Privacy Policy juta8 – Protecting Your Personal Data in Malaysia

This Privacy Policy is issued by juta8, an online sports betting and entertainment platform operating through juta8.xyz and all related services under the juta8 brand. This document provides a transparent and detailed account of how juta8 collects, uses, stores, protects, and in certain circumstances shares the personal data of our platform members.

Juta8 is committed to protecting the privacy of every Malaysian member who uses our platform. This commitment goes beyond a legal obligation under the Personal Data Protection Act 2010 (PDPA) Malaysia — it is a core value we have upheld since juta8 was founded. We believe that trust built through strong privacy protection is the foundation of a healthy, long-term relationship between juta8 and our Malaysian player community.

This Privacy Policy applies to all individuals who:

• Registering for or holding an active account on the juta8 platform.
• Browsing the juta8.xyz website without registering an account.
• Using the juta8 mobile app on any device.
• Reaching out to the juta8 support team through any available communication channel.
• Participating in any campaign, contest, or promotion organised by juta8.

Please read this Privacy Policy carefully. Continued use of the juta8 platform after any policy update constitutes your acceptance of the revised terms. The latest version of the juta8 Privacy Policy is always available on this page, with the most recent update date clearly displayed.

Juta8 collects personal data from members through various means — directly during registration and platform use, automatically through tracking technologies, and in certain circumstances from legitimate third-party sources. Below are the complete categories of data that juta8 may collect:

Juta8 collects member personal data solely for legitimate, clearly defined purposes that are directly relevant to the provision of platform services. The following outlines the specific purposes behind each data collection activity at juta8:

• Account Management: To create, verify, and manage juta8 member accounts — including the login process, identity verification, and account recovery where required.
• Financial Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as to process winnings withdrawals to the same payment methods. Transaction records are required for internal audits and legal compliance.
• Legal Compliance & Fraud Prevention: To comply with anti-money laundering (AML) requirements, verify member age and identity, detect and prevent fraud, and adhere to any directives issued by regulatory authorities.
• Platform Experience Enhancement: To understand usage patterns, identify areas for improvement, and personalise the juta8 platform experience based on each member's sports and gaming preferences.
• Service Communications: To send important account-related notifications, betting results, relevant promotions (with member consent), juta8 service updates, and customer support communications.
• Platform Security: To detect unauthorised access attempts, investigate suspicious activity, and maintain the overall stability and security of the juta8 platform ecosystem.

Juta8 practices data minimisation — we only collect data that is genuinely necessary for the stated purpose. Data that is no longer required for its original purpose will be deleted or anonymised in accordance with the schedules set out in juta8's internal data management policy.

Personal data collected by juta8 is used responsibly and only to the extent necessary to deliver the best possible platform experience to our members. Below is a detailed explanation of how your data is used in juta8's day-to-day operations:

In the context of Sports Betting, your betting activity data is used to calculate relevant odds, settle bets accurately, and provide personal statistics within your juta8 account. Your EPL and Malaysia Super League football betting history, for example, helps juta8 display the most relevant markets for you when you open the platform.

For the Live Casino and slots sections, game session data is used to ensure session continuity in the event of a technical interruption, to accurately calculate wins and losses, and to correctly monitor bonus turnover requirements. juta8 does not use game data to manipulate game outcomes in any way.

From a security standpoint, IP addresses and device technical data are used by juta8's security systems to detect suspicious access patterns, block multiple-account login attempts from a single device, and alert members when a login attempt is made from an unrecognised location or device.

• Financial data is never shared with third parties, except with the payment processors required to complete your transactions.
• Your mobile number is used solely for two-factor authentication (2FA) and betting result notifications on juta8.
• Your email address is used for account verification, password recovery, and essential service communications.
• Juta8 does not use member data to make automated decisions that materially affect members without human review.

Juta8 maintains a strict policy on the sharing of member personal data. Our guiding principle is straightforward: your data will not be shared unless there is a legitimate, necessary reason that is consistent with this Privacy Policy. The following outlines the limited circumstances in which juta8 may share member data with third parties:

juta8 never sells member personal data to advertisers, data brokers, third-party marketing companies, or any entity not listed above. This is an absolute guarantee that will not change without clear notice and explicit consent from the member concerned.

Juta8 invests seriously in data security infrastructure to ensure every member's personal data is protected at every stage — in transit, at rest, and during processing.

• Data Encryption in Transit: All communications between your device and juta8's servers use TLS 1.3 protocol with AES-256 encryption — the highest available standard for web data security today.
• Encryption of Data at Rest: Sensitive data such as verification information and financial records is stored in encrypted form within juta8's databases. Only authorised personnel with a legitimate operational need may access this data.
• Internal Access Controls: juta8 operates on a minimum access principle — each staff member can only access the data required for their specific role. All access to member data is logged and audited regularly.
• Continuous Security Monitoring: juta8's security systems monitor all platform activity in real time to detect and respond to any security threats or attempted data breaches.
• Regular Penetration Testing: juta8 conducts regular security assessments, including penetration testing by independent security auditors, to identify and address any vulnerabilities before they can be exploited.

Data Retention Period: Active members' personal data is retained for the duration of their membership, plus any additional period required under Malaysian law (typically 7 years for financial records, in line with audit and tax requirements). Once an account is closed and the mandatory retention period has lapsed, data will be securely deleted or anonymised.

Under Malaysia's Personal Data Protection Act 2010, every juta8 member has the following rights regarding their personal data. juta8 fully respects these rights and provides straightforward mechanisms for you to exercise them: