01Introduction
gojudi99 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who registers for, accesses, or interacts with the gojudi99 online casino and sports betting platform at gojudi99.cam and any associated subdomains or mobile interfaces ("the Service").
This Privacy Policy ("Policy") describes in clear and specific terms: what categories of personal data we collect; the lawful basis on which that data is processed; the purposes for which it is used; the circumstances in which it may be shared with third parties; your rights in relation to your personal data; and how to exercise those rights.
This Policy applies to all users of the Platform, including registered players located across Malaysia — in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other locations from which access to the Service is permitted. By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy in its entirety.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.
Plain-Language Summary
We collect your data to run your account, process your MYR deposits and withdrawals, verify your identity, and keep the platform safe. We do not sell your data. You have the right to access, correct, and delete your information. Full details are in the sections below.
02Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including names, identification numbers, location data, email addresses, IP addresses, and financial account details. |
| "Processing" | Any operation performed on Personal Data — including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. In the context of this Policy, the Data Controller is gojudi99. |
| "Data Processor" | Any third-party service provider that processes Personal Data on behalf of gojudi99, under a contractual data processing agreement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data for a stated purpose. |
| "Data Subject" | The natural person whose Personal Data is being processed — in most cases, you, the registered Player. |
| "KYC" | Know Your Customer — the mandatory identity and address verification process applied to all Players in accordance with applicable anti-money laundering regulations. |
| "Cookie" | A small data file placed on a user's device by a website, used to store session information, preferences, and analytical data. |
03Data Controller
The Data Controller responsible for the Personal Data processed under this Privacy Policy is gojudi99, operating the platform at gojudi99.cam. As Data Controller, gojudi99 determines the purposes for which your Personal Data is collected and the means by which it is processed.
Where gojudi99 engages third-party service providers to process Personal Data on its behalf — such as payment processors, identity verification providers, and cloud hosting services — those providers act as Data Processors bound by contractual data processing agreements that require them to process data only documented instructions from gojudi99 and to implement appropriate technical and organisational security measures.
All enquiries relating to this Privacy Policy, data subject requests, or data protection concerns should be directed to our support team using the contact details set out in Section 14.
04Data We Collect
We collect Personal Data from you in several contexts across the player lifecycle. The categories of data collected, and the stage at which they are typically collected, are set out in the table below.
4.1 Data Collected at Registration
- Full legal name as it appears on your government-issued identification document
- Date of birth (to verify you are aged 21or above)
- Malaysian mobile phone number
- Email address
- Residential address (street, city, postcode)
- Chosen username and encrypted password
- Preferred currency (MYR by default for Malaysian players)
4.2 Identity Verification (KYC) Data
- Government-issued photo identification: Malaysian MyKad (NRIC), Driver's Licence, or Passport — including the image of the document submitted
- Proof of residential address: utility bill (e.g., TNB electricity bill, Indah Water statement), bank statement, or official government correspondence dated within three months
- Selfie photograph holding your identity document, for biometric matching purposes
- Source of funds documentation, requested at our discretion in compliance with anti-money laundering obligations
4.3 Financial Transaction Data
- Deposit and withdrawal transaction records — including amounts, timestamps, payment method type, and transaction reference numbers
- Payment method identifiers — such as partial card numbers, e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), DuitNow reference IDs, FPX transaction codes, and cryptocurrency wallet addresses
- We do not store full payment card numbers; card data is tokenised by our payment service providers in compliance with applicable data security standards
4.4 Platform Usage Data
- Betting and gaming activity — sports wagers placed (including Liga Super Malaysia, EPL, UFC, and other markets), casino games played, bet amounts, outcomes, and session durations
- Login history — timestamps, IP addresses, and device fingerprints associated with account access events
- Customer support interaction records — including live chat transcripts and email correspondence
- Bonus and promotion redemption records
4.5 Technical and Device Data
- IP address and approximate geolocation (city and country level)
- Device type, operating system, and browser version
- Cookie identifiers and session tokens (see Section 9)
- Platform performance logs and error reports
Sensitive Data
gojudi99 does not seek to collect sensitive categories of Personal Data (such as health, racial or ethnic origin, political opinions, or religious beliefs) unless specifically required by applicable law (for example, where a medical condition is disclosed in the context of a responsible gambling self-exclusion request). Such data, where collected, is handled with the highest level of care and access controls.
