We Only Collect What We Need
Judy88 limits data collection to information that is genuinely required to operate your account, process transactions, verify identity, comply with legal obligations, and deliver a personalised service experience.
Data Protection & Privacy
Privacy Policy
At Judy88, your privacy matters. This Privacy Policy explains in clear terms what personal information we collect when you use our platform, why we collect it, how it is used and protected, who it may be shared with, and what rights you hold over your own data.
Last updated: 1 January 2026
Privacy at a Glance
Six ThingsWe Promise About Your Data
Your Data Is Encrypted and Protected
All data transmitted between your device and Judy88 servers is protected by 256-bit SSL encryption. Access controls, firewalls, and regular security reviews are in place to guard against unauthorised access or disclosure.
Limited, Controlled Third-Party Sharing
Personal data is shared only with necessary third parties — such as payment processors (e.g. Touch'n Go eWallet, DuitNow, FPX providers), identity verification partners, and fraud prevention services — under strict contractual data protection obligations.
You Control Your Own Data
You have the right to access, correct, and request deletion of your personal data. You may also withdraw marketing consent at any time. Requests can be submitted by contacting our support team at any point.
Defined and Proportionate Retention
Judy88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Inactive account data is reviewed periodically.
No Unsolicited Marketing Without Consent
Judy88 will not send you promotional communications unless you have opted in during registration or through your account settings. You may unsubscribe from marketing messages at any time without affecting your account access.
How Your Data Moves
From Collection to Protection
Understanding the data lifecycle helps you see exactly how Judy88 handles the information you provide. Each stage is governed by proportionality and security principles.
1
Collection
You provide data directly during registration, KYC verification, deposits, withdrawals, and support interactions. We also collect limited technical data automatically (IP address, device type, session data) when you use the Platform.
2
Verification
Identity documents (such as your MyKad) and payment details are verified using secure third-party KYC and fraud prevention services. This step protects both you and the integrity of the Judy88 platform.
3
Processing & Use
Verified data is used to operate your account, process MYR transactions through approved Malaysian payment channels, personalise your experience, and where consented, send relevant promotional communications.
4
Storage & Security
Data is stored on secured servers with encryption at rest and in transit. Access is restricted to authorised personnel only on a strict need-to-know basis, with audit logging in place.
5
Retention & Deletion
Personal data is retained for the period required by our legal and regulatory obligations. Once the retention period expires or you submit a valid deletion request, data is securely deleted or anonymised.
Full Privacy Policy
Judy88 Privacy Policy
1. Introduction
Judy88 ("Judy88", "we", "us", or "our") operates the online casino and sports betting platform accessible athttps://judy88.cam (the "Platform"). We are committed to protecting the personal information of all individuals who access or use the Platform, including registered players, prospective users, and visitors (collectively, "you" or "Data Subject").
This Privacy Policy ("Policy") describes how Judy88 collects, uses, stores, shares, and protects personal data in connection with your use of the Platform. It also explains the rights you hold over your personal data and how to exercise them.
This Policy should be read alongside our Terms and Conditions, which govern the overall legal relationship between you and Judy88. By registering an account or using the Platform, you confirm that you have read and understood this Policy.
Malaysian Context: Judy88 primarily serves users based in Malaysia, including players from Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other cities across the country. Our data practices are shaped with Malaysian user expectations in mind. All account balances and transactions are handled in Malaysian Ringgit (MYR).
2. Definitions
-
"Personal Data"Any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly, including name, identification number, location data, or one or more factors specific to that person.
-
"Processing"Any operation performed on personal data, whether automated or manual, including collection, recording, organisation, structuring, storage, alteration, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
-
"Data Controller"The party that determines the purposes and means of processing personal data. Judy88 acts as the Data Controller for personal data collected through the Platform.
-
"Data Processor"A third party that processes personal data on behalf of the Data Controller under a contractual arrangement, such as a payment gateway operator or KYC verification service provider.
-
"KYC"Know Your Customer — the identity verification process requiring submission of documents such as a Malaysian National Identification Card (MyKad) to confirm the identity of a registered player.
-
"Consent"A freely given, specific, informed, and unambiguous indication by the Data Subject of agreement to the processing of their personal data for a stated purpose, expressed through a clear affirmative action.
3. Personal Data We Collect
Judy88 collects the following categories of personal data in connection with the operation of the Platform:
3.1 Registration and Account Data
- Full legal name as it appears on your government-issued identification.
- Date of birth (required to verify the21+ age eligibility requirement).
- Residential address (including city and postcode).
- Email address and mobile phone number.
- Username and hashed password credentials.
- Preferred currency (MYR) and communication language preference.
