Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how tamanjudi ("the Platform", "we", "us", "our") — operating at tamanjudi.cam — collects, uses, stores, discloses, and protects the personal data of individuals ("Players", "Users", "you", "your") who access or use the Platform.

This Policy applies to all personal data processed in connection with your use of tamanjudi, including data collected during registration, identity verification (KYC), account management, financial transactions, gameplay activity, and any communications with our support team.

By registering an account on tamanjudi or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

Personal Data We Collect

tamanjudi collects personal data across several categories, depending on the nature of your interaction with the Platform. The following table provides a structured overview of the categories of personal data we collect and retain:

How We Collect Personal Data

tamanjudi collects personal data through the following channels:

4.1 Direct Collection

Personal data is collected directly from you when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, participate in a promotion, or submit any form or request on the Platform.

4.2 Automated Collection

When you access the Platform, our systems automatically collect certain technical data including your IP address, device identifiers, browser type, operating system, and usage patterns. This data is collected via cookies, web beacons, session logs, and similar tracking technologies detailed in Section 10 of this Policy.

4.3 Third-Party Sources

We may receive personal data from the following third-party sources, where legally permitted:

• Payment processors — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong — who may share transaction confirmation data with us;
• Identity verification providers — third-party KYC service providers who assist in verifying government-issued identification documents;
• Fraud prevention databases — industry-shared databases used to identify and prevent fraudulent account activity;
• Publicly available sources — publicly available records that may be used to verify player information or comply with regulatory obligations.

Purposes of Processing

tamanjudi processes personal data for the following specific purposes:

• Account Registration and Management — to create, maintain, and administer your player account;
• Identity Verification (KYC) — to confirm your identity, verify your age (21+ requirement), and satisfy AML regulatory obligations;
• Payment Processing — to facilitate deposits and withdrawals through your chosen Malaysian payment method;
• Service Delivery — to provide access to all games, betting markets, promotions, and features on the Platform;
• Customer Support — to respond to enquiries, resolve disputes, and handle formal complaints;
• Responsible Gambling — to monitor gameplay patterns, enforce self-imposed limits, process self-exclusion requests, and identify players who may require support;
• Fraud Prevention and Security — to detect, investigate, and prevent fraudulent transactions, duplicate accounts, and any unauthorised use of the Platform;
• Regulatory Compliance — to meet obligations under applicable gaming, AML, and data protection regulations;
• Marketing and Promotions — to inform you of relevant bonuses, promotions, and Platform updates, where you have provided consent or where permitted by applicable law;
• Platform Improvement — to analyse anonymised usage data and improve the functionality, performance, and user experience of the Platform.

Legal Basis for Processing

tamanjudi processes personal data on the following legal grounds:

6.1 Contractual Necessity

Processing is necessary for the performance of the contract between you and tamanjudi — including account registration, payment processing, KYC verification, and service delivery. Without this processing, we cannot provide you with access to the Platform.

6.2 Legal Obligation

tamanjudi is subject to legal and regulatory obligations that require the processing of personal data — including AML (Anti-Money Laundering) compliance, gaming licence requirements, age verification, and tax reporting obligations.

6.3 Legitimate Interests

tamanjudi processes certain personal data on the basis of legitimate interests — including fraud prevention, security monitoring, duplicate account detection, and anonymised platform analytics — where such interests are not overridden by your rights and freedoms.

6.4 Consent

Where tamanjudi processes personal data for marketing or optional communications, such processing is based on your explicit consent. You may withdraw your consent at any time by contacting our support team or updating your account notification preferences.

Sharing Your Personal Data

tamanjudi does not sell, rent, or trade personal data. We share personal data only in the following limited and controlled circumstances:

7.1 Service Providers (Data Processors)

We share personal data with trusted third-party service providers who process data on our behalf under binding data processing agreements. These include: payment gateway operators (Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong), KYC and identity verification providers, cloud infrastructure and hosting providers, live casino game studios, and customer support software providers. All processors are contractually required to apply appropriate security measures and to process data only for the purposes specified by tamanjudi.

7.2 Regulatory and Law Enforcement Authorities

tamanjudi may disclose personal data to competent regulatory bodies, law enforcement agencies, courts, or governmental authorities where required by law, court order, or regulatory instruction — including in connection with AML investigations, fraud investigations, or gaming licence compliance audits.

7.3 Business Transactions

In the event of a merger, acquisition, asset sale, or restructuring of tamanjudi's business, personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained. Affected players will be notified prior to any such transfer.

7.4 With Your Consent

In circumstances not covered above, tamanjudi will only share your personal data with third parties where you have provided explicit prior consent.

