Reference

Privacy Policy

We collect device identifiers, payment records and account activity to run your jutabet88 wallet, process Touch 'n Go eWallet, Boost and GrabPay deposits, and keep login sessions secure.

Account data handlingPayment-record storageDevice identifier useContact rights explained
jutabet88 Privacy Policy
POLICY QUESTIONS

Contact Paths for Privacy Requests

Need to update your registered email, request a copy of stored data, or ask us to delete closed-account records? Open the in-app live chat from the account menu, email our data team at the address shown in account settings, or visit the Help section and submit a ticket tagged Privacy. Most data-access requests are answered within five business days; deletion requests take up to fourteen days because we verify account ownership first.

Team online

Live chat

Tap the account menu, choose Help & Support, then Live Chat. Select Privacy Request from the topic list and an agent will ask which records you want to review or remove.

Email team

Send your request to the data-protection email shown in Account Settings → Privacy. Include your registered mobile number so we can match the account and reply within five business days.

Ticket system

Go to Help, tap Submit Ticket, pick Privacy as the category. Describe your request and attach a screenshot of your account dashboard if you want faster verification.

HOW WE PROTECT IT

Data Handling & Account Security

Your account password is hashed before storage, session tokens expire after twenty-four hours of inactivity, and payment details move between servers over TLS encryption. We run nightly backups of transaction history so you can download a statement covering the past ninety days, and we delete session logs automatically after thirty days. Cookie consent is recorded in your browser; withdraw it any time through the footer privacy link, though functional cookies remain required for login persistence.

Hashed passwords

We store only a salted hash of your password, never the plain text. Even our own database admins cannot reverse it; password-reset flows send a one-time link to your registered email instead of showing the old value.

Cookie control

When you first visit, a banner lets you accept or decline marketing cookies. Functional cookies stay active to keep your session alive across browser tabs; you can clear them through the footer privacy link any time.

Session expiry

Tokens expire after twenty-four hours of no activity. If you return the next day, enter your OTP again; this protects your wallet balance when you leave your phone unlocked on a shared table.

Data retention

Transaction history stays accessible for ninety days from the date of each bet or deposit. Session logs are purged after thirty days.

Privacy Policy FAQ

We collect your mobile number for OTP login, email for account alerts, date of birth to confirm age eligibility, and device ID to recognise returning sessions. Payment metadata comes later when you add Touch 'n Go eWallet, Boost or GrabPay as a deposit method.

No. Your e-wallet PIN stays inside the Touch 'n Go eWallet, Boost or GrabPay app; we see only a masked transaction reference and timestamp once the transfer completes. We never ask for or store any wallet password or bank-login credential.

Yes. Go to Account Settings, tap Data Export, choose the date range, and we will email a CSV file within two business days. The export includes deposit timestamps, withdrawal requests, bet records, and the session IPs for each login during that window.

Open Account Settings, tap Contact Details, enter the new email, then confirm it with the OTP sent to your mobile. To delete stored email entirely, submit a privacy-request ticket and we will remove it within fourteen days after verifying account ownership.

We keep a minimal compliance record—account ID, closure date, device fingerprint—for six months to prevent fraud re-registration, then delete everything except anonymised hashes used for platform-wide security checks. Your name, mobile number, email and payment history are wiped permanently after that six-month window.

We share masked transaction IDs with payment gateways to confirm deposit or withdrawal completion, and we send device fingerprints to our fraud-detection vendor when a withdrawal comes from an unusual location. Marketing partners never receive your mobile number or email unless you opt in through the account-settings toggle.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.