juta8 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") applies to juta8 ("juta8", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://juta8.app and all associated sub-domains, interfaces, and applications (collectively, the "Platform"). juta8 is committed to handling the personal data of its Members, prospective Members, and website visitors ("you", "your") in a manner that is transparent, lawful, and consistent with internationally recognised data protection principles.

This Policy should be read alongside the juta8 Terms & Conditions, which govern your use of the Platform. Capitalised terms not defined in this Policy carry the meanings given to them in the Terms & Conditions.

2. Data We Collect

juta8 collects the following categories of personal data in connection with the operation of the Platform:

juta8 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) except where strictly required for identity verification under applicable regulatory obligations and only with appropriate safeguards in place.

3. How We Collect Data

juta8 collects personal data through the following means:

• Direct provision: Data you provide when registering a juta8 account, completing KYC verification, making deposits or withdrawal requests, contacting Customer Support, or responding to surveys and promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, server logs, and similar tracking technologies (see Section 9);
• Third-party sources: Data received from identity verification service providers, payment processors (including Touch 'n Go eWallet, Boost, and FPX banking partners), fraud prevention agencies, and credit reference agencies where permitted by law.

4. How We Use Your Data

juta8 uses the personal data it collects for the following purposes:

• To create, manage, and maintain your juta8 account and verify your identity and age in compliance with international gaming authority requirements;
• To process deposits and withdrawal transactions and to reconcile payment records;
• To provide access to all Platform features including live casino, slots, virtual casino, and sportsbook;
• To comply with anti-money laundering ("AML") legislation, counter-terrorism financing obligations, and other applicable legal and regulatory requirements;
• To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other prohibited conduct;
• To administer bonuses, promotions, and loyalty programmes in accordance with the applicable promotion terms;
• To monitor gaming patterns and intervene where responsible gaming concerns are identified, including contacting Members who exhibit signs of problem gambling behaviour;
• To respond to Customer Support enquiries and resolve disputes;
• To send service communications — account notifications, security alerts, and updates to our policies — which are necessary for the operation of your account and cannot be opted out of while your account remains active;
• To send promotional communications where you have provided consent or where juta8 has a legitimate interest, and you have not opted out;
• To improve the Platform through analysis of aggregate, anonymised usage data.

5. Legal Bases for Processing

juta8 processes personal data on the following legal bases under internationally recognised data protection frameworks:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, game provision, and payment processing;
• Legal obligation: Processing required to comply with AML legislation, international gaming authority licensing conditions, tax reporting obligations, and law enforcement requests;
• Legitimate interests: Processing carried out for fraud prevention, platform security, network and information security, and improvement of our services, where our interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Disclosure

juta8 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, in each case only to the extent necessary for the stated purpose:

• Payment processors and e-wallet providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX partner banks (Maybank, CIMB, Public Bank, Hong Leong Connect), and other approved payment channels — to facilitate deposits and withdrawals;
• Identity verification and KYC service providers: To verify identity documents and screen against sanctions and politically exposed persons ("PEP") lists as required by AML compliance obligations;
• Game software providers: Licensed and internationally certified studios including Evolution Gaming, Pragmatic Play, and others — to deliver game content and resolve technical disputes;
• IT infrastructure and cloud service providers: Hosting, database, and security infrastructure partners operating under strict data processing agreements that prohibit independent use of your data;
• Regulatory authorities and law enforcement: Where disclosure is required by law, court order, or regulatory demand, including international gaming authority requests and Malaysian financial intelligence unit obligations;
• Professional advisers: Legal counsel, auditors, and insurers, under duties of confidentiality.

7. International Data Transfers

The operation of the juta8 Platform may involve the transfer of your personal data to countries outside Malaysia. Where such transfers occur, juta8 ensures that appropriate safeguards are in place, including standard contractual clauses approved by recognised data protection authorities, binding corporate rules, or transfers to jurisdictions that have been determined to provide an adequate level of data protection.

