Your privacy is our top priority. This document clearly explains how Jualtoto collects, uses, stores, and protects your personal information — so you can play with complete peace of mind and confidence.
Welcome to Jualtoto's Privacy Policy page. We understand that your trust in our platform depends largely on how we handle the personal information you share with us. That is why we take every aspect of data protection seriously — not merely out of legal obligation, but because it is the foundation of our relationship with every member.
This Privacy Policy explains in detail what information we collect, why we need it, how it is used, with whom it may be shared, and what security measures we take to ensure your data is always protected. This document is written in plain, easy-to-understand language — not confusing legal jargon — because we believe you deserve to know exactly what happens to your data.
By accessing or using the jualtoto platform, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, you have the right to discontinue use of the platform and contact us to request deletion of your data.
Our Commitment: jualtoto never sells, rents, or allows unrelated third parties to access your personal data for marketing purposes without your explicit consent.
Jualtoto only collects information that is strictly necessary to provide a safe, fair, and fully functional service. Below are the categories of data we collect and the purposes for which they are collected:
During the account registration process, we collect the following information:
| Data Type | Purpose | Mandatory / Optional |
|---|---|---|
| Full name | Identity verification (KYC) and withdrawal processing | Mandatory |
| ID card number | Advanced age verification and KYC | Mandatory |
| Date of birth | Age eligibility verification (18+) | Mandatory |
| Email address | Account communications, notifications, and password recovery | Mandatory |
| Phone number | Two-factor authentication (2FA) and customer support | Mandatory |
| Profile picture | Personalise your account | Optional |
To securely process deposits and withdrawals, we collect financial information including bank account holder name, bank account number (stored in partially masked form), bank name, and registered e-wallet details. We do not store credit or debit card numbers directly — all card transactions are processed by a third-party payment provider that holds PCI DSS certification.
We automatically record technical information each time you use the platform, including IP address, device type and operating system, browser type and version, session time and duration, pages visited, and wagering patterns (to detect suspicious activity). This data is used solely for security purposes, platform improvement, and regulatory compliance.
Important Note: jualtoto applies a data minimisation principle — we only collect what is necessary, and nothing more. Any field marked "Optional" does not affect the core functionality of your account.
Every piece of data we collect has a clear and limited purpose. We do not use your information beyond the scope stated here without first obtaining your additional consent.
Marketing: You may withdraw consent to receive marketing communications at any time via the account settings section or by contacting our support team. Withdrawing this consent does not affect your account's functionality.
Jualtoto continuously invests in the latest security infrastructure to ensure your personal data is protected at every stage — during transmission, during processing, and during storage.
All data transmitted between your device and Jualtoto's servers is protected by SSL/TLS 256-bit — the same industry standard used by major banking institutions worldwide. Sensitive data such as identification numbers and banking details are stored in encrypted form using AES-256 encryption within an isolated and secured database.
Access to members' personal data is strictly restricted in accordance with the principle of least privilege. Only personnel who require access to perform specific duties — such as the customer support team and compliance team — are granted permission, and all access is logged and continuously monitored.
We retain your personal data for as long as necessary to fulfil the purpose of collection, or as required by Malaysian law, whichever is longer. Generally:
Security Audits: jualtoto conducts regular penetration testing and independent security audits. Audit findings are used to continually strengthen the protection of our infrastructure.
Jualtoto does not sell or rent your personal data to any third party. However, in certain limited and controlled situations, your information may be shared with the following parties:
We work with carefully selected third-party service providers to help operate the platform, including licensed payment processors (payment gateways), identity verification (KYC) service providers, email and SMS delivery platforms, and certified cloud hosting services. All these partners are contractually bound to protect your data to a standard no lower than our own.
Jualtoto will disclose personal information when legally required by the relevant Malaysian authorities, including law enforcement agencies, courts, or regulatory bodies. We will endeavour to notify you prior to any such disclosure, unless prohibited by law or court order.
Should Jualtoto be involved in a merger, acquisition, or asset sale, members' personal data may be transferred as part of that transaction. You will be notified in advance via a clear notice, and the privacy policy governing your data will not be downgraded.
Our Guarantee: jualtoto never shares members' personal data with advertisers, data brokers, or third-party marketing companies unrelated to the direct operation of the platform without your explicit consent.