05How We Use Your Data
We process your Personal Data only where we have a lawful basis to do so. The table below sets out our primary processing activities, the purpose of each, and the lawful basis relied upon.
| Processing Purpose | Lawful Basis |
|---|---|
| Creating and managing your registered Account | Performance of contract (account registration agreement) |
| Processing MYR deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and other payment methods | Performance of contract; Legal obligation (AML compliance) |
| Identity verification (KYC) — confirming you are aged 21 or above and that your identity matches your account registration | Legal obligation; Legitimate interests (fraud prevention) |
| Anti-money laundering (AML) screening and fraud detection | Legal obligation; Legitimate interests |
| Delivering and improving the Platform, including live betting feeds, casino games, and customer support services | Performance of contract; Legitimate interests |
| Responsible gambling monitoring — including detecting patterns that may indicate problem gambling and administering self-exclusion requests | Legal obligation; Legitimate interests (player welfare) |
| Communicating account-related notifications, security alerts, and service updates | Performance of contract; Legitimate interests |
| Sending promotional communications and personalised offers (only where you have opted in) | Consent |
| Complying with court orders, regulatory requests, or mandatory legal disclosures | Legal obligation |
| Platform analytics and performance monitoring to improve user experience | Legitimate interests |
06Data Sharing & Disclosure
gojudi99 does not sell, rent, or transfer your Personal Data to third parties for their own commercial purposes. We may, however, share your Personal Data with the following categories of recipients where necessary and lawful:
- Payment Service Providers — Transaction data is shared with payment processors including DuitNow operators, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and cryptocurrency gateway providers, solely to facilitate the processing of your deposits and withdrawals.
- Identity Verification Providers — KYC documentation and biometric data are processed by accredited identity verification service providers under strict contractual data processing agreements.
- Cloud Infrastructure & Hosting Providers — Platform data is hosted on secure, access-controlled cloud infrastructure. Providers are bound by confidentiality and data security obligations.
- Fraud Prevention & AML Screening Services — Transaction and identity data may be processed through specialist fraud detection and anti-money laundering screening systems operated by regulated third parties.
- Regulatory Authorities & Law Enforcement — We may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law or a valid legal order.
- Professional Advisers — Legal counsel, auditors, and insurers may receive access to relevant Personal Data on a need-to-know basis, subject to professional confidentiality obligations.
In all cases where third-party processors are engaged, gojudi99 contractually requires those processors to maintain data confidentiality, implement appropriate technical and organisational security measures, and process Personal Data only in accordance with gojudi99's documented instructions.
07Data Retention
gojudi99 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The indicative retention periods for key data categories are as follows:
| Data Category | Indicative Retention Period |
|---|---|
| Account registration data (name, email, contact details) | Duration of account plus 5 years following account closure |
| KYC identity verification documents | Duration of account plus 5 years following account closure (AML legal obligation) |
| Financial transaction records | Duration of account plus 7 years (statutory accounting and AML requirements) |
| Betting and gaming activity records | Duration of account plus 3 years following account closure |
| Customer support correspondence | 3 years from the date of the most recent interaction |
| Self-exclusion records | Indefinitely, or for the duration of the exclusion period plus 5 years |
| Marketing consent records | Until consent is withdrawn, plus 3 years |
| Server logs and IP records | 90 days on a rolling basis, unless required for an active investigation |
Where we are required by a competent authority to retain data beyond these periods in connection with an investigation or legal proceding, we will retain the relevant data until that obligation is discharged.
08Data Security
gojudi99 implements a layered, defence-in-depth security architecture to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our technical and organisational security measures include, but are not limited to:
- Transport Layer Security — All data transmitted between your device and gojudi99 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The presence of HTTPS and the padlock icon in your browser confirms an encrypted connection is active.
- Encryption at Rest — Sensitive data stored on gojudi99 servers — including KYC documents and payment identifiers — is encrypted using AES-256 at rest.
- Access Controls — Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and undergo data protection training.
- Two-Factor Authentication — 2FA is available to all registered players and is strongly recommended to secure account access.
- Penetration Testing & Vulnerability Management — We conduct periodic security assessments and penetration tests to identify and remediate vulnerabilities in our platform infrastructure.
- Incident Response — We maintain a documented data breach incident response procedure. In the event of a breach affecting your Personal Data, we will notify you and, where required, the relevant regulatory authority, within the timeframes mandated by applicable law.
Your Role in Security
While we take every reasonable precaution on our end, account security is a shared responsibility. Please choose a strong, unique password for your gojudi99 account, enable two-factor authentication, and never share your login credentials with any third party. If you suspect your account has been accessed without your authorisation, contact our support team immediately via live chat.
