Data Protection User Rights Malaysia Updated 2026

Koitoto Privacy Policy — How We Protect Your Data

This Privacy Policy explains how koitoto collects, uses, stores, and protects the personal information of users in Malaysia. Please read it carefully to understand your rights as a user of our platform.

Your Data is SSL Protected No Data Sales to Third Parties Data Access & Deletion Rights Transparent Cookie Management Secure Data Storage Transactions Secured in MYR Your Data is SSL Protected No Data Sales to Third Parties Data Access & Deletion Rights Transparent Cookie Management Secure Data Storage Transactions Secured in MYR

Information We Collect from Users

When you register or use the koitoto platform, we collect several categories of information necessary to operate our services safely and efficiently. The information collected includes:

  • Account information: Full name, email address, phone number, date of birth, and encrypted password provided during registration.
  • Payment information: Details related to local payment methods in Malaysian Ringgit (MYR), such as bank names, partially masked account numbers, and transaction records. We do not store full card numbers or PIN information.
  • Device and browser information: Device type, operating system, browser type, IP address, and language settings. This information is used to diagnose technical issues and ensure the platform functions properly across different devices.
  • Usage data: Pages visited, session duration, in-platform actions, betting history, and records of interactions with customer support.
  • Cookies and tracking: Session data and preference cookies that help us personalise the user experience and maintain login status.

We only collect information necessary for the stated purposes and do not request information that is unrelated to the services we provide.

Melaka users play online games on the koitoto platform with guaranteed data privacy

How We Use Your Information

All information collected by koitoto is used solely for legitimate purposes directly related to the provision of platform services. The primary purposes for data use are as follows:

  • Identity verification and account security: To ensure that only the rightful account owner can gain access and to prevent fraud or unauthorised access.
  • Transaction processing: Deposits and withdrawals in MYR require payment information verification to process each transaction correctly and securely.
  • Platform improvements: Usage data helps us identify areas of the platform that need improvement, including speed, interface, and overall user experience.
  • Customer support: Interaction records allow the koitoto support team to understand the context of each issue and provide faster, more accurate resolutions.
  • Legal compliance: In certain situations, we may be required by law to retain or disclose information to the relevant authorities.

Koitoto does not use user data for third-party advertising purposes and does not sell personal information to any external parties.

Cookies & Session Tracking

The koitoto platform uses cookies to enhance your experience. Cookies are small text files stored in your browser when you visit the platform. We use two types of cookies:

Session cookies: Temporary cookies that are automatically deleted when you close your browser. These cookies are required to maintain your login status and ensure smooth platform navigation throughout your session.

Persistent cookies: Cookies stored on your device for a set period of time. These are used to remember your language preference, display settings, and login details so you don't have to re-enter them each time.

You can manage or delete cookies through your browser settings. However, removing certain cookies may affect the functionality of some parts of the platform.

Data Storage & Security

Koitoto uses SSL (Secure Socket Layer) encryption to protect all data transmitted between your device and the platform's servers. This means your personal information and payment details cannot be read by third parties during transmission.

User data is stored on servers protected by strict access controls. Only authorised personnel with a legitimate business need are permitted to access personal user data. All internal access is logged and monitored on a regular basis.

We follow industry best practices for password storage — passwords are never stored in plain text, but as irreversible cryptographic hashes. Payment information is processed in accordance with accepted payment security standards.

We retain user data for as long as needed to fulfil the purposes outlined in this policy, or as required by applicable law.

Putrajaya users enjoy the koitoto Sports Betting platform with full personal data protection

Sharing Information with Third Parties

Koitoto does not sell, rent, or disclose users' personal information to third parties for marketing or commercial purposes. However, there are limited circumstances in which we may share information with other parties:

  • Payment processors: To process deposits and withdrawals in MYR, transaction information must be shared with approved local payment service providers. All payment processors we work with are bound by strict confidentiality agreements.
  • Legal authorities: If required by a court order, law enforcement investigation, or regulatory obligation, we may be required to disclose certain user information.
  • Technical service providers: Vendors who support platform operations — such as server infrastructure and security monitoring — may have limited access to data strictly necessary for carrying out their functions.

In all of the above cases, disclosure is kept to a minimum and covers only information that is strictly necessary for the relevant purpose.

User Rights, Policy Changes & How to Contact Us

Your Rights as a koitoto User

Koitoto platform users have the following rights regarding their personal data:

  • Right to access: You have the right to request a copy of the personal information we hold about you. This request can be made through customer support and will be processed within a reasonable timeframe.
  • Right to rectification: If the information we hold is inaccurate or incomplete, you have the right to request a correction. You may also update certain details directly through your account settings.
  • Right to erasure: Under certain circumstances, you may request that we delete your personal data. Please note that deleting your account may result in the loss of access to your transaction history and any unclaimed balance.
  • Right to object: You may object to the processing of your data for certain purposes that are not required by law.

Policy Changes & Contact Us

Koitoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Users will be notified of any significant changes via the platform or their registered email. The date of the most recent update will always be displayed at the top of this document.

Continued use of the koitoto platform after any policy changes are published will be considered acceptance of the updated policy. We encourage you to review this page regularly.

If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise your user rights, please contact the koitoto support team:

  • Email: [email protected]
  • Live chat: Available 24 hours within the platform after logging in
  • General enquiries: Check FAQ page us

Still Have Questions About Your Privacy?

Check our FAQ section for more information, or register a koitoto account and start using the platform with confidence that your data is protected.

Bahasa Melayu