Privacy Policy juta8myr — Malaysia Platform Personal Data Protection

1 Introduction & Scope of This Policy Important

This Privacy Policy ("Policy") sets out juta8myr's commitment to protecting the privacy and security of your personal information. It applies to all users and members of the juta8myr platform at https://juta8myr.net, including those who browse the website, register an account, make deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, or use any services provided by juta8myr.

Juta8myr operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in the context of commercial transactions in Malaysia. We take this responsibility seriously and implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or destruction.

By registering an account or using the juta8myr platform, you acknowledge that you have read and understood this Privacy Policy and agree to the data processing practices described herein. If you do not agree with any part of this policy, please discontinue your use of the juta8myr platform.

2 Types of Personal Data We Collect Important

Juta8myr collects the personal data necessary to provide a secure, fair and seamless platform experience. The main categories of data we collect are as follows:

Data Categories Collected:

Juta8myr does not collect sensitive data categories such as medical information, criminal records or biometric data, except where specifically required by applicable Malaysian law.

3 How We Collect Your Personal Data

Juta8myr collects your personal data through several different methods:

• Directly From You: When you register an account, complete your profile, make a deposit via DuitNow or FPX, contact customer support, or interact directly with any part of the juta8myr platform.
• Automatically During Use: When you browse the juta8myr platform, our systems automatically record technical data such as your IP address, device type, browser information, and usage patterns via cookies and similar tracking technologies.
• From Third Parties: juta8myr may receive your personal data from payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay for transaction verification purposes, or from identity verification agencies to meet KYC (Know Your Customer) requirements mandated by law.
• During the KYC Process: For first-time withdrawals or when certain transaction thresholds are exceeded, juta8myr may request additional identity verification documents in line with applicable anti-money laundering (AML) compliance requirements in Malaysia.

4 How Your Personal Data Is Used Important

Juta8myr uses your personal data for legitimate and transparent purposes. Every use of data is grounded in an appropriate legal basis under Malaysia's PDPA — whether contractual necessity, legal obligation, legitimate interest, or your consent. Below are the primary purposes for which juta8myr uses your data:

• Account Management: Creating, maintaining, and securing your juta8myr account, including identity verification and access control.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, as well as processing withdrawal of winnings to your Malaysian bank account or eWallet.
• Gaming Services Provision: Operating all games including slots, Live Casino, Baccarat, poker, jackpots, Virtual Sports and Sports Betting on the Malaysia Super League, EPL and other leagues.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, multiple accounts, and other forms of platform misuse.
• Legal Compliance: Fulfilling legal obligations including AML compliance, KYC requirements and reporting obligations to the relevant Malaysian authorities.
• Customer Support: Handling enquiries, complaints, and support requests submitted to the juta8myr support team via live chat or email.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and providing appropriate responsible gaming tools to members who need them.
• Marketing Communications: Sending information about juta8myr promotions, bonuses, and the latest offers to members who have given their consent — subject to the right to withdraw consent at any time.
• Platform Improvements: Analysing aggregated usage data to improve the design, performance and features of the juta8myr platform over time.

5 Sharing Data with Third Parties

Juta8myr does not sell or commercialise your personal data. That said, operating the platform requires us to share certain data with carefully selected third parties who are bound by strict confidentiality agreements:

• Payment Processors: eWallet providers such as Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as FPX gateways, receive the transaction data required to process deposits and withdrawals in MYR.
• Game Providers: Software providers for slots, Live Casino, baccarat, and other games may process game session data required to operate those games.
• Technology Service Providers: Companies providing cloud computing, cybersecurity, analytics and technical infrastructure services required for the operation of the juta8myr platform.
• Identity Verification Agencies: As part of the mandatory KYC process, juta8myr may engage third-party services to verify member identities in accordance with applicable AML standards.
• Malaysian Authorities: juta8myr will disclose personal data to Malaysian legal authorities, law enforcement or regulators when required to do so by law, court order or valid legal process.

All third parties that receive personal data of juta8myr members are required to comply with equivalent security and privacy standards, and are not permitted to use that data for any purpose other than what is specified in their service agreements with juta8myr.

