This Privacy Policy was last reviewed and updated on 1 January 2026. Continued use of the ijuta platform constitutes acceptance of the current version.
This Privacy Policy ("Policy") issued by ijuta ("ijuta", "we", "us", "our"), the operator of the online gaming platform accessible at https://ijuta.cam (the "Platform"). It sets out how we collect, use, store, share, and protect personal data belonging to our users ("you", "UserPlayer") in connection with your use of the Platform and its associated services.
ijuta is committed to maintaining the privacy and security of your personal data. This Policy reflects our obligations under applicable international data protection standards and our own internal data governance framework. While ijuta is not subject to the Malaysian Personal Data Protection Act 2010 ("PDPA") in the same manner as locally incorporated entities, we have chosen to align our practices with the principles of the PDPA as a baseline standard, given that a significant portion of our user base consists of Malaysian players.
This Policy should be read alongside our Terms and Conditions, which govern your use of the Platform. By accessing or using the Platform, you acknowledge that you have read and understood this Policy.
Scope: This Policy applies to all personal data collected through the Platform, including data provided during account registration, identity verification (KYC), deposits and withdrawals via Malaysian payment methods (Maybank2u, CIMB, Touch 'n Go eWallet, DuitNow, FPX, etc.), customer support interactions, and your use of Games and betting markets on the Platform.
For the purposes of this Policy, the following terms have the meanings set out below:
- "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and device identifiers.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
- "Data Controller" means ijuta, the entity that determines the purposes and means of processing Personal Data collected via the Platform.
- "Data Processor" means any third party that processes Personal Data on behalf of ijuta under a data processing agreement.
- "KYC" means Know Your Customer — the identity and age verification process required of all Players prior to withdrawal processing.
- "Cookies" means small text files placed on your device by the Platform for purposes of functionality, analytics, and session management.
- "Sensitive Personal Data" means Personal Data that warants enhanced protection, including but not limited to financial account information, identity document details, and data relating to health or disability where provided in connection with a responsible gambling request.
ijuta collects the following categories of Personal Data from Users of the Platform:
| Category |
Examples |
When Collected |
| Identity Data |
Full legal name, date of birth, nationality, MyKad or Passport number |
Registration & KYC verification |
| Contact Data |
Email address, Malaysian mobile number, city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru) |
Registration & support interactions |
| Financial Data |
Payment method details (bank account / e-wallet identifier), transaction history in MYR |
Deposits & withdrawal processing |
| Identity Documents |
Copies of MyKad, Passport, utility bills, bank statements submitted for KYC |
KYC verification |
| Technical Data |
IP address, device type, browser type and version, operating system, session duration |
Automatically on platform access |
| Usage Data |
Games played, bet amounts, wagering history, pages visited, features used |
Automatically during platform use |
| Communication Data |
Live chat transcripts, email correspondence, WhatsApp messages with support |
During customer support interactions |
| Responsible Gambling Data |
Deposit limits, self-exclusion requests, session limit preferences |
When tools are activated by the Player |
We do not intentionally collect Sensitive Personal Data beyond what is listed above. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or biometric identifiers.
ijuta collects Personal Data through the following means:
- Directly from you: When you create an Account, complete the KYC process, make a deposit or withdrawal, contact our support team, or complete any form on the Platform.
- Automatically: When you access or use the Platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies as described in Section 11.
- From third-party payment providers: When you make a deposit or withdrawal using Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or other supported payment methods, our payment processing partners may share transaction confirmation data with us for the purpose of crediting or debiting your Account Balance.
- From identity verification services: Where we engage a third-party KYC verification provider to assist with age and identity checks, that provider may share verification outcome data with us.
- From fraud prevention services: We may receive data from fraud detection and anti-money laundering screening services to protect the Platform and its users.
ijuta processes your Personal Data for the following purposes:
- Account Creation and Management: To register your Account, verify your identity and age, and maintain your Account in accordance with our Terms and Conditions.
- Service Delivery: To provide access to Games, sports betting markets, live casino tables, and all other services available via the Platform.
- Payment Processing: To process deposits and withdrawals in MYR via your chosen Malaysian payment method and maintain accurate transaction records.
- KYC and Regulatory Compliance: To verify your identity, conduct anti-money laundering (AML) checks, and meet our obligations under applicable international gaming licence conditions.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other illegal activity on the Platform.
- Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
- Responsible Gambling: To administer self-exclusion requests, deposit limits, session timers, and other responsible gambling tools you activate on your Account.
- Marketing Communications: Where you have provided consent, to send you information about promotions, bonuses, and platform updates via email. You may withdraw this consent at any time.
- Platform Improvement: To analyse usage patterns, identify bugs and performance issues, and improve the overall player experience.
- Legal Obligations: To comply with legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.
ijuta relies on the following legal bases for processing your Personal Data:
- Contractual Necessity: Processing is necessary to perform the contract between you and ijuta (i.e., to provide the services described in our Terms and Conditions), including Account management, game access, and payment processing.
- Legal Obligation: Processing is necessary to comply with legal obligations applicable to ijuta, including KYC verification, AML compliance, and regulatory reporting under our international gaming licence.
- Legitimate Interests: Processing is necessary for the legitimate interests of ijuta or a third party, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
- Consent: Where we rely on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
ijuta does not sell, rent, or trade your Personal Data to unrelated third parties for their own commercial purposes. We share Personal Data only in the following circumstances and only to the extent necessary:
- Payment Processors: Personal and financial data is shared with licensed payment service providers (including those operating the Maybank2u, CIMB, Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and Public Bank payment rails) solely for the purpose of processing your transactions.
