Privacy Policy

OngJudi ("we", "us", or "our") operates the online casino and sports betting platform accessible at ongjudi.cam (the "Platform"). This Privacy Policy ("Policy") describes how OngJudi collects, uses, stores, shares, and protects personal data relating to individuals ("Users", "you", or "your") who access or use the Platform.

We understand that entrusting a platform with personal and financial information requires a high degree of confidence. OngJudi is committed to handling that information with integrity, transparency, and appropriate security measures at every stage of processing.

This Policy applies to all personal data collected through: the OngJudi website; account registration and profile management; deposits, withdrawals, and payment processing; KYC identity verification procedures; customer support interactions; and any other point of contact between you and OngJudi.

For the purpose of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means OngJudi, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of OngJudi pursuant to a written agreement.
• "KYC" means Know Your Customer — the identity and address verification process mandated before processing withdrawals.
• "Cookies" means small data files placed on your device by the Platform for the purposes described in Section 7.
• "MYR" means Malaysian Ringgit, the primary operating currency of the Platform.
• "Sensitive Personal Data" means Personal Data relating to health, financial standing, identity document details, or other categories that warrant heightened protection.

OngJudi collects Personal Data through multiple channels. The categories of data we collect, and the contexts in which they are gathered, are as follows:

3.1 Registration Data

When you create an account, we collect your full legal name, date of birth, residential address (including city — e.g., Kuala Lumpur, Penang, Shah Alam, Johor Bahru, Petaling Jaya), email address, and phone number. This data is required to establish and manage your account.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to protect our users, we collect copies of government-issued photo identification (Malaysian MyKad / NRIC, Driver's License, or Passport), proof of residential address (utility bill, bank statement, or official government correspondence), and a selfie photograph with the ID document.

3.3 Financial & Payment Data

When you deposit or withdraw funds, we collect information necessary to process those transactions. For e-wallet transactions (Touch 'n Go eWallet, Boost, GrabPay), we collect the registered phone number. For bank transfers via DuitNow or FPX (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB), we collect your bank account number and bank name. For cryptocurrency transactions (USDT TRC20, BTC), we collect wallet addresses. OngJudi does not store full card numbers or payment credentials on its servers.

3.4 Transaction & Gameplay Data

We maintain records of all deposits, withdrawals, bonus claims, wagers placed, game outcomes, and account activity. This data is retained for regulatory, audit, and dispute resolution purposes.

3.5 Technical & Device Data

When you access the Platform, we automatically collect your IP address, browser type and version, device type, operating system, session duration, pages visited, and referring URL. This technical data is used for security monitoring, fraud prevention, and platform performance optimisation.

3.6 Communications Data

If you contact OngJudi's support team via live chat or email, we retain records of those communications to manage your query, train our team, and improve service quality.

OngJudi uses your Personal Data only for purposes that are legitimate, necessary, and proportionate. The primary purposes for which we process your data are as follows:

• Account Management: To create, operate, and maintain your OngJudi account; to authenticate your identity upon login; and to manage account settings and preferences.
• Payment Processing: To process MYR deposits and withdrawals via your chosen payment method (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, bank transfer, or cryptocurrency), and to maintain accurate financial records of all transactions.
• Identity Verification (KYC): To verify your identity and age (21+) prior to processing withdrawals, as required under applicable anti-money laundering and responsible gambling obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised access, money laundering, and other prohibited conduct on the Platform.
• Regulatory Compliance: To fulfil obligations under applicable laws and regulations, including record-keeping, reporting, and cooperation with lawful requests from regulatory or law enforcement authorities.
• Customer Support: To respond to your enquiries, complaints, and requests; to resolve account, payment, and technical issues.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the functionality, security, and overall quality of the OngJudi Platform.
• Responsible Gambling: To monitor play patterns for indicators of problem gambling, to apply self-exclusion and deposit limit settings, and to provide appropriate intervention where warranted.
• Communications: To send you service-related notifications including transaction confirmations, security alerts, and important policy updates. Marketing communications are only sent where you have provided separate consent.

OngJudi processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our agreement with you as a registered user — including account management, payment processing, and KYC verification.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and lawful requests from competent authorities.
• Legitimate Interests: Processing carried out for the legitimate interests of OngJudi or third parties, including fraud prevention, platform security, and business analytics — where those interests are not overridden by your rights.
• Consent: Where we rely on your consent — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

OngJudi does not sell, rent, or trade your Personal Data to third parties for commercial or marketing purposes under any circumstances. We may, however, share your data with the following categories of recipients, strictly for the purposes described:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant transaction data with payment service providers, including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banking partners facilitating DuitNow and FPX transactions (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB), and cryptocurrency network processors. Data shared is limited to what is strictly necessary to complete the transaction.

