1. Introduction
Welcome to the jackpottoto Privacy Policy page. We understand that privacy is not something to be taken lightly, especially on an online casino and betting platform where you entrust us with your personal and financial information.
This Privacy Policy describes our practices regarding the collection, use, disclosure, storage, and protection of your personal information when you access or use the jackpottoto platform, including our website at jackpottoto.win and our mobile app. By registering or using our services, you agree to the terms set out in this policy.
We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection laws. Our commitment is to handle your data responsibly, transparently, and professionally.
Important Note: This privacy policy applies to the jackpottoto platform only. If you follow a link to a third-party website, your privacy there is governed by that third party's own privacy policy, not ours.
2. Information We Collect
We collect several categories of information from you, depending on how you interact with our platform. In general, the information we collect falls into three main categories:
2.1 Information You Provide Directly
- Registration Information: Full name, date of birth, gender, national ID or passport number, email address, phone number, and password
- Address Information: Residential address, city, state, and postcode
- Financial Information: Bank account number, bank name, and account holder name for deposit and withdrawal processing
- KYC Documents: Copy of national ID, passport, driving licence, utility bill, or bank statement for identity verification purposes
- Communications: Any messages, enquiries, or complaints you submit to our customer support team
2.2 Information Collected Automatically
- Log Data: IP address, web browser type, operating system, app version, and access timestamp
- Device Data: Unique device identifier, device model, screen resolution, and language settings
- Usage Data: Game records, betting history, transactions, session duration, and pages visited
- Location Data: Approximate location based on IP address for regional compliance purposes
- Cookies: Cookie data and similar tracking technologies (see section 6 for further details)
2.3 Information from Third Parties
- Payment Provider: Transaction verification information from FPX, local banks, and digital wallets
- Identity Verification Agency: Verification data from third-party KYC services we use
- Fraud Prevention Agency: Fraud risk information from our security providers
| Data Category | Collection Purpose | Legal Basis |
|---|---|---|
| Identity & Contact | Account registration, KYC verification | Contractual & legal obligation |
| Financial | Deposit & withdrawal processing | Contract performance |
| Technical & Device | Security, fraud prevention | Legitimate interest |
| Platform Usage | Service improvement, analytics | Legitimate interest & consent |
| Communications | Customer support, notifications | Contract performance & consent |
3. How We Use Your Information
Jackpottoto uses collected information for specific and legitimate purposes. We never sell your personal data to third parties for their own marketing purposes. Below is the complete list of how we use your data:
3.1 Platform Operations
- Processing account registration and verifying your identity
- Processing deposits and withdrawals securely
- Providing access to games and platform services
- Maintaining your transaction records and game history
- Managing bonus programs, promotions, and loyalty rewards
3.2 Security and Compliance
- Conducting anti-money laundering (AML) and KYC checks
- Detecting and preventing fraud, unauthorized access, and platform abuse
- Complying with applicable legal and regulatory obligations
- Maintaining records as required by law
3.3 Service Improvement
- Analyzing usage patterns to improve platform design and functionality
- Testing new features and improving the user experience
- Conducting internal research to understand player needs and preferences
3.4 Communications
- Sending important notifications related to your account
- Delivering information about promotions and exclusive offers (with your consent)
- Responding to your inquiries and complaints
- Sending updates related to policy changes or terms of service
4. Sharing of Personal Information
We do not sell, rent, or trade your personal information to third parties for their commercial purposes. However, there are situations where we may need to share your information:
4.1 Trusted Service Providers
We share necessary data with third-party service providers who help us operate the platform, including payment gateway providers, KYC and identity verification services, cloud computing service providers, and gaming software providers. All these providers are bound by strict confidentiality agreements and may only use your data for the specific purposes we have authorized.
4.2 Legal Requirements
We may be required to disclose your information to government authorities or regulators if mandated by law, including in response to court orders, criminal investigations, or anti-money laundering reporting obligations.
4.3 Protection of Rights and Safety
Where deemed necessary, we may disclose information to protect the rights, property, or safety of jackpottoto, our users, or the public from unlawful threats or activities.
Our Commitment: We never share your personal information with third-party advertising companies without your explicit consent. Your personal data is never sold under any circumstances.