- KYC and Identity Verification Providers: Identity document data is shared with our contracted KYC verification service providers for the purpose of completing age and identity verification.
- Fraud Prevention and AML Services: Technical Data and transaction data may be shared with fraud detection and anti-money laundering screening services.
- Game and Platform Service Providers: Aggregated or pseudonymised Usage Data may be shared with our game studio partners for technical support, RNG auditing, and game performance purposes.
- Regulatory and Law Enforcement Authorities: We may disclose Personal Data to competent regulatory or law enforcement authorities where required to do so by applicable law, court order, or in connection with our obligations under our international gaming licence.
- Professional Advisers: Personal Data may be shared with our legal, financial, or compliance advisers where necessary in connection with their professional services, subject to professional confidentiality obligations.
Third-Party Contracts: All third parties with whom we share Personal Data are required to process that data only for the specific purpose for which it was shared and in accordance with data processing agreements that reflect appropriate security and confidentiality standards.
As ijuta operates under international licensing and works with globally distributed service providers, your Personal Data may be transferred to, stored in, or processed in countries outside of Malaysia. These may include countries whose data protection laws differ from those applicable in Malaysia.
Where such transfers occur, ijuta ensures that appropriate safeguards are in place to protect your Personal Data, including contractual data protection obligations imposed on receiving parties and, where applicable, transfers to jurisdictions recognised as providing an adequate level of data protection.
By creating an Account and using the Platform, you acknowledge and consent to the transfer of your Personal Data to other jurisdictions as described in this section, subject to the safeguards outlined above.
ijuta retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. Our standard retention periods are as follows:
- Account Data and Transaction Records: Retained for a minimum of five (5) years following Account closure, in order to meet our AML compliance obligations and respond to any legal disputes that may arise.
- KYC Documents: Retained for a minimum of five (5) years following Account closure or the completion of the relevant KYC process, in accordance with international gaming licence requirements.
- Communication Records (Live Chat, Email): Retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
- Technical and Usage Data: Typically retained in an identifiable form for up to twelve (12) months, after which it is aggregated or anonymised for analytical purposes.
- Responsible Gambling Records: Self-exclusion and limit-setting records are retained for the duration of the relevant restriction and for a minimum of five (5) years thereafter.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.
ijuta implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
- Encryption of sensitive Personal Data (including identity documents and financial information) at rest.
- Role-based access controls ensuring that only authorised personnel can access Personal Data, limited to what is necessary for their specific function.
- Regular independent security audits and penetration testing of the Platform's infrastructure.
- Secure data centre facilities with physical access controls and environmental protections.
- Incident response procedures designed to detect, contain, and notify affected parties of any data security breaches in a timely manner.
While we apply robust security measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your Account login credentials and for notifying us immediately if you suspect unauthorised access to your Account.
ijuta uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following categories of cookies:
-
Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable core features such as secure login sessions, Account management, and fraud prevention. They cannot be disabled without affecting the functionality of the Platform.
Session Management
Security Tokens
Load Balancing
-
Functional Cookies: Used to remember your preferences (such as language selection and display settings) and to provide a more personalised experience on the Platform.
Language Preferences
Display Settings
-
Analytical Cookies: Used to collect aggregated information about how Players use the Platform — such as which pages are visited most frequently and how long sessions last — enabling us to improve Platform performance and user experience.
Page Views
Session Duration
Device Type
You may manage cookie preferences through your browser settings. Note that disabling Strictly Necessary Cookies will affect your ability to use the Platform. We do not use cookies for cross-site tracking or to build advertising profiles.
Subject to applicable law and our regulatory obligations, you have the following rights in respect of your Personal Data held by ijuta:
- Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how we use it.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you.
- Right to Erasure: You have the right to request deletion of your Personal Data in certain circumstances, subject to our legal and regulatory retention obligations (see Section 9).
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
- Right to Data Portability: You have the right to request that we provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another controller, where technically feasible.
- Right to Object: You have the right to object to processing based on legitimate interests, including where processing is used for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact our Data Protection team via the contact details in Section 15. We aim to respond to all valid requests within thirty (30) calendar days. In some cases, we may need to verify your identity before processing your request.
Please Note: Certain rights are subject to limitations where retention or continued processing is required by law (e.g., for AML compliance or the resolution of a live dispute). We will always explain any such limitation clearly at the time of your request.
The ijuta Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from individuals under the age of 21.
We require all registering users to confirm that they meet the minimum age requirement at the time of registration. KYC verification — including submission of a government-issued identity document such as a Malaysian MyKad or Passport — is mandatory before any withdrawal is processed and may be requested at any time.
If we become aware that Personal Data has been collected from an individual who is under 21 years of age, we will take prompt action to suspend the relevant Account, void any associated transactions, and securely delete the Personal Data in question.
If you are a parent or guardian and believe that a minor in your care has provided Personal Data to ijuta, please contact us immediately using the details in Section 15.
ijuta reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will provide advance notice to registered Players via email notification or an on-platform notice prior to the amended Policy taking effect.
The "Last Reviewed" date displayed at the top of this Policy and in the page hero section will be updated to reflect the date on which any amendments take effect. We encourage you to review this Policy periodically.
Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not accept the amended Policy, you must cease using the Platform and may close your Account in accordance with our Terms and Conditions.