Juta1 Privacy Policy – Protection
Malaysian Player Personal Data

Welcome to the Privacy Policy juta1. This document sets out juta1's comprehensive commitment to protecting the privacy and personal data of all its users. "Personal Data" in the context of this policy refers to any information that can identify you as an individual, whether directly or indirectly.

This Privacy Policy applies to all users of the platform juta1 – including website visitors, prospective members, registered members, and active players. This covers all data collected through juta1.biz, the juta1 mobile app (iOS and Android), and all our official communication channels including email and live chat.

Juta1 operates as a responsible data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). We regard the trust you place in us with your personal data as a responsibility we take very seriously, and we continually strive to exceed the data protection standards set by Malaysian law.

Juta1 only collects personal data that is strictly necessary to provide our services safely and efficiently. Below are the categories of data we collect and the purpose for each:

Juta1 collects your personal data through several different channels. It is important that you understand each of these channels so you know when and how your data is collected:

• Account Registration: Information you provide directly when creating a new juta1 account – name, email, phone number, date of birth, and identity verification details
• Platform Usage: Data generated automatically while you use the juta1 platform – including game logs, transaction history, and usage patterns
• Communications with Us: Information you provide when contacting customer support via live chat, email, or other channels
• KYC Verification: Identity documents (copy of national ID or passport) requested for identity verification purposes in compliance with Malaysia's AML/KYC legal requirements
• Automatic Technical Data: Information automatically collected by our servers when you browse the juta1 website, including IP address, browser type, and device information
• Cookies and Similar Technologies: Data collected through cookies, pixels, and other web tracking technologies used to enhance your experience (see Section 09 for more information)

Juta1 only processes your personal data on a valid legal basis and for explicitly stated purposes. We do not use your data for any purpose other than those set out below without your additional consent:

• Service Provision: To create and manage your account, process deposits and withdrawals in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX, and to enable you to play games on the juta1 platform
• Identity Verification (KYC): To fulfill our legal obligations under Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA)
• Platform Security: To detect and prevent fraud, money laundering, multi-account usage, and other unlawful activities on the juta1 platform
• Customer Support: To provide effective assistance when you contact the juta1 support team and to record interactions for quality and training purposes
• Responsible Gaming: To monitor gameplay patterns and identify players who may need responsible gambling support, in line with juta1's commitment
• Marketing Communications: To send you promotions, bonus offers, and the latest juta1 news – only with your consent and you may unsubscribe at any time
• Platform Improvements: To analyse aggregated usage patterns (without identifying individuals) for the purpose of improving the juta1 platform user experience
• Legal Compliance: To comply with any applicable legal, regulatory, or regulatory authority requirements in Malaysia

Juta1 does not sell your personal data. However, in the course of operating our platform, your data may need to be shared with the following categories of third parties – and only to the extent necessary for the stated purposes:

• Payment Processors: Malaysian payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers that process your financial transactions – only data necessary for transaction processing is shared
• Game Software Providers: Software providers supplying games to the juta1 platform may process the minimum technical data required for game operation
• Infrastructure Service Providers: Cloud computing providers and data centres hosting the juta1 platform – all agreements include strict data protection obligations
• Legal Authorities: Law enforcement agencies, financial regulatory bodies, or Malaysian courts where required by law or a valid court order
• Professional Consultants: Lawyers, accountants, and security consultants bound by strict professional confidentiality obligations

In the event of a corporate ownership transfer, merger, or acquisition involving juta1, user data may be transferred as part of the business assets. You will be notified in advance via email and/or a prominent notice on our platform, and you will have the option to delete your account if you do not agree to the changes.

Juta1 continuously invests in security infrastructure to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures we have implemented include:

• Data Encryption in Transit: All communications between your browser/app and juta1's servers are secured with TLS 1.3 protocol and 256-bit SSL encryption
• Encryption of Stored Data: Sensitive data such as passwords (stored as non-recoverable hashes), bank account numbers, and identity card information are stored in encrypted form
• Internal Access Controls: Least privilege access is enforced – juta1 staff may only access data that is directly relevant to their specific job responsibilities
• Two-Factor Authentication (2FA): 2FA is available for all member accounts and mandatory for all internal staff accounts that access systems containing customer data
• Regular Security Testing: Penetration testing and vulnerability scans are conducted regularly by independent cybersecurity firms
• Incident Response Plan: juta1 has a comprehensive incident response plan to address any security breaches swiftly and effectively

Juta1 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law. Our data retention policy is as follows:

Once the relevant retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. Our deletion process ensures that data cannot be recovered once the secure deletion procedure has been carried out.

Under Malaysia's Personal Data Protection Act 2010 and juta1's privacy policy, you have the following rights regarding your personal data. You may exercise any of these rights at any time by contacting our Data Protection Officer:

• Right of Access: You have the right to request a copy of all personal data juta1 holds about you. We will provide this data in a readable format within 30 days of your request
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. Minor updates can be made directly in your account settings
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data under certain circumstances. Please note that some data may need to be retained to fulfil legal obligations
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time – this will be actioned immediately
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format (e.g. CSV or JSON) for transfer to another service provider
• Right to Withdraw Consent: You may withdraw your consent to consent-based data processing (such as marketing communications) at any time, without affecting the lawfulness of any processing carried out prior to withdrawal

The juta1 website and app use cookies and similar web tracking technologies to enhance your experience, analyse platform usage, and support security functions. Below are the types of cookies we use: