datojudi Privacy Policy

1.Introduction and Scope

1.1 This Privacy Policy ("Policy") sets out how datojudi ("we", "us", "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "the Member") who interact with the datojudi platform at datojudi.one and any associated services.

1.2 This Policy applies to all personal data processed by datojudi in connection with your registration, use of the platform, customer support interactions, and any promotional or marketing communications you have consented to receive.

1.3 datojudi is committed to processing personal data in a lawful, fair, and transparent manner, consistent with the principles of applicable data protection law and the requirements of our international gaming licence.

2.Data Controller Information

2.1 datojudi acts as the data controller in respect of the personal data it collects and processes about its Members. As data controller, datojudi determines the purposes for which, and the means by which, your personal data is processed.

2.2 For all data protection enquiries, Members may contact the datojudi data protection team via email at [email protected] or through the 24/7 live chat function on the platform.

3.Personal Data We Collect

3.1 datojudi collects the following categories of personal data from Members and prospective Members:

4.How We Collect Your Data

4.1 datojudi collects personal data through the following means:

• Direct provision: Information you provide when registering for an account, completing KYC verification, making deposits or withdrawals, or contacting customer support.
• Automated collection: Technical data collected automatically when you access the datojudi platform, including IP address, device identifiers, browser type, and session activity via cookies and server logs.
• Third-party sources: Identity and fraud-check data received from KYC verification providers; payment data from payment processing partners; information from regulatory watchlists where required by our AML obligations.

5.Purposes and Legal Basis for Processing

5.1 datojudi processes your personal data for the following purposes and on the following legal bases:

• Performance of contract: Processing necessary to register your account, process deposits and withdrawals, provide gaming services, and fulfil any bonus or promotional commitments.
• Legal obligation: Processing required to comply with KYC and AML regulatory requirements, including identity verification, transaction monitoring, and mandatory reporting to relevant authorities.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, improving platform performance, and protecting the rights and interests of datojudi and its Members.
• Consent: Sending marketing communications, personalised promotional offers, and optional service notifications where you have provided explicit opt-in consent. You may withdraw consent at any time by contacting support.

6.Data Sharing and Third-Party Processors

6.1 datojudi does not sell, rent, or commercially exploit your personal data to third parties. We share personal data with third parties only in the following circumstances:

• Payment processors: Financial data shared with payment partners (FPX providers, e-wallet operators including Touch n Go and Boost, cryptocurrency settlement providers) strictly for transaction processing purposes.
• KYC and identity verification providers: Identity and document data shared with licensed KYC verification services solely for the purpose of fulfilling our regulatory identity verification obligations.
• Game content providers: Technical session data shared with game studios (Evolution Gaming, Pragmatic Play, PG Soft, and others) as necessary for the delivery of gaming services. These providers are contractually prohibited from using your data for any purpose other than service delivery.
• Regulatory and law enforcement authorities: Where datojudi is legally required to disclose personal data to regulatory bodies, law enforcement agencies, or courts, we will comply with such requests within the scope of applicable law.
• Corporate successors: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the relevant successor entity, subject to the same data protection obligations as set out in this Policy.

6.2 All third-party data processors engaged by datojudi are required to process personal data solely on datojudi's documented instructions and to maintain appropriate technical and organisational security measures.

7.International Data Transfers

7.1 datojudi's servers and third-party processors may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, datojudi ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent data transfer mechanisms recognised under applicable law.

7.2 By registering with datojudi, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence, and that such transfers are carried out in accordance with this Policy and applicable data protection requirements.

8.Data Retention

8.1 datojudi retains personal data for as long as is necessary to fulfil the purposes described in this Policy, including ongoing regulatory and legal obligations. Specific retention periods include:

• Account and identity data: Retained for a minimum of five years following account closure, as required by AML and gaming regulatory obligations.
• Transaction and gaming records: Retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping requirements.
• Marketing consent records: Retained for the duration of the consent period and for a reasonable period thereafter as evidence of consent.
• Technical and session logs: Retained for up to 12 months for security monitoring and fraud investigation purposes.

8.2 Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual.

9.Cookies and Tracking Technologies

9.1 The datojudi platform uses cookies and similar technologies, including local storage and session tokens, for the following purposes:

• Essential cookies: Required for the platform to function correctly, including maintaining your logged-in session, remembering your currency preference, and processing transactions securely. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to understand how Members interact with the platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymised and is used solely to improve the datojudi platform.
• Security cookies: Used to detect and prevent fraudulent account access, including cross-site request forgery protection and bot detection mechanisms.

9.2 datojudi does not use third-party advertising cookies or behavioural tracking technologies that share your browsing data with external advertising networks.

9.3 You may configure your browser to reject or delete cookies; however, doing so may impair your ability to use certain features of the datojudi platform, including maintaining an authenticated session.

10.Your Data Subject Rights

10.1 Subject to applicable data protection law, you have the following rights in respect of your personal data held by datojudi:

• Right of access: To request a copy of the personal data datojudi holds about you.
• Right to rectification: To request correction of any inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal or regulatory retention requirements.
• Right to restrict processing: To request that datojudi restricts processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: To receive a copy of personal data you have provided to datojudi in a structured, machine-readable format, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: To object to processing based on legitimate interests, including direct marketing communications.

10.2 To exercise any of these rights, contact the datojudi data protection team at [email protected]. datojudi will respond to verified requests within 30 days.

11.Children and Underage Users

11.1 The datojudi platform is strictly for adults aged 21 and above. datojudi does not knowingly collect personal data from individuals under the age of 21. If datojudi becomes aware that personal data has been collected from a person under 21, that data will be deleted and the account suspended immediately.

11.2 If you are a parent or guardian and believe that a minor has created a datojudi account or submitted personal data to the platform, please contact us immediately at [email protected] so that we can take appropriate action.

12.Security Measures

12.1 datojudi implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL encryption for all data in transit, AES-256 encryption for data at rest, role-based access controls, regular security audits and penetration testing, and incident response procedures.

12.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, datojudi will notify affected Members without undue delay and take all reasonable steps to mitigate the impact of the breach.

13.Changes to This Privacy Policy

13.1 datojudi may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where material changes are made, datojudi will notify active Members via the platform or by email to the registered address. The revised Policy will be published on this page with an updated "Last updated" date. Continued use of the datojudi platform following publication of a revised Policy constitutes acceptance of the changes.

14.Contact and Complaints

14.1 For any queries regarding this Privacy Policy or the way datojudi handles your personal data, please contact our data protection team at [email protected] or via the 24/7 live chat function on the platform.

14.2 If you are not satisfied with datojudi's response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to the dispute resolution body designated under datojudi's international gaming licence.