Privacy Policy

This Privacy Policy ("Policy") describes how Kantortoto ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "User", "Player") who access or use the kantortoto website at https://kantortoto.cam and its associated services.

Kantortoto operates as an English-language online betting and casino platform serving players primarily located across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and surrounding areas. We are committed to handling all personal data with the highest standards of care, transparency, and confidentiality.

By registering an account, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means kantortoto, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of kantortoto under a data processing agreement.
• "KYC" (Know Your Customer) means the identity and age verification process required for account holders under anti-money laundering and responsible gambling obligations.
• "Cookies" means small text files placed on your device by the Platform for purposes including session management, analytics, and preference retention.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.

Kantortoto collects personal data through several channels, including account registration, identity verification, transaction processing, platform usage, and communications with our support team. The categories of personal data we collect include:

We do not collect or process special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless strictly required to comply with responsible gambling obligations — for example, recording a self-exclusion request.

Kantortoto processes personal data for the following purposes:

1. Account Management: To create, maintain, and administer your Player Account, including verifying your identity and eligibility to use the Platform.
2. Transaction Processing: To process deposits via Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Boost, GrabPay, Public Bank, Hong Leong Connect, and supported cryptocurrencies — and to process withdrawal requests to your designated payment method.
3. KYC and Compliance: To conduct age verification, identity checks, and anti-money laundering (AML) screening as required under applicable law and regulatory standards.
4. Fraud Prevention and Security: To detect, prevent, and investigate fraud, money laundering, account abuse, and other unlawful activities on the Platform.
5. Responsible Gambling: To monitor gambling behaviour, enforce deposit limits and self-exclusion requests, and provide intervention where problem gambling indicators are detected.
6. Customer Support: To respond to your queries, complaints, and requests submitted through live chat, email, or other support channels.
7. Platform Improvement: To analyse usage patterns, identify technical issues, and improve the functionality, performance, and user experience of the Platform.
8. Marketing Communications: To send promotional offers, bonus updates, and product news to Players who have provided explicit consent to receive such communications. You may withdraw this consent at any time.
9. Legal Obligations: To comply with applicable laws, respond to court orders, regulatory requests, and law enforcement inquiries, including disclosure to financial intelligence units where required.

Kantortoto processes personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and kantortoto, including operating your Account, processing transactions, and providing gaming services.
• Legal Obligation: Processing necessary to comply with applicable laws including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing for purposes that are in our legitimate business interests and do not override your fundamental rights — including fraud prevention, platform security, responsible gambling monitoring, and service improvement analytics.
• Consent: Processing for purposes where you have provided specific, informed, and freely given consent — primarily marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Kantortoto uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate and improve the Platform. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without disrupting core Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data on how players interact with the Platform — including pages visited, time spent, and error events. This data helps us identify and resolve technical issues and improve the overall experience.
• Functionality Cookies: Used to remember your preferences, such as language settings and display preferences, so you do not need to re-enter them on subsequent visits.
• Marketing Cookies: Used only where you have provided consent, to track the effectiveness of our promotional campaigns and to serve relevant offers. You may opt out of marketing cookies at any time via your browser settings or Account preferences.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impair the functionality of the Platform. Most modern browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set.

Kantortoto does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances, and only to the extent necessary:

• Payment Service Providers: We share financial data with payment processors and gateway providers (including those supporting Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, and cryptocurrency networks) to process your deposits and withdrawals.
• KYC and Identity Verification Partners: We engage accredited third-party identity verification providers to conduct KYC checks. These providers process identity documents and biometric data solely for verification purposes under contractual data processing agreements.
• Fraud and AML Screening Services: We may share relevant data with screening and monitoring services to detect and prevent fraud, money laundering, and other unlawful activities.
• Platform Technology Providers: We engage technology partners for hosting infrastructure, customer support software, and analytics tools. These providers act as Data Processors and are contractually prohibited from using your data for their own purposes.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent authorities — including Malaysian regulatory bodies, financial intelligence units, and law enforcement agencies — where required to do so by law, court order, or regulatory direction.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of our business, personal data held on the Platform may be transferred to the acquiring entity. We will provide advance notice of any such transfer where required by applicable law.

Kantortoto retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following permanent account closure, to satisfy AML record-keeping requirements.
• Transaction Records: Financial transaction data, including deposit and withdrawal histories in MYR, is retained for a minimum of seven (7) years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for the period required by applicable AML and counter-terrorism financing regulations, typically five (5) to seven (7) years from the date of last account activity.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of two (2) years from the date of the interaction.
• Marketing Preferences: Records of marketing consent and opt-out requests are retained indefinitely as evidence of your consent decision.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where data cannot be immediately deleted due to technical constraints, it will be isolated and protected from further processing until deletion is possible.

Kantortoto implements appropriate technical and organisational security measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for databases containing sensitive personal and financial data.
• Role-based access controls ensuring that internal staff can only access the personal data necessary for their specific function.
• Two-factor authentication (2FA) for administrative systems access.
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure.
• Incident response procedures to detect, contain, and report data security incidents within required timeframes.

Subject to applicable law and legitimate exceptions (such as legal retention obligations), you have the following rights with respect to your personal data held by kantortoto:

1. Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
2. Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. For basic account details, you can update these directly through your Account settings.
3. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Requests for erasure during an active Account or while regulatory retention periods apply may be declined.
4. Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of data you have disputed is being verified.
5. Right to Data Portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
6. Right to Object: You may object to the processing of your personal data where it is carried out on the basis of our legitimate interests, including for direct marketing purposes. Objection to marketing processing will be honoured immediately.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to all verified requests within 30 days. Complex or multiple requests may require up to 60 days, in which case we will notify you of the extension.

Kantortoto strictly prohibits the use of its Platform by any person under the age of 21 years. We do not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data and suspend the associated Account.

Parents and guardians who have reason to believe that a minor in their care has registered on the Platform or provided personal data to kantortoto are encouraged to contact our support team immediately via live chat. We will investigate all such reports promptly and take appropriate action.

Kantortoto primarily stores and processes personal data within server infrastructure located in the Asia-Pacific region. However, certain third-party service providers engaged by the Platform — including technology vendors, KYC partners, and payment processors — may process personal data in jurisdictions outside Malaysia.

Where personal data is transferred internationally, we take appropriate safeguards to ensure that the receiving party provides an adequate level of data protection, including through contractual data processing agreements incorporating internationally recognised data protection standards.

By using the Platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions as described in this section, subject to the protections described above.

The kantortoto Platform may reference or link to services provided by third parties, including payment gateways and game content providers. These third-party services operate under their own privacy policies, which are independent of this Policy.

Kantortoto is not responsible for the privacy practices, data handling, or content of any third-party services. We encourage you to review the privacy policies of any third-party services you access in connection with your use of the Platform.

Kantortoto reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. The most current version of this Policy will always be published on this page, along with the date of the most recent revision.

Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — we will provide prominent notice via a login notification or email to the address registered to your Account, with reasonable advance notice before the changes take effect.

Your continued use of the Platform following the publication of any revised Policy constitutes your acknowledgement of and agreement to the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by kantortoto, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the Platform. This is the fastest channel for data access requests, corrections, and consent withdrawals.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line. We aim to acknowledge all privacy-related enquiries within 24 hours.

For queries specifically about responsible gambling tools, self-exclusion, or deposit limits, please visit our Responsible Gambling page or speak directly to our support team via live chat.