3.2 Identity Verification (KYC) Data
- Scanned or photographed copies of your Malaysian National Identification Card (MyKad), front and back.
- Proof of address documents such as a recent utility bill, bank statement, or official correspondence.
- Selfie photographs where required during the verification process.
3.3 Financial and Transaction Data
- Details of deposits made via Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Boost, or GrabPay.
- Withdrawal requests and recipient payment account references.
- Transaction history, account balance records, and bonus redemption logs.
3.4 Usage and Technical Data
- IP address, device type, operating system version, and browser type.
- Session timestamps, page view history, and navigation patterns on the Platform.
- Game history, betting records, and wagering activity.
- Customer support interaction records including chat transcripts and email correspondence.
| Data Category | Examples | Required? |
|---|---|---|
| Account data | Name, email, phone, date of birth | Mandatory for registration |
| KYC documents | MyKad, proof of address | Required for withdrawals |
| Financial data | Transaction amounts, payment methods | Mandatory for transactions |
| Technical data | IP address, device info, session logs | Collected automatically |
| Marketing preference | Email opt-in status | Optional and consent-based |
4. How Personal Data Is Collected
Judy88 collects personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or respond to a survey.
- Automatically through the Platform — via cookies, server logs, and analytics tools that record session data, device information, and interaction behaviour as you navigate the Platform.
- From third-party service providers — identity verification partners may return enriched verification data; payment processors may confirm transaction status; fraud prevention services may provide risk signals associated with an IP address or device fingerprint.
5. Purposes of Processing
Judy88 processes your personal data for the following clearly defined purposes:
- Account creation and management: To register, authenticate, and maintain your Judy88 account, including applying account preferences and responsible gambling settings.
- Identity verification and compliance: To verify your age (21+ requirement), confirm your identity for KYC purposes, and comply with applicable anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations.
- Payment processing: To facilitate MYR deposits and withdrawals through approved Malaysian payment channels including Touch 'n Go eWallet, Maybank2u, DuitNow, FPX, and others.
- Service delivery and personalisation: To provide access to casino games, sports betting markets, promotions, and other Platform features, and to tailor the experience based on your activity and preferences.
- Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, money laundering, and other prohibited conduct.
- Customer support: To respond to inquiries, resolve disputes, and process complaints relating to transactions, account access, or Platform functionality.
- Marketing communications (where consented): To send promotional offers, bonus notifications, and event updates to players who have opted in to receiving such communications.
- Legal and regulatory compliance: To respond to lawful requests from regulatory authorities, courts, or law enforcement agencies, and to retain records as required by applicable law.
6. Legal Basis for Processing
Judy88 processes personal data on the following legal bases, depending on the nature of the processing activity:
- Contractual necessity: Processing required to perform the contract between you and Judy88, including account operation, payment processing, and game delivery.
- Legal obligation: Processing required to comply with applicable laws, including identity verification, transaction monitoring, and record-keeping obligations.
- Legitimate interests: Processing necessary for fraud prevention, platform security, and improving the quality of services, provided such interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing communications, where you have provided a clear, freely given opt-in. Consent may be withdrawn at any time without affecting any prior processing.
7. Sharing Personal Data with Third Parties
Judy88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share personal data with the following categories of third-party recipients only where necessary and under appropriate data protection safeguards:
- Payment service providers: Processors operating Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect integrations, for the sole purpose of facilitating MYR deposits and withdrawals.
- Identity verification and KYC partners: Specialist providers that verify the authenticity of identity documents and assess fraud risk in connection with account registration and withdrawal requests.
- Fraud prevention and anti-money laundering services: Third-party platforms that screen transaction and behavioural data for suspicious activity indicators.
- IT infrastructure and cloud service providers: Hosting, storage, and security service providers that process data strictly on Judy88's behalf under contractual data processing agreements.
- Legal and regulatory authorities: Government bodies, law enforcement agencies, courts, or regulators where Judy88 is legally required or permitted to disclose information.
Note: All third-party Data Processors engaged by Judy88 are required by contract to process personal data only as instructed by Judy88, to implement appropriate technical and organisational security measures, and not to use your data for their own purposes.
8. Cookies & Tracking Technologies
Judy88 uses cookies and similar tracking technologies (such as session identifiers and local storage) to operate essential Platform functionality, maintain your login session, remember account preferences, and collect analytics data about how visitors use the Platform.
8.1 Types of Cookies Used
- Strictly Necessary Cookies: Required for core Platform functionality such as maintaining your logged-in session, storing cart or game state, and applying security tokens. These cannot be disabled.
- Analytical Cookies: Used to collect aggregate, anonymised data about Platform usage patterns, page performance, and error frequency. This data helps Judy88 improve the user experience.
