Introduction
juta88 ("we", "us", "the Platform", "juta88") is committed to protecting the privacy and personal data of all users who access the website at https://juta88.cam. This Privacy Policy ("Policy") sets out in clear terms what data we collect, why we collect it, how we use it, who we share it with and the rights available to you in respect of that data.
This Policy applies to all personal data processed in connection with your use of the juta88 Platform, including data provided during account registration, identity verification (KYC), financial transactions, customer support interactions and general browsing of the website.
By registering an account, making a deposit or otherwise using juta88, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should not use the Platform. For the avoidance of doubt, this Policy is incorporated by reference into the juta88 Terms & Conditions.
Malaysian users: The personal data you provide to juta88 may be processed by entities located in jurisdictions outside Malaysia. By using the Platform, you acknowledge this cross-border processing and agree that it is conducted in accordance with the safeguards described in Section 13 of this Policy.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or can be used to identify a living individual, directly or in combination with other data. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, erasure or any other handling. |
| Data Controller | The entity that determines the purposes and means of processing personal data — in this context, juta88. |
| Data Processor | A third party that processes personal data on behalf of the Data Controller under a written agreement. |
| KYC | Know Your Customer — the identity and age verification process conducted before account activation, withdrawals or certain transactions. |
| Cookies | Small text files placed on a user's device by a website to store session or preference information. |
| User / Player / You | Any individual who accesses, registers with or uses the juta88 Platform. |
Data We Collect
juta88 collects personal data from users in the following categories. Collection is limited to data that is necessary for the stated processing purpose.
3.1 Registration & Identity Data
- Full legal name and date of birth
- Residential address, including postcode and state within Malaysia where applicable
- Email address and mobile phone number
- Copies of government-issued identity documents (Malaysian NRIC, passport) submitted during KYC
- Selfie or biometric liveness-check images where required for enhanced verification
3.2 Financial & Transaction Data
- Payment method details (bank account reference, e-wallet identifier, cryptocurrency wallet address)
- Deposit and withdrawal history, including amounts in MYR or equivalent
- Transaction timestamps and processing reference numbers
- Source of funds documentation for high-value or flagged transactions
3.3 Account Activity Data
- Login history including IP address, device type, browser and operating system
- Game session records, bet history and sport market participation data
- Bonus and promotion redemption records
- Customer support correspondence and complaint records
3.4 Technical & Usage Data
- IP address, geolocation data derived from IP, and device identifiers
- Cookie and session data as described in Section 9
- Referring URL and on-site navigation path data collected via analytics tools
Legal Basis for Processing
juta88 processes personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:
| Legal Basis | When It Applies |
|---|---|
| Contractual necessity | Processing required to perform the account agreement with the user — registration, deposits, withdrawals, game participation. |
| Legal obligation | Processing required to comply with anti-money laundering (AML), identity verification and regulatory reporting obligations. |
| Legitimate interests | Fraud prevention, platform security, abuse detection and service improvement where these interests are not overridden by user rights. |
| Consent | Non-essential cookies, direct marketing communications and optional promotional preferences where consent is freely given and withdrawable. |
How We Use Your Data
Personal data collected by juta88 is used exclusively for the following purposes:
- Account management: Creating, maintaining and securing your juta88 account, including password resets and account closure processes.
- Identity and age verification: Confirming that all users are at least 21 years of age and that identity information is accurate, as required under our responsible gambling and compliance obligations.
- Payment processing: Facilitating MYR deposits and withdrawals via Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost and supported cryptocurrency networks.
- Fraud and AML compliance: Monitoring transactions, detecting unusual patterns and fulfilling anti-money laundering reporting obligations.
- Customer support: Responding to account queries, resolving disputes and providing guidance on responsible gambling tools.
- Platform improvement: Analysing aggregated usage data to improve navigation, game availability and service performance.
- Marketing communications: Sending promotional notifications to users who have opted in, with a clear opt-out mechanism in every communication.
- Legal compliance: Retaining records as required by applicable regulatory and licensing obligations.
We do not sell your data. juta88 does not sell, rent or commercially exchange personal data with third-party marketers, data brokers or advertising networks.
Data Sharing & Disclosure
juta88 may share personal data with third parties only in the circumstances described below. All third-party data processors engaged by juta88 are required to process data in accordance with written data processing agreements and applicable data protection standards.
6.1 Service Providers
Trusted third-party vendors who provide services on juta88's behalf — including identity verification providers, payment processing partners, cloud infrastructure operators and customer support platforms — may receive personal data to the extent necessary to perform their contracted services.
6.2 Regulatory and Legal Disclosure
juta88 may disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units or courts where it is required to do so by applicable law, court order or regulatory direction. Such disclosure will be limited to the minimum data necessary to satisfy the legal obligation.
6.3 Fraud Prevention and Security
Where juta88 reasonably suspects fraud, money laundering or a serious breach of its Terms & Conditions, relevant account and transaction data may be shared with fraud prevention services, payment networks or licensing authorities.
6.4 Business Transfers
In the event of a merger, acquisition or sale of all or part of juta88's business, personal data may be transferred to the acquiring entity as part of the transaction, subject to the acquirer's commitment to maintain the protections described in this Policy.
Payment Data
juta88 treats financial data with a heightened level of care given its sensitivity. The following principles apply to all payment-related personal data:
- Full card numbers and online banking credentials are never stored on juta88's servers. Payment authentication takes place on the secure infrastructure of the relevant payment provider (Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX or cryptocurrency network).
- Transaction reference numbers, payment method type (e.g., "e-wallet — Touch 'n Go") and transaction amounts are stored for account records, KYC compliance and withdrawal verification purposes.
