Jualtoto is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the rights you have over your own data.
Six core principles guide every data decision we make at Jualtoto. These cards summarise them — full details follow in the policy below.
We collect only the personal data we genuinely need to operate your account, verify your identity, process transactions, and comply with legal obligations. We do not collect data speculatively or without a lawful basis.
All personal data stored by Jualtoto is protected using 256-bit SSL encryption at rest and in transit. Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
Jualtoto does not sell, rent, or trade your personal data to third-party marketers or advertisers under any circumstances. Your data is used solely to operate and improve your Jualtoto experience.
Every instance of personal data processing at Jualtoto is grounded in a lawful basis — whether contractual necessity, legal obligation, legitimate interest, or your explicit consent where required.
You have the right to access, correct, port, and request deletion of your personal data. We have clear processes to honour these rights and respond to verified requests within a reasonable timeframe.
We do not keep your data longer than necessary. Retention periods are set in accordance with our legal and regulatory obligations. Data that is no longer required is securely deleted or anonymised.
This Privacy Policy ("Policy") sets out how Jualtoto ("the Company", "we", "us", "our"), the operator of the online sportsbook and live casino platform at https://jualtoto.asia ("the Platform"), collects, uses, stores, shares, and protects the personal data of individuals who visit, register on, or use the Platform ("Users", "you", "your").
This Policy is written in compliance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA) and related regulations. By using the Jualtoto Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Privacy Policy forms an integral part of, and should be read in conjunction with, Jualtoto's Terms & Conditions. In the event of any inconsistency between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail with respect to the operation of the Platform, and this Policy shall prevail with respect to the processing of personal data.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
Jualtoto operates as the Data Controller in respect of all personal data collected and processed through the Platform. As Data Controller, Jualtoto is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with this Policy and applicable data protection legislation.
For all data protection enquiries, including requests to exercise your rights under applicable law, please contact us using the details provided in Section 16 of this Policy.
Jualtoto collects personal data from Users through a variety of channels, including account registration, identity verification, platform usage, customer support interactions, and third-party payment processors. The categories of personal data we collect are as follows:
Jualtoto processes personal data only where a lawful basis exists under applicable data protection legislation. The lawful bases upon which we rely are as follows:
| Lawful Basis | When We Rely On It |
|---|---|
| Contractual Necessity | Processing required to fulfil our obligations to you under the Terms & Conditions — account creation, payment processing, bet settlement, and withdrawal execution. |
| Legal Obligation | Processing required to comply with applicable laws — KYC/AML verification, regulatory reporting, and cooperation with law enforcement authorities. |
| Legitimate Interest | Processing necessary for our legitimate business interests — fraud prevention, platform security, customer support quality, and responsible gambling monitoring — where those interests are not overridden by your rights. |
| Consent | Processing based on your freely given, specific, and informed consent — such as the sending of marketing communications or the placement of non-essential cookies. You may withdraw consent at any time. |
Jualtoto uses the personal data we collect for the following specific purposes:
Jualtoto does not sell your personal data to any third party. We do not share your personal data with third-party advertisers or marketing organisations. We may, however, share personal data with the following categories of third parties in the circumstances described below:
We share transaction-related personal data with our payment processing partners — including providers of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking channels — to the extent necessary to process your deposits and withdrawals. These providers are contractually bound to handle your data securely and to use it only for the purpose of processing the relevant transaction.
We use regulated third-party KYC and identity verification service providers to assist with age and identity checks required for account registration and ongoing compliance. These providers process the personal and identity data you submit during the verification process on our behalf.
We may disclose personal data to relevant government authorities, regulators, or law enforcement agencies where we are legally required to do so, where disclosure is necessary to prevent or detect fraud or other criminal activity, or where we are subject to a court order or legally binding request.
We engage cloud hosting providers, cybersecurity vendors, and platform analytics tools to support the operation of the Jualtoto Platform. These providers act as Data Processors on our behalf and are contractually bound to process personal data only in accordance with our instructions and this Policy.
In the event of a merger, acquisition, restructuring, or sale of all or part of Jualtoto's business, personal data held by Jualtoto may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and any material change to how their personal data is processed.
As an online platform serving Malaysian users, some of Jualtoto's technical infrastructure and service providers may be located outside of Malaysia. Where personal data is transferred to a jurisdiction outside Malaysia, Jualtoto ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Malaysian PDPA.
Safeguards for international data transfers may include contractual clauses requiring the recipient to maintain data protection standards equivalent to Malaysian requirements, or the transfer being to a jurisdiction recognised as providing an adequate level of protection. If you would like further information about the specific safeguards in place for any particular international transfer, please contact us using the details in Section 16.
Jualtoto uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by your web browser when you visit the Platform. They help us recognise your device, remember your preferences, and understand how you use the Platform.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for the Platform to function — login sessions, security tokens, and shopping cart equivalents for bet slips. | Session |
| Functional | Remember your preferences such as odds format, language, and display settings. | Up to 12 months |
| Analytics | Anonymised data on how Users navigate the Platform — page visits, session length, error reports. Helps us improve the Platform experience. | Up to 24 months |
| Marketing | Used to display relevant promotional content to you on the Platform, based on your activity. Requires your consent. | Up to 12 months |
You can control and manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform. Detailed browser-level cookie management instructions are available from your browser provider.
Jualtoto retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our general data retention approach is as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous in a manner that prevents re-identification.
Jualtoto implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
Notwithstanding the above, no method of transmission over the internet or electronic storage is completely secure. While we take every reasonable precaution to protect your personal data, we cannot guarantee absolute security.
Subject to applicable law and verification of your identity, you have the following rights with respect to your personal data held by Jualtoto:
You have the right to request a copy of the personal data Jualtoto holds about you, along with information about how it is being processed. We will respond to verified access requests within 30 days.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through the Platform's account settings section.
In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where retention is required for legal, regulatory, or contractual reasons — for example, where AML obligations require us to retain transaction records for a defined period.
You may request that Jualtoto restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or object to its processing on the basis of legitimate interests.
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though such objections may not always override our business or legal requirements.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.
To exercise any of the above rights, please submit a written request to our Data Protection contact as detailed in Section 16. We may require proof of identity before processing any request.
Jualtoto is strictly an adult platform. Registration is open only to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21.
If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately so we can take appropriate action.
Parents and guardians are encouraged to use parental control tools and to maintain awareness of their children's online activity to prevent underage access to gambling platforms.
Jualtoto is legally obligated to implement Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) controls. As part of these obligations, we are required to collect, verify, and retain personal and financial data relating to our registered Users and their transactions on the Platform.
We screen User information against relevant sanctions lists and politically exposed person (PEP) databases as part of our ongoing due diligence obligations. Where suspicious activity is detected, we are required by law to file reports with the relevant financial intelligence unit without informing the subject of the report — this obligation supersedes the User's normal data protection rights in such circumstances.
All transaction records and KYC documentation are retained for the minimum periods prescribed by applicable AML legislation, regardless of any request for data deletion from the User.
Jualtoto reserves the right to update or amend this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page and, where the changes are material, we will provide notice to registered Users via the Platform or by email to your registered address.
Your continued use of the Jualtoto Platform following the effective date of any amended Policy constitutes your acknowledgement and acceptance of the updated terms. We encourage you to review this Policy periodically to remain informed of how we protect your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Jualtoto, please contact our Data Protection team through the following channels:
Have questions about how Jualtoto handles your personal data? Our support team is available 24/7. Or head back to the homepage to explore everything we offer.