This Privacy Policy explains how Jutaboy collects, uses, stores, and protects your personal information when you use our platform. Your privacy matters to us — please read this document carefully.
All data transmitted between you and Jutaboy is protected by bank-grade SSL encryption.
We never sell your personal data to third parties. Your information stays within Jutaboy.
Access, correct, or request deletion of your personal data at any time via our support team.
Data processing practices comply with applicable data protection regulations and our gaming licence obligations.
Jutaboy ("we", "us", "our", "the Company", "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our services. This Privacy Policy ("Policy") applies to all users ("you", "your", "User") who access the Jutaboy website at jutaboy.cam and any associated mobile or digital services offered under the Jutaboy brand.
This Policy explains in plain English what personal data we collect from you, why we collect it, how we use it, how long we keep it, who we share it with, and what your rights are in relation to that data. It is intended to be transparent, readable, and genuinely informative — not a document designed to obscure how your information is handled.
By accessing the Jutaboy platform, creating an account, depositing funds, or interacting with any of our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein, to the extent that consent is the applicable legal basis for such processing.
The processing of your personal data by Jutaboy is carried out in accordance with the data protection principles applicable under our operating jurisdiction. Jutaboy's data practices are also informed by internationally recognised data protection standards. Users in Malaysia are encouraged to review this Policy fully before creating an account.
The following definitions apply throughout this Privacy Policy:
Any information that identifies, or could reasonably be used to identify, a living natural person — either directly (e.g., full name, NRIC number) or indirectly in combination with other information (e.g., IP address plus device fingerprint).
Any operation performed on Personal Data, including but not limited to: collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure, and destruction.
Jutaboy, as the entity that determines the purposes and means by which Personal Data is processed.
A third party that processes Personal Data on behalf of Jutaboy, such as payment gateway providers, KYC verification services, and fraud prevention platforms.
The identity and age verification process conducted by Jutaboy to fulfil its regulatory obligations and to confirm that Users are who they claim to be.
Small text files stored on your device by your browser at the request of a website, used to recognise your device on return visits and to enable platform functionality and analytics.
Jutaboy collects personal data from you directly and automatically. The categories of data we collect are set out below.
3.1 Data You Provide Directly
3.2 Data Collected Automatically
We process your personal data for the following specific purposes. For each purpose, we have identified the type of data involved and the applicable legal basis (see Section 5).
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and identity verification (KYC) | Registration data, KYC documents | Contract; Legal obligation |
| Processing deposits and withdrawals via Malaysian payment methods | Financial data, KYC documents | Contract |
| Fraud prevention and anti-money laundering (AML) screening | All categories | Legal obligation; Legitimate interest |
| Providing customer support in English, Bahasa Melayu, and Chinese | Registration data, support communications | Contract |
| Responsible gambling monitoring and enforcement | Usage data, responsible gambling data | Legal obligation; Legitimate interest |
| Marketing communications (where you have opted in) | Registration data, usage data | Consent |
| Platform security, technical maintenance, and uptime monitoring | Device & technical data, usage data | Legitimate interest |
| Regulatory reporting and compliance with gaming licence obligations | All categories | Legal obligation |
| Analytics and platform improvement | Cookie & tracking data, usage data | Legitimate interest; Consent |
Jutaboy processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:
Processing is necessary for the performance of the contract between you and Jutaboy — specifically, to provide you with access to the gaming platform, process deposits and withdrawals, and administer your account.
Processing is necessary for Jutaboy to comply with legal obligations, including KYC verification, anti-money laundering (AML) requirements, responsible gambling mandates, and reporting obligations under our gaming licence.
Processing is necessary for Jutaboy's legitimate business interests, including fraud prevention, platform security, abuse detection, and improving the quality of our services — provided these interests are not overridden by your rights and freedoms.
Where we rely on consent as our legal basis — for example, in relation to marketing communications or non-essential cookies — we will obtain your explicit consent before commencing that processing. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
Jutaboy does not sell your personal data to third parties. We do not monetise your information or share it with advertisers for their independent marketing purposes. However, we share your personal data with specific categories of third parties where necessary to provide our services or to comply with legal obligations:
All third parties with whom we share personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws. We do not permit third-party processors to use your data for their own commercial purposes.
Jutaboy uses cookies and similar tracking technologies on its website and platform. Cookies help us provide core platform functionality, recognise returning users, and understand how the platform is being used so we can continuously improve it.
7.1 Types of Cookies We Use
These are essential for the platform to function. They enable you to log in, navigate between pages, and access secure areas. They cannot be disabled without severely impairing your ability to use the platform. No consent is required for these cookies.
These remember your preferences — such as your chosen language, currency display (MYR), and lobby layout settings — so you don't have to reconfigure them on each visit.
These help us understand how visitors interact with our platform — which pages are most visited, where users navigate from, and how long sessions last. This information is used in aggregate form to improve platform performance and usability. These cookies require your consent.
These assist in fraud detection, bot prevention, and the enforcement of our security protocols. They help us identify suspicious login patterns and unusual account activity.
7.2 Managing Cookies
You can manage or disable cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies. However, disabling strictly necessary cookies will prevent you from accessing your Jutaboy account. Disabling analytics or functional cookies may reduce the quality of your experience without preventing access.
