Privacy Policy

This Privacy Policy ("Policy") is issued by Judiwin66 ("we", "us", "our", "the Platform"), the operator of the online gaming platform accessible at https://judiwin66.cam. This Policy governs the collection, use, storage, sharing, and protection of personal data relating to all registered players and visitors ("you", "your") who access or use any part of the Judiwin66 platform.

Judiwin66 takes its obligations in respect of personal data seriously. We recognise that players entrust us with sensitive information when they register, deposit funds, and interact with our platform. This Policy is designed to give you full transparency about how that information is handled, and to clearly set out the rights available to you.

This Policy should be read together with our Terms & Conditions, which form the overarching agreement governing your use of the Judiwin66 platform. Capitalised terms used but not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

For the purposes of this Policy, the following terms shall have the meanings set out below:

Judiwin66 collects the following categories of personal data from players and visitors:

A. Registration & Identity Data

• Full legal name and preferred username
• Date of birth (for age verification purposes)
• Email address and mobile phone number
• Malaysian MyKad number, passport number, or equivalent government-issued identifier
• Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru)

B. Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR
• Payment method details — including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), DuitNow account references, FPX transaction references, and online banking account names for Maybank, CIMB, Public Bank, RHB, and Hong Leong
• Account balance history and bonus transaction logs

C. Gaming & Behavioural Data

• Bet history, game preferences, and session duration data
• Wagering patterns and responsible gambling tool usage records
• Sports betting selections, including Liga Super Malaysia and EPL markets

D. Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser identifier
• Session logs, login timestamps, and platform interaction data

E. Communications Data

• Support chat transcripts and email correspondence with Judiwin66 customer service
• Responses to optional surveys or promotional communications

Judiwin66 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a promotion.
• Automatically through platform use — technical and behavioural data is collected passively as you browse, log in, and interact with games or betting markets on the platform.
• Through cookies and similar technologies — as described in Section 8 of this Policy.
• From third-party verification providers — identity and age verification services may return additional data points to confirm the accuracy of information you have provided during KYC.
• From payment processors — transaction confirmation data is received from our integrated payment partners (including FPX, DuitNow, and e-wallet providers) to reconcile deposits and withdrawals.

Judiwin66 processes your personal data for the following purposes:

Judiwin66 does not use personal data for automated decision-making that produces legal or similarly significant effects on players without providing an opportunity for human review.

Each processing activity carried out by Judiwin66 rests on one or more of the following lawful bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and delivering gaming services.
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and responsible gambling regulations.
• Legitimate Interests: Processing carried out in pursuit of Judiwin66's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing for optional purposes such as direct marketing communications. Where consent is the lawful basis, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

Judiwin66 does not sell personal data. We share personal data with third parties only to the extent necessary to operate the platform and meet our legal obligations. The categories of recipients are as follows:

• Payment Service Providers: Including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and bank partners (Maybank, CIMB, Public Bank, RHB, Hong Leong) — for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification services that assist in confirming player identity and document authenticity.
• Game Content Providers: Licensed game studios and live casino operators who supply the games available on Judiwin66 may receive anonymised session identifiers for game delivery and fairness audit purposes.
• IT & Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on our behalf under strict contractual data protection terms.
• Regulatory and Law Enforcement Authorities: Where we are legally required to disclose data in response to a valid request from a competent authority, court order, or regulatory directive.
• Fraud Prevention Networks: Industry fraud and AML databases used to screen transactions and player identities for risk indicators.

All third-party Data Processors engaged by Judiwin66 are required to process personal data only on documented instructions, to implement appropriate technical and organisational security measures, and to comply with applicable data protection obligations.

Judiwin66 uses cookies and similar tracking technologies to operate and improve the platform. The table below describes the categories of cookies in use:

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage your preferences for non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Judiwin66 platform.

Judiwin66 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Active Account Data: Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, to comply with AML and financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification, in accordance with applicable anti-money laundering regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for up to three (3) years from the date of the interaction.
• Technical Logs: Retained for up to twelve (12) months and then deleted or anonymised.
• Marketing Consent Records: Retained for the duration of your consent, plus two (2) years from the date of withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous so that it can no longer be associated with any identifiable individual.

Judiwin66 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Judiwin66 platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive data fields — including identity document numbers and payment references — are stored in encrypted form within our databases.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their Judiwin66 accounts. Internal system access requires multi-factor authentication for all staff.
• Regular Security Audits: Our platform undergoes periodic security assessments and penetration testing conducted by independent security specialists.
• Incident Response: Judiwin66 maintains a documented security incident response procedure. In the event of a breach affecting player personal data, affected individuals will be notified without undue delay.

As a player on the Judiwin66 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or the support email address listed in Section 15.

Judiwin66 strictly prohibits the use of its platform by individuals under the age of 21 years. We do not knowingly collect personal data from persons under this age. All registrations are subject to mandatory age verification as part of the KYC process.

If Judiwin66 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend that account, delete the associated personal data to the extent legally permissible, and take appropriate follow-up action in accordance with our safeguarding procedures.

If you are a parent or guardian and believe that a minor has registered on the Judiwin66 platform, please contact our support team immediately via live chat so that the matter can be investigated and resolved promptly.

As an international online gaming platform, Judiwin66 may transfer personal data to, and process it in, countries outside of Malaysia. This may occur, for example, where our cloud infrastructure, game content providers, or fraud prevention partners are located in other jurisdictions.

Where personal data is transferred internationally, Judiwin66 takes steps to ensure that appropriate safeguards are in place to protect that data to a standard consistent with this Policy. Such safeguards include contractual clauses obligating recipient parties to protect personal data to an equivalent standard.

By registering an account and using the Judiwin66 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia as described in this section.

Judiwin66 reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. Where changes are material — for example, a significant change to how we use your personal data — we will notify registered players by email or via an in-platform notification prior to the change taking effect.

Your continued use of the Judiwin66 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised terms. If you do not accept the amended Policy, you should cease using the platform and may request voluntary account closure.

We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the Judiwin66 support team. Our data queries are handled by a dedicated team and we aim to acknowledge all requests within 5 business days and respond substantively within 30 days.

For matters specifically related to responsible gambling, self-exclusion, or account restrictions, please refer to our dedicated Responsible Gambling page for the appropriate contact channel and available tools.