At Kesiritoto, privacy is not just a legal obligation — it is a commitment we take seriously every day. This document transparently explains how we collect, use and protect your personal information.
The principles we uphold in managing every member's personal data
We collect only data that is genuinely necessary to operate your account and deliver our services. No excess data is collected purely for marketing purposes.
All data transmitted between your device and kesiritoto servers is protected with 256-bit SSL encryption. Stored data is also encrypted using the latest security standards.
Kesiritoto has never sold or rented your personal data to any third party for marketing or other commercial purposes, and never will.
You have the right to access, amend and delete your personal data at any time. Requests are processed within 14 working days through our customer support channels.
Only kesiritoto staff with a legitimate business need are permitted to access member personal data. All access is logged and continuously monitored.
This privacy policy is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We manage your data in accordance with all applicable legal requirements.
A brief overview of the data process from collection to protection
This Privacy Policy describes how kesiritoto ("we", "Platform") collect, process, store and protect your personal data when you use the kesiritoto.net website, the Kesiritoto mobile app and all related services.
This policy is drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in personal data management. By registering for or using the kesiritoto platform, you agree to the collection and use of data as described in this document.
If you disagree with any part of this policy, please stop using the platform and contact our support team to close your account.
Note: This policy applies to all Kesiritoto platform users, including unregistered visitors, registered members and former members.
Kesiritoto collects personal data across various categories depending on how you interact with our platform. We only collect data that is genuinely necessary for the stated purposes.
| Data Category | Sample Information | Requirements |
|---|---|---|
| Identity Information | Full name, date of birth, identification card number | Mandatory (KYC) |
| Contact Information | Email address, phone number, residential address | Mandatory |
| Financial Information | Deposit methods, transaction history, account balance | Mandatory |
| Usage Data | Game history, login times, game preferences | Automatic |
| Device & Technical Data | IP address, device type, operating system, web browser | Automatic |
| Location Data | Country, time zone (not precise GPS location) | Options |
Important: kesiritoto does not collect full credit/debit card numbers. All card processing is handled by certified third-party payment gateways and card data never passes through our servers.
Most of your personal data is collected directly when you register an account, complete the KYC process, contact customer support, or fill in forms on the platform. This data is provided voluntarily by you.
When you use the Kesiritoto platform, our systems automatically record technical data including your IP address, browser information, pages visited and session duration. This data is used for security and platform improvement purposes.
In certain situations, we may receive data from trusted sources including KYC verification bodies, payment service providers and industry fraud databases — solely for identity verification and fraud prevention purposes.
Kesiritoto uses your personal data for legitimate and transparent purposes. We will not use your data for any purpose other than those stated below without first obtaining your consent.
Marketing Communications: We only send you marketing communications if you opted in during registration or via your account settings. You can unsubscribe at any time.
Kesiritoto does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. Data is shared only in the following limited situations:
We work with trusted third-party service providers including payment processors, KYC verification platforms, and cloud infrastructure providers. They receive only the data necessary to perform their functions and are bound by strict confidentiality agreements.
Kesiritoto may disclose data to authorities if required by court order, anti-money laundering investigations, or any valid legal requirement. In such situations, we will endeavour to notify you in advance unless prohibited by law.
In the event of a merger, acquisition, or sale of kesiritoto assets, user data may be transferred to the new entity. You will be notified via email or an in-platform notice before any transfer takes place, and privacy terms offering at least the same level of protection will be maintained.
Kesiritoto continually invests in security infrastructure to protect your personal data from unauthorised access, alteration, disclosure, or destruction.
All data communications between your device and the kesiritoto platform are protected with 256-bit SSL/TLS encryption — the same standard used by leading banking institutions. Sensitive data stored in our databases is also encrypted using the latest encryption algorithms.
Access to user data is restricted to staff who require it to perform their duties. All access is authenticated via multi-factor verification and logged for audit purposes.
Our systems are continuously monitored 24 hours a day to detect any suspicious activity or unauthorised access attempts. Our cybersecurity team responds to any threats in the shortest possible time.
In the Event of a Data Breach: In the event of a data breach affecting your rights and freedoms, kesiritoto will notify you within 72 hours of becoming aware of the incident.
Kesiritoto retains your personal data only for as long as necessary to fulfil the original purpose of collection or any applicable legal requirements.
Once the retention period expires, data will be securely deleted or anonymised in a manner that can no longer be linked to any specific individual.
Under the Malaysian Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold:
To request a copy of the personal data we hold about you.
To request correction of inaccurate or incomplete data.
To request erasure of your data under circumstances permitted by law.
To request that we restrict how we process your data in certain situations.
To object to the processing of your data for direct marketing purposes.
To receive your data in a machine-readable format for transfer.
To submit any request relating to the above rights, contact the kesiritoto customer support team via live chat or email. We will process your request within 14 working days.
Kesiritoto uses cookies and similar tracking technologies to enhance the user experience and ensure platform security.
You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect platform functionality. Third-party advertising cookies are not used on Kesiritoto.
Kesiritoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When significant changes are made, we will notify you via your registered email and display a clear notice on the platform.
The "Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to check this page periodically to stay informed about how we protect your information.
Continued use of the kesiritoto platform after any privacy policy changes take effect constitutes acceptance of the revised policy.
Privacy Inquiries: For any inquiries, concerns, or requests regarding your data privacy, contact the kesiritoto Data Privacy Officer via the in-platform live chat. Response times are typically under 24 hours on business days.
With 256-bit SSL encryption, PDPA compliance and a no-data-selling commitment, Kesiritoto is a platform you can trust completely. Register today and play with peace of mind.