- Preference Cookies: Used to remember language settings, display preferences, and responsible gambling tool configurations between sessions.
- Marketing Cookies (where consented): Used to track the effectiveness of promotional campaigns and to limit the frequency of advertising shown to consenting users.
8.2 Managing Cookies
You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair core Platform functionality, including account login and game access. Blocking analytical or preference cookies will not prevent you from using the Platform but may reduce personalisation features.
9. Data Retention
Judy88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to longer retention periods required by applicable legal or regulatory obligations. The following general retention guidelines apply:
- Account and KYC data: Retained for the duration of your active account relationship with Judy88, plus a minimum of five (5) years after account closure, as required by AML and financial record-keeping obligations.
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial regulation.
- Support correspondence: Retained for up to three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
- Marketing preference data: Retained until you withdraw consent or request deletion, at which point it will be removed from active marketing systems within a reasonable operational period.
- Technical and session logs: Typically retained for up to twelve (12) months for security monitoring and fraud investigation purposes.
Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised, or pseudonymised such that it can no longer be associated with an identifiable individual.
10. Data Security
Judy88 implements and maintains appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and Judy88 servers.
- Encryption of sensitive data fields at rest within our database infrastructure.
- Role-based access controls restricting internal access to personal data on a strict need-to-know basis.
- Multi-factor authentication for internal system access by Judy88 personnel.
- Automated intrusion detection systems and regular penetration testing of Platform infrastructure.
- Staff training on data protection responsibilities and secure data handling procedures.
Your Role: While Judy88 takes significant steps to protect your data, you play an equally important role by keeping your account password confidential, enabling two-factor authentication where available, and notifying support immediately if you suspect unauthorised access to your account.
11. Your Rights Over Personal Data
Subject to applicable law, you hold the following rights in respect of the personal data Judy88 holds about you. To exercise any of these rights, please contact us at[email protected].
Right of Access
Request a copy of the personal data Judy88 holds about you, along with information about how it is being used.
Right to Rectification
Request correction of inaccurate or incomplete personal data held your Judy88 account profile.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for its original purpose, subject to legal retention obligations.
Right to Restrict Processing
Request that we limit processing of your data in certain circumstances, such as during a dispute about its accuracy.
Right to Data Portability
Receive a copy of the personal data you have provided to Judy88 in a structured, machine-readable format where technically feasible.
Right to Object
Object to processing of your personal data based on legitimate interests, including direct marketing communications, at any time.
Judy88 will respond to valid data rights requests within a reasonable timeframe. Where a request cannot be fulfilled due to legal retention obligations or competing legitimate interests, we will explain the reason clearly.
12. Minors and Age Restriction
Judy88 is strictly an adult entertainment platform. The Platform is not intended for, directed at, or designed to attract individuals under the age of 21. Judy88 does not knowingly collect personal data from any person under the age of 21.
Where Judy88 discovers that personal data has been collected from a person under 21, whether through inaccurate registration data or other means, the Account will be immediately suspended, all associated data will be reviewed, and the account and funds may be closed and forfeited in accordance with ourTerms and Conditions.
If you are a parent or guardian and believe that a minor has registered on the Judy88 Platform, please contact us immediately at [email protected] so that appropriate action can be taken without delay.
13. International Data Transfers
Judy88 primarily serves Malaysian users and endeavours to process and store personal data within appropriate jurisdictions. However, certain third-party service providers, including cloud infrastructure and KYC verification partners, may be located in or operate infrastructure in countries outside Malaysia.
Where personal data is transferred to a country that does not maintain an equivalent level of data protection, Judy88 will implement appropriate safeguards, such as contractual data protection clauses, to ensure that your data remains protected to a standard consistent with the principles set out in this Policy.
14. Changes to This Privacy Policy
Judy88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will endeavour to provide reasonable advance notice by displaying a prominent notice on the Platform or by sending an email to your registered address. The updated effective date will be reflected at the top of this page.
Continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised terms. We encourage you to review this Policy periodically to remain informed of how Judy88 is managing your personal data.
15. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or the personal data Judy88 holds about you, please contact our data support team:
Privacy & Data Inquiries:
[email protected]
Available 24 hours a day, 7 days a week. Data rights requests will be acknowledged within 3 business days and resolved within a reasonable timeframe in accordance with applicable law.
For responsible gambling concerns, including self-exclusion requests or deposit limit adjustments, please visit our Responsible Gambling page where dedicated tools and resources are available.
Explore the Platform
Your Privacy Is Safe withJudy88
Now that you understand how Judy88 protects your personal data, return to the homepage discover our full range of casino games, live football markets, and exclusive promotions designed for Malaysian players.
Visit Judy88 Home