1 Personal Information We Collect
Jualtoto collects personal information from you in several ways when you register, use the platform or contact our support team. The type of information collected depends on how you interact with our platform.
| Data Category |
Example Information |
Primary Purposes |
| Identity Data |
Full name, date of birth, identification card number |
KYC verification and fraud prevention |
| Contact Data |
Email, phone number, address |
Communication and customer support |
| Financial Data |
Bank account information, transaction records |
Deposit and withdrawal processing |
| Technical Data |
IP address, device type, web browser |
Account security and fraud detection |
| Usage Data |
Game records, browsing habits, session duration |
Platform improvements and responsible gaming |
Data Minimisation Principle: jualtoto only collects data that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data or medical records unless required by law.
In addition to information you provide directly, we also collect data automatically through cookies, server logs, and other tracking technologies when you use the jualtoto platform or mobile app. This information is used solely to improve the user experience and platform security.
2 How We Use Your Information
Every piece of data we collect has a clear and legitimate purpose. jualtoto does not use your information for undisclosed purposes without obtaining your consent beforehand. The following are the primary purposes for data use:
- Account Management: To create, manage, and protect your account on the jualtoto platform, including secure login and two-factor authentication.
- Transaction Processing: To process deposits, withdrawals, and all other financial transactions accurately and securely.
- Identity Verification (KYC): To fulfil legal compliance obligations, including age verification and anti-money laundering requirements.
- Customer Support: To provide effective support when you reach out via live chat, email, or other support channels.
- Platform Security: To detect and prevent fraudulent activity, hacking attempts, and system abuse that could compromise the security of all users.
- Service Improvements: To analyse usage patterns and improve platform features, gaming experience, and app usability.
- Marketing Communications: To send promotions, bonus offers, and the latest updates — only if you have consented to receive such communications.
- Responsible Gaming: To monitor gaming habits and identify users who may need assistance or self-exclusion controls.
Your Choices: You may withdraw consent to receive marketing communications at any time by updating your notification settings in your account or by contacting our support team.
3 Sharing Information with Third Parties
Jualtoto does not sell or trade your personal data. However, in the course of operating the platform, we share certain information with trusted third parties in the following limited circumstances:
- Payment Service Providers: Transaction information is shared with payment processors such as FPX providers, e-wallet and cryptocurrency platform providers solely to process your financial transactions.
- Game Service Providers: Usernames and game data are shared with third-party game providers offering content on the jualtoto platform to ensure a seamless gaming experience.
- KYC Verification Providers: Your identity documents are shared with authorised KYC verification partners to process identity verification as required by law.
- Legal Authority: We will disclose required information to authorities with legal jurisdiction when mandated by a court order or applicable legislation.
- Analytics Services: Anonymised usage data is shared with analytics tools to help us understand usage patterns and improve the platform.
All third parties we work with are bound by strict confidentiality agreements and data protection policies. They are only permitted to use shared data for the specific purposes agreed upon.
Our Guarantee: jualtoto does not share your personal information with advertisers, data brokers or any other commercial entities for third-party marketing purposes.
4 Data Security and Technical Protection
Jualtoto continuously invests in the latest security infrastructure to ensure your personal data is always protected from unauthorised access, leaks or misuse. Key security measures we implement include:
- 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers — no data travels in plain text.
- Encryption at Rest for all sensitive information stored in our databases, including financial details and identity documents.
- Two-Factor Authentication (2FA) available for all user accounts to add an extra layer of security to the login process.
- 24/7 Monitoring by our cybersecurity team, who remain constantly vigilant against threats and intrusion attempts.
- Regular security audits by an independent third-party firm to ensure our systems meet the latest security standards.
- Role-based access control (RBAC) which ensures our staff can only access data relevant to their job functions.
In the Event of a Data Breach: In the event of a security incident involving your personal data, jualtoto will notify you within 72 hours via your registered email and take immediate action to contain the impact of the incident.
5 Cookies and Tracking Technologies
Jualtoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
Types of cookies we use:
- Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are critical to the website's operation.
- Performance Cookies: Collecting information about how you use our website (e.g. most frequently visited pages) to help us improve the platform.
- Functional Cookies: Remembering your preferences such as language, currency and personal settings to deliver a more personalised experience.
- Analytics Cookies: Used by analytics tools to understand aggregate usage patterns and help us make data-driven decisions.
Cookie Controls: You may manage or disable cookies through your web browser settings at any time. Please note that disabling essential cookies may affect certain functions of the Jualtoto platform.
6 Your Rights Regarding Personal Data
As a jualtoto user, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete information.
- Right to Deletion: Under certain circumstances, you have the right to request deletion of your personal data from our systems.
- Right to Object to Processing: You have the right to object to the processing of your data for direct marketing purposes at any time.
- Right to Data Portability: You have the right to receive your personal data in a machine-readable format.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact our privacy team via the in-platform live chat or our support email. We will process your request within 30 business days.
7 Data Retention and Deletion
Jualtoto retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.
- Active Account Data: Retained for the duration your account is active and for a specified period after account closure to fulfil legal obligations.
- Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and tax legal requirements.
- Security Logs: Retained for 12 months for the purpose of security incident investigations and fraud detection.
- Support Communication Data: Retained for two (2) years for reference and service quality improvement.
When data is no longer required, we will securely delete it using methods that ensure it cannot be recovered by any party.
8 Children's Privacy
The jualtoto platform is strictly for users aged 18 years and above. We do not intentionally collect or process personal data of individuals under the age of 18.
Should we determine that a child's personal data has been collected without parental or guardian knowledge or consent, we will take immediate steps to delete that data and close the associated account.
If you believe your underage child has registered on our platform, please contact our support team immediately via live chat for prompt action.
9 Amendments to the Privacy Policy
Jualtoto reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or new platform features.
When a material amendment occurs, we will notify you via:
- In-app notifications on the jualtoto mobile app and web platform.
- Email sent to the address registered in your account at least seven (7) days before the changes take effect.
- A prominent notice on our platform's home page.
Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated policy. We recommend checking this page periodically to stay informed about how we protect your privacy.
Effective Date: This version of the Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions.
10 Contact Our Privacy Team
If you have any questions, concerns or complaints regarding how jualtoto handles your personal data, we encourage you to reach out to us directly. Our privacy team is ready to assist you.
Live Chat
The fastest way to get help. Our team is available 24 hours a day, 7 days a week via the chat icon on the platform.
We are committed to responding to all privacy-related enquiries within 5 working days and data rights requests within 30 working days.
Privacy-Related FAQs
jualtoto will only disclose user information to authorities when required by a valid court order, lawful subpoena or other relevant legal obligation. We will not voluntarily disclose information without a solid legal basis and will notify users where permitted to do so.
Yes, you may request data deletion in many circumstances. However, certain data is required by law to be retained, such as financial transaction records for seven years. Our privacy team will clarify in detail which data can be deleted and which must be retained upon receiving your request.
jualtoto does not directly store your credit or debit card numbers. All payment transactions are processed through certified payment providers that comply with PCI DSS (Payment Card Industry Data Security Standard). Financial information we do retain, such as account holder names and bank account numbers for withdrawals, is protected with enterprise-grade encryption.
Jualtoto user data is stored in secure data centres that apply the highest international security standards. Where data is processed or stored outside Malaysia, we ensure protection that is equal to or greater than what is required under Malaysia's PDPA through robust data transfer agreements with our service providers.