Privacy Policy

This Privacy Policy ("Policy") is issued by Jutabet ("Jutabet", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at jutabet.cam (the "Platform"). This Policy applies to all Users ("you", "your") who access, register on, or interact with the Jutabet Platform in any capacity.

Jutabet takes its obligations regarding the privacy and protection of your personal data seriously. We are committed to collecting only the information we genuinely need to deliver our services, protecting that information using industry-standard security measures, and being transparent about how it is used. We do not sell your personal data to third parties, and we do not share it with any organisation that would use it for purposes inconsistent with this Policy.

This Policy was last updated on 1 January 2026. By accessing or using the Jutabet Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read in conjunction with Jutabet's Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your use of the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Jutabet collects personal data in three primary ways: directly from you when you register or interact with the Platform; automatically through your device and browser when you use the Platform; and from third-party sources such as payment processors and KYC verification providers. The categories of personal data we collect are set out below.

3.1 Registration & Account Data Required

• Full legal name as it appears on your government-issued identification document (Malaysian MyKad, passport, or driving licence).
• Date of birth — collected to verify that you meet the minimum age requirement of 21 years.
• Residential address — including city, state, and postcode. Malaysian cities including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and others.
• Email address — used for account communications, security alerts, and (where you have opted in) promotional correspondence.
• Mobile phone number — used for two-factor authentication and account security notifications.
• Username and encrypted password hash.
• Preferred language and currency (MYR / RM by default for Malaysian accounts).

3.2 Identity Verification (KYC) Data Required

• Scanned or photographed copy of a valid government-issued identification document.
• Proof of address documentation — such as a recent utility bill, bank statement, or official government correspondence.
• Proof of ownership of the payment method used — such as a screenshot of your Touch 'n Go eWallet, Boost, Maybank, CIMB, or Public Bank account showing your name.
• Selfie photograph, where enhanced verification is requested by our compliance team.

3.3 Financial Transaction Data Required

• Deposit history — payment method, amount (in MYR), date, time, and transaction reference numbers.
• Withdrawal history — destination payment method, amount, status, and processing timestamps.
• Payment method identifiers — partial account numbers or e-wallet identifiers (e.g., masked Touch 'n Go eWallet or DuitNow account references) sufficient for verification purposes.
• Bonus and promotional transaction records.

3.4 Gaming Activity Data Operational

• Game session logs — including game titles played, session start and end times, bet amounts, and outcomes.
• Sports betting records — including markets wagered on (Liga Super Malaysia, EPL, UFC, and others), odds accepted, stake amounts, and settlement results.
• Bonus and promotion usage records.
• Responsible gambling tool settings — including deposit limits, session time reminders, and self-exclusion status.

3.5 Technical & Device Data Automatic

• IP address — used for geographic access controls, fraud detection, and security monitoring.
• Device identifiers — including browser type, operating system, screen resolution, and device model.
• Session data — including login timestamps, pages visited, and feature interactions within the Platform.
• Cookie and tracking data — as described in Section 9 of this Policy.

Jutabet processes your personal data only for specific, legitimate purposes. We do not process personal data in a manner incompatible with the purposes for which it was collected. The primary purposes for which we process your data are as follows:

Jutabet relies on the following legal bases to process your personal data, depending on the specific purpose of processing:

• Contractual Necessity: Processing is required to fulfil the contract between you and Jutabet — specifically the Terms & Conditions you agreed to upon registration. This covers account creation, payment processing, and the provision of gaming services.
• Legal Obligation: Jutabet is required to process certain data to comply with applicable legal requirements, including KYC/AML obligations, age verification requirements (21+), record-keeping obligations, and cooperation with lawful regulatory or law enforcement requests.
• Legitimate Interests: Jutabet processes certain data to pursue legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided those interests do not override your fundamental privacy rights.
• Consent: For optional processing activities — such as sending you marketing emails, promotional SMS, or personalised offers — Jutabet relies on your explicit consent. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

Jutabet does not sell, rent, or trade your personal data. We share your data only with third parties where necessary for the following purposes and under strict data processing agreements:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf under written data processing agreements that bind them to confidentiality and to processing data only as directed by Jutabet. These include:

• Payment processors: Including DuitNow, FPX network participants, Touch 'n Go eWallet, Boost, GrabPay, and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong Connect) — to process your deposits and withdrawals in MYR.
• KYC and identity verification providers: Specialist third-party services that assist with document verification and fraud screening in compliance with AML requirements.
• Cloud infrastructure and hosting providers: Who provide the servers and data storage facilities on which the Platform operates, subject to strict security and confidentiality obligations.
• Game software providers: Including Pragmatic Play, Evolution Gaming, Microgaming, Playtech, and others — who may process limited technical data necessary to deliver their game services. These providers operate under their own data protection frameworks.
• Customer support platform providers: Who power our 24/7 live chat and email support systems. Support conversations may contain personal data that is stored for quality assurance and compliance purposes.

6.2 Legal and Regulatory Disclosures

Jutabet may disclose personal data to competent authorities, regulatory bodies, or law enforcement agencies where required by applicable law or a valid legal order. Such disclosures are made only to the extent required and are handled with appropriate care and confidentiality.

