Privacy Policy JudiKiss – Your Data Is Fully Protected

JudiKiss collects various types of information from members during the registration process and throughout ongoing use of the platform. This data collection is necessary for us to provide a service that is secure, responsible and compliant with applicable legal requirements.

Information you provide directly:

• Full name, national identity card or passport number, and date of birth upon registering your judikiss account.
• An active Malaysian phone number for OTP verification and account communications.
• Email address for transaction notifications and service communications.
• Payment method details — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX details via Maybank2u or CIMB Clicks.
• Identity verification documents where required as part of the Know Your Customer (KYC) process.

Automatically collected information:

• Your device's IP address when accessing judikiss, for security purposes and detection of suspicious activity.
• Device type, operating system, and browser version, collected to optimise your experience.
• Activity history within the judikiss platform, including bets placed, deposits, withdrawals, and session duration.
• Cookie data and tracking technologies that help judikiss understand how you use the platform.

All personal data collected by judikiss is used solely for legitimate, relevant, and non-excessive purposes. The following are the primary purposes for which your data is used:

• Account Management – Creating, verifying and managing your judikiss account, including the login process, OTP verification and password recovery.
• Transaction Processing – Processing deposits via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay and FPX, as well as handling withdrawal payouts to your bank account or e-wallet.
• Platform Security – Detecting and preventing fraud, account abuse, money laundering and activities that violate judikiss's Terms & Conditions.
• Responsible Gaming – Monitoring betting patterns to identify members who may need support or responsible gaming intervention.
• Service Improvements – Analysing usage data in aggregate, anonymised form to better understand member needs and improve the judikiss platform experience.
• Service Communications – Sending important account notifications, transaction updates, policy amendments, or security alerts via SMS or email.
• Legal Compliance – Meeting reporting and disclosure requirements mandated by law, regulatory bodies or applicable court orders.

JudiKiss does not use your data to make automated decisions that have a material impact on you without human involvement in the evaluation process. Any decisions relating to account suspension or closure involve manual review by qualified members of the judikiss team.

JudiKiss does not sell, rent, or trade members' personal data to third parties for any commercial purpose. However, in certain circumstances, we may need to share information with the following parties:

• Payment Service Providers – Payment platform providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX receive only the minimum transaction data required to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Technology & Infrastructure Providers – Technology companies providing server hosting, cybersecurity and platform infrastructure services may have limited access to certain data as part of their technical requirements. All such access is governed by strict data processing agreements.
• Statutory Authority – JudiKiss may be required to disclose information to law enforcement agencies, regulatory bodies or courts of competent jurisdiction when required to do so under applicable Malaysian law.
• Anti-Money Laundering Prevention Agency – In line with obligations under anti-money laundering (AML) laws, judikiss may be required to report suspicious transactions to the relevant authorities.

JudiKiss does not share members' personal data with advertising networks, data brokers or third-party marketing companies for targeted advertising without your explicit consent.

Protecting members' personal data is judikiss's highest priority. We continually invest in cybersecurity infrastructure on par with financial institution standards to ensure your data is always kept safe.

• 256-bit SSL Encryption – All communication between your device and judikiss's servers is encrypted using 256-bit TLS/SSL protocols. This means data in transit cannot be read or intercepted by unauthorised parties.
• Data Encryption at Rest – Sensitive data stored in judikiss's databases — including financial information and identity verification documents — is stored in encrypted form using modern encryption algorithms.
• Two-Factor Authentication (2FA) – SMS-based OTP is available to all judikiss members as an additional security layer during login and high-value transactions.
• 24/7 Security Monitoring – The judikiss cybersecurity team monitors the platform infrastructure around the clock to detect any unusual activity or intrusion attempts.
• Data Segregation – Member personal data is stored in an environment isolated from general operational data, with strict access controls ensuring that only authorised personnel can access it.
• Regular Security Testing – JudiKiss conducts regular penetration testing and security audits by independent third-party experts to identify and address any vulnerabilities before they can be exploited.

While judikiss takes all reasonable precautions, no security system in the world is entirely foolproof. In the event of a material data breach affecting members, judikiss is committed to notifying affected members within the timeframe required by law.

JudiKiss uses cookies and similar tracking technologies to enhance the user experience and platform security. Cookies are small text files stored on your device when you visit judikiss.

Types of cookies used by judikiss:

• Essential Cookies – Required for core platform functions such as login session authentication, security and language preferences. These cookies cannot be disabled without affecting the functionality of the judikiss platform.
• Analytics Cookies – Helps us understand how members use judikiss — the most frequently visited pages, time spent and navigation patterns. This data is used in aggregate and anonymised form for platform improvement.
• Functional Cookies – Storing your preferences such as language selection, display settings, and other information that enables judikiss to provide you with a more personalised experience.
• Security Cookies – Used to detect suspicious login activity, prevent unauthorised access and protect your account from hacking attempts.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the judikiss platform and your overall user experience. JudiKiss recommends keeping essential and functional cookies enabled for the best experience.

