Privacy Policy

This Privacy Policy ("Policy") sets out the manner in which Tasiktoto ("Tasiktoto", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("User", "you", "your") who access or interact with the Tasiktoto platform at tasiktoto.cam.

We are committed to safeguarding the privacy and personal data of all users, including players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. This Policy is designed to be transparent, clear, and accessible to all users regardless of their level of technical knowledge.

By registering an account, accessing the Platform, or otherwise interacting with any Tasiktoto service, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not consent to the collection and use of your data as described herein, you must refrain from using the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Tasiktoto Platform.

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" refers to Tasiktoto as the entity that determines the purposes and means by which Personal Data is processed.
• "Data Processor" refers to any third party engaged by Tasiktoto to process Personal Data on its behalf in accordance with this Policy.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" (Know Your Customer) refers to the identity verification process that Tasiktoto is required to conduct pursuant to applicable anti-money laundering obligations.
• "Cookies" refers to small text files stored on your device by the Platform to enable certain functionality and analytics.

Tasiktoto collects different categories of Personal Data depending on the nature of your interaction with the Platform. The following sets out the principal categories of data we may collect:

We do not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, or health information) unless it is strictly required by law or with your explicit prior consent.

Tasiktoto collects your Personal Data through the following channels and methods:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, or contacting customer support.
• Automated technologies: Data collected automatically when you browse or interact with the Platform, including through cookies, web beacons, pixel tags, and server logs.
• Third-party payment processors: Transaction data received from payment service providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank when processing deposits and withdrawals.
• Identity verification providers: Data received from third-party KYC and fraud prevention service providers engaged to verify the identity of account holders.
• Analytics providers: Aggregated and anonymised usage data received from analytics tools used to improve Platform performance and user experience.

Tasiktoto processes your Personal Data for the following purposes:

1. Account Management: To create, manage, and maintain your registered Account, including authentication and access control.
2. Payment Processing: To process deposits and withdrawals through Malaysian payment channels and to maintain accurate financial records.
3. Identity Verification (KYC): To verify your identity and age in compliance with anti-money laundering obligations and our minimum age policy (21+).
4. Gaming Operations: To operate, deliver, and improve the games, betting markets, and casino services offered on the Platform.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other harmful or illegal conduct.
6. Responsible Gambling: To monitor gaming patterns and apply responsible gambling tools such as deposit limits, session reminders, and self-exclusion settings.
7. Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our multilingual support channels.
8. Legal Compliance: To fulfil our obligations under applicable laws, regulations, and directives, including responding to lawful requests from regulatory or law enforcement authorities.
9. Marketing Communications: To send you promotional offers, bonus notifications, and news about new games or features, subject to your communication preferences and applicable laws.
10. Platform Improvement: To analyse usage patterns, conduct research, and improve the performance, design, and security of the Platform.

Tasiktoto processes your Personal Data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and Tasiktoto — including account registration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, anti-money laundering obligations, and tax reporting.
• Legitimate interests: Processing necessary for Tasiktoto's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests do not override your fundamental rights.
• Consent: Processing carried out with your freely given, informed, and specific consent — such as the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Tasiktoto does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may, however, share your Personal Data with selected third parties in the following circumstances:

• Payment service providers: To process your deposits and withdrawals through services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks. These providers process your data only as necessary to facilitate the transaction.
• Identity verification providers: Third-party KYC and fraud detection services engaged to verify your identity and protect the security of the Platform.
• Technology and infrastructure providers: Service providers who host, maintain, and secure our Platform infrastructure, subject to binding data processing agreements.
• Game software providers: Third-party game studios and live dealer platform operators whose content is integrated into the Tasiktoto Platform. These providers process only the minimum data necessary to operate the relevant games.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory directive, Tasiktoto may disclose Personal Data to competent authorities.
• Business transfers: In the event of a merger, acquisition, or sale of business assets, your Personal Data may be transferred to the successor entity as part of the transaction, subject to equivalent privacy protections.

Tasiktoto retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, or reporting obligations. In general:

• Account data and KYC records are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of seven (7) years to comply with applicable financial reporting obligations.
• Customer support and communication records are retained for three (3) years following the resolution of the relevant matter.
• Marketing preference records are retained until you withdraw your consent or request removal from our marketing database.
• Technical and log data is typically retained for twelve (12) months for security monitoring purposes.

When Personal Data is no longer required for any lawful purpose, it will be securely deleted, anonymised, or rendered irreversibly unintelligible through appropriate technical means.

Tasiktoto implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied across all Platform pages, login sessions, and data transmission pathways.
• Secure, access-controlled server infrastructure with continuous monitoring and intrusion detection systems.
• Multi-factor authentication options for user accounts and strict internal access controls for staff handling personal data.
• Regular third-party penetration testing and independent security audits.
• Formal data breach response procedures, including notification protocols where legally required.
• Staff training programmes covering data protection responsibilities and information security best practices.

The Tasiktoto Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session integrity, and gather analytical data about Platform usage. Cookies are small text files stored on your device when you visit the Platform.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly, including maintaining your login session and securing your account. These cannot be disabled.
• Functional cookies: Enable personalisation features such as language preferences, display settings, and saved login information.
• Analytical cookies: Collect anonymised data about how users interact with the Platform to help us improve performance, usability, and content.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other malicious behaviour.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Continuing to use the Platform after being notified of our cookie usage constitutes your consent to non-essential cookies.

Subject to applicable law, you hold the following rights in relation to your Personal Data held by Tasiktoto. To exercise any of these rights, please contact us at [email protected] with a clear description of your request.

We will respond to all valid data subject requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.

Tasiktoto's services are strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process the Personal Data of any person under the age of 21. Age verification is conducted as part of our standard KYC process, and we reserve the right to request documentary proof of age at any time.

If we become aware that Personal Data has been collected from an individual under the age of 21 without appropriate verification, we will take immediate steps to delete that information and close the associated account. If you believe that a person under the age of 21 has registered on the Platform, please notify us immediately at [email protected].

In the course of operating the Platform, your Personal Data may be transferred to, stored, or processed in countries outside of Malaysia by third-party service providers — including technology infrastructure partners, game software providers, and identity verification services — who may be located in jurisdictions with different data protection standards.

Where such transfers occur, Tasiktoto takes reasonable steps to ensure that adequate safeguards are in place to protect your Personal Data, including contractual data protection clauses and the use of providers who maintain compliance with applicable international data protection standards.

Tasiktoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. Where changes are material, we will endeavour to notify registered users via email or through a prominent notice on the Platform prior to the changes taking effect.

The date on which this Policy was last revised is displayed at the top of this page. We encourage you to review this Policy periodically to remain informed about how your data is being handled. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of those changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please do not hesitate to contact the Tasiktoto Data Protection team through any of the following channels:

All data subject requests will be handled in accordance with the timelines and procedures described in Section 11 (Your Rights) of this Policy. Please include "Privacy Request" in the subject line of any email correspondence to help us route your query efficiently.