Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") governs the collection, use, storage, processing, and disclosure of personal data by jutabet8 (hereinafter referred to as "jutabet8", "we", "us", or "our"), the operator of the online gaming platform accessible at jutabet8.cam.

jutabet8 takes its obligations as a data controller seriously and is committed to handling all personal data in a manner that is lawful, fair, transparent, and consistent with internationally recognised data protection principles. This Policy is designed to inform you — the Player, visitor, or prospective user (hereinafter referred to as "you", "your", or "data subject") — of your rights and our obligations with respect to your personal information.

By registering an account, making a deposit, or otherwise using the jutabet8 platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall agreement between you and jutabet8.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, financial details, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and erasure.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, jutabet8.
• "Data Processor" means any third party that processes personal data on behalf of jutabet8 under a contractual arrangement.
• "Data Subject" means the identified or identifiable natural person to whom personal data relates — in this context, you, the Player or site visitor.
• "KYC" means Know Your Customer — the identity verification process required under our anti-money laundering (AML) compliance programme.
• "Cookie" means a small text file stored on a user's device by a web browser, used to retain session and preference information.
• "Platform" means the jutabet8 website, associated web applications, mobile interfaces, and all gaming services operated thereon.

jutabet8 acts as the Data Controller with respect to all personal data collected from users of the Platform. As Data Controller, jutabet8 determines the purposes for which personal data is collected, the methods by which it is processed, and the conditions under which it is retained or disclosed.

jutabet8 operates under an international gaming licence and processes personal data in accordance with the data protection standards applicable to its licensing jurisdiction. Where jutabet8 engages third-party service providers to process data on its behalf, those parties act as Data Processors and are bound by contractual obligations that require them to maintain appropriate security and confidentiality standards consistent with this Policy.

For all data-related enquiries, rights requests, or complaints, please contact our Data Protection team using the details set out in Section 17 of this Policy.

jutabet8 collects the categories of personal data described in the table below. In each case, we collect only the data that is strictly necessary for the specified purpose.

jutabet8 collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide during account registration, KYC verification, deposit and withdrawal requests, customer support interactions, and completion of any on-platform forms or surveys.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. See Section 12 for full details on cookie usage.
• Third-Party Payment Providers: Transaction reference data and verification confirmations received from Malaysian payment processors including FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, and GrabPay, as well as cryptocurrency network data for BTC, ETH, USDT, and LTC transactions.
• Identity Verification Services: Confirmation data from third-party KYC and AML screening services engaged to verify the accuracy of the identity documents you submit.
• Fraud Prevention Services: Risk scoring and device fingerprint data from third-party fraud detection providers to protect the integrity of the Platform and the interests of all players.

jutabet8 processes personal data for the following purposes:

1. Account Creation and Management: To register your account, maintain your player profile, process your deposits and withdrawals in MYR, and administer your account in accordance with our Terms & Conditions.
2. Identity and Age Verification: To verify your identity and confirm you meet the minimum age requirement of 21 years as required by our licence obligations and responsible gambling commitments.
3. Payment Processing: To facilitate deposits and withdrawals via your chosen Malaysian payment method, including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency options.
4. Anti-Money Laundering (AML) Compliance: To monitor transactions and player activity for indicators of money laundering, fraud, or other financial crime, as required by applicable regulations.
5. Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat, email, or WhatsApp in English, Bahasa Melayu, or Mandarin.
6. Platform Security: To detect, investigate, and prevent fraudulent activity, unauthorised access, and other security threats to the Platform and its players.
7. Responsible Gambling: To monitor your gaming patterns and identify potential indicators of problem gambling, and to administer any responsible gambling tools you request.
8. Legal and Regulatory Compliance: To comply with applicable laws, court orders, regulatory directions, and the requirements of our gaming licence.
9. Platform Improvement: To analyse usage patterns, improve platform performance, personalise your experience, and develop new features — using aggregated or anonymised data wherever possible.
10. Marketing Communications: To send promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.

jutabet8 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to enter into and perform the contract between you and jutabet8 — including account registration, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and licence conditions.
• Legitimate Interests: Processing undertaken in pursuit of legitimate business interests, including fraud prevention, platform security, and customer service quality — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit consent, primarily for optional marketing communications. You may withdraw consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing email.

jutabet8 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Processors: Malaysian payment service providers (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong) and cryptocurrency network operators, for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening services that verify the identity documents you submit. These providers act as Data Processors under contractual arrangements.
• IT and Platform Infrastructure Providers: Cloud hosting, database, content delivery, and cybersecurity service providers that maintain the technical infrastructure of the Platform.
• Customer Support Tools: Third-party live chat, email, and communication platform providers that power our 24/7 support operations.
• Game Studio Partners: Licensed game studio partners may receive session-level data (e.g., player ID, wager amounts) necessary to operate the games you play. These partners do not receive your identity or payment data.
• Regulatory and Law Enforcement Authorities: Where required by a valid court order, regulatory directive, or law enforcement request, jutabet8 will disclose personal data as legally obligated. We will notify you of such disclosures to the extent permitted by law.
• Professional Advisors: Lawyers, auditors, and compliance consultants engaged by jutabet8 on a confidential basis in connection with our legal and regulatory obligations.

