1. Who We Are
imjudi ("we", "us", "our") operates the online gaming platform accessible at https://imjudi.lat. We are a licensed international online gaming operator serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and beyond. This Privacy Policy applies to all users of the imjudi website, mobile platform, and any related services.
For the purposes of Malaysia's Personal Data Protection Act 2010 (PDPA 2010), imjudi acts as the data controller in respect of personal data collected from Malaysian users. Any questions regarding your data may be directed to our Privacy Team using the contact details in Section 13.
2. Data We Collect
imjudi collects personal data through your direct interactions with our platform, through automated technical means, and in limited cases from third-party verification providers. The categories of data we collect are set out below.
2.1 Registration and Account Data
- Full name as per government-issued identification
- Date of birth (to verify you are aged 21 or above)
- Email address and account password (stored in hashed form)
- Malaysian mobile number
- Residential address (including postcode and state)
- NRIC or passport number (for identity verification purposes)
- Preferred currency (MYR by default) and language
2.2 Financial and Transaction Data
- Bank account details (Maybank, CIMB, Public Bank, and others used for FPX transfers)
- E-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow)
- Cryptocurrency wallet addresses where applicable (BTC, ETH, USDT)
- Deposit and withdrawal history, including amounts in MYR
- Bonus claims, wagering activity, and balance history
2.3 Technical and Usage Data
- IP address and approximate geolocation (country and city level)
- Device type, operating system, and browser version
- Session timestamps, login history, and page navigation data
- Game play logs (game title, bet amount, result, duration)
- Referral source and marketing attribution data
2.4 Communications Data
- Live chat transcripts and support ticket content
- Email correspondence with our support team
- Responses to surveys, promotions, or feedback requests
| Data Category | Collection Method | Required? |
|---|---|---|
| Registration & Identity | Provided by you at sign-up | Mandatory |
| Financial & Transaction | Provided during deposit/withdrawal | Mandatory |
| Technical & Usage | Collected automatically via cookies and server logs | Automatic |
| Communications | Provided when you contact support | Voluntary |
3. How We Use Your Data
imjudi processes your personal data for clearly defined purposes. We do not use your data in ways that are incompatible with the reason it was originally collected.
- Account creation and management: Setting up and maintaining your imjudi player account.
- Identity verification (KYC): Verifying your age (21+), identity, and residential address as required under our gaming licence and anti-money laundering (AML) obligations.
- Payment processing: Executing deposits and withdrawals via FPX, e-wallets, and cryptocurrency channels safely and accurately.
- Fraud prevention and security: Detecting and investigating suspicious activity, unauthorised access attempts, and potential policy violations.
- Regulatory compliance: Fulfilling reporting obligations to licensing authorities and financial regulators where required by law.
- Platform personalisation: Tailoring game recommendations, bonus offers, and content to your preferences and play history.
- Marketing communications: Sending promotional emails, SMS, or in-platform notifications about bonuses, new game launches, or imjudi events — where you have given consent or where permitted by applicable law.
- Responsible gaming monitoring: Identifying behavioural patterns that may indicate problem gambling and triggering appropriate intervention tools.
- Customer support: Responding to your enquiries, resolving disputes, and improving our service based on your feedback.
4. Legal Basis for Processing
Under Malaysia's PDPA 2010 and comparable international data protection frameworks applicable to imjudi's international gaming licence, we process your personal data on the following legal grounds:
- Contractual necessity: Processing is necessary to perform our contract with you (the Player Agreement and these terms) — for example, to process your deposits or pay out winnings.
- Legal obligation: We are required to collect and retain certain data to comply with AML regulations, KYC requirements, and licensing conditions.
- Legitimate interests: We process technical and usage data to keep the platform secure, prevent fraud, and improve platform performance — activities that are in both our and your interests.
- Consent: Where we send you optional marketing communications or use non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.
5. Sharing Your Data
imjudi does not sell, rent, or trade your personal data. We share data only in the following limited circumstances, and only with parties bound by appropriate confidentiality and data protection obligations:
5.1 Service Providers
We engage carefully vetted third-party vendors to assist with specific operational functions, including payment gateway providers (for FPX, Touch 'n Go, Boost, and DuitNow processing), identity verification agencies, cloud hosting providers, customer support software platforms, and email delivery services. These vendors process data solely on our behalf and under our documented instructions.
5.2 Regulatory and Law Enforcement Bodies
Where legally required, imjudi will disclose personal data to licensing authorities, financial intelligence units, law enforcement agencies, or courts. We will notify you of such disclosures where we are legally permitted to do so.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of imjudi's business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections being maintained. You will be notified of any such change.