The Jualtoto platform uses cookies and similar tracking technologies to ensure the platform operates correctly, enhance the user experience, and understand how members interact with our platform.
You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect platform functionality. For optional cookies, you can update your preferences via the cookie preference panel within the platform at any time.
Note: We use internal analytics and do not rely on invasive third-party tracking scripts. Any analytics data collected is in aggregated form and does not contain information that can personally identify you.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding your personal data held by jualtoto:
The Jualtoto platform is exclusively for individuals who are of age 18 years and above. We do not intentionally collect, store, or process any personal information from individuals under the age of 18.
Should we discover that personal information belonging to an underage individual has been collected without our knowledge — whether through fraudulent registration or other means — we will take immediate action to delete that information and close the account in question. If you believe your child or an underage individual has registered an account on Jualtoto, please contact our support team immediately.
Minor Protection: jualtoto uses advanced age-verification technology during the KYC process. Any account found to be registered under the name of a minor will be terminated immediately and reported to the relevant authorities where necessary.
Parts of Jualtoto's technical infrastructure, including cloud servers and backup systems, may operate in data centres located outside Malaysia. Any such data transfers are conducted with robust protection measures in place.
When your personal data is transferred outside Malaysia, we ensure that the data recipients provide an equivalent or higher level of protection than that required under Malaysia's PDPA. This is achieved through legally binding data processing agreements, security standards verified by independent audits, and the use of internationally recognised data transfer mechanisms.
Malaysia Priority: All critical data relating to financial transactions and the identity of Malaysian members is prioritised for storage in data centres that comply with local regulatory requirements.
The Jualtoto platform may contain links to third-party websites such as payment providers or industry-leading sites for informational purposes. This Privacy Policy applies solely to the Jualtoto platform and does not cover the privacy practices of those third-party websites.
We recommend reading the privacy policy of any third-party website you visit via links from our platform. jualtoto is not responsible for the content, privacy practices, or security of third-party websites beyond our control.
Jualtoto reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. The date of the most recent update is always displayed at the top of this page.
For significant changes — such as changes to how we share data with third parties or changes to user rights — we will proactively notify you via an in-platform notice or registered email at least 14 days before the changes take effect.
Your continued use of the jualtoto platform after the effective date of any Privacy Policy changes constitutes your acceptance of the latest version. If you do not agree with the changes made, you have the right to close your account and request data deletion.
If you have any questions, concerns, or wish to exercise your rights regarding personal data, our Data Protection Officer team is ready to assist:
We are committed to responding to every privacy-related enquiry within 3 business days. For data deletion or data export requests, the process is typically completed within 14 business days.
Response Time: Our support team operates 24 hours a day, 7 days a week. Privacy-related requests submitted via email will receive an automated acknowledgement within 1 hour, and a full response within 3 business days.
As a Jualtoto member, you are protected under Malaysia's PDPA and hold the following rights, which you may exercise at any time.
You have the right to request a copy of all personal information we hold about you in a readily readable format at any time.
If your data is inaccurate or outdated, you may request a correction at any time through your account settings or customer support.
You may request the deletion of your personal data when it is no longer required, subject to legal record-keeping obligations.
You may request that we restrict the processing of your data in certain situations, such as during a dispute over data accuracy.
You may request an export of your personal data in a structured, machine-readable format for transfer to another platform.
You may object to the processing of your data for direct marketing or profiling purposes at any time without any penalty.
Jualtoto invests in industry-leading security technologies and processes to ensure your privacy is always protected.
All data transmitted between you and the Jualtoto platform is protected by 256-bit SSL encryption — the same level of security used by major online banks in Malaysia.
Our KYC process uses advanced identity verification technology to ensure that only the true account owner can gain access, protecting you from fraud.
All financial transactions are processed through licensed payment gateways that comply with PCI DSS standards. Your card number is never stored on Jualtoto's servers.
Jualtoto never sells, rents, or trades your personal information to third parties. Your data belongs to you — not to us as a business asset.
Our systems undergo regular penetration testing and independent security audits by certified cybersecurity firms to ensure no hidden vulnerabilities exist.
You will receive instant notifications for any new login activity, password changes, or large transactions — enabling you to act quickly should any suspicious activity occur.