Privacy Policy judilink – Your Data Security Is Our Priority

Judilink collects users' personal data through several channels throughout the period of platform use. This data collection is conducted transparently and is intended to enable us to provide a secure, seamless service tailored to each user's needs.

Information you provide directly:

• Full name, date of birth, and identity card or passport number upon account registration
• Email address, phone number and residential address
• Bank account or digital wallet details for deposit and withdrawal purposes
• Identity verification documents (KYC) such as ID card photos and proof of address
• Any information you provide when communicating with our support team

Information collected automatically:

• IP address, device type, operating system and browser version
• In-platform activity data — games played, bets placed, wins and withdrawals
• Session logs, login times, session duration, and access location
• Cookie and related tracking technology data — as described in Section 4

Every piece of data collected by judilink is used for specific and legitimate purposes. We do not use your data for any other purpose without prior notice and, where required, your consent.

For marketing communications, you may withdraw your consent at any time through the notification settings in your account or by contacting our support team.

Judilink does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, in operating the platform, we may need to share certain data with the following parties under limited and controlled circumstances:

• Payment processors: FPX, DuitNow, Touch 'n Go, GrabPay and cryptocurrency providers require transaction information to process your deposits and withdrawals.
• Game software providers: Licensed game providers partnering with judilink receive only the minimum game data required to run the games.
• Regulatory authority: judilink fully complies with lawful information requests from relevant authorities, including the Financial Intelligence Unit (URUS) and law enforcement agencies.
• Trusted third-party services: Service providers such as customer support platforms and analytics tools, subject to strict data protection agreements.

Judilink uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how users interact with our platform.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies: Collecting anonymous statistical data on how pages are used to help us improve the platform.
• Functional cookies: Saving user preferences such as language and display settings for ease of use.
• Marketing cookies: Used only with your consent to display relevant promotions. You may disable this at any time.

You can manage your cookie settings through your web browser or via the cookie preference centre available within the JudiLink platform. Disabling certain cookies may affect the functionality of some platform features.

Your personal data is stored on secure servers for as long as necessary to fulfil the purpose of data collection and applicable legal requirements. JudiLink does not retain data longer than necessary.

• Active account data: Retained for the duration your account remains active on the JudiLink platform
• Financial transaction records: Retained for a minimum of 7 years after the transaction occurs in accordance with anti-money laundering (AML) legal requirements
• KYC documents: Retained for a minimum of 5 years after account closure in accordance with compliance requirements
• Support communication logs: Retained for 2 years after the issue is resolved
• Anonymous analytics data: May be retained indefinitely as it contains no personally identifiable information

Once the retention period expires, data is securely deleted using industry-standard data destruction methods, ensuring it cannot be recovered by any party.

Protecting user data is a responsibility we take extremely seriously. judilink continuously invests in security infrastructure to keep your data safe from both external and internal threats.

The security measures we implement include:

• 256-bit TLS 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for all sensitive data stored in the database
• Two-factor authentication (2FA) is available and encouraged for all user accounts
• Real-time security monitoring 24 hours a day, 7 days a week
• Penetration testing conducted regularly by independent third parties
• Role-based access control (RBAC) for judilink internal staff
• DDoS protection and multi-layered firewalls at the infrastructure level

As a judilink user, you hold the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

The judilink platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

If we find that personal data belonging to children or minors has been collected unintentionally, we will take immediate steps to:

• Deleting all data related to that individual from our systems
• Closing the relevant account and returning any stored funds in accordance with the appropriate procedure
• Reporting the incident to relevant authorities if required

If you know or suspect that a minor has registered on our platform, please contact the judilink support team immediately via Live Chat or email.

In some cases, your personal data may be transferred to and processed outside Malaysia — for example, when we use cloud service providers or international payment processors. When this occurs, JudiLink ensures that such data transfers are protected by appropriate safeguard mechanisms.

Safeguards we apply for cross-border data transfers include:

• Ensuring the recipient country has a level of data protection equivalent to or higher than Malaysia's
• Applying internationally recognised standard contractual clauses for transfers to other countries
• Obtaining written assurance from the recipient that your data will be protected to the required standards

Judilink reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, current legal requirements, or service improvements. The date of the latest amendment is always displayed at the top of this document.

When significant amendments are made to this policy, we will:

• Displaying an in-platform notification during your next login session
• Sending a notification email to your registered email address
• In the case of very significant amendments, request your renewed consent before you continue using the platform

Continued use of the judilink platform after the effective date of any amendment constitutes acceptance of the revised terms. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how judilink handles your personal data, our team is ready to assist through the following channels:

• Live Chat 24/7: Fastest method — available within the platform after login
• Privacy Email: [email protected] — state "Privacy Inquiry" in the message subject line

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data rights requests, processing time is up to 30 business days in accordance with PDPA provisions.

If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant data protection authority in your jurisdiction.