5. Data Security
Jackpottoto takes security infrastructure seriously to protect your personal and financial data. The security measures we implement include:
- 256-bit SSL Encryption: All data transmitted between your device and our servers is protected with banking-grade encryption
- Two-Factor Authentication (2FA): An additional security layer for login and withdrawals
- 24/7 Monitoring: A dedicated security team monitors suspicious activity around the clock
- Data Segregation: Sensitive data such as financial information is stored separately from general user data
- Strict Access Controls: Only authorised personnel may access personal data, with structured permission levels in place
- Regular Security Audits: Penetration testing and security audits are conducted regularly by independent parties
- Secure Storage: Data stored in ISO 27001-certified data centres with physical and digital safeguards
Reminder: While we take all reasonable precautions, no system can be guaranteed 100% secure. You are also responsible for protecting your login credentials and not sharing your password with anyone.
Banking-Grade Encryption
Every bit of data moving between your device and our platform is protected with 256-bit SSL encryption — the same technology used by leading banks worldwide to secure financial transactions.
Secure & Fast KYC
Our identity verification process uses a KYC system managed by licensed providers. Your documents are processed in a secure environment and are not retained longer than required by law.
No Data Selling
We never sell, rent, or trade your personal data to advertisers or third-party marketing companies. Your data is only used for the purposes stated in this privacy policy.
Malaysia PDPA Compliance
Jackpottoto fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to access, correct, and delete your personal data at any time.
Full Communication Control
You can fully manage your communication preferences — opt in or out of promotional emails, push notifications, and marketing messages through your account settings at any time.
Secure Data Storage
Your data is stored in certified data centres meeting the highest international security standards. Access is restricted to authorised personnel only, with comprehensive audit logs for every access.
6. Cookies and Tracking Technologies
Jackpottoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
6.1 Types of Cookies We Use
- Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
- Performance Cookies: Helping us understand how users interact with the platform for improvement purposes. Data is collected in aggregate and anonymized form.
- Functional Cookies: Saving your preferences such as language, display settings, and game preferences so you do not have to reconfigure them each time.
- Analytics Cookies: We use internal analytics tools to understand traffic and usage patterns for product improvement purposes.
6.2 Managing Cookies
You can control and delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of our platform and your gaming experience. Essential cookies cannot be disabled as they are required for platform security and core operations.
7. Your Rights Regarding Personal Data
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data we hold:
- Right of Access: You have the right to request a copy of the personal data we hold about you. Requests can be made through our customer support and will be processed within 30 business days.
- Right to Rectification: If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction.
- Right to Erasure: In certain circumstances, you may request that your personal data be deleted. However, this right has limitations when we have a legal obligation to retain that data.
- Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain situations, such as if you dispute the accuracy of that data.
- Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
- Data Portability Right: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
How to Submit a Request: To exercise any of the above rights, contact our customer support team via live chat or email. We may require identity verification before processing your request to ensure the security of your account.
8. Data Retention Period
We only retain your personal data for as long as necessary to fulfill the purposes outlined in this privacy policy or to comply with legal requirements. General data retention guidelines are as follows:
- Active Account Data: Retained for the duration your account is active and for any additional period required by law after account closure
- Financial Transaction Records: Minimum 7 years in accordance with anti-money laundering legal requirements
- KYC Documents: Minimum 5 years after the business relationship ends
- Communication Logs: Up to 3 years for customer service and dispute record purposes
- Technical and Log Data: Typically 90 days to 1 year for security and debugging purposes
Once the retention period expires, data will be securely deleted or permanently anonymised in accordance with our internal procedures.
9. Child Protection
Jackpottoto does not offer services to individuals under the age of 18. We do not knowingly collect personal information from minors. If we find that a user is under 18, their account will be terminated immediately and all associated data will be deleted.
If you are a parent or guardian who believes your child has registered on our platform, please contact our customer support immediately so we can take the appropriate action.
10. Changes to This Privacy Policy
Jackpottoto reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make significant changes, we will notify you via your registered email or through a notification on the platform.
The "Last Updated" date at the top of this page will always be updated to reflect the date of the latest version. We encourage you to review this page periodically to stay informed about how we protect your information.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to reach out to our team. We are committed to providing accurate and helpful responses in a timely manner.
You can reach us via:
- Live Chat: Available 24/7 directly on the jackpottoto platform
- WhatsApp: Support number available after logging in to your account
- Email: [email protected]
Our privacy team will endeavour to respond to all data protection enquiries within 5 business days. For more complex data deletion or data access requests, the process may take up to 30 business days.