Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by doktorjudi ("doktorjudi", "we", "us", "our"), the operator of the online gaming platform accessible at doktorjudi.cam. This Policy governs the collection, processing, storage, and disclosure of personal data relating to all registered players, visitors, and users ("you", "your") of the doktorjudi platform.

Doktorjudi is committed to protecting the privacy and security of personal data entrusted to us by players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam, and beyond. We process your data responsibly, transparently, and in strict accordance with applicable data protection laws.

This Policy should be read alongside our Terms & Conditions, which govern the broader relationship between doktorjudi and its registered players. Together, these documents form the complete framework governing your use of our platform.

02 Definitions

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, date of birth, phone number, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — doktorjudi, as the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" — any third party that processes Personal Data on behalf of doktorjudi, such as payment processors, KYC verification providers, and cloud infrastructure operators.
• "Player" / "User" — any natural person who accesses, registers on, or transacts through the doktorjudi platform.
• "Cookies" — small data files placed on a Player's device by the platform for session management, analytics, and personalisation purposes.
• "KYC" — Know Your Customer, the identity verification and due diligence process required for all registered players.

03 Data We Collect

Doktorjudi collects personal data through multiple channels in the normal course of operating a regulated online gaming platform. The categories of personal data we collect include, but are not limited to, the following:

3.1 Registration Data

When you create an account on doktorjudi.cam, we collect: full legal name, date of birth, email address, Malaysian mobile phone number, country of residence, and a username and password of your choosing.

3.2 Identity Verification Data (KYC)

To comply with anti-money-laundering (AML) obligations and to verify that players are aged 21 and above, we collect government-issued identity documents, proof of address documentation, and where applicable, proof of payment method ownership.

3.3 Financial & Transaction Data

We record all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method references, and transaction timestamps. Full payment card numbers are not stored by doktorjudi — we use tokenised payment references provided by our PCI-DSS-compliant payment processors.

3.4 Gaming Activity Data

We collect data relating to your gaming activity on the platform, including games played, bet amounts, session durations, win/loss history, and responsible gambling tool usage. This data is used for account management, fraud detection, and responsible gambling monitoring.

3.5 Technical & Device Data

We automatically collect certain technical information when you access our platform, including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session timestamps.

3.6 Communications Data

When you contact our support team via live chat, email, or WhatsApp, we retain records of those communications for quality assurance, dispute resolution, and compliance purposes.

04 How We Process Your Data

Doktorjudi processes your personal data for the following specific purposes. We do not use your data for any purpose other than those listed here without providing prior notice and, where required, obtaining your consent.

• Account Management: Creating, maintaining, and administering your player account, including processing login authentication and account security settings.
• Payment Processing: Facilitating deposits via Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels, as well as processing withdrawal requests.
• Identity Verification: Conducting KYC verification to confirm your identity, age (21+), and eligibility to use the platform in accordance with regulatory requirements.
• Fraud Prevention & AML: Monitoring transactions and account activity to detect and prevent fraud, money laundering, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: Monitoring gaming patterns to identify signs of problem gambling behaviour, enforcing player-requested limits, and administering self-exclusion periods.
• Customer Support: Responding to enquiries, resolving disputes, and maintaining communication records for service quality and compliance purposes.
• Platform Analytics: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and feature development.
• Marketing Communications: Sending promotional offers, bonus notifications, and service updates to players who have consented to receive such communications. You may withdraw consent at any time.
• Legal & Regulatory Compliance: Meeting obligations under applicable laws, including retaining transaction records and disclosing data to competent authorities when legally compelled to do so.

05 Legal Basis for Processing

Doktorjudi processes personal data only where a valid legal basis exists. The applicable legal bases for our processing activities are as follows:

• Contractual Necessity: Processing required to perform the contract between doktorjudi and the player (i.e., account operation, payment processing, and game delivery).
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and data retention mandates.
• Legitimate Interests: Processing carried out for purposes that are reasonably necessary to protect the security, integrity, and operational continuity of the platform, including fraud detection and responsible gambling monitoring.
• Consent: Processing for non-essential purposes such as marketing communications, where we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

Doktorjudi does not sell, rent, or transfer your personal data to unaffiliated third parties for their own commercial purposes. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: To process deposit and withdrawal transactions. These providers operate independently and are bound by their own data protection obligations and PCI-DSS standards.
• KYC & Identity Verification Partners: To conduct mandatory identity and age verification checks. These partners process data strictly under doktorjudi's instructions and applicable data protection requirements.
• Game Content Providers: Certified third-party game studios may receive necessary session data to deliver and authenticate gameplay. No personal identifying information beyond session tokens is shared without necessity.
• Cloud & Infrastructure Providers: Doktorjudi uses secure cloud hosting and infrastructure services. These providers act as data processors under contractual agreements that include appropriate data protection clauses.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when legally required to do so, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of doktorjudi, its players, or the public.
• Professional Advisers: Lawyers, auditors, and compliance consultants may access data on a confidential, need-to-know basis in the course of providing professional services to doktorjudi.