Jutabet retains personal data only for as long as is necessary for the purposes set out in this Policy, including compliance with legal obligations, resolution of disputes, and enforcement of our agreements. The following retention principles apply:

After the applicable retention period expires, personal data is securely deleted or anonymised. Anonymised or aggregated data (which cannot be used to identify any individual) may be retained for statistical and analytical purposes without limitation.

Jutabet applies a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Jutabet Platform is encrypted using 256-bit SSL/TLS protocols — the same standard used by major Malaysian financial institutions including Maybank2u, CIMB Clicks, and Public Bank Online Banking.
• Encrypted data storage: Sensitive personal data stored on Jutabet's servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within Jutabet's systems is restricted on a need-to-know basis. Employees and contractors who handle personal data are required to maintain strict confidentiality and operate under formal data handling policies.
• Two-factor authentication (2FA): Available to all account holders and required for employees with access to backend systems containing personal data.
• Regular security audits: Jutabet conducts periodic independent security reviews and penetration tests to identify and remediate vulnerabilities in the Platform's infrastructure.
• Incident response: In the event of a data security breach that may affect your rights and interests, Jutabet will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

While Jutabet takes all reasonable steps to protect your data, no digital platform can guarantee absolute security against all threats. You are also responsible for maintaining the security of your Account credentials. Please ensure you use a strong, unique password and enable two-factor authentication on your Jutabet Account.

Jutabet uses cookies and similar tracking technologies to operate and improve the Platform, remember your preferences, and monitor Platform usage patterns. By using the Platform, you consent to the use of cookies as described in this section.

9.1 Types of Cookies We Use

9.2 Managing Your Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse non-essential cookies or delete existing cookies. Please note that disabling certain cookies may impair the functionality of the Jutabet Platform — in particular, disabling strictly necessary cookies may prevent you from logging in or completing transactions. Instructions for managing cookies in popular browsers are available through the help sections of Chrome, Firefox, Safari, and Edge.

As a Jutabet player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". Jutabet will respond to your request within thirty (30) calendar days of receipt.

The Jutabet Platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the account registration process, and KYC verification confirms the stated age before any withdrawal is processed.

If Jutabet discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated Account, void any gameplay or transactions conducted under false age representation, and delete the data of the minor from our systems to the extent permitted by our legal obligations.

Jutabet strongly encourages account holders who share their devices with minors or children to use parental control software to prevent underage access to online gaming platforms. Registered players are responsible for ensuring that their Account credentials are not accessible to persons under 21.

Jutabet may send you promotional and marketing communications — including information about new games, bonus offers, VIP programme updates, and sports betting promotions — by email or other electronic means, but only where you have provided your explicit consent to receive such communications during registration or subsequently through your account settings.

12.1 Opt-In

Marketing communications are strictly opt-in. You will not receive promotional emails or SMS from Jutabet unless you have actively elected to receive them. During registration, you will be presented with a clearly labelled, unticked checkbox to opt in to marketing communications. Pre-ticked or implied consent is never used.

12.2 Opt-Out

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link present at the footer of every marketing email sent by Jutabet.
• Updating your communication preferences within your Jutabet Account settings.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications will not affect the delivery of transactional account communications — such as deposit and withdrawal confirmations, security alerts, and KYC requests — which are necessary for the operation of your Account and cannot be opted out of while your Account remains active.

In the course of operating the Platform and engaging third-party service providers — including cloud infrastructure providers, game software suppliers, and KYC verification services — your personal data may be transferred to and processed in jurisdictions outside Malaysia. Such transfers may occur to countries that have different data protection laws to those applicable in Malaysia.

Where personal data is transferred internationally, Jutabet takes all reasonable steps to ensure that adequate safeguards are in place, including but not limited to: contractual data processing agreements incorporating standard data protection clauses; transfer to service providers that operate under established data protection frameworks; and ensuring that transferred data is subject to equivalent levels of security and confidentiality to those required under this Policy.

By using the Jutabet Platform and accepting this Privacy Policy, you consent to such international transfers being made where necessary and subject to the safeguards described above.

Jutabet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. The most current version of this Policy will always be available at jutabet.cam/privacy-policy, with the effective date clearly stated at the top of the document.

Where amendments are material — meaning they significantly alter the scope of data collection, the purposes for which data is processed, or your rights in relation to your data — Jutabet will provide advance notice of at least fourteen (14) days via email to your registered address or via a prominent on-Platform notification prior to the changes taking effect.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and may request Account closure in accordance with the Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or believe that Jutabet has not handled your personal data in accordance with this Policy, please contact our support team. We are committed to addressing all privacy-related enquiries thoroughly and within a reasonable timeframe.

Jutabet aims to acknowledge all privacy-related enquiries within five (5) business days and to provide a substantive response within thirty (30) calendar days. Where a request is complex or where a high volume of requests is received, Jutabet may extend this response period by an additional thirty (30) days, in which case you will be notified of the extension and the reason for it.

If you are not satisfied with Jutabet's response to a privacy complaint, you may seek further recourse through applicable dispute resolution mechanisms or regulatory bodies. Details of your rights and available remedies will be provided in Jutabet's response to your complaint.