ijuta Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ijuta ("ijuta", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player") who visit, register on, or use the ijuta Platform at ijuta.net and any associated services.

ijuta operates as a Malaysian-focused online casino and sports betting platform. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles and our obligations under international gaming authority licensing requirements. By accessing or using the ijuta Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read in conjunction with the Terms & Conditions, which govern the overall use of the ijuta Platform. Defined terms not defined in this Policy carry the meanings given to them in the Terms & Conditions.

2. Personal Data We Collect

ijuta collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration and Account Data

• Full legal name as it appears on your identification document;
• Date of birth (used to verify the 21+ age requirement);
• Nationality and country of residence;
• Email address and mobile phone number;
• Chosen username and encrypted password;
• Preferred language and currency (MYR for all ijuta accounts).

2.2 Identity Verification (KYC) Data

• Malaysian identity card (MyKad) number and document image, or passport details for non-Malaysian residents;
• Proof of address documentation (utility bill, bank statement, or equivalent);
• Source of funds documentation where required under AML compliance obligations;
• Facial verification imagery where required for enhanced KYC.

2.3 Financial and Transaction Data

• Payment method details (eWallet account references for Touch n Go or Boost, FPX bank account details, partial card numbers for Visa/Mastercard);
• Deposit and withdrawal transaction history, amounts, dates, and references;
• Bonus and promotion claim history;
• Bet and wager history across all product verticals (casino, sportsbook, slots, fisher games).

2.4 Technical and Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Session logs, login timestamps, and Platform navigation data;
• Cookie identifiers and similar tracking technology data (see Section 6).

2.5 Communications Data

• Records of support interactions via live chat or email;
• Feedback, complaints, and dispute correspondence;
• Responses to optional player surveys or promotions.

3. How We Use Your Personal Data

ijuta processes your personal data for the following purposes:

4. Legal Basis for Processing

ijuta processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the services you have contracted for when creating an ijuta account and placing bets;
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, and licensing conditions imposed by the applicable gaming authority;
• Legitimate interests: Processing for fraud prevention, Platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and optional analytics tracking, where you have provided specific consent that may be withdrawn at any time.

5. Data Sharing and Disclosure

5.1 Service Providers. ijuta shares personal data with trusted third-party service providers who process data on our behalf and under our instruction, including: KYC identity verification providers; payment processing partners (Touch n Go, Boost, FPX network banks, Visa/Mastercard acquirers); game content licensors for game personalisation; customer support platform providers; and cloud hosting infrastructure providers. All such providers are bound by data processing agreements requiring them to implement appropriate technical and organisational safeguards.

5.2 Regulatory and Legal Disclosure. ijuta may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where required by applicable law, court order, or regulatory obligation. ijuta will inform you of such disclosures where legally permitted to do so.

5.3 Business Transfers. In the event of a merger, acquisition, or asset sale involving ijuta or its parent entity, personal data held by ijuta may be transferred to the successor entity. You will be notified of any such transfer and the successor's privacy practices before the transfer takes effect.

5.4 No Sale of Data. ijuta does not sell, rent, lease, or otherwise transfer personal data to third-party advertisers, data brokers, or unaffiliated commercial entities for their independent marketing purposes.

6. Cookies and Tracking Technologies

ijuta uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for Platform login session management, security token storage, and load balancing. These cannot be disabled without impairing core Platform functionality.
• Functional cookies: Storing your preferences such as language, preferred game category, and display settings between sessions.
• Analytics cookies: Collecting aggregated, anonymised data on how players navigate the Platform to identify improvement opportunities. No individual player behaviour is sold or shared with advertising networks.
• Session cookies: Temporary cookies that expire when you close your browser, used to maintain your authenticated session while you are actively using the Platform.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. ijuta does not deploy third-party behavioural advertising cookies on the Platform.

7. Data Retention

ijuta retains personal data for as long as your account is active and for the following minimum periods after account closure:

• KYC and identity documents: Minimum 5 years from account closure, as required by AML compliance obligations;
• Transaction and betting records: Minimum 5 years from the date of each transaction;
• Account data and communications: Minimum 3 years from account closure or last Platform interaction;
• Self-exclusion records: Retained for the duration of the exclusion period and 2 years thereafter to prevent re-registration in circumvention of a self-exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ijuta's data destruction procedures.

8. Your Data Rights

Subject to applicable law and our legal retention obligations, you have the following rights in relation to your personal data held by ijuta:

• Right of access: Request a copy of the personal data ijuta holds about you;
• Right of rectification: Request correction of inaccurate or incomplete personal data;
• Right of erasure: Request deletion of your personal data where no legitimate legal basis for continued processing exists;
• Right to restrict processing: Request that ijuta temporarily cease processing your data in certain circumstances;
• Right to data portability: Request your account and transaction data in a structured, machine-readable format;
• Right to withdraw consent: Withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing;
• Right to object: Object to processing carried out on legitimate interest grounds where you have grounds relating to your particular situation.

To exercise any of these rights, contact ijuta at [email protected]. Requests will be acknowledged within 3 business days and fulfilled within 30 calendar days, or 60 days for complex requests (with notification of the extension).

9. Security Measures

ijuta implements the following technical and organisational security measures to protect your personal data:

• 256-bit TLS/SSL encryption for all data in transit between your device and ijuta servers;
• Passwords stored as salted cryptographic hashes — never in plain text;
• Two-factor authentication available for all account logins;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular third-party security audits and penetration testing of Platform infrastructure;
• Segregated player funds in accounts separate from operational funds;
• Incident response procedures with mandatory notification timelines in the event of a data breach affecting player data.

Notwithstanding the above, no security system is completely impenetrable. In the event of a data security incident affecting your personal data, ijuta will notify you and the relevant regulatory authority as required by applicable law.

10. Children's Privacy

The ijuta Platform is strictly not intended for, and does not knowingly collect personal data from, any person under 21 years of age. Age verification is performed as part of the mandatory KYC process before any real-money activity is permitted. If ijuta becomes aware that personal data has been collected from a person under 21 without appropriate verification, that account will be immediately suspended and the relevant personal data deleted or transferred to appropriate authorities as required by law.

11. International Data Transfers

ijuta's Platform is operated by an entity licensed under an international gaming authority framework. As a result, personal data processed by ijuta may be transferred to and stored in jurisdictions outside Malaysia. Where such transfers occur, ijuta ensures that appropriate safeguards are in place — including data processing agreements incorporating standard contractual clauses or equivalent protections — to ensure that your personal data receives a level of protection consistent with this Policy.

12. Changes to This Policy

ijuta reserves the right to amend this Privacy Policy at any time. Material changes — those that significantly affect how your personal data is collected, used, or shared — will be communicated to registered players via email notification to the registered address and through a prominent notice on the Platform at least fourteen (14) days before the change takes effect. Continued use of the Platform after the effective date of an amendment constitutes acceptance of the revised Policy.

13. Contact Us

For privacy-related enquiries, data access requests, or complaints regarding ijuta's data handling practices, please contact our Data Privacy team directly:

Email: [email protected] (mark subject line: "Privacy Request")

ijuta aims to resolve all privacy enquiries fairly and promptly. If you are not satisfied with ijuta's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority or gaming regulatory authority applicable under your licensing framework.

This Privacy Policy was last reviewed on 11 June 2026. Players who registered prior to this date and continue to use the Platform are deemed to have accepted the current version of this Policy.