business hours. For more complex requests such as data access or deletion requests, the process may take up to 30 working days.

This Privacy Policy is effective from 1 January 2026. imjudi reserves the right to update this policy from time to time — users will be notified via email or an in-platform notice.

⚖️ Your Privacy Rights at imjudi

As an imjudi player and data subject under Malaysia's PDPA, you hold the following rights, which you may exercise at any time.

Right of Access
You have the right to request a copy of all personal data held by imjudi about you. Access requests will be processed within 30 business days and can be submitted to privacy@imjudi.bet.
Right to Rectification
If any personal data held by imjudi is inaccurate or out of date, you have the right to request a correction or update. You may also update your basic information directly in your imjudi account settings.
Right to Erasure
You may request the deletion of your personal data when it is no longer needed for its original purpose or when you withdraw your consent. Deletion is subject to mandatory minimum legal retention obligations.
Right to Object
You have the right to object to the processing of your personal data for specific purposes, including direct marketing. imjudi will cease such processing unless there are legitimate grounds that require it to continue.
Data Portability Right
You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider, should you require it.
Right to Restrict Processing
In certain circumstances, you may request imjudi to restrict how your data is processed — for example, while you are disputing the accuracy of your data or while an investigation into a dispute is ongoing.

🔒 imjudi's Commitment to Data Security

Six layers of protection to keep every imjudi player's personal data safe at all times.

End-to-End Encryption
All data transmitted between your device and imjudi's servers is encrypted with 256-bit SSL — the highest security standard used by leading financial institutions such as Maybank and CIMB in Malaysia.
Malaysia PDPA Compliance
imjudi operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). A Privacy Officer has been appointed to ensure ongoing compliance and to handle all personal data-related requests.
No Data Selling
imjudi has an absolute policy — your personal data has never been and will never be sold, rented, or traded to any third party for commercial or marketing purposes without your consent.
Two-Factor Authentication (2FA)
An extra layer of security for your imjudi account — even if your password is compromised, access without an SMS verification code or authenticator app is impossible.
24/7 Security Monitoring
imjudi's automated monitoring system operates around the clock to detect unusual login activity, unauthorised access attempts, and other security threats before they can affect your account.
Regular Security Audits
imjudi's security infrastructure is regularly audited by independent third parties to identify and address potential vulnerabilities, ensuring your data protection remains current against the latest cyber threats.
Your Data Is Safe at imjudi — Play With Peace of Mind!

Register for an imjudi account with confidence — your privacy and data security have been our priority from day one.

256-bit SSL protected data
PDPA Malaysia Compliant
No data selling
Bahasa Melayu