- Cryptocurrency wallet addresses submitted for deposit or withdrawal are stored as part of the transaction record and are subject to the same retention and security practices as other financial data.
- Payment data is used exclusively to process, verify and record your transactions on juta88. It is not used for profiling, marketing scoring or sharing with third-party advertisers.
Important: juta88 will never ask you for your online banking password, full NRIC number (beyond what is required for KYC documentation) or two-factor authentication codes via email, live chat or phone. If you receive such a request, treat it as fraudulent and contact [email protected] immediately.
Data Retention
juta88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or licensing obligations. The following general retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure, or as required by applicable AML regulations |
| KYC identity documents | Minimum 5 years from account closure or last transaction, whichever is later |
| Transaction records | Minimum 5 years from date of transaction |
| Customer support records | 3 years from case closure |
| Cookie and session data | Per individual cookie lifetime — typically 30 days to 13 months; see Section 9 |
| Marketing preferences | Until consent is withdrawn or account is closed |
Upon expiry of the applicable retention period, personal data is deleted or irreversibly anonymised in a manner that prevents re-identification.
Cookies & Tracking Technologies
juta88 uses cookies and similar tracking technologies (including web beacons and local storage) to support essential platform functionality, remember user preferences and analyse aggregated site usage. The categories of cookies used are described below.
Non-essential cookies (functional and analytics) are subject to your consent preferences where required by applicable law. You may withdraw consent for non-essential cookies at any time through your browser settings or any cookie preference mechanism provided on the Platform. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Most modern browsers allow you to control cookie acceptance, block third-party cookies or delete stored cookies. Restricting cookies may limit certain Platform features or cause session continuity issues.
Security Measures
juta88 implements technical and organisational security measures appropriate to the risk level associated with the personal data it processes. These measures include, but are not limited to:
- Transport Layer Security (TLS) encryption for all data transmitted between users and the Platform
- Encrypted storage for sensitive data fields, including identity document references and payment identifiers
- Role-based access controls limiting internal access to personal data to staff with a legitimate operational need
- Regular security assessments and vulnerability monitoring of Platform infrastructure
- Multi-factor authentication options for user accounts to reduce the risk of unauthorised access
- Incident response procedures for the identification, containment and notification of data breaches where required
While juta88 takes these measures seriously, no digital system can guarantee absolute security. Users are encouraged to use strong, unique passwords, enable available two-factor authentication and report any suspected account compromise to juta88 immediately.
User Rights
Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by juta88. To exercise any of these rights, please contact us using the details provided in Section 15.
Right of Access
You may request a copy of the personal data juta88 holds about you, along with information about how it is processed and the categories of data involved.
Right of Correction
You may request correction of inaccurate or incomplete personal data. Certain corrections may require supporting documentation for verification purposes.
Right of Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Object
You may object to processing based on legitimate interests or direct marketing. Marketing opt-outs take effect within a reasonable timeframe following receipt of the request.
Right of Portability
Where processing is based on consent or contract and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
Right to Restrict Processing
You may request a temporary restriction on the processing of your data while a correction request or objection is assessed by juta88.
juta88 will respond to verified privacy requests within 14 calendar days of receipt. Complex or high-volume requests may take up to 30 calendar days. Where an extension is required, you will be notified with an explanation. Requests submitted without sufficient identification details may be declined on security grounds.
Minors & Age Policy
juta88 does not knowingly collect, process or store personal data belonging to any person under the age of 21. The Platform is intended exclusively for eligible adults aged 21 and above.
Identity and age verification (KYC) is a mandatory step in the account activation process, and juta88 reserves the right to request additional documentation at any time to confirm age eligibility. If juta88 becomes aware that personal data of a person under 21 has been collected — whether through misrepresentation or error — that data will be deleted promptly, the associated account will be closed, and any balance will be handled in accordance with the applicable Terms & Conditions.
Parents or legal guardians who believe their child has registered an account with juta88 should contact [email protected] immediately so that appropriate steps can be taken without delay.
International Data Transfers
juta88 operates within an international licensing framework and may use service providers and infrastructure located outside Malaysia. As a result, your personal data may be transferred to, stored in or processed in countries that have different data protection laws from those in Malaysia.
Where such transfers occur, juta88 takes steps to ensure that adequate protections are in place, including through contractual clauses binding the receiving party to data protection standards consistent with this Policy, and through the selection of service providers with demonstrable privacy and security credentials.
By using the juta88 Platform, you acknowledge and consent to the international transfer of your personal data under the conditions described above. If you have concerns about cross-border data handling, you may contact us at the address provided in Section 15 for further information.
Changes to This Policy
juta88 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements or Platform functionality. Material changes will be communicated to registered users via the email address on file or through a prominent notice on the Platform. The effective date displayed at the top of this page will be updated accordingly.
Your continued use of the juta88 Platform following the publication of an updated Policy constitutes acceptance of the revised terms. If you do not agree with any change, you should cease using the Platform and close your account. Closing your account does not affect juta88's right to retain data for the periods required under Section 8.
Contact Us
If you have questions about this Privacy Policy, wish to exercise a data subject right, or need to report a potential data incident involving your account, please contact the juta88 data team using the details below.
juta88 Privacy & Data Team
Email: [email protected]
Subject line: Privacy Request – [Your Account Email]
Response target: within 14 calendar days of verified receipt
Service hours: Aligned with Malaysian Standard Time (MYT, UTC+8)
For account-level questions about bonuses, payments or gameplay, please refer to the FAQ page. For responsible gambling tools and self-exclusion requests, please visit the Responsible Gambling page.
For general platform terms, refer to the Terms & Conditions page.