juta1 Privacy Policy

1. Data Controller

juta1 acts as the data controller in respect of the personal data collected through the Platform at juta1.one. As data controller, juta1 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations.

For any data protection enquiries, including requests to exercise your rights under this Policy, please contact our Data Protection team at the support email address displayed in the footer of this page, with the subject line "Data Protection Enquiry".

2. Personal Data We Collect

juta1 collects the following categories of personal data from Members and prospective Members:

2.1 Identity Data

• Full legal name as it appears on government-issued identification;
• Date of birth and age verification documentation;
• National identification number or passport number (where required for KYC verification);
• Copies of government-issued photo identification and proof of address documents submitted during KYC procedures.

2.2 Contact Data

• Email address (primary account contact and communication channel);
• Malaysian mobile telephone number (used for two-factor authentication and account notifications);
• Residential address (where required for identity verification purposes).

2.3 Financial Data

• Payment method identifiers (e.g., masked bank account numbers, Touch n Go eWallet ID, Boost account reference);
• Deposit and withdrawal transaction history;
• Wallet balance history and gaming transaction records.

2.4 Technical & Usage Data

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, and browser version;
• Session timestamps, login history, and Platform navigation data;
• Game play history, wagering patterns, and session duration records.

2.5 Communications Data

• Records of communications between you and juta1's customer support team, including live chat transcripts and email correspondence;
• Survey responses and feedback submitted via the Platform.

3. How We Collect Your Data

juta1 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Technical and usage data collected automatically when you access or use the Platform, including through cookies, server logs, and similar tracking technologies;
• Third parties: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; and technical data from analytics platforms used to improve Platform performance.

4. Purposes of Processing

juta1 processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your Member account, including authentication and security;
• Service delivery: To provide access to gaming products, process deposits and withdrawals, and settle wagers;
• Identity verification (KYC): To verify your identity and age in accordance with regulatory requirements applicable to online gaming operators;
• Anti-Money Laundering (AML) compliance: To monitor transactions for suspicious activity and comply with applicable AML and counter-terrorism financing obligations;
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, and other prohibited conduct;
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling and to administer self-exclusion and other player protection tools;
• Customer support: To respond to enquiries, resolve disputes, and manage complaints;
• Marketing: To send promotional communications regarding juta1 offers, bonuses, and new features, where you have provided consent or we have a legitimate interest to do so;
• Platform improvement: To analyse usage patterns and improve the functionality, security, and user experience of the Platform;
• Legal compliance: To comply with applicable laws, regulations, court orders, and the directions of regulatory authorities.

5. Legal Basis for Processing

juta1 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Member agreement, including account administration, service delivery, and payment processing;
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory obligations applicable to licensed gaming operators;
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and analytical improvement of our services, where these interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications and non-essential cookies, where your specific consent has been obtained and may be withdrawn at any time.

6. Disclosure to Third Parties

juta1 does not sell, rent, or trade your personal data. We may disclose your personal data to the following categories of third parties, solely to the extent necessary for the purposes described in this Policy:

• Payment processors: FPX, Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers, for the purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML service providers engaged to verify Member identity and conduct screening;
• Gaming software providers: Game providers whose content is integrated into the Platform, including for the purpose of game integrity verification;
• IT infrastructure providers: Cloud hosting, server, and cybersecurity service providers who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction;
• Professional advisers: Legal counsel, auditors, and compliance advisers where necessary for the conduct of juta1's business.

All third-party processors engaged by juta1 are required to implement appropriate technical and organisational security measures and to process personal data only on juta1's documented instructions.

7. International Data Transfers

Some of juta1's third-party service providers may process personal data outside Malaysia. Where personal data is transferred internationally, juta1 ensures that appropriate safeguards are in place, including contractual protections equivalent to applicable data protection standards. Where required, such transfers are subject to standard contractual clauses or equivalent legal mechanisms.

8. Data Retention

juta1 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Active accounts: Personal data is retained for the duration of your membership and for a period of five (5) years following account closure, to satisfy regulatory retention obligations applicable to licensed gaming operators;
• KYC and AML records: Identity verification and transaction records are retained for a minimum of five (5) years following the end of the business relationship, as required by applicable AML legislation;
• Customer support records: Communication records are retained for three (3) years from the date of the relevant interaction;
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which marketing preferences are recorded to prevent inadvertent re-contact.

9. Cookies & Tracking Technologies

juta1 uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management, security tokens, and load balancing. These cookies cannot be disabled without impairing Platform functionality;
• Analytical cookies: Used to collect aggregated, anonymised data about how Members navigate the Platform, enabling juta1 to identify and address usability issues and improve the Member experience;
• Functional cookies: Used to remember your preferences, such as language settings and display configurations, to personalise your experience.

Non-essential cookies may be declined or withdrawn via the cookie preference settings accessible from the Platform. Note that disabling certain functional cookies may affect your Platform experience.

10. Security Measures

juta1 implements a multi-layered security architecture to protect your personal and financial data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and juta1's servers;
• Encrypted storage of all personal and financial data at rest;
• Access controls restricting personal data access to authorised personnel on a need-to-know basis;
• Regular security audits and penetration testing by independent third-party security specialists;
• Anomaly detection systems monitoring for suspicious access patterns and potential data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, juta1 will notify affected Members and, where required, relevant regulatory authorities, in accordance with applicable notification obligations.

11. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by juta1:

• Right of access: To request a copy of the personal data juta1 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to juta1's legal and regulatory retention obligations;
• Right to restriction: To request that juta1 restrict the processing of your personal data in certain circumstances;
• Right to data portability: To receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible;
• Right to object: To object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: To withdraw any previously given consent to processing at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact juta1's support team via the live chat or support email. juta1 will respond to all valid requests within thirty (30) days. Identity verification may be required before your request can be processed.

12. Children's Privacy

The Platform is strictly intended for individuals aged 21 years and above. juta1 does not knowingly collect personal data from any person under the age of 21. If juta1 becomes aware that personal data has been collected from an individual below the required age threshold, that data will be deleted and the associated Account terminated immediately.

13. Marketing Communications

Where you have provided consent or where juta1 has a legitimate interest to do so, juta1 may send you marketing communications relating to juta1 promotions, bonuses, new game launches, and platform updates. You may opt out of receiving marketing communications at any time by:

• Updating your notification preferences in your Account settings;
• Clicking the "unsubscribe" link included in any marketing email; or
• Contacting juta1's customer support team and requesting removal from marketing lists.

Transactional communications — including account security notifications, deposit and withdrawal confirmations, and mandatory responsible gaming notifications — are not classified as marketing communications and will continue to be sent regardless of marketing opt-out status.

14. Amendments to This Policy

juta1 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to Members via their registered email address and/or a prominent notice on the Platform. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or juta1's data processing practices, please contact our Data Protection team via the support email address displayed in the footer of this page, or through the 24/7 live chat facility on the Platform.

If you are not satisfied with juta1's response to a data protection concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.