6. Cookies & Tracking Technologies
imjudi uses cookies, web beacons, and similar tracking technologies to operate and improve our platform. The types of cookies we use are:
- Essential cookies: Required for basic site functionality, session management, and login authentication. These cannot be disabled without affecting your ability to use the platform.
- Performance cookies: Collect anonymised data about page load times, error rates, and navigation patterns to help us improve the imjudi platform experience.
- Functional cookies: Remember your preferences such as language selection, preferred odds format, and display settings.
- Marketing and analytics cookies: Used with your consent to measure the effectiveness of promotional campaigns and track referral sources. You may opt out of these via your account settings.
Most web browsers allow you to control or delete cookies through browser settings. However, disabling essential cookies may prevent you from accessing certain features of imjudi. Refer to your browser's help documentation for instructions on managing cookies.
7. Data Retention
imjudi retains your personal data for as long as your account is active, and for a defined period thereafter in line with our legal and regulatory obligations. The general retention periods are:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account & Identity (KYC) | 5 years after account closure | AML / regulatory obligation |
| Financial transaction records | 7 years after each transaction | Legal / tax obligation |
| Communication records | 3 years after the interaction | Dispute resolution / legitimate interest |
| Technical / usage logs | 12 months rolling | Security / fraud prevention |
| Marketing consent records | Until consent withdrawn, then 1 year | Consent accountability |
Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.
8. Your Rights Under PDPA 2010
As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by imjudi:
- Right of access: You may request a copy of the personal data we hold about you at any time.
- Right to correction: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
- Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
- Right to limit processing: In certain circumstances, you may request that we restrict the processing of your data while a dispute or query is being resolved.
- Right to data portability: Where technically feasible and legally required, you may request that we provide your data in a structured, machine-readable format.
- Right to complain: If you believe imjudi has not handled your personal data appropriately, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.
To exercise any of these rights, please contact our Privacy Team at the email address listed in Section 13. We will respond to verified requests within 21 days. We may need to verify your identity before processing your request to protect against unauthorised access.
9. International Data Transfers
imjudi operates under an international gaming licence, and some of our service providers and data processors are located outside Malaysia. When we transfer your personal data to other jurisdictions, we take steps to ensure that equivalent data protection standards apply, including:
- Entering into data processing agreements with contractual clauses that mirror the protections under PDPA 2010
- Transferring only the minimum necessary data required for the specific service function
- Conducting due diligence on third-party vendors' security practices before engagement
By creating an imjudi account and accepting our Player Agreement, you acknowledge that your data may be transferred and processed in jurisdictions outside Malaysia for the purposes described in this policy.
10. Security Measures
imjudi implements a multi-layered technical and organisational security framework to protect your personal data. Key measures include:
- TLS 1.3 encryption for all data in transit between your device and our servers
- AES-256 encryption for sensitive data stored at rest, including financial records and identity documents
- Two-factor authentication (2FA) available for all player accounts
- Role-based access controls ensuring imjudi staff can only access data relevant to their specific functions
- Regular penetration testing and vulnerability assessments by independent security auditors
- Incident response procedures with defined timelines for containment, investigation, and notification in the event of a data breach
While imjudi takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorised access to your imjudi account.
11. Minors — Strict 21+ Policy
imjudi's platform is strictly intended for adults aged 21 and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory step during account registration and is re-verified at the KYC document submission stage.
If we discover that personal data has been collected from a person under 21 — whether through an inaccurate date of birth being provided or by any other means — we will immediately suspend the account, void any transactions, and permanently delete all associated personal data. Any winnings accrued by an underage account will be forfeited.
Parents and guardians who believe a minor may have registered an account on imjudi are urged to contact us immediately at the support email in Section 13 so that we can take prompt action.
12. Changes to This Privacy Policy
imjudi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or business operations. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Display a prominent notice on the imjudi platform for at least 14 days following the change
- Send a notification to your registered email address if the changes materially affect how we process your personal data
Your continued use of the imjudi platform after any policy update constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you should cease using the platform and may request account closure and data deletion as outlined in Section 8.
We encourage you to review this Privacy Policy periodically. Previous versions of this policy are available upon request from our Privacy Team.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way imjudi handles your personal data, please contact our Privacy Team:
- Email: [email protected]
- Live Chat: Available 24/7 on all pages of the imjudi platform
- Languages: English, Bahasa Melayu, 中文
- Response Time: Within 2 hours for privacy-related enquiries
For formal data subject access requests under PDPA 2010, please include your full name, registered email address, and a clear description of your request. We may ask you to verify your identity before processing any access, correction, or deletion request.