JudiKiss retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our data retention policy is as follows:

• Active Account Data – Retained for as long as your judikiss account is active and for a reasonable period after account closure, generally not exceeding 7 years, in accordance with Malaysia's financial and anti-money laundering legal requirements.
• Transaction Records – All deposit and withdrawal records are retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements. This is not judikiss's choice — it is a legal obligation.
• Betting History – Retained for the duration of an active account and available for members to request a copy at any time. Following account closure, betting history is retained for the period stipulated by regulatory requirements.
• Communications Data – Live Chat session records and customer support tickets are retained for a period of 2 years for quality control and dispute resolution purposes.
• Analytics Data – Anonymised platform usage data is retained for a longer period for long-term trend analysis and product improvement purposes.

Once the designated retention period has lapsed, judikiss will delete or anonymise the relevant data in a secure and irreversible manner. Early deletion requests from members will be considered, taking into account any legal obligations that may prevent full deletion within a given period.

As a judikiss member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

• Right of Access – You have the right to obtain a copy of the personal data judikiss holds about you. Data access requests can be submitted by email to support@judikiss.xyz.
• Right to Rectification – If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You can update basic information directly through your judikiss account settings.
• Right to Erasure – You may request the deletion of your personal data, subject to judikiss's legal obligations to retain certain records for the minimum period required under Malaysian law.
• Right to Restrict Processing – In certain circumstances, you may request that judikiss restrict how we process your data while a dispute or investigation is ongoing.
• Right to Object – You have the right to object to the processing of your data for specific purposes such as marketing communications, and judikiss will honour that objection.
• Right to Data Portability – You may request a copy of your personal data in a machine-readable format for the purpose of transferring it to another platform.

To submit any request relating to your privacy rights, please contact judikiss by email at support@judikiss.xyz or via the 24/7 Live Chat within the platform. JudiKiss is committed to responding to privacy-related requests within 14 business days from the date of receipt.

The judikiss platform is intended exclusively for individuals aged 18 and above. JudiKiss does not knowingly collect, store or process any personal data from children or individuals under the age of 18.

Should judikiss discover that personal data belonging to an individual under the age of 18 has been collected — whether through fraudulent registration or any other means — we will take immediate action to delete that data and close the account in question without notice.

If you are a parent or guardian and discover that your underage child has registered for or used the judikiss platform, please contact us immediately at support@judikiss.xyz so we can take the appropriate steps to protect your child's privacy and wellbeing.

The judikiss platform may contain links or references to third-party services that operate independently of judikiss — including payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX via Maybank2u and CIMB Clicks.

When you use these third-party services, you will be subject to their own privacy policies. JudiKiss is not responsible for the privacy practices or content of those third-party platforms. We recommend reading the privacy policy of each third-party platform you use in connection with managing your judikiss transactions.

JudiKiss has no control over data collected by payment providers when you complete a transaction through their platforms. Your choice to use any particular payment method is subject to the terms and privacy policy of that provider.

JudiKiss reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform operations. Key points regarding amendments:

• Material changes to this Privacy Policy will be communicated to all judikiss members via in-platform notifications or messages to your registered phone number at least 7 days before taking effect.
• Minor amendments relating to clarity or corrections that do not affect your fundamental rights may be made without advance notice.
• The "last updated" date at the top of this page reflects the current version of the judikiss Privacy Policy in force.
• Continued use of the judikiss platform after the effective date of any Privacy Policy amendment constitutes acceptance of the revised privacy terms.

We encourage you to review the judikiss Privacy Policy periodically to stay informed about how we manage your personal data. If you do not agree with any amendments, you have the right to close your account before the new terms take effect.

If you have any questions, concerns or requests relating to judikiss's Privacy Policy or the handling of your personal data, you can reach our privacy team through the following channels:

• Privacy Email – Send an email to support@judikiss.xyz with the subject line "Privacy Inquiry" for any questions relating to your personal data. We are committed to responding within 14 business days.
• 24/7 Live Chat – For more urgent inquiries, the judikiss support team is on duty 24 hours a day and can assist you, directing your request to our privacy officer if required.
• Mailing Address – For formal written matters relating to privacy and data protection, please contact judikiss via our official email address listed above.

If you are dissatisfied with the way judikiss has handled your privacy complaint, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia or the relevant regulatory body under applicable Malaysian law.