Data Retention

tamanjudi retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal and regulatory minimum retention requirements. The following general retention principles apply:

• Account and identity data — retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, to satisfy AML, gaming regulatory, and tax compliance obligations;
• Transaction and financial records — retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping requirements;
• KYC documentation — retained for a minimum of five (5) years from the date of verification, or longer where required by applicable law;
• Responsible gambling records — self-exclusion and limit records are retained for the duration of the exclusion/limit period plus five (5) years, to prevent re-registration in breach of an active exclusion;
• Support communications — retained for three (3) years from the date of the communication, unless they relate to an ongoing dispute or regulatory matter;
• Marketing consent records — retained for three (3) years from the date consent was last given or refreshed.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Data Security

tamanjudi implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes, without limitation:

• 256-bit SSL/TLS encryption for all data in transit between Players' devices and the Platform;
• Encryption at rest for sensitive personal data stored in our databases;
• Role-based access controls limiting internal access to personal data to authorised personnel who require it for specific job functions;
• Two-factor authentication (2FA) available for all Player accounts;
• Regular security audits and penetration testing conducted by independent security specialists;
• Intrusion detection and monitoring systems operating 24/7 to detect and respond to security incidents;
• Staff training on data protection and information security obligations.

While tamanjudi employs industry-leading security practices, no system is entirely immune to risk. You are responsible for maintaining the security of your own account credentials. If you suspect any unauthorised access to your tamanjudi account, please contact our support team immediately via live chat.

Cookies & Tracking Technologies

tamanjudi uses cookies and similar tracking technologies to enable the proper functioning of the Platform, maintain your session state, and gather anonymised analytical data that helps us improve the user experience.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies — essential for the Platform to function. These include session cookies that keep you logged in during your visit. You cannot opt out of strictly necessary cookies without disabling functionality.
• Functional Cookies — remember your preferences (e.g., language settings, notification preferences) to personalise your experience.
• Analytics Cookies — collect anonymised data about how Players use the Platform (e.g., most visited pages, error rates, session duration) to help us improve our services. This data is aggregated and does not identify individual users.
• Security Cookies — used to detect and prevent fraudulent activity, duplicate account use, and unauthorised access attempts.

10.2 Cookie Management

You can control cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. However, blocking strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in your browser's help documentation.

10.3 Third-Party Tracking

tamanjudi does not use third-party advertising or cross-site tracking cookies. We do not share anonymised analytics data with advertising networks or any parties for the purpose of targeted advertising outside the Platform.

Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by tamanjudi. To exercise any of these rights, please contact our Data Privacy team via live chat or at the email address provided in Section 15 of this Policy.

tamanjudi will respond to all data rights requests within 30 calendar days. Where a request is complex or involves a high volume of data, we may extend this period by a further 60 days, with prior notice. We do not charge a fee for handling data rights requests unless they are manifestly unfounded, repetitive, or excessive.

Data Protection for Minors

tamanjudi's services are strictly limited to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data of persons under the age of 21. All registrations are subject to mandatory age verification as part of the KYC process.

If tamanjudi discovers that personal data has been collected from a person below the age of 21 — whether through fraudulent registration or any other means — the relevant account will be immediately suspended, all collected data will be securely deleted to the extent permitted by applicable law and regulatory obligations, and the matter will be reported to relevant authorities where required.

Parents and guardians who believe their minor child may have accessed tamanjudi should contact our support team immediately via live chat, providing relevant account details for investigation.

International Data Transfers

In operating the Platform, tamanjudi may transfer personal data to third-party service providers — including cloud hosting infrastructure and KYC verification providers — whose systems may be located outside Malaysia. Where personal data is transferred internationally, tamanjudi ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to or greater than those applied by tamanjudi;
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection;
• Implementation of technical and organisational security measures at the receiving end consistent with those described in Section 9 of this Policy.

By using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this section, subject to the safeguards outlined above.

Changes to This Privacy Policy

tamanjudi reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made — particularly those that affect how we collect or use personal data in ways that differ from those described in this Policy at the time of your original consent — we will notify you via a platform notification or email to your registered address, with a minimum of 14 days' notice before the change takes effect.

Non-material changes (such as corrections of typographical errors, clarification of existing language, or restructuring of content without substantive change) may take effect immediately upon publication. The "Last Updated" date displayed at the top of this page reflects the most recent revision.

Continued use of the Platform following the effective date of any update to this Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or tamanjudi's data protection practices, or if you wish to exercise any of the data rights described in Section 11, please contact our Data Privacy team through the following channels:

• Live Chat: Available 24/7 on the tamanjudi Platform — this is the fastest channel for all privacy enquiries
• Email: [email protected] (plain text — not a clickable link)

Please include in your message: your registered account username or email address, the nature of your enquiry or the specific right you wish to exercise, and any supporting information that may assist us in processing your request promptly.

We aim to acknowledge all data privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days of receipt of a valid request.