Privacy Policy — kakijudi Data & Information Practices

1. Introduction

kakijudi ("we", "us", "our", "the Platform") operates the online gaming platform accessible at kakijudi.lat. This Privacy Policy ("Policy") applies to all personal data collected from individuals who register an account, visit the Platform, or otherwise interact with kakijudi's services.

This Policy is intended to be read alongside kakijudi's Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, you should not use the Platform.

For players based in Malaysia, personal data processing on the kakijudi Platform is conducted with reference to applicable international data protection standards relevant to kakijudi's operating licensing jurisdiction. We take our data protection obligations seriously and treat the personal information of our Malaysian players with the same standard of care applied across all user jurisdictions.

2. Personal Data We Collect

kakijudi collects personal data through multiple channels — directly from you when you register and use the Platform, automatically through technical systems as you interact with the Platform, and in limited circumstances from third-party verification services. The categories of data collected include:

2.1 Registration & Identity Data

• Full legal name;
• Date of birth (required for 21+ age verification);
• Residential address;
• Email address;
• Mobile phone number;
• Chosen username and encrypted password hash.

2.2 Identity Verification (KYC) Data

• Government-issued identity documents (MyKad, passport, or equivalent);
• Proof of address documentation;
• Proof of payment method ownership (where required);
• Selfie or liveness verification data (where applicable).

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records;
• Payment method identifiers (bank account references, e-wallet IDs — not full card numbers);
• Account balance history;
• Bonus and promotion redemption records.

2.4 Gaming Activity Data

• Bet history across all kakijudi products (live casino, sportsbook, slots, arcade);
• Game session timestamps and durations;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

2.5 Technical & Usage Data

• IP address and approximate geolocation;
• Browser type, version, and operating system;
• Device identifiers;
• Pages visited, links clicked, and time spent on Platform sections;
• Login timestamps and session logs.

3. How We Use Your Personal Data

kakijudi processes your personal data for the following purposes:

• Account management: Creating, maintaining, and authenticating your kakijudi account;
• Identity and age verification: Confirming that you meet the 21+ age requirement and that your identity matches your registration details;
• Payment processing: Processing deposits from and withdrawals to your local payment methods (Maybank IBG, Touch n Go eWallet, Boost, CIMB Clicks, Public Bank, and others);
• Anti-Money Laundering (AML) and fraud prevention: Monitoring transactions and gaming activity for patterns consistent with money laundering, fraud, or prohibited conduct under the Terms & Conditions;
• Platform operation and improvement: Diagnosing technical issues, optimising platform performance for Malaysian network conditions, and developing new features;
• Responsible gaming compliance: Monitoring play patterns to identify potential problem gambling indicators and administering self-imposed limits and exclusions;
• Customer support: Responding to your enquiries, resolving disputes, and managing account-related requests;
• Marketing communications: Sending promotional offers and platform updates to the email address or phone number registered on your kakijudi account, subject to your communication preferences;
• Legal and regulatory compliance: Meeting obligations imposed by our licensing jurisdiction and responding to lawful information requests from regulatory authorities.

4. Legal Basis for Processing

kakijudi processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the agreement between you and kakijudi — account operation, payment processing, and gaming service delivery;
• Legal obligation: Processing required to comply with AML regulations, licensing conditions, and lawful authority requests;
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and product improvement, where these interests are not overridden by your data protection rights;
• Consent: Marketing communications, where required. You may withdraw consent at any time by updating your communication preferences in your account settings.

5. Data Sharing & Disclosure

kakijudi does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

• Service providers: Third-party KYC verification providers, payment processors, gaming software suppliers, and IT infrastructure providers who process data on our behalf under data processing agreements that restrict their use of your data;
• Regulatory and licensing authorities: Where disclosure is required by our gaming licensing conditions or in response to a lawful regulatory investigation;
• Law enforcement: Where required by court order or applicable law, including AML reporting obligations;
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of kakijudi's assets, personal data held by kakijudi may be transferred to the acquiring entity, subject to equivalent privacy protections;
• Fraud prevention networks: Sharing of data with shared fraud-prevention databases operated within the licensed gaming industry, to identify and block fraudulent actors across multiple platforms.