07 Data Retention

Doktorjudi retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements that apply to an online gaming operator.

As a general principle, active player account data is retained for the duration of the account relationship plus a minimum period following account closure to comply with applicable AML and financial record-keeping regulations. KYC documentation, transaction records, and communication logs are retained for the statutory minimum period required by applicable law, which may extend to five (5) or more years following the end of the player relationship.

Where personal data is no longer required for any lawful purpose, doktorjudi will securely delete or anonymise it. Anonymised, aggregated analytics data may be retained indefinitely as it no longer constitutes personal data.

Players may request confirmation of the retention periods applicable to their specific data categories by contacting our support team.

08 Data Security

Doktorjudi employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest within our database and storage infrastructure.
• Role-based access controls ensuring that only authorised personnel can access player data on a need-to-know basis.
• Two-factor authentication requirements for administrative system access.
• Regular security audits, vulnerability assessments, and penetration testing of our platform infrastructure.
• Automated fraud detection and anomaly monitoring systems operating continuously.
• Physical security controls at all data processing facilities operated by our infrastructure providers.

While doktorjudi takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. Players are responsible for maintaining the confidentiality of their own account credentials and should report any suspected unauthorised access to our support team immediately.

09 Cookies & Tracking Technologies

Doktorjudi uses cookies and similar tracking technologies on our platform to ensure proper functionality, improve user experience, and gather aggregated analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without preventing access to the platform.
• Functional Cookies: Used to remember your preferences, language settings, and personalisation choices. These improve your experience but are not essential to platform operation.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the platform. This data helps us improve navigation, performance, and feature prioritisation. We do not use analytics cookies to identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and credential stuffing attacks.

You can manage cookie preferences through your browser settings at any time. Disabling certain non-essential cookies may affect platform functionality and personalisation features but will not prevent access to your account or core gaming services.

Doktorjudi does not use cookies for cross-site tracking, third-party advertising profiling, or the sale of behavioural data. Our cookie practices are limited to what is necessary for platform operation and internal analytics.

10 Your Data Rights

Doktorjudi respects your rights in relation to your personal data. Subject to applicable law and certain limitations related to our legal and regulatory obligations, you have the following rights:

• Right of Access: You may request a copy of the personal data doktorjudi holds about you, together with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. For name or date of birth corrections, supporting documentation will be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our overriding legal obligations to retain certain records.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests or to direct marketing at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact our support team using the details in Section 15 of this Policy. We will respond to all valid requests within a reasonable timeframe, and in any event within thirty (30) days of receipt. We may require identity verification before processing certain requests.

11 Children's Privacy

The doktorjudi platform is strictly intended for persons aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in our registration and KYC process.

If doktorjudi becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will immediately suspend the relevant account, void all associated transactions in accordance with our Terms & Conditions, and take steps to delete the personal data as soon as reasonably practicable.

12 International Data Transfers

In the course of providing our services, personal data collected from Malaysian players may be transferred to and processed in countries outside Malaysia by our trusted service providers, including cloud infrastructure operators, KYC verification partners, and payment processors.

Wherever such transfers occur, doktorjudi ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required by applicable data protection law. These safeguards include contractual clauses that bind recipient entities to data protection standards consistent with this Policy.

Players may contact us for further information about the specific safeguards applicable to any international data transfers that affect their personal data.

13 Third-Party Links & Services

The doktorjudi platform may reference or integrate with third-party services such as payment gateways and game providers. These third parties operate independently and under their own privacy policies. Doktorjudi is not responsible for the data practices of third-party service providers once data leaves our direct control.

We encourage players to review the privacy policies of any third-party payment service or application they interact with in the course of using the platform, particularly when authorising payments via Touch 'n Go eWallet, DuitNow, Boost, GrabPay, or any other independently operated payment application.

14 Amendments to this Policy

Doktorjudi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The revised Policy will be published on this page with an updated effective date.

For material changes that affect how we process your personal data in a significant way, we will notify registered players by email or through a prominent notice on the platform prior to the change taking effect. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by doktorjudi, please contact our dedicated support team using the details below. All privacy-related correspondence must clearly state your registered account email address for identification purposes.

Data Privacy Enquiries — Email:
[email protected]

Live Chat Support:
Available 24 hours a day, 7 days a week. Average response time: 3–5 minutes. Live chat agents are available in English, Bahasa Melayu, and Mandarin to assist players from all communities across Malaysia.

Postal Correspondence:
For formal written data access, rectification, or erasure requests, please contact us via email in the first instance. We will provide further instructions where a formal written request process is required.