jutabet8 operates as an internationally licensed gaming platform. Certain service providers and technology infrastructure used in the operation of the Platform may be located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, jutabet8 ensures that appropriate safeguards are in place prior to any such transfer. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities, binding the receiving party to process data in accordance with applicable privacy standards.
• Contractual obligations requiring receiving parties to implement technical and organisational security measures equivalent to those described in Section 13 of this Policy.
• Transfer only to jurisdictions that have been recognised as providing an adequate level of protection for personal data by relevant regulatory bodies.

By using the jutabet8 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia. jutabet8 undertakes to ensure that all such processing is conducted lawfully and with appropriate protective measures in place.

jutabet8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following retention periods apply as general guidance:

• Account and Identity Data: Retained for the duration of your active account and for a period of five (5) years following account closure, in compliance with AML and gaming licence record-keeping requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of the relevant transaction, consistent with financial regulatory requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of verification, as required by AML compliance obligations.
• Communications Data: Support correspondence and live chat transcripts are retained for two (2) years from the date of the interaction.
• Technical and Usage Data: Log and session data is typically retained for twelve (12) months and then anonymised or deleted.
• Marketing Preferences: Records of consent and opt-out choices are retained indefinitely to demonstrate compliance with applicable marketing laws.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. You may request earlier deletion of certain categories of data subject to the conditions described in Section 11.

Subject to applicable data protection law and any overriding legal obligations, you hold the following rights with respect to your personal data held by jutabet8:

• Right of Access: You have the right to request a copy of the personal data that jutabet8 holds about you, along with information about how it is being processed. We will respond to access requests within 30 calendar days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by jutabet8. You may update certain account details directly via your player profile.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal obligations (such as AML record-keeping requirements) that require retention.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being verified.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You may also object at any time to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

jutabet8 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function. These include session management cookies, authentication tokens, and security cookies. Essential cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated and anonymised data about how visitors use the Platform — including pages visited, session duration, and error occurrences. This data helps us identify and fix performance issues.
• Functional Cookies: Enable the Platform to remember your preferences such as language settings, display preferences, and last-visited game category to provide a more personalised experience.
• Security Cookies: Used for fraud detection, device fingerprinting, and suspicious activity monitoring. These cookies help protect your account and the Platform against unauthorised access.

Most web browsers allow you to control cookie settings through their privacy or security settings menu. Disabling non-essential cookies may affect certain features of the Platform but will not prevent access to core gaming functionality.

jutabet8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher. Sensitive data at rest (including payment credentials and KYC documentation) is encrypted using AES-256.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with data access privileges are subject to background screening, confidentiality agreements, and regular security training.
• Intrusion Detection: Automated systems monitor the Platform and its infrastructure continuously for anomalous activity, unauthorised access attempts, and potential data breaches.
• Penetration Testing: jutabet8 engages independent cybersecurity firms to conduct regular penetration testing of our infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of data subjects, jutabet8 will notify affected parties and relevant authorities in accordance with applicable data protection law.

While jutabet8 employs industry-standard security practices, no transmission over the internet is entirely risk-free. You are responsible for maintaining the security of your own account credentials and should notify us immediately if you suspect any unauthorised access to your Account.

The jutabet8 Platform is intended exclusively for adults aged 21 years and above. jutabet8 does not knowingly collect personal data from individuals below the age of 21. Age verification is a mandatory step in the KYC process and is enforced for all accounts prior to the processing of any withdrawal.

If jutabet8 becomes aware that personal data has been collected from an individual below the minimum age, the relevant Account will be immediately suspended, all funds will be frozen pending investigation, and the personal data of the minor will be deleted as soon as practicable subject to any legal obligations requiring its retention for compliance purposes.

The jutabet8 Platform does not host links to external websites or third-party services that are outside of our operational infrastructure. In the event that any game studio, payment provider, or other integrated service operates its own interface within the Platform, please note that such services are governed by their own privacy policies, which operate independently of this Policy.

jutabet8 is not responsible for the privacy practices or content of any third-party services that may be accessed in connection with the Platform. We encourage you to review the privacy policies of any third-party services you interact with separately.

jutabet8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where material changes are made, we will endeavour to provide notice by posting a prominent notice on the Platform or, where practicable, by notifying you via your registered email address.

The date of the most recent update is displayed at the top of this Policy. We encourage you to review this page periodically to remain informed of how your personal data is being handled. Your continued use of the Platform following the publication of any amendment constitutes your acknowledgment of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our dedicated Data Protection team through the following channels:

Formal written data rights requests (access, erasure, portability) should be submitted by email to the address above with the subject line "Data Rights Request — [Your Account Username]". We will acknowledge receipt within five (5) business days and provide a substantive response within thirty (30) calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline and the reasons for it.