Where data is transferred outside of the primary processing jurisdiction, kakijudi ensures that appropriate safeguards are in place — including contractual data transfer clauses — to maintain an equivalent level of data protection.

6. Cookies & Tracking Technologies

kakijudi uses cookies and similar tracking technologies on the Platform to:

• Maintain your authenticated session after login;
• Remember your platform preferences (language, display settings);
• Analyse Platform usage patterns to improve performance and user experience;
• Support fraud detection and security monitoring systems.

Session cookies are essential for Platform operation and cannot be disabled without preventing normal use of the kakijudi platform. Analytics cookies are non-essential and can be managed through your browser settings. Most modern mobile browsers used by Malaysian players — Chrome on Android, Safari on iOS — provide accessible cookie management through their settings menus.

kakijudi does not use third-party advertising cookies or allow advertising networks to place tracking cookies on the Platform.

7. Data Retention

kakijudi retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with legal, regulatory, and audit obligations. The retention periods set out in the table in Section 2 represent minimum retention requirements. Following the applicable retention period, data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Where you request account closure, kakijudi will cease active use of your data for marketing and platform operation purposes immediately. However, transaction and KYC records will be retained for the regulatory minimum period as stated above, regardless of account status.

8. Data Security

Security measures applied to the kakijudi Platform include:

• TLS/SSL encryption for all data transmitted between your device and the kakijudi Platform;
• Encryption at rest for sensitive personal data fields including identity documents and payment method references;
• Password hashing using industry-standard algorithms — kakijudi staff cannot retrieve your plaintext password;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Intrusion detection systems and real-time security monitoring;
• Regular penetration testing and vulnerability assessments by independent security specialists.

Notwithstanding these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own kakijudi login credentials. If you suspect your account has been accessed without your authorisation, contact kakijudi support immediately.

9. Your Data Rights

Subject to applicable law and the conditions of our licensing obligations, you have the following rights in relation to your personal data held by kakijudi:

• Right of access: You may request a copy of the personal data kakijudi holds about you;
• Right of rectification: You may request correction of inaccurate or incomplete personal data;
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances;
• Right to data portability: You may request a machine-readable copy of personal data you have provided to us for transfer to another service provider, where technically feasible;
• Right to withdraw consent: Where processing is based on consent (principally marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact kakijudi via the support channels described in Section 13. kakijudi will respond to verified data rights requests within 30 days. Requests may be declined where fulfilling them would conflict with our legal obligations, licensing conditions, or the rights of other individuals.

10. Children & Minors

The kakijudi Platform is strictly intended for individuals aged 21 and above. kakijudi does not knowingly collect, process, or retain personal data of individuals under the age of 21. Where kakijudi becomes aware that personal data of an individual under 21 has been collected — including through the KYC verification process — that data will be deleted and the associated account closed immediately.

Parents and guardians who become aware that a minor may have registered an account on kakijudi should contact our support team immediately so that the account can be investigated and closed without delay.

11. Third-Party Links

The kakijudi Platform may contain links to third-party websites or services — for example, payment processor portals accessed during deposit or withdrawal flows. This Privacy Policy applies solely to data processing conducted by kakijudi and does not extend to third-party platforms. kakijudi is not responsible for the privacy practices of any third-party site you access from the Platform. You should review the privacy policies of any third-party service before providing personal information to it.

12. Amendments to This Policy

kakijudi reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. Where changes are material, we will notify registered users via their registered email address or through a prominent notice on the Platform. Continued use of the kakijudi Platform following notification of any policy amendment constitutes your acceptance of the revised Policy. The current effective version is always accessible at kakijudi.lat/privacy-policy.

13. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data kakijudi holds about you, please contact our support team:

Email: support at kakijudi dot lat

Subject Line: For data rights requests, please include "Privacy Request" in the subject line of your message to ensure it is routed to the appropriate team.

Response Time: kakijudi aims to acknowledge all privacy-related enquiries within 3 business days and to provide a substantive response within 30 calendar days of receiving a verified request.