Privacy Policy

This Privacy Policy ("Policy") describes how 365judi ("Company", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("Player", "User", "you") who access and use the 365judi platform located at 365judi.cam and all associated services (collectively, the "Service").

365judi operates as an internationally licensed online gaming and sports betting platform accessible to players in Malaysia and other qualifying jurisdictions. As part of our operational obligations under that licence, we are required to collect and process certain categories of personal data. This Policy explains those practices in transparent and plain terms.

By registering an account on 365judi, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into our Terms & Conditions and forms an integral part of the agreement between you and 365judi.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, identification number, payment details, and device identifiers.
• "Processing" — any operation performed on personal data, whether automated or manual, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. In the context of this Policy, 365judi is the Data Controller.
• "Data Processor" — any third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "Consent" — freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC Data" — identity and address verification documents collected as part of the Know Your Customer process mandated by our international licence.
• "Cookies" — small text files placed on your device by the 365judi website to enable certain functions and collect usage analytics.

365judi acts as the Data Controller for all personal data collected through the 365judi platform. As Data Controller, 365judi is responsible for determining the purposes and means by which personal data is processed and for ensuring that such processing complies with applicable data protection requirements under our international licence framework.

For all data-related enquiries, including requests to exercise your rights under Section 13 of this Policy, you may contact us directly via the channels listed in Section 17 (Contact Us). We will acknowledge all data-related requests within five (5) business days of receipt.

365judi collects the following categories of personal data from players, depending on the nature of their interaction with the platform:

365judi collects personal data through the following channels and mechanisms:

• Directly from you — when you register an account, complete the KYC process, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically through platform use — via cookies, server logs, and analytics tools that record how you interact with the 365judi website, including pages visited, games played, and session durations.
• From third-party payment processors — our payment partners (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks) may share transaction reference data with us to facilitate deposit and withdrawal processing.
• From identity verification service providers — third-party KYC and document verification tools may share the results of identity checks with us in order to confirm your age and identity.
• From fraud prevention and security services — we may receive risk signals or flagging data from anti-fraud systems that help us protect the platform and all players.

365judi processes personal data only where a lawful basis for doing so exists. The primary legal bases on which we rely are as follows:

• Contractual necessity — processing required to perform our contract with you, including maintaining your account, processing deposits and withdrawals, and providing access to games and betting markets.
• Legal obligation — processing required to comply with our obligations under our international gaming licence, including KYC identity verification, transaction monitoring, and record-keeping requirements.
• Legitimate interests — processing carried out for our legitimate business interests, such as fraud prevention, platform security, improving user experience, and responsible gambling enforcement, provided these interests are not overridden by your rights and interests.
• Consent — where you have given explicit, freely withdrawable consent to specific processing activities, such as receiving promotional communications from 365judi. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Personal data collected by 365judi is used for the following purposes:

1. Account management — creating, maintaining, and administering your player account, including processing login authentication and account settings changes.
2. Transaction processing — facilitating MYR deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB Bank, and Hong Leong Bank, as well as processing cryptocurrency deposits and all withdrawal requests.
3. Identity verification (KYC) — confirming your identity, age, and address to satisfy our international licence obligations and to enforce our 21+ age policy.
4. Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
5. Customer support — responding to your enquiries, resolving disputes, and providing assistance via live chat and email.
6. Responsible gambling — monitoring account activity for indicators of problem gambling behaviour, administering self-exclusion, deposit limit, and cooling-off requests, and fulfilling responsible gambling obligations under our licence.
7. Legal compliance — maintaining records required by our international gaming licence and responding to lawful requests from regulatory authorities or law enforcement agencies.
8. Platform improvement — analysing anonymised and aggregated usage data to improve the performance, usability, and content of the 365judi platform.
9. Marketing communications — sending you promotional offers, bonus notifications, and relevant product updates, but only where you have provided explicit consent. You may opt out at any time.

365judi does not sell, lease, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances. We may share your data with the following categories of recipients only where strictly necessary and subject to appropriate contractual data protection obligations:

• Payment processors and financial institutions — including Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks — to the extent required to process your deposit and withdrawal transactions.
• Identity verification providers — third-party KYC and document verification services engaged to support our age and identity verification processes.
• Fraud and anti-money laundering services — specialised third-party providers that assist us in detecting and preventing financial crime and platform abuse.
• Gaming software providers — providers of the casino and sports betting software powering games on the 365judi platform may receive technical session data necessary to operate those games.
• Regulatory and law enforcement authorities — where we are legally required to disclose information to satisfy a valid regulatory request, court order, or law enforcement investigation. 365judi will not voluntarily disclose data beyond what is legally required in such circumstances.
• Professional advisors — legal counsel, auditors, and other professional advisors engaged by 365judi may have access to certain personal data on a strictly confidential, need-to-know basis.

