Juta9 Privacy Policy — How We Handle Your Personal Data

Juta9 collects personal data through several channels. The type of information gathered depends on which juta9 functions you use and the status of your account.

Registration information may include full legal name, date of birth, residential address, email address, mobile telephone number, preferred account language, and any password or security credential you create.

Verification documents may include a copy of a Malaysian MyKad or passport, proof of residential address, bank or e-wallet account statements, selfies used for facial verification, and source-of-funds evidence requested during enhanced KYC review.

Transaction data includes deposit amounts, withdrawal requests, selected payment channels (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong Bank), account balances expressed in MYR, and the history of cashier activity.

Betting and gameplay activity includes wagers placed on sports markets such as Liga Super Malaysia, EPL, UFC, and esports events, casino game sessions, RTP outcomes, bonus usage, promotional participation, and win or loss records.

Device and technical data may include IP address, browser type, operating system, session timestamps, device identifiers, and general location information derived from connection data.

Support and communication records include chat transcripts, email exchanges, submitted feedback, account queries, and responsible gambling requests.

Juta9 processes personal data for the following purposes, each of which is linked to a legitimate operational, security, legal, or compliance function.

• Account creation and management: registering the juta9 account, maintaining accurate records, enabling login and session security, and managing account settings.
• Identity and age verification: confirming that each customer is at least 21 years old and that account details are genuine, as required before processing deposits, gameplay, promotions, or withdrawals.
• Payment processing: accepting MYR deposits, verifying payment ownership, processing withdrawal requests, recording transaction histories, and managing cashier functions.
• Fraud prevention and security: detecting unusual patterns, investigating suspicious transactions, preventing unauthorised account access, and identifying prohibited conduct described in the Terms & Conditions.
• Regulatory and legal compliance: meeting applicable anti-money-laundering, financial crime, responsible gambling, and data protection obligations.
• Customer support: responding to account queries, resolving disputes, handling responsible gambling requests, and improving service based on documented feedback.
• Service improvement and maintenance: monitoring platform performance, diagnosing technical issues, and updating juta9 functions using aggregate or anonymised usage data.
• Service communications: sending account notifications, security alerts, transaction confirmations, and material policy updates to registered contact details.

Juta9 processes personal data on the following legal grounds, which may overlap depending on the specific processing activity.

• Contractual necessity: processing required to provide the juta9 services you have requested, including account creation, payment handling, and game access.
• Legal obligation: processing necessary to comply with applicable laws, including those governing identity verification, anti-money-laundering controls, and responsible gambling requirements.
• Legitimate interests: processing pursued for fraud prevention, security monitoring, service maintenance, and resolving disputes where these interests are balanced against your reasonable privacy expectations.
• Consent: where juta9 seeks consent for a specific activity, such as certain categories of promotional communication, that consent may be withdrawn by contacting support.

Juta9 does not sell personal data. Disclosure to third parties is limited to the following categories, each of which is subject to appropriate contractual safeguards where applicable.

• Payment service providers: processing MYR deposits and withdrawals via banking, FPX, DuitNow, and supported e-wallet channels requires sharing payment reference data with authorised financial processors.
• Identity and KYC verification suppliers: document review and age verification may involve a contracted provider who processes identity documents on behalf of juta9.
• Fraud and risk management services: technical partners who assist in detecting unusual account patterns, suspicious transactions, or device-level anomalies.
• Game content providers: certain casino game outcomes and session data may be transmitted to the provider's game system to record and validate results.
• Professional advisers: legal, audit, compliance, or technical consultants engaged by juta9 on a confidential basis.
• Competent authorities: juta9 will disclose personal data to a government authority, regulator, or law enforcement body when required by a valid legal obligation, court order, or lawful regulatory request.

Juta9 uses cookies and similar session technologies to maintain your login state, remember account preferences, support security checks, measure platform performance, and reduce repeated verification steps within a session.

Essential cookies are required for the platform to function. Session cookies expire when you close your browser. Persistent cookies may remain for a defined period to support recognition on a return visit. Most browsers allow you to manage or clear cookies through settings. Disabling certain cookies may reduce the functionality of juta9.

Technical data such as IP address, device type, and session timestamps are collected automatically when you access juta9. This data assists with security monitoring, fraud detection, and service reliability. It is not used to build individual advertising profiles or sold to third parties.

Juta9 retains personal data for the period reasonably necessary to fulfil the purposes described in this policy. Relevant factors include the nature of the data, the ongoing account relationship, regulatory minimum retention requirements, outstanding disputes, and security obligations.

Account, transaction, KYC, and betting records are typically retained for a minimum of several years following account closure, in order to satisfy financial crime prevention, legal compliance, and dispute-resolution obligations. Where specific legal requirements specify a defined period, those requirements govern.

After the applicable retention period expires, personal data is deleted, anonymised, or archived in a manner that prevents ordinary re-identification. Where data is anonymised for aggregate analysis, it no longer constitutes personal data for the purposes of this policy.

Juta9 applies technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. These measures include encryption of sensitive data in storage and in transit, access controls based on role and operational necessity, regular security assessments, staff confidentiality obligations, and monitoring for unusual account or transaction patterns.

Customers also play an important part in protecting their own data. You should use a strong, unique password for your juta9 account and not share login credentials with anyone. You should protect the devices and email accounts associated with juta9. Notify support promptly if you suspect that your account has been compromised.