gojudi Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how gojudi ("gojudi", "we", "us", or "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "Player") who access or use the gojudi online gaming platform available at https://gojudi.one and all associated services (collectively, the "Platform").

This Policy applies to all personal data processed by gojudi in connection with your registration, use of account services, participation in games and wagering activities, use of payment services, and interaction with our customer support team. By registering for a gojudi Account or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the gojudi Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your relationship with gojudi.

2. Data Controller Information

gojudi is the data controller in respect of personal data processed in connection with the Platform. As data controller, gojudi determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

For any queries regarding this Policy or your personal data, please contact our Data Protection team. Written enquiries may be directed to: [email protected]

3. Personal Data We Collect

gojudi collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identity documents (e.g., Malaysian MyKad, passport) provided during Know Your Customer (KYC) verification;
• Contact Data: Email address, Malaysian mobile telephone number, and residential address;
• Account Data: Username, encrypted password, account preferences, communication history with gojudi support, and responsible gaming settings;
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet reference, DuitNow account identifiers, bank account details for FPX transactions), deposit and withdrawal transaction records, and MYR balance history. gojudi does not store full card numbers or full bank account credentials;
• Transaction Data: Detailed records of deposits, withdrawals, wagers placed, games played, bonus activations, and session activity;
• Technical Data: IP address, browser type and version, device type and operating system, time zone, and session identifiers;
• Usage Data: Pages visited on the Platform, game preferences, click-stream data, and session duration;
• Communications Data: Content of support chat transcripts, email correspondence, and feedback submitted to gojudi.

4. How We Collect Personal Data

gojudi collects personal data through the following means:

• Direct interactions: When you complete the account registration form, submit identity verification documents, make deposits or withdrawals, contact customer support, or update your account preferences;
• Automated technologies: When you access the Platform, gojudi automatically collects Technical Data and Usage Data through server logs, session cookies, and analytics tools;
• Third-party sources: gojudi may receive identity verification data from third-party KYC service providers, and may receive fraud-related alerts from payment processors where relevant to your account or transactions.

5. Legal Bases for Processing

gojudi processes personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide you with a gojudi Account, execute deposits and withdrawals, authenticate your login, and deliver gaming services;
• Compliance with legal obligations: Processing required to comply with anti-money laundering (AML) regulations, KYC obligations under applicable gaming licensing requirements, and tax reporting obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental rights;
• Consent: Processing for direct marketing communications, where you have provided clear, affirmative consent. You may withdraw such consent at any time.

6. How We Use Your Personal Data

gojudi uses personal data for the following purposes:

• To create, verify, and manage your gojudi Account and to authenticate your gojudi Login sessions;
• To process MYR deposits and withdrawals via Touch 'n Go eWallet, DuitNow, Boost, FPX, Maybank2u, CIMB Clicks, and GrabPay;
• To fulfil KYC and AML obligations under applicable international gaming licensing requirements;
• To administer and settle bets, game rounds, and bonus promotions;
• To monitor for and prevent fraud, collusion, multi-accounting, and money laundering;
• To enforce our Terms & Conditions and Responsible Gaming policy, including implementing deposit limits, session limits, and self-exclusion requests;
• To provide 24/7 customer support and respond to your enquiries;
• To analyse usage patterns and improve Platform performance, user experience, and game selection;
• To send transactional communications (account confirmations, security alerts, withdrawal receipts);
• To send marketing communications where you have provided consent, including promotional offers, bonus alerts, and tournament notifications.

7. Disclosure of Personal Data to Third Parties

gojudi does not sell, rent, or trade personal data to third parties for their own marketing purposes. Personal data may be disclosed to the following categories of recipients:

• Payment service providers: To process deposits and withdrawals, gojudi shares transaction data with payment processors integrated into the Platform, including FPX gateway operators and digital wallet service providers operating in Malaysia;
• KYC and identity verification providers: Third-party services engaged to verify identity documents and check against watchlists as required under gaming licensing obligations;
• IT and platform infrastructure providers: Cloud hosting, security, and technical support providers who process data on gojudi's behalf under strict data processing agreements;
• Regulators and law enforcement: Where gojudi is required by applicable law, gaming licensing authority requirements, court order, or regulatory direction to disclose personal data;
• Fraud prevention agencies: Where gojudi reasonably suspects fraudulent activity, relevant data may be shared with specialist fraud detection services or reported to relevant authorities.

