Privacy Policy juta1 — Malaysian Player Personal Data Protection

Juta1 ("we", "Platform") is the data controller responsible for all personal information collected through our platform at juta1.click and associated mobile applications.

We take our responsibilities as a data controller under Malaysia's Personal Data Protection Act (PDPA) 2010 seriously. Every decision regarding the processing of personal data is made with users' best interests as the priority and within the bounds of applicable law.

Juta1 provides an online entertainment platform encompassing Live Casino, slots, Sports Betting for leagues such as the Malaysia Super League and EPL, Virtual Sports, roulette, and other popular games. In delivering these services, we need to collect and process certain personal information that you provide to us.

Juta1 collects various types of information depending on how you interact with our platform. Generally, the information we collect falls into three main categories:

Us no collect sensitive information such as your biometric data, medical records, or political affiliations. All data collected is solely for legitimate platform operational purposes.

Juta1 collects your personal information through a range of transparent methods:

• Account Registration: Information you provide when creating a new juta1 account, including your name, email, and phone number.
• KYC (Know Your Customer) Process: Identity documents you upload for identity verification purposes, such as a copy of your MyKad or passport.
• Financial Transactions: Information generated when you make deposits or withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks).
• Platform Usage: Data collected automatically as you use the platform, such as games played, bets placed, and session duration.
• Device & Technical: Technical information collected through cookies, tracking pixels, and server logs.
• Communications: Information you provide when contacting the juta1 support team via Live Chat or email.

Juta1 uses the personal information collected solely for legitimate, stated purposes. We will not use your data for any purpose outside the following scope without obtaining your additional consent:

• Account Management: To create, verify, and manage your juta1 account.
• Regulatory Compliance (KYC/AML): To comply with legal requirements relating to identity verification and anti-money laundering.
• Transaction Processing: To process deposits in MYR via local Malaysian payment methods and to handle withdrawals you request.
• Service Provision: To enable you to access and enjoy all juta1 games and services.
• Platform Security: To detect and prevent fraud, hacking, or suspicious activity that could compromise your account.
• Responsible Gaming: To monitor gameplay patterns and provide alerts or interventions where necessary to protect your wellbeing.
• Customer Support: To effectively resolve your enquiries and complaints.
• Service Communications: To send important notifications relating to your account, transactions, and platform updates.
• Marketing (with consent): To send promotional information and bonus offers — only where you have given consent, and you may withdraw that consent at any time.

Juta1 does not sell, does not rent, and does not trade your personal data to any third party for marketing or commercial purposes. However, under certain limited circumstances, we may share your information with the following parties:

• Payment Service Providers: Transaction information required to process your deposits and withdrawals via Malaysian local payment platforms such as DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX. These providers are bound by strict data protection agreements.
• Game Software Provider: Minimal game session information shared with casino software providers solely to ensure games run correctly. This data is anonymised wherever possible.
• Regulatory Bodies & Authorities: Where required by Malaysian law, court order, or direction from a relevant regulatory authority.
• Fraud Prevention Services: To identity verification and fraud prevention service providers engaged to protect our platform and members.

Juta1 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, or accidental disclosure:

• 256-bit SSL Encryption: All data transmitted between your device and juta1's servers is protected by banking-grade SSL/TLS encryption.
• Stored Data Encryption: Sensitive information such as bank card numbers and passwords is stored in encrypted form using strong hashing algorithms. Your password cannot be viewed by anyone, including our technical team.
• Multi-Layer Access Control: Only staff who require access to specific data within the scope of their role are permitted to access it. All access is logged and regularly audited.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect and block any unauthorised access attempts.
• Regular Security Testing: juta1 conducts regular penetration testing and security audits carried out by independent third parties.

Your personal data will be retained for as long as necessary to fulfil the purpose for which it was collected or to comply with legal requirements — typically seven (7) years after account closure for financial records, in line with applicable Malaysian statutory requirements.

The juta1 platform uses cookies and similar technologies to enhance your experience and ensure the platform runs smoothly. Below are the types of cookies we use:

You may manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the juta1 platform.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by juta1:

The juta1 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that we have collected personal data from underage individuals without proper age verification, we will:

• Promptly deleting all related data from our systems.
• Immediately closing the associated account.
• Returning any existing balance to the lawful guardian or parent through the appropriate channels.

If you become aware that someone under the age of 18 has registered for and is using the juta1 platform, please contact us immediately at privacy@juta1.click.

The juta1 platform may contain links to third-party websites or services such as game software providers or payment platforms. This Privacy Policy no applies to such third-party websites or services.

Juta1 is not responsible for the privacy practices or content of any third-party websites. We encourage you to read the privacy policy of every website you visit, especially when providing them with personal information.

Payment service providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks operate under their own privacy policies governing how they handle your transaction information. juta1 only receives the information necessary to verify payment — not your full card or account details.

Juta1 takes an extremely careful approach to handling your financial data. The following are the specific security practices we apply to protect your financial information:

• Juta1 does not store your full debit card number, PIN password, or sensitive e-wallet details on our servers.
• All payments are processed through payment gateways compliant with PCI-DSS (Payment Card Industry Data Security Standard).
• Transaction records are stored in encrypted format and are accessible only to authorised personnel within the scope of their specific duties.
• Every withdrawal request goes through a multi-layer verification process to confirm it genuinely originates from the legitimate account holder.

Juta1 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or service improvements.

When significant amendments are made, we will:

• Updating the "Updated" date at the top of this page.
• Sending a notification to your registered email at least 14 days before the amendment takes effect (for material changes).
• Displaying a prominent notice on the juta1 platform's main page throughout the transition period.

Your continued use of the juta1 platform after the effective date of any amended Privacy Policy constitutes your acceptance of those changes. If you do not agree, you may close your account and request data deletion before the effective date.

For any enquiries, requests, or complaints regarding this Privacy Policy or how juta1 handles your personal data, please contact our Data Protection Officer (DPO):