6.2 Identity Verification Partners

KYC documents and identity verification data may be shared with third-party KYC service providers engaged to assist with document review and identity authentication. These processors operate under strict confidentiality obligations.

6.3 Fraud Prevention & AML Providers

We may share technical and transactional data with fraud detection and anti-money laundering (AML) service providers to identify and prevent financial crime on the Platform.

6.4 Regulatory & Law Enforcement Authorities

OngJudi will disclose Personal Data to competent regulatory or law enforcement authorities where required to do so by applicable law, court order, or valid legal process. We will notify affected users of such disclosures where permitted by law.

6.5 Professional Advisers

We may share data with legal, accounting, or other professional advisers under confidentiality obligations, where necessary for the administration of OngJudi's business.

OngJudi uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the site. They help us recognise returning users, maintain session states, and gather analytical data.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. You cannot opt out of these without losing core platform functionality.
• Functional Cookies: Remember your preferences, language settings, and login details to personalise your experience. These are not required but improve usability.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and navigation patterns. This data helps us improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent activity, including unusual login patterns and suspicious transaction behaviours.

7.2 Cookie Management

Most web browsers allow you to control cookies through their settings preferences. You may choose to block or delete non-essential cookies; however, doing so may impact the functionality of certain Platform features. Strictly necessary cookies cannot be disabled without disrupting the operation of your account.

OngJudi retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with OngJudi, plus a minimum of five (5) years following account closure — to comply with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, in accordance with applicable AML regulations.
• Transaction Records: Retained for a minimum of five (5) years for financial audit and regulatory compliance purposes.
• Support Communications: Retained for two (2) years following the resolution of the relevant matter, for quality assurance and dispute resolution.
• Technical & Device Data: Retained for up to 12 months for security monitoring and fraud detection purposes, after which aggregated or anonymised analytics data may be retained indefinitely.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

OngJudi implements a comprehensive range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and OngJudi's servers is encrypted using TLS 1.2 or higher.
• Data-at-Rest Encryption: Personal Data stored on OngJudi's servers — including KYC documents and financial records — is encrypted using AES-256 standard encryption.
• Access Controls: Access to Personal Data is strictly limited to authorised OngJudi personnel with a legitimate need to process the data. Role-based access controls and audit logging are in place.
• Two-Factor Authentication (2FA): OngJudi supports and encourages the use of 2FA for all user accounts to prevent unauthorised access.
• Continuous Security Monitoring: OngJudi operates continuous intrusion detection and security event monitoring systems to identify and respond to potential threats promptly.
• Regular Security Assessments: OngJudi conducts periodic security assessments and vulnerability testing to identify and remediate security risks.

As a user of OngJudi, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team as described in Section 14.

OngJudi will respond to valid data rights requests within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days with prior notice. We will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.

OngJudi is strictly an adult platform. The minimum age to register and use OngJudi is 21 years. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

As part of our account registration and KYC processes, we require all users to confirm their date of birth and to provide valid government-issued identification. Any account found to belong to a person under the age of 21 will be immediately closed, all associated funds returned where practicable, and all Personal Data deleted in accordance with applicable legal requirements.

If you have reason to believe that a minor has registered an account on OngJudi, please contact our support team immediately at [email protected] so we can investigate and take appropriate action without delay.

The OngJudi Platform may reference or integrate with third-party services — including payment gateways such as Touch 'n Go eWallet, Boost, GrabPay, and banking partners such as Maybank, CIMB, Public Bank, Hong Leong Bank, and RHB — for the purpose of processing financial transactions. These third-party services operate under their own privacy policies and terms of service.

OngJudi is not responsible for the privacy practices or content of any third-party services. We encourage you to review the relevant privacy policies of any third-party service you use in connection with your OngJudi account. OngJudi's Privacy Policy governs only the data we collect and process directly.

Game content on the Platform may be provided by third-party software suppliers operating under licence. These providers do not have independent access to your Personal Data beyond what is strictly required to deliver game functionality.

OngJudi reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will post the revised Policy on this page with an updated Effective Date and, where appropriate, notify registered users by email or via a prominent notice on the Platform.

We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of the OngJudi Platform after any changes to this Policy are posted constitutes your acceptance of those changes.

The current version of this Policy is always accessible at ongjudi.cam/privacy-policy. Historical versions are available upon request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact OngJudi through the following channels:

• Live Chat Support: Available 24/7 directly through the OngJudi Platform. This is the quickest route to speak with our team — most data-related enquiries are acknowledged within a few hours.
• Email: [email protected] — formal data rights requests or privacy complaints. Email responses are typically provided within 24 hours; data rights requests are processed within 30 days.
• Subject Line: For data rights requests, please use the subject line "Data Rights Request — [Your Account Username]" to ensure prompt routing.

OngJudi takes all privacy complaints seriously. If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.