Privacy Policy KingdomToto –
Your Data, Our Responsibility

01 Personal Information We Collect

KingdomToto collects your personal information for clear and lawful purposes — to enable you to use our platform safely, process financial transactions, and meet applicable legal compliance requirements in Malaysia. We only collect data that is strictly necessary, and nothing more.

The types of data we collect can be grouped into three main categories:

All data you provide during the registration process and throughout your use of the platform is stored on secure servers protected in accordance with the latest industry standards.

02 How We Use Your Personal Data

KingdomToto uses the personal data collected solely for the purposes specified and communicated to you. We do not use your data for any other purpose without first obtaining your consent. The primary purposes for using your data are as follows:

• Account Management — to create, verify, and manage your account on the KingdomToto platform, including the required identity verification (KYC) process.
• Transaction Processing — to process deposits, withdrawals, and any financial transactions you make through the available payment methods.
• Platform Security — to detect and prevent fraud, money laundering, unauthorised access, and any suspicious activity that could compromise the security of the platform and other users.
• Service Communication — to send important notifications related to your account, security updates, transaction confirmations, and relevant promotional information (where you have consented to receive them).
• Service Improvement — to analyse usage patterns and optimise your gaming experience on the platform, including more relevant game recommendations.
• Legal Compliance — to fulfil applicable legal and regulatory obligations, including reporting requirements to the relevant authorities.

03 Encryption & Security Measures

The security of your personal data is KingdomToto's top priority. We implement multiple layers of technical and organisational protection to ensure your data is always safeguarded against any threats or unauthorised access.

• 256-bit SSL Encryption — All data transmitted between your browser and KingdomToto servers is encrypted using the latest Transport Layer Security (TLS) technology, ensuring no third party can intercept or read your information in transit.
• Secure Data Storage — Your data is stored in databases protected with file-level encryption, role-based access controls, and continuous 24/7 monitoring.
• Two-Factor Authentication (2FA) — KingdomToto provides two-factor authentication for your account to add an extra layer of security beyond your regular password.
• Regular Security Audits — Our platform undergoes regular security audits and penetration testing by independent cybersecurity experts to identify and address any vulnerabilities.
• Real-Time Threat Monitoring — Our automated monitoring system detects and responds to any suspicious activity or intrusion attempts in real time.

04 Data Sharing & Disclosure to Third Parties

KingdomToto does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, there are limited situations where we may need to share your information with carefully selected parties:

• Payment Service Providers — Required transaction information is shared with payment gateway providers such as FPX, Touch 'n Go, GrabPay, and local banks solely for the purpose of processing your transactions.
• Identity Verification Providers — For the KYC process, your identification information may be verified through approved third-party verification services subject to strict confidentiality agreements.
• Regulatory Authorities — KingdomToto will disclose required information to the relevant authorities where mandated by law, court order, or to assist in financial crime investigations.
• Technology Providers — Our technical infrastructure partners who help operate the platform are subject to strict data processing agreements and are not permitted to use your data for their own purposes.

Every third party we work with is bound by strict confidentiality and data protection agreements. We only partner with entities whose data security standards are equal to or higher than our own.

05 Cookies & Tracking Technologies

The kingdomtoto website uses cookies and similar tracking technologies to enhance your experience, maintain your login session, and help us understand how users interact with our platform.

• Essential Cookies — Required for core platform functions such as login session verification and security. These cookies cannot be disabled as they affect the basic operation of the website.
• Performance Cookies — Collects anonymous data on how you use our website to help us identify areas for improvement and optimise platform performance.
• Functional Cookies — Stores your preferences such as language, display settings, and login information so you do not need to re-enter them each time you visit the platform.
• Analytics Cookies — Helps us understand aggregated, anonymised usage patterns for service improvement purposes.

You can control or block cookies through your browser settings at any time. However, blocking essential cookies may affect platform functionality and your overall user experience.

06 Your Privacy Rights as a User

KingdomToto fully recognises and respects your privacy rights. As a user of our platform, you have the following rights regarding your personal data:

07 Data Retention Period

KingdomToto retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active Account Data — Retained for the duration your account is active and for any additional period required by law following account closure.
• Financial Transaction Records — Retained for a minimum of seven (7) years to comply with applicable financial and tax legal requirements.
• Security Logs — Retained for 12 months to enable investigation of security incidents if required.
• Communication Data — Communication records between you and our support team are retained for 3 years for reference and training purposes.

Once the designated retention period expires, your personal data will be securely deleted or anonymized in accordance with established procedures, unless a legal obligation or legitimate interest requires longer retention.

08 Changes to This Privacy Policy

KingdomToto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new technologies, legal requirements, or legitimate operational reasons. Any material changes will be communicated to you via email or in-platform notification before they take effect.

The "Last Updated" date at the top of this document will always reflect the date of the latest version of our Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

09 Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding how kingdomtoto handles your personal data, do not hesitate to contact us. Our Data Protection Officer (DPO) team is ready to assist you.

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Response Time: Within 3–5 business days for general enquiries; 30 days for formal data rights requests.