09Cookies & Tracking Technologies
gojudi99 uses cookies and similar tracking technologies — including session tokens, local storage objects, and pixel tags — to operate and improve the Platform. The categories of cookies we use are described below:
9.1 Essential Cookies
These cookies are strictly necessary for the Platform to function. They manage your login session, maintain your account security state, enable bet placement, and process financial transactions. Essential cookies cannot be disabled without materially impairing Platform functionality. No consent is required for essential cookies as they are technically necessary for the provision of the service.
9.2 Analytical Cookies
Analytical cookies collect anonymised data about how players interact with the Platform — including pages visited, features used, session durations, and error events. This data is used in aggregate to improve platform performance and user experience. We do not use this data to build individual marketing profiles.
9.3 Functional Cookies
Functional cookies remember your preferences — such as your preferred odds format (decimal, fractional), language setting, and sport filter selections — to personalise your experience across sessions.
9.4 Your Cookie Choices
You may manage your cookie preferences at any time through your browser settings. Please note that disabling non-essential cookies may affect certain Platform features but will not prevent you from placing bets or managing your account. For essential cookies, no opt-out mechanism is available as they are required for the Service to operate.
10Your Data Rights
Subject to applicable law, you have the following rights in relation to the Personal Data we hold about you. You may exercise any of these rights by contacting our support team using the details in Section 14. We will respond to all verified requests within thirty (30) days.
Right of Access
Request a copy of all Personal Data we hold about you, together with information about how it is being processed.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data held your Account.
Right to Erasure
Request deletion of your Personal Data where processing is no longer necessary or where consent has been withdrawn, subject to our legal retention obligations.
Right to Restriction
Request that we limit the processing of your data while a dispute or correction request is being resolved.
Right to Portability
Request your Personal Data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Right to Object
Object to processing carried out on the basis of legitimate interests, including direct marketing where applicable.
Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), withdraw that consent at any time without affecting prior lawful processing.
How to Exercise Your Rights
To submit a data subject request, contact our support team via live chat or at the email address in Section 14. Please include your full name, registered username, and a clear description of your request. We may require identity verification before processing your request to protect against unauthorised data access.
11Protection of Minors
gojudi99 is strictly an adult entertainment platform. The Service is not directed at and must not be used by persons under the age of twenty-one (21). We do not knowingly collect Personal Data from individuals under the age of 21.
All account registrations are subject to age verification through our KYC process. Accepted documents for age verification include the Malaysian MyKad (NRIC), which contains a date of birth, as well as a valid Driver's Licence or Passport. Where we reasonably suspect that a registered account is held by a person under the age of 21, we will immediately suspend the account, withold any balance pending investigation, and take such further action as is appropriate in the circumstances.
If you are the parent or guardian of a minor and believe that they have registered an account on gojudi99 without your knowledge or consent, please contact our support team immediately so that the account may be reviewed and closed.
12International Data Transfers
Your Personal Data is primarily processed and stored within secure infrastructure serving the Asia-Pacific region. In certain operational circumstances — for example, where specialist fraud screening or cloud backup services are provided by international vendors — your data may be transferred to, stored in, or processed in jurisdictions outside Malaysia.
Where such transfers occur, gojudi99 ensures that they are subject to appropriate safeguards in accordance with applicable data protection law. These safeguards may include: contractual data processing agreements incorporating standard data protection clauses; transfer to jurisdictions that have been determined to provide an adequate level of protection; or other recognised mechanisms recognised under applicable data protection legislation.
You may request further information about international transfer safeguards applicable to your Personal Data by contacting our support team.
13Amendments to This Policy
gojudi99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the features and functionality of the Platform. The date of the most recent revision is displayed prominently at the top of this page.
Where we make material changes to this Policy — particularly those that affect your rights or the basis on which we process your Personal Data — we will endeavour to provide reasonable advance notice by posting a prominent notice within the Platform and, where feasible, by notifying registered players via email at the address on record.
Your continued use of the Platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms. We encourage you to review this page periodically to stay informed about how your data is protected.
14Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the gojudi99 data protection team through the following channels:
- Live Chat Support: Available 24 hours a day, 7 days a week, directly within the Platform. This is the fastest channel for data subject requests requiring prompt action.
- Email (plain text — do not send sensitive documents to this address without prior instruction): [email protected]. Please include "Privacy Request" in the subject line together with your registered username and a clear description of your enquiry.
- Formal Data Subject Requests: For access, rectification, erasure, portability, or restriction requests, please contact us via live chat or email and we will provide you with a secure verified submission channel. Response time: within 30 days of receipt of a verified request.
We take all privacy-related enquiries seriously and are committed to resolving them transparently and within the timeframes required by applicable law. For matters related to our Terms & Conditions or responsible gambling tools, please visit the respective pages linked from our main navigation.