365judi uses cookies and similar tracking technologies on our website to enable core functionality and to improve user experience. The categories of cookies we use are as follows:

• Strictly necessary cookies — essential for the operation of the platform, including session management, login authentication, and security functions. These cannot be disabled without significantly impairing your ability to use the Service.
• Functional cookies — used to remember your preferences, such as language settings, preferred deposit method, and responsible gambling tool configurations, so you do not need to re-enter them on each visit.
• Analytics cookies — used to collect anonymised data about how players navigate and interact with the platform. This data is used solely to improve the performance and usability of 365judi.
• Security cookies — used to detect and prevent fraudulent activity, bot access, and other security threats to the platform.

365judi does not use third-party advertising cookies or permit external advertisers to place tracking cookies on our platform. You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 365judi Service.

365judi retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by our international gaming licence obligations. The following general retention periods apply:

• Account and KYC data — retained for the duration of your active account plus a minimum period of five (5) years following account closure, in line with international anti-money laundering record-keeping standards.
• Transaction records — deposit, withdrawal, and gameplay transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications — live chat transcripts and email correspondence are retained for two (2) years from the date of each interaction.
• Technical and log data — server and access logs are retained for a maximum of twelve (12) months, after which they are anonymised or deleted.
• Marketing consent records — records of marketing consent and opt-out status are retained for the duration of your account plus three (3) years to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

As an internationally licensed online gaming platform, 365judi may transfer personal data to data processors or service providers located outside of Malaysia. Such transfers may include data processed by our KYC verification partners, gaming software providers, or infrastructure hosting services.

Where such transfers occur, 365judi takes reasonable steps to ensure that appropriate safeguards are in place to protect your personal data, including entering into contractual data processing agreements with recipients that impose data protection standards consistent with recognised international privacy frameworks.

By using the 365judi platform, you acknowledge and consent to such transfers being made on the basis described in this Policy.

365judi implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of personal data at rest using industry-standard algorithms
• Two-factor authentication (2FA) available for all player accounts
• Role-based access controls restricting internal access to personal data on a strict need-to-know basis
• 24/7 automated monitoring for unauthorised access attempts and suspicious activity
• Regular internal security reviews and vulnerability assessments
• Segregation of player funds from operational accounts to protect financial integrity

While we implement these measures and take reasonable precautions to safeguard your data, no method of transmission over the internet or method of electronic storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 365judi will notify affected players in accordance with applicable requirements under our licensing framework.

You hold the following rights in relation to your personal data held by 365judi. To exercise any of these rights, please contact us using the details in Section 17. We will respond to all valid requests within a reasonable timeframe, typically within thirty (30) days.

The 365judi platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Our registration process includes age declaration requirements and our KYC process verifies player age through government-issued identity documents.

If 365judi becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has created an account on 365judi, please contact us immediately via the details in Section 17 so that we can investigate and take appropriate action.

The 365judi website may, from time to time, contain references or links to third-party websites or services. This Privacy Policy applies solely to data collected and processed by 365judi. We have no control over, and accept no responsibility for, the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any third-party website you visit independently of the 365judi platform.

365judi reserves the right to update or revise this Privacy Policy at any time. Material changes to the Policy will be communicated to registered players via email to the address on file or by prominent notice on the platform, prior to the revised Policy taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how we handle your personal data. Your continued use of the 365judi platform following the effective date of any revised Policy constitutes acceptance of the updated terms.

If you wish to exercise any of your data subject rights, raise a privacy concern, or request further information about how 365judi handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the live chat widget on the 365judi platform. This is the fastest method for most enquiries.
• Email: [email protected]

Please clearly indicate in your communication that your enquiry relates to a privacy or data protection matter. We will acknowledge receipt of all data-related requests within five (5) business days and will endeavour to resolve them fully within thirty (30) days, except in complex cases where we may require additional time — in which case we will notify you of the extended timeframe.

For concerns related to responsible gambling or account self-exclusion, please visit our Responsible Gambling page for dedicated resources and support channels.