All third-party service providers engaged by gojudi are contractually required to maintain the confidentiality and security of personal data and to process it solely for the purposes for which it was provided.

8. International Data Transfers

Some of gojudi's service providers and infrastructure partners operate outside Malaysia. Where personal data is transferred internationally, gojudi ensures appropriate safeguards are in place — including standard contractual clauses or equivalent legal mechanisms — to ensure that your data receives a level of protection consistent with applicable data protection standards.

9. Data Retention

gojudi retains personal data for as long as your Account is active and for such further periods as are required by applicable law, gaming licensing obligations, and AML regulations. In practice, this means:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required by AML and gaming licensing frameworks;
• Transaction records are retained for a minimum of five (5) years from the date of each transaction;
• Support communications are retained for a minimum of two (2) years;
• Technical and usage data may be retained for up to twenty-four (24) months for analytics and security purposes.

Where retention is no longer legally required, gojudi will securely delete or anonymise personal data in accordance with its data disposal procedures.

10. Cookies and Tracking Technologies

gojudi uses the following categories of cookies and tracking technologies on the Platform:

• Strictly necessary cookies: Essential for the gojudi Login session, authentication, and core Platform functionality. These cannot be disabled without breaking basic account features;
• Functional cookies: Remember your language preference, display settings, and responsible gaming tool configurations between visits;
• Analytical cookies: Collect aggregated, anonymised data about how users navigate the Platform, which pages are most visited, and where users encounter errors. This data is used solely to improve the gojudi experience;

gojudi does not use cross-site tracking cookies or advertising network cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from accessing your gojudi Account.

11. Security Measures

gojudi implements technical and organisational security measures appropriate to the risk level of the personal data we process. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and gojudi servers;
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents;
• Strict access controls — personal data is accessible only to gojudi personnel whose roles require such access, and all access is logged and monitored;
• Multi-factor authentication for internal administrative system access;
• Regular penetration testing and security audits conducted by independent third parties;
• Incident response procedures to detect, report, and remediate personal data breaches in a timely manner.

Despite these measures, no system is entirely immune to security risks. You are encouraged to use a strong, unique password for your gojudi Account and to enable the two-factor verification feature for additional protection.

12. Your Data Protection Rights

Subject to applicable law and our legal and regulatory obligations, you have the following rights regarding your personal data held by gojudi:

• Right of access: You may request a copy of the personal data gojudi holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to restrict processing: You may request that gojudi restricts processing of your data in certain circumstances;
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request a structured copy of your data;
• Right to object: You may object to processing based on legitimate interests, including profiling. You may withdraw marketing consent at any time;
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact gojudi support. We will respond within thirty (30) days. We may need to verify your identity before processing your request. Some requests may be subject to limitations where legal, regulatory, or contractual retention obligations apply.

13. Children and Minors

The gojudi Platform is strictly intended for adults who are at least 21 years of age. gojudi does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, that Account will be immediately closed, all data will be deleted or anonymised to the extent not required for legal or regulatory purposes, and any balance will be forfeited in accordance with our Terms & Conditions. Parents and guardians who believe a minor may have registered on gojudi should contact support immediately.

14. Changes to This Privacy Policy

gojudi reserves the right to update this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected or how data is shared — gojudi will notify registered users by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect. The date of the most recent update is displayed at the top of this Policy. Continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the gojudi Data Protection team. Our support team is available 24/7 via live chat within the Platform. Written enquiries can be submitted to: [email protected]

We are committed to addressing all data protection enquiries promptly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority or gaming licensing supervisory body in your jurisdiction.