Privacy Policy jutaboy — Our Commitment to Protecting Your Data

1Introduction and Scope of Privacy Policy

Jutaboy ("we", "the platform") takes the privacy of every individual who interacts with our platform seriously. This Privacy Policy explains in detail how we collect, use, store, protect, and in certain circumstances, share your personal information.

This policy applies to all jutaboy platform users, including unregistered website visitors, active registered members, and former members whose accounts have been closed. It covers all channels of interaction with jutaboy — the jutaboy.onl website, the jutaboy mobile app, and communications via Live Chat, email, and other support channels.

We recognize that your trust is the most valuable asset we hold. Without it, no platform can operate with integrity. That is why we never treat data handling as a mere routine task — it is a moral responsibility we take seriously every day.

2Types of Personal Data We Collect

Jutaboy collects personal data necessary to provide a safe, efficient, and responsible service. The following are the categories of data we collect and the reasons for collecting them:

We only collect data that is strictly necessary for the stated purpose. This data minimization principle ensures we do not gather excessive information that could increase privacy risks to you.

3How We Use Your Data

Every piece of information you provide to jutaboy is used for a clear and lawful purpose. We do not use your data for purposes unrelated to the services you use. Below are the primary uses of member personal data:

• Processing account registration and verifying your identity through a secure and trusted KYC process.
• Enabling deposits, withdrawals, and all financial transactions to run smoothly and securely through our integrated payment system.
• Detecting and preventing fraud, money laundering, unauthorized access, and any suspicious activity in your account.
• Sending important notifications related to your account, including transaction confirmations, security alerts, and promotional updates (only if you have not unsubscribed from marketing communications).
• Providing effective customer support — support staff require access to your account records to resolve issues efficiently.
• Fulfilling legal and compliance obligations, including reporting to the relevant authorities when required by Malaysian law.
• Analyzing aggregated and anonymized usage patterns to improve our products, user experience, and overall platform security.
• Ensuring you meet responsible gaming requirements and supporting the self-protection programs you choose to activate.

We do not make any automated decisions that significantly affect you based solely on data processing. Important decisions, such as account termination or withdrawal restrictions, always involve human review.

4Security Measures and Data Encryption

Jutaboy continually invests in the latest security infrastructure to ensure your personal data remains protected against cyber threats, data breaches, and unauthorized access. The following are the layers of protection we employ:

• Transit Encryption: All communications between your browser or app and jutaboy's servers are encrypted using TLS 1.3 with AES-256-bit encryption — the same security standard used by leading banking institutions.
• Storage Encryption: Sensitive data such as financial information and KYC documents is encrypted at rest in our database, ensuring it remains unreadable even to technical staff without proper authorization.
• Layered Access Control: Access to member records is strictly limited based on the least-privilege principle — each staff member can only access the data required for their specific role.
• Two-Factor Authentication (2FA): Our system supports 2FA for member accounts and it is mandatory for all internal access by the jutaboy team to data management systems.
• Regular Security Audits: Our platform undergoes third-party security audits by independent firms every six months to identify and address any potential vulnerabilities.
• 24/7 Monitoring: Intrusion detection systems (IDS) and security information systems (SIEM) monitor platform traffic around the clock to detect and respond to threats in real time.

5Data Sharing with Third Parties

Jutaboy understands that your trust is not something to be taken lightly. We have a strict policy regarding the sharing of member personal data with external parties. Your data will not be shared except in the following circumstances:

• Payment Service Provider: Information required to process transactions is shared with payment gateways and banking partners that have undergone rigorous security assessments and are bound by valid confidentiality agreements.
• KYC Service Provider: The identity verification process involves sharing documents with a certified third-party KYC service provider operating under strict security standards.
• Legal Authority: jutaboy will disclose member information to the relevant authorities when required by court order, warrant, or applicable Malaysian legislation. We will not disclose beyond what is legally required.
• Technical Service Provider: Cloud infrastructure and technical service providers that help operate the platform may have limited access to data for operational purposes only, and all are bound by strict data protection agreements.
• Fraud Investigation: In cases involving serious fraud or security threats, relevant information may be shared with other platforms in the industry for mutual protection and crime prevention purposes.

All third parties receiving jutaboy member data are required to comply with data protection standards at least equivalent to our own. We have zero tolerance for any partner that fails to meet these standards.

6Cookies, Tracking, and Similar Technologies

The jutaboy platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand platform usage patterns. Below are the types of cookies we use:

• Essential Cookies (Required): Required for core platform operations such as login session management, CSRF security, and language preferences. These cookies cannot be disabled as they are fundamental to platform functionality.
• Performance Cookies: Collecting anonymous information about how users interact with the platform — most visited pages, response times, and errors encountered. This information is used solely to improve platform performance.
• Functional Cookies: Remembering your preferences such as language, display settings, and gaming preferences to deliver a more personalized experience.
• Analytics Cookies: Helping us understand user demographics and aggregated usage patterns to make better product decisions. This data is not linked to any individual's personal identity.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality and your login experience. Please refer to your browser's documentation for detailed instructions on managing cookies.

7Data Retention Period

Jutaboy only retains your personal data for as long as necessary to fulfill the purposes stated in this policy, or as required by Malaysian law. The following are our data retention guidelines:

• Active account data is retained for the duration your account remains active and for 7 years after account closure, in accordance with financial reporting and legal compliance requirements.
• Financial transaction records are retained for a minimum of 7 years from the transaction date in compliance with Malaysia's anti-money laundering (AML) legal requirements.
• KYC documents and identity verification records are retained for 5 years after account closure or the end of the business relationship, whichever is later.
• Customer support communication logs are retained for 2 years from the date of interaction for reference purposes and dispute resolution should the need arise.
• Technical data such as access logs and IP logs is retained for 90 days for security forensics and cyber threat detection purposes.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For data stored on physical media, established secure destruction procedures will be followed.

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and jutaboy's internal policies, you have the following rights regarding the personal data we hold about you:

To submit any request relating to the above rights, please contact our data protection team via Live Chat or support email, clearly stating the type of request. Your identity will be verified before any request is processed to safeguard your data security.

9Children's and Minors' Privacy

Jutaboy is an adult entertainment platform restricted to individuals aged 21 and above. We do not knowingly collect personal data from any individual below the specified age limit.

If we discover that personal data belonging to someone below the permitted age has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe that a minor has registered on our platform, please contact our support team immediately.

10Changes to This Privacy Policy

Jutaboy reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this document with the new effective date.
• Sending notifications to all registered members via email and/or in-platform notifications at least 7 days before changes take effect.
• For highly material changes affecting your privacy rights, we may require explicit acknowledgement before you can continue using the platform.
• Previous versions of the Privacy Policy will be archived and can be requested from the support team for historical reference if needed.

Your continued use of the jutaboy platform after the effective date of the updated Privacy Policy constitutes your acceptance of the latest version. We encourage you to review this page periodically to stay informed about how we manage your personal data.

11Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist. jutaboy has a dedicated Data Protection Officer (DPO) appointed specifically to ensure privacy policy compliance and handle member inquiries.

• Support Email: [email protected] — Replies within 24–48 hours on business days.
• Live Chat: Available 24/7 in Bahasa Malaysia and English via the chat icon at the bottom corner of the platform.
• Guaranteed Response Time: All privacy-related queries will be responded to within 3 business days; data access requests are resolved within 21 business days.
• Official Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the supervisory authority for the PDPA 2010.

We take every privacy-related inquiry seriously and are committed to providing clear, accurate, and helpful responses to every member who contacts us. Your trust is jutaboy's number one priority.