Jutaboy retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and as required by applicable legal, regulatory, and licensing obligations. The following retention periods generally apply:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Regulatory / AML obligation |
| KYC identity documents | 5 years after account closure | Anti-money laundering regulation |
| Transaction and financial records | 5–7 years after transaction date | Financial regulation / gaming licence |
| Responsible gambling records | Duration of self-exclusion + 5 years | Regulatory obligation |
| Customer support communications | 3 years after last interaction | Legitimate interest / dispute resolution |
| Marketing consent records | Until consent withdrawn + 2 years | Legal compliance |
| Analytics / cookie data | 13 months (rolling) | Legitimate interest |
After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where data must be retained for a longer period due to an ongoing investigation, legal claim, or regulatory inquiry, the retention period will be extended accordingly.
Jutaboy implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While we implement rigorous security measures, no system is entirely impenetrable. We strongly encourage you to use a strong, unique password for your Jutaboy account, to enable 2FA, and to never share your login credentials with any third party.
Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to the personal data that Jutaboy holds about you:
You have the right to request a copy of the personal data we hold about you and to be informed about how it is being processed. We will respond to verified access requests within 30 days.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain information directly through your account settings.
You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal and regulatory data retention obligations, which may override your erasure request in whole or in part.
You may request that we temporarily suspend processing of your data while a dispute about its accuracy or our legal basis for processing is resolved.
Where we process your data by automated means on the basis of your consent or contractual necessity, you have the right to receive that data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on our legitimate interests, including profiling. You may also object to processing for direct marketing purposes at any time, without providing reasons.
Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time by contacting our support team or using the opt-out mechanisms provided in our marketing communications. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact our Data Protection team via live chat or email (see Section 14). We may need to verify your identity before processing your request. We will respond within 30 days of receiving a verified request. In complex cases, we may extend this by a further 60 days with prior notification.
Jutaboy's services are strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under the age of 21. By registering an account, you represent and warrant that you are at least 21 years of age.
Where we discover or have reason to believe that personal data has been collected from a person under the age of 21, we will take immediate steps to: (a) suspend and close the relevant account; (b) delete all personal data associated with the underage User; and (c) reverse and return any deposits made, subject to the outcome of any investigation.
If you are a parent or guardian and believe that a minor in your care has registered an account with Jutaboy, please contact our support team immediately via live chat or email. We take underage gambling extremely seriously and will act promptly on any credible report.
Jutaboy operates an internationally facing platform and, as a consequence, your personal data may be transferred to and processed in jurisdictions outside of Malaysia. This may occur, for example, when data is processed by our KYC verification provider, gaming software partner, or fraud prevention service, each of which may operate infrastructure in multiple countries.
Where personal data is transferred internationally, Jutaboy ensures that appropriate safeguards are in place to protect that data, including:
By using the Jutaboy platform, you acknowledge that your personal data may be transferred internationally as described in this section, subject always to the safeguards described above.
Jutaboy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify you by:
Your continued use of the Jutaboy platform after the effective date of any amended Privacy Policy constitutes your acceptance of the changes. If you do not accept the amended Policy, you should cease using the platform and request account closure. We recommend that you review this Policy periodically to remain informed of how we handle your personal data.
The current and binding version of this Privacy Policy will always be accessible at jutaboy.cam/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data subject rights as described in Section 10, please contact our Data Protection team using the details below.
Available 24 hours a day, 7 days a week, in English, Bahasa Melayu, and Chinese. Average response time: 3–5 minutes. This is the fastest route for urgent privacy queries.
You may send written requests, including Subject Access Requests and erasure requests, to support@jutaboy.cam (plain text — not a clickable link). Please include "Privacy Request" in your subject line and provide sufficient detail to allow us to identify your account and verify your identity. We will acknowledge receipt within 3 business days and aim to respond fully within 30 days.
If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction, or to the dispute resolution body designated under Jutaboy's gaming licence. Details of the escalation process are available via live chat.
Six commitments that define how Jutaboy handles your personal data — clearly and without ambiguity.
We collect only the personal data that is strictly necessary for the operation of your account and the fulfilment of our legal obligations. We do not collect data speculatively or beyond what is required.
Your personal data is never sold to advertisers, data brokers, or any third party for their independent commercial use. This is an absolute commitment — not subject to exception.
Every category of data we hold has a defined retention period. Once that period expires, data is securely deleted or anonymised. We do not retain data indefinitely without purpose.
Data in transit is protected by 256-bit TLS. Sensitive stored data is encrypted at rest. Access to personal data is restricted to authorised personnel on a need-to-know basis.
Access, correct, port, restrict, or request erasure of your data. Object to marketing at any time. Withdraw consent instantly. We respond to all verified rights requests within 30 days.
In the event of a data breach that poses a meaningful risk to you, we will notify you and relevant authorities within the timeframe required by law. No hiding incidents.
At Jutaboy, your privacy isn't an afterthought — it's built into how we operate. If you have any questions about how your data is handled, our 24/7 team is here to help.
For players aged 21 and above only. Gamble responsibly.