By using the Platform, you acknowledge that your personal data may be transferred and processed in jurisdictions outside Malaysia, including jurisdictions where data protection laws may differ from those applicable in Malaysia.

8. Data Retention

juta8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data and KYC documentation: Minimum five (5) years from account closure, as required by AML compliance obligations;
• Transaction records (deposits, withdrawals, wagers): Minimum five (5) years from the date of transaction;
• Customer support communications: Three (3) years from the date of resolution;
• Marketing consent records: Until consent is withdrawn, plus three (3) years thereafter for audit purposes.

After the applicable retention period expires, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

9. Cookies & Tracking Technologies

juta8 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — session management, security tokens, and load balancing. These cannot be disabled without affecting Platform functionality;
• Analytics cookies: Used to understand how Members interact with the Platform in aggregate, to identify technical issues and improve user experience. Data collected is anonymised before analysis;
• Preference cookies: Used to remember your language and display preferences between sessions.

juta8 does not use third-party advertising cookies or cross-site tracking technologies that would share your browsing behaviour with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair Platform functionality.

10. Your Data Rights

Subject to applicable law and regulatory restrictions, you have the following rights in respect of the personal data juta8 holds about you:

• Right of access: To request a copy of the personal data juta8 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to restriction: To request that processing of your personal data be restricted in specified circumstances;
• Right to data portability: To receive a copy of the personal data you provided to juta8 in a structured, machine-readable format;
• Right to object: To object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: To withdraw previously given consent for marketing communications at any time by contacting Customer Support or using the opt-out mechanism in any marketing communication.

To exercise any of these rights, contact the juta8 Data Protection team via the support email address displayed in the footer of this page. juta8 will respond to verified requests within thirty (30) calendar days. We may request proof of identity before processing a rights request.

11. Data Security

juta8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting employee access to personal data on a need-to-know basis, regular security assessments and penetration testing, and multi-factor authentication for administrative Platform access.

Notwithstanding these measures, no electronic transmission or storage system is completely secure. juta8 cannot guarantee absolute security but commits to responding to any confirmed data breach in accordance with applicable notification obligations, including notifying affected Members without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

12. Children & Minors

The juta8 Platform is strictly intended for individuals aged 21 years and above. juta8 does not knowingly collect personal data from persons under 21 years of age. If juta8 becomes aware that personal data has been collected from a minor, the relevant account will be immediately suspended, all data will be deleted, and the matter will be referred to the appropriate authorities where required. Parents and guardians who believe that a minor has accessed the Platform using false credentials are encouraged to contact Customer Support immediately.

13. Responsible Gaming & Your Data

juta8 uses gaming data — including session duration, betting frequency, deposit patterns, and loss velocity — to monitor Member welfare and identify indicators of potential problem gambling. Where such indicators are detected, juta8 may use this data to send welfare communications, impose protective limits, or initiate contact through the responsible gaming team.

This processing is carried out on the basis of juta8's legitimate interest in player welfare and its obligations under responsible gaming standards aligned with international gaming authority guidelines. Members may not opt out of this processing while their account remains active, as it forms part of juta8's duty of care obligations. Full details of available responsible gaming tools are available on the juta8 Responsible Gaming page.

14. Changes to This Policy

juta8 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Where material changes are made, we will provide notice to Members via the registered email address or a prominent notification on the Platform. The "Last updated" date at the top of this page will be revised to reflect any amendments. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the changes.

15. Contact & Data Protection Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or juta8's data practices, you may contact the juta8 Customer Support and Data Protection team via Live Chat (available 24/7 on the Platform), WhatsApp, or the plain-text support email address displayed in the footer of this page. juta8 aims to resolve all privacy enquiries within thirty (30) calendar days of receipt of a verified request.

Where you believe your data protection rights have been infringed and juta8 has failed to adequately address your concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.