Privacy Policy

1Introduction

i1juta ("the Platform", "we", "us", "our") operates the online gaming and sports betting website accessible at https://i1juta.cam. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered account holders and visitors browsing the website.

This Privacy Policy ("Policy") sets out how i1juta collects, processes, stores, shares, and protects your personal information in connection with your use of the Platform. It also explains the rights you hold in relation to your personal data and how you may exercise those rights.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall agreement between you and i1juta.

2Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a living individual directly or indirectly — including name, identification number, contact details, IP address, device identifiers, and transactional records.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means i1juta, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Subject" means the individual whose Personal Data is being processed — in this context, you, the registered User or website visitor.
• "KYC Data" means identity verification documents and related information collected as part of the Know Your Customer (KYC) compliance process, including government-issued identification, proof of address, and facial verification images.
• "Cookies" means small text files stored on your device by the Platform's web application for session management, functionality, analytics, and security purposes.

3Data We Collect

i1juta collects the following categories of personal data in the course of providing its services:

3.1 Account Registration Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for age verification — 21+ enforcement)
• Email address and mobile phone number
• Chosen username and hashed account password
• Residential address

3.2 Identity Verification (KYC) Data

• Copies of valid Malaysian government-issued identification (MyKad, Passport, or Driver's Licence)
• Proof of residential address documents (utility bill or bank statement dated within 3 months)
• Facial verification image (selfie holding identification document)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records denominated in MYR
• Payment method identifiers (e.g., masked bank account references, DuitNow registered details, e-wallet IDs for Touch 'n Go eWallet, Boost, GrabPay)
• Transaction timestamps, amounts, and processing status records

3.4 Gaming & Betting Activity Data

• Game play history, bet amounts, win/loss records, and session durations
• Sports betting selections, stake amounts, and outcome records
• Responsible gambling tool settings (deposit limits, session timers, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation data
• Device type, operating system, browser type, and version
• Session logs, login timestamps, and authentication event records
• Cookie identifiers and analytics data as described in Section 10

3.6 Communications Data

• Records of live chat support conversations and email correspondence
• Feedback, complaint submissions, and dispute documentation

4How We Collect Data

i1juta collects Personal Data through the following channels:

5Data Processing & Use

i1juta processes your Personal Data for the following specific purposes:

• Account creation and management: To establish, maintain, and administer your registered account, including authentication and account security.
• Identity verification (KYC compliance): To verify your identity and confirm you meet the 21+ age requirement before processing withdrawal requests, as required under our anti-fraud and responsible gambling obligations.
• Payment processing: To facilitate deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank in Malaysian Ringgit (MYR).
• Gaming and betting services: To operate the games library and sportsbook, record wager outcomes, and credit winnings to your account balance.
• Bonus and promotion management: To track wagering requirements, validate bonus eligibility, and credit or expire promotional funds in accordance with applicable promotion terms.
• Customer support: To investigate and resolve enquiries, complaints, and disputes submitted via live chat or email.
• Responsible gambling compliance: To administer deposit limits, session reminders, cooling-off periods, and self-exclusion requests, and to identify patterns of behaviour that may indicate gambling harm.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised access to the platform.
• Legal and regulatory compliance: To fulfil obligations under applicable financial crime legislation, gaming regulations, and any lawful requests from competent authorities.
• Platform improvement: To analyse aggregated usage data in order to improve platform performance, user experience, and product features. Such analysis uses anonymised or pseudonymised data wherever possible.
• Marketing communications: Where you have provided consent, to send promotional offers, bonus notifications, and platform updates to your registered email address. You may withdraw consent at any time by contacting support.

6Legal Basis for Processing

i1juta processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), KYC, age verification, and other regulatory requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring, and improvement of our services, where such interests are not overridden by your fundamental rights.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — for example, direct marketing communications. Consent may be withdrawn at any time.

7Data Sharing & Third Parties

i1juta does not sell, rent, or trade your Personal Data to any third party for their independent commercial purposes. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in Section 5:

• KYC verification providers: Identity verification service partners engaged to assist with document authentication and age verification compliance.
• Payment processors: Financial institutions and payment technology providers facilitating transactions via DuitNow, FPX, and connected Malaysian banking partners (including Maybank, CIMB, Public Bank, Hong Leong Bank) and e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay).
• Game content providers: Licensed gaming studios that supply the slot, live casino, and other game titles available on the Platform. Game providers may receive session and wager data necessary to operate their titles.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory demand, i1juta will disclose Personal Data to competent authorities. We will endeavour to notify affected users where legally permitted to do so.
• IT and security service providers: Cloud infrastructure, cybersecurity, and data storage providers operating under contractual data processing agreements that require them to protect your data to the same standards applied by i1juta.

8Data Retention

i1juta retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active accounts: Personal Data associated with active accounts is retained for the duration of the account's existence and for a minimum of five (5) years following account closure, in line with standard financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following account closure to satisfy anti-money laundering regulatory obligations.
• Transaction records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Customer support chat logs and email correspondence are retained for three (3) years from the date of the interaction, unless required for longer in connection with an active dispute.
• Marketing consent records: Records of consent and withdrawal of consent for marketing communications are retained for the duration of the account and five (5) years thereafter.

Upon the expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

9Security Measures

i1juta implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and i1juta's servers.
• AES-256 encryption for Personal Data and KYC documents stored at rest on our servers.
• Two-Factor Authentication (2FA) available to all registered users as an additional layer of account access security.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need may access Personal Data in the course of their duties.
• Regular penetration testing and security audits conducted to identify and remediate vulnerabilities in the platform's infrastructure.
• Intrusion detection systems monitoring for suspicious network activity and unauthorised access attempts around the clock.

10Cookies & Tracking Technologies

i1juta uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the platform, including your ability to log in and access account features. i1juta does not use cookies for third-party advertising or to track your activity on other websites.

11Your Rights

As a Data Subject, you hold the following rights in relation to your Personal Data held by i1juta. To exercise any of these rights, please contact our support team via live chat or by email at [email protected] (plain text — not a clickable link).

i1juta will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for processing data rights requests unless they are manifestly unfounded, excessive, or repetitive.

12Minors & Age Policy

The i1juta platform is strictly intended for use by individuals who are at least 21 years of age. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

Age verification is conducted as part of our KYC process. Any account where the registered user cannot be confirmed as aged 21 or above will be suspended pending satisfactory age verification, or permanently closed where verification fails. If you believe a minor has registered an account on the i1juta platform, please contact our support team immediately.

13Policy Amendments

i1juta reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Where material changes are made — particularly those that may affect your rights or the way your data is processed — we will provide at least 14 days' advance notice via email to your registered address and/or through a prominent notice on the Platform.

The version date displayed in the Table of Contents and at the footer of this page indicates when the Policy was last updated. We recommend reviewing this Policy periodically. Your continued use of the i1juta platform following the effective date of any amendments constitutes your acceptance of the revised Policy.

14Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the i1juta privacy and data team using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat function on the i1juta platform. This is the fastest route for data rights requests and privacy queries.
• Email: [email protected] — please include "Privacy Request" in your subject line for prioritised routing. (Plain text — this is not a clickable link.)

We aim to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 calendar days of receipt. For data erasure, portability, or access requests, please have your account username and a copy of a valid identification document ready to facilitate identity verification.