Privacy Policy JudiKing — Your Information Is Fully Protected by Us

JudiKing is an online entertainment platform offering live dealer casino, jackpot slots, sports betting including the Malaysia Super League and EPL, e-sports, virtual sports, and table games to Malaysian players. In operating these services, we need to collect and process certain personal information about you to ensure the platform runs safely, efficiently, and in compliance with applicable legal requirements.

This Privacy Policy applies to all information you provide directly to JudiKing — such as during account registration, identity verification (KYC), deposits via Touch 'n Go eWallet, GrabPay or DuitNow, or when contacting our support team. It also covers information collected automatically while you use the platform, including usage data, device information and cookie data.

JudiKing collects several categories of personal information depending on the nature of your interaction with the platform. The following is a comprehensive overview of the data we may collect:

JudiKing collects and processes your personal data only for legitimate and necessary purposes. We do not process data for any purpose you have not consented to or that is not stated in this Privacy Policy. The primary purposes for processing your data are as follows:

• Account management and identity verification: To create and maintain your JudiKing account, verify your identity through the required KYC process, and ensure that every member is a legitimate and eligible individual.
• Financial transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and to process your winnings withdrawals quickly and securely to an account registered in your name.
• Provision of gaming services: To operate Live Casino games, slots, Sports Betting on the Malaysia Super League and EPL, e-sports and Virtual Sports safely and fairly, and to maintain accurate game records.
• Fraud prevention and security: To detect and prevent fraud, money laundering, multiple account ownership, bonus abuse, and any other illicit activity that could compromise the security of the platform and other members.
• Legal compliance: To comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements and reporting mandated by the relevant authorities.
• User experience enhancement: To analyse aggregated platform usage patterns in order to improve the interface, optimise platform performance on Malaysian mobile devices, and develop new features relevant to local players' needs.
• Service communications: To send you important notifications regarding your account, changes to our Terms or Privacy Policy, security updates, and service-related information you need to know. We may also send JudiKing promotional offers if you have consented to receiving marketing communications.

JudiKing continuously invests in both technical and operational security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures we have in place include:

• 256-bit SSL Encryption: All communications between your browser or app and JudiKing's servers are encrypted using TLS/SSL protocol with a 256-bit key length. This ensures that data transmitted during login, deposits, withdrawals, and gameplay cannot be intercepted by third parties.
• Encryption of data at rest: Sensitive data stored in JudiKing's databases — including passwords (protected with secure hashing), financial information and KYC documents — is encrypted at rest using current recognised encryption standards.
• Role-based access control: Internal access to members' personal data is strictly limited on a need-to-know basis. JudiKing staff may only access data relevant to their specific role, and all access is recorded in audit logs that are continuously monitored.
• 24-hour threat monitoring: JudiKing's security systems are monitored around the clock by an IT security team that detects and responds to any suspicious activity or intrusion attempts in real time.
• Regular penetration testing: JudiKing conducts regular penetration testing by independent third parties to identify and address any security vulnerabilities in the system before they can be exploited by malicious actors.

JudiKing does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, in the course of normal and legitimate platform operations, your data may be shared with the following limited categories of third parties, and only to the extent genuinely necessary:

• Payment processors: Payment providers including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banks that support FPX receive the transaction details necessary to process your deposits and withdrawals. All such providers are bound by strict financial security standards.
• Game providers: Gaming software companies that partner with JudiKing — such as world-class Live Casino and slots providers — may receive the game data needed to run your gaming sessions. They do not receive your full personal identification details beyond what is technically necessary.
• Relevant authorities: JudiKing will disclose personal data to law enforcement authorities, regulatory bodies, or other legal authorities when required to do so by law, court order, or valid legal process. This includes compliance with AML and KYC requirements.
• Technical service providers: Companies providing JudiKing with cloud computing, hosting, platform analytics, and technical support services may have limited access to data in the course of carrying out their technical functions. All such providers are bound by strict data processing agreements.

The JudiKing platform uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyse usage patterns for continuous improvement. Cookies are small text files stored in your web browser when you visit the JudiKing platform.

Categories of cookies used by JudiKing:

• Essential Cookies (Required): These cookies are required for the JudiKing platform to function properly. They include login session cookies that keep you signed in while using the platform, security cookies that protect your account from unauthorised access, and language preference cookies that save your language settings. Without these cookies, the JudiKing platform cannot operate and you will not be able to use it. These cookies do not require your consent as they are essential to basic platform operation.
• Analytics Cookies (Optional): These cookies help JudiKing understand how members use the platform — which pages are visited most frequently, how long users spend on particular sections, and common navigation paths. This information is collected in aggregate and anonymised form, and is used solely to improve the design and overall experience of the JudiKing platform for all members.
• User Preference Cookies: These cookies store your personal preferences and settings within the JudiKing platform, such as favourite games, table display settings, and other display options you have customised. This allows you to enjoy a more consistent and personalised experience each time you log in to JudiKing.

You can manage your cookie settings through your web browser settings. Please note, however, that blocking all cookies may affect certain functions of the JudiKing platform, including the ability to remain logged in during an active gaming session.

JudiKing fully recognises your rights over your own personal data. Below are the rights you hold as a JudiKing member, along with how you can exercise them:

To exercise any of the above rights, please submit a written request to support@judiking.biz with the subject line "Privacy Rights Request — [right type]" along with your JudiKing account username. We will verify your identity before processing the request to ensure no unauthorised party can access or alter your data.

JudiKing retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable laws and regulations. The following is a general guide to our data retention periods:

• Active account data: For as long as your JudiKing account remains active and you continue using the platform, your account data will be retained to ensure uninterrupted access and ongoing service.
• Financial transaction records: All deposit and withdrawal records in MYR (RM) are retained for a minimum of seven years from the transaction date, in accordance with Malaysia's financial compliance and AML legal requirements.
• KYC documents: Copies of identity verification documents such as MyKad are retained for a minimum of five years after account closure, in accordance with AML compliance requirements mandated by law.
• After account closure: When your JudiKing account is closed at your own request, data not required to be retained by law will be deleted or anonymised within ninety days of the account closure being fully processed.
• Support communication logs: Records of interactions with the JudiKing support team, including chat logs and email correspondence, are retained for two years for quality control purposes and to assist in resolving any disputes that may arise.

JudiKing reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, evolving legal requirements, or changes in the way JudiKing's platform operates. Whenever there are material changes to this Privacy Policy, we will take the following steps to ensure you are informed:

• Sending email notifications to all registered JudiKing members at least 14 days before changes take effect, giving you sufficient time to review them.
• Displaying a clear notice on the JudiKing homepage and this Privacy Policy page regarding upcoming changes, with a brief comparison between the old and new versions.
• Updating the "Last Updated" date at the top of this Privacy Policy page so you always know which version is currently in effect.

Continued use of the JudiKing platform after any Privacy Policy changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your JudiKing account by contacting support@judiking.biz before the effective date of the changes.

If you have any questions, concerns or requests regarding your privacy and the protection of your personal data at JudiKing, we encourage you to contact us directly. We are committed to responding to all privacy-related enquiries seriously and within a reasonable timeframe.