6 Data Security Measures Important

Juta8myr implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key measures in place include:

• Transmission Encryption: All data communications between your device and juta8myr's servers are encrypted using TLS 1.3 with 256-bit SSL certificates that are regularly renewed.
• Stored Data Encryption: Sensitive data including passwords (processed via robust hashing functions) and financial information is stored in encrypted form within juta8myr's databases.
• Internal Access Controls: juta8myr staff access to member personal data is governed by a "need-to-know" principle, with role-based access control (RBAC) and full audit trails.
• Two-Factor Authentication: juta8myr internal systems containing members' personal data are protected by mandatory two-factor authentication for all staff with access.
• Regular Security Audits: juta8myr conducts regular penetration testing and security audits through independent parties to identify and address potential security vulnerabilities.
• 24/7 Monitoring: Automated security monitoring systems operate around the clock to detect and respond to threats or suspicious activity in real time.
• Incident Response Plan: juta8myr has documented procedures for responding to data security breaches, including notification protocols for affected members in accordance with Malaysia's PDPA requirements.

7 Data Retention Period

Juta8myr retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. General data retention principles at juta8myr:

• Active Account Data: For as long as your account remains active with juta8myr, we retain all data necessary to manage your account and provide services to you.
• Post-Account Closure Data: After account closure, juta8myr retains your personal data for a minimum of five (5) years in accordance with AML compliance requirements and applicable Malaysian financial laws.
• Financial Transaction Records: Records of all financial transactions — including deposits via Touch 'n Go eWallet, GrabPay, FPX, and withdrawals — are retained for a minimum of seven (7) years in accordance with Malaysia's tax legislation and financial reporting requirements.
• Customer Support Records: Communication logs with the juta8myr support team are retained for three (3) years for dispute resolution and service improvement purposes.
• Marketing Data: Data used for marketing communications is retained until you withdraw your consent, after which it will be removed from our marketing lists within 30 days.

Once the applicable retention period has ended, juta8myr will securely delete or anonymise your personal data in accordance with our established data disposal procedures.

8 Your Rights Under Malaysia's PDPA Your Rights

As a data subject under Malaysia's PDPA, you have specific rights regarding the personal data processed by juta8myr. We are committed to making it straightforward for you to exercise those rights:

To exercise any of the above rights, contact juta8myr's Data Protection Officer by email at support@juta8myr.net or via the in-platform live chat. Please include your full name, juta8myr account number and specific details of your request to help expedite processing.

9 Cookies, Logs & Tracking Technologies

Juta8myr uses cookies and similar tracking technologies to enhance the user experience, maintain platform security and analyse usage patterns. The following are the types of cookies used by juta8myr:

• Essential Cookies (Required): These cookies are required for the core functions of the juta8myr platform, including login authentication, session management, security and language preference memory. Without them, the platform will not function properly and they cannot be disabled.
• Preference Cookies: Allows the juta8myr platform to remember your preferences and settings — such as your preferred payment method, game preferences, and other account settings — to provide a smoother experience.
• Analytics Cookies: Used to collect aggregated information on how members use the juta8myr platform — such as most-visited pages, time spent and navigation paths — for the purpose of platform improvement.
• Security Cookies: Helps juta8myr detect and prevent fraudulent activity, unauthorised access, and potential security threats by analysing unusual usage patterns.

You can manage cookie settings through your browser preferences. Keep in mind that disabling certain cookies may affect the functionality of some parts of the juta8myr platform. For guidance on managing cookies, refer to your browser's help documentation.

10 Child Protection

The juta8myr platform is strictly for users aged 18 and above, in line with the membership eligibility policy set out in our Terms & Conditions. juta8myr does not knowingly collect personal data from individuals under the age of 18.

Should we discover or be informed that personal data belonging to an underage child has been collected without the knowledge or consent of a parent or legal guardian, juta8myr will take immediate steps to delete that data and close the associated account in accordance with established procedures.

11 Amendments to This Privacy Policy

Juta8myr reserves the right to amend, update or replace this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or improvements to our platform and services. The latest version of the Privacy Policy will always be available on this page with an updated effective date.

For material amendments — that is, changes that significantly affect how we use your personal data — juta8myr will provide advance notice through one or more of the following methods:

• A notification email sent to your registered email address.
• A prominent notice within the juta8myr platform when you log in.
• An announcement on the juta8myr website homepage.

Continued use of the juta8myr platform after any amendments to the Privacy Policy take effect will be considered your acceptance of the revised policy. We therefore encourage you to review this page periodically.

12 How to Contact Us Regarding Privacy Contact

If you have any questions, concerns, or complaints regarding this juta8myr Privacy Policy or how we handle your personal data, please contact juta8myr's Data Protection Officer (DPO) through the following channels:

• Email: support@juta8myr.net (please mark the email subject as "Privacy Enquiry" for a faster response)
• Live Chat: Via the live chat button within the juta8myr platform, available 24 hours a day, 7 days a week in Bahasa Malaysia and English
• Response Time: juta8myr is committed to responding to all privacy-related enquiries within three (3) business days of receipt.