Privacy Policy Juta88 — Data Protection & Privacy for Malaysian Players

1 Personal Information We Collect

Juta88 collects your personal data through several means — when you register an account, while using the platform, when making financial transactions, and when you contact our support team. The following are the categories of data we collect:

Registration & Identity Data:

• An active Malaysian phone number (used as the primary account identifier)
• Full name (required for identity verification and withdrawal processing)
• Date of birth (to verify that you meet the minimum age requirement of 18 years)
• Password (stored in encrypted form — the Juta88 team cannot read your password in its original form)

Financial & Transaction Data:

• Records of all deposits made via FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay
• Records of all withdrawals, including method and amount in MYR
• Bank account or e-wallet details registered for withdrawals (we store a masked account number — not the full number)
• Full betting history including dates, sports, markets, odds, and outcomes

Technical & Usage Data:

• IP address and approximate geographical location
• Device type, operating system, and web browser used
• Access logs — login dates and times, session duration, and pages visited
• Cookie and tracking technology data as described in Section 5

Communications:

• Transcripts of live chat conversations with the Juta88 support team
• Emails sent to or from support@juta88.run
• Feedback and complaints submitted to us

2 How We Use Your Personal Data

The data we collect is used solely for the following legitimate purposes. We do not use your data for any other purpose without obtaining additional consent from you:

Marketing communications such as promotional notifications and special offers will only be sent to you if you have given consent during registration or through your account settings. You may withdraw this consent at any time via your account settings or by contacting Juta88 support.

3 Sharing Data with Third Parties

Juta88 does not sell, rent, or trade your personal data to any party for commercial purposes. However, in the course of operating the platform, we may share your personal data with the following limited categories of third parties, and only to the extent necessary:

• Payment Service Provider: Payment gateway providers that process your deposit and withdrawal transactions, such as FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay. Data sharing is limited strictly to the information required to complete the transaction.
• Game Provider: Companies such as Pragmatic Play, PG Soft, Play'n GO, and NetEnt may receive session identifiers necessary to deliver games to you. They do not receive your full name, phone number, or financial information.
• Technology Service Providers: Companies that provide the technical infrastructure for our platform, such as server hosting services and cybersecurity providers. All such providers are bound by strict confidentiality agreements.
• Legal Authorities: Juta88 will disclose personal data to the relevant authorities when required to do so by law, court order, or a directive from a legitimate regulatory body. We do not share this data voluntarily beyond what is legally required.
• Anti-Fraud Authority: In cases involving fraud investigations or anti-money laundering inquiries, we may share relevant information with the appropriate authorities to assist in their investigations.

All third parties we work with are contractually bound to protect any shared personal data and to use it solely for the specified purposes. We select partners whose data security standards are on par with our own.

4 Data Security Measures

Juta88 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Technical Security:

• 256-bit SSL/TLS Encryption: All communications between your device and Juta88's servers are encrypted using the latest transport layer security protocols.
• Encrypted Password Storage: Account passwords are stored using a strong one-way hashing function — the Juta88 team cannot view your password in its original form.
• Two-Factor Authentication (2FA): We offer two-factor authentication for your account as an added layer of security.
• Continuous Security Monitoring: Our systems are monitored around the clock to detect and respond to any unauthorised access attempts or suspicious activity.
• Secure Servers: Data is stored on protected servers with strict physical and digital access controls, with regular backups to ensure data availability.

Organisational Measures:

• Access to members' personal data is restricted to staff who require it to carry out their duties only (principle of minimum access).
• All staff who handle personal data undergo regular data protection training.
• We have a documented incident response procedure to address any data breaches swiftly and effectively.

While we take all reasonable steps to protect your data, no system can guarantee 100% security against every possible cyber threat. We therefore encourage you to take your own protective measures — such as using a strong password, keeping your login credentials private, and ensuring your devices have up-to-date security software.

5 Cookies & Tracking Technologies

Juta88 uses cookies and similar tracking technologies to enhance the user experience on our platform, understand how the platform is being used, and maintain the security of your login session.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as maintaining your login session, saving language preferences, and ensuring transactions are processed securely. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps us understand how users interact with the platform — including the most visited pages, time spent, and navigation paths. This data is collected anonymously for internal analysis purposes to improve the user experience.
• Functional Cookies: Saves your preferences such as game settings, chosen display type, and other personal preferences so you do not have to reconfigure them each time.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

Juta88 does not use third-party cookies for targeted advertising. All cookies used are strictly for platform operation and enhancing the user experience.

6 Data Retention & Deletion

Juta88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations. The following are our general data retention guidelines:

• Active Account Data: Retained for as long as your account remains active on Juta88. It is continuously updated as you use the platform.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with financial reporting requirements and Malaysia's anti-money laundering laws.
• Customer Support Records: Retained for 3 years from the date of last interaction for reference purposes and to resolve any disputes that may arise at a later date.
• Technical Logs: Access logs and system logs are retained for 12 months and subsequently deleted or anonymised automatically.
• After Account Closure: When your account is closed at your request, we will delete or anonymise your personal data within 90 days, except for data that must be retained to fulfil legal obligations (such as financial transaction records).

Once the retention period has ended, your personal data will be securely deleted or anonymised in a manner that ensures it can no longer be linked to you.

7 Your Privacy Rights as a Juta88 Member

As a registered Juta88 member, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team via live chat or email:

8 Protection of Children's Data

The Juta88 platform is for individuals aged 18 and above only. We do not knowingly collect or process personal data of individuals under the age of 18.

Our registration process requires age verification — by registering, you confirm that you are 18 years of age or older. If we discover that we have collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question.

If you discover or suspect that a minor has registered an account on Juta88, please contact us immediately at support@juta88.run so we can take the appropriate action.

9 Changes to This Privacy Policy

Juta88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments that affect how we handle data.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear notice on the Juta88 platform regarding the changes
• For highly material changes, we may send a notification directly to you via your registered phone number

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the Juta88 platform after any amendments are published will be considered your acceptance of the revised policy.

10 Contact Us About Your Data Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how Juta88 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the Juta88 platform. This is the fastest way to get a response.
• Email: Submit your privacy request to support@juta88.run. Please state "Data Privacy Request" in the subject line of your email to help expedite processing.

We are committed to responding to all privacy-related enquiries within 7 business days. For requests that require action, such as data access or deletion, the full process may take up to 30 days depending on the complexity of the request.

By using the Juta88 platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

This Privacy Policy is effective from 1 January 2026.