wongtoto Privacy Policy

01. Introduction

wongtoto ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who visits, registers with or otherwise uses the wongtoto website located at https://wongtoto.cam. This Privacy Policy has been prepared in accordance with generally accepted data protection principles and reflects our genuine commitment to transparent, responsible data handling.

This Policy governs all personal data processing activities carried out by wongtoto in connection with the operation of its online casino entertainment and sports betting information platform. It applies to users accessing the Platform from Malaysia and any other jurisdiction.

By using wongtoto, creating an account, submitting personal information or continuing to browse the Platform after this Policy has been published, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any provision of this Policy, you must discontinue use of the Platform immediately.

02. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, telephone number, date of birth, financial account details and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, organisation, alteration, retrieval, use, disclosure, transfer or deletion.
• "Data Controller" means wongtoto, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "User" means any natural person who accesses, browses or registers with the wongtoto Platform.
• "Account Data" means personal data collected during the registration and verification process, including identity documents and payment method information.
• "Usage Data" means technical and behavioural information automatically collected when a User interacts with the Platform, such as IP address, device type, session duration and page views.
• "Third Party" means any entity other than wongtoto and the User, including payment processors, identity verification services and analytics providers.
• "Cookie" means a small data file stored on a User's device by the Platform for the purposes of session management, preference storage or analytics.

03. Data We Collect

wongtoto collects personal data only where there is a clear and legitimate purpose for doing so. The categories of data we may collect include:

3.1 Data Provided Directly by You

• Registration data: Full name, date of birth, nationality, residential address, email address and contact number.
• Identity verification data: Government-issued identification documents, passport or national identity card, and proof of address.
• Payment data: References to the Malaysian payment methods you use, such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX or USDT TRC20. Full payment credentials are handled by third-party payment processors rather than stored directly by wongtoto.
• Support communications: Messages, enquiries and correspondence submitted through live chat or email to [email protected].
• Responsible gambling submissions: Deposit limit requests, self-exclusion applications and related communications.

3.2 Data Collected Automatically

• IP address and approximate geographic location.
• Device type, operating system and browser version.
• Session data including pages visited, time spent and navigation paths.
• Referring website and search terms used to reach the Platform.
• Cookie and tracking data, subject to your browser and consent settings.

04. How We Use Your Data

wongtoto processes personal data for the following purposes, each supported by a defined legal basis described in Section 5:

wongtoto does not use personal data for automated decision-making that produces significant legal effects without human review. Analytics and session monitoring are used to improve the Platform experience, not to make binding decisions about individual users without appropriate oversight.

05. Legal Basis for Processing

wongtoto processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the agreement between wongtoto and the User, including account management, identity verification and payment processing.
• Consent: Processing activities where the User has given clear, informed and specific consent, including certain analytics and marketing communications. Consent may be withdrawn at any time.
• Legitimate interests: Processing necessary for wongtoto's legitimate business interests, including fraud prevention, Platform security, improving user experience and responsible gambling monitoring, provided these interests do not override user rights.
• Legal obligation: Processing required to comply with applicable laws, regulatory requirements or valid court orders and law enforcement requests.

06. Data Sharing & Disclosure

wongtoto does not sell personal data to third parties. Personal data may be shared in the following limited circumstances:

• Payment processors: Transaction data is shared with payment service providers, including those facilitating Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and USDT TRC20 payments, solely to facilitate deposit and withdrawal processing.
• Identity verification services: Where required, registration and identity document data may be shared with third-party verification service providers for KYC (Know Your Customer) compliance.
• Analytics and security providers: Aggregated or anonymised usage data may be shared with analytics and security service providers for the purpose of improving Platform performance and fraud detection.
• Legal and regulatory authorities: Personal data may be disclosed to competent authorities where required by law, court order, regulatory direction or valid law enforcement request.
• Business transfers: In the event of a merger, acquisition or sale of all or part of wongtoto's business, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third-party service providers engaged by wongtoto are required to process personal data only for the stated purposes and in accordance with data protection obligations consistent with this Privacy Policy.

07. Cookies & Tracking Technologies

wongtoto uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be used:

• Strictly necessary cookies: Required for core Platform functionality, including session management and account authentication. These cannot be disabled without affecting core features.
• Functional cookies: Used to remember user preferences such as language settings, display preferences and responsible gambling limit selections.
• Analytics cookies: Used to collect aggregated information about how users interact with the Platform, helping wongtoto identify areas for improvement. These are operated by wongtoto or trusted analytics providers.
• Security cookies: Used to detect and prevent fraudulent activity, bot access and account compromise attempts.

Users may manage cookie preferences through their browser settings. Disabling certain categories of cookies may impair Platform functionality, including account login, preference storage and fraud detection. wongtoto does not use tracking cookies to build advertising profiles or sell cookie data to third parties.

08. Data Retention

wongtoto retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory and operational requirements. The following general retention principles apply:

• Active account data is retained for the duration of the account relationship plus a reasonable period thereafter to accommodate disputes, audits and regulatory requests.
• Transaction and payment records may be retained for extended periods where required by applicable anti-money laundering, financial record-keeping or tax compliance obligations.
• Identity verification documents are retained in accordance with KYC compliance requirements and then securely deleted or anonymised.
• Support communication records are retained for a limited period sufficient to resolve the relevant enquiry and maintain quality assurance.
• Usage and analytics data is retained in aggregated or anonymised form and does not personally identify individual users after the relevant processing period.

Upon account closure, wongtoto will delete or anonymise personal data within a reasonable timeframe, subject to any retention obligations under applicable law. Requests for earlier deletion are handled subject to Section 10 (User Rights) and any overriding legal obligations.

09. Security Measures

wongtoto implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These measures include, but are not limited to:

• Encryption of data in transit using secure protocols.
• Access controls limiting personal data access to authorised personnel only.
• Session monitoring and anomaly detection to identify suspicious account activity.
• Regular review of data handling procedures and security configurations.
• Incident response procedures for suspected or confirmed data security events.

In the event of a personal data breach that poses a risk to user rights, wongtoto will take appropriate steps to contain the breach and notify affected users and, where applicable, relevant authorities in accordance with applicable data protection obligations.

10. Your Rights

Subject to applicable law and the legal basis for processing, users of wongtoto have the following data protection rights:

• Right of access: You may request a copy of the personal data wongtoto holds about you, along with information about how it is used.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some corrections can be made directly through account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to legal retention obligations and ongoing compliance requirements.
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances, for example while a dispute regarding accuracy is resolved.
• Right to data portability: Where technically feasible and legally applicable, you may request a copy of your personal data in a structured, commonly used format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests in certain circumstances, subject to wongtoto demonstrating compelling legitimate grounds.

To exercise any of these rights, please contact wongtoto using the details provided in Section 14. Requests will be acknowledged and addressed within a reasonable timeframe. Identity verification may be required before a request can be fulfilled.

11. Children & Minors

wongtoto is strictly intended for adults aged 21 and above. The Platform does not knowingly collect personal data from any person under the age of 21. Age verification is conducted at registration and may be required at any time during the account lifecycle.

If wongtoto becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted promptly and the associated account will be closed. Any balance associated with such an account will be handled in accordance with applicable regulatory requirements.

Parents and guardians who become aware that a minor has created an account or provided personal data to wongtoto are strongly encouraged to contact support immediately at [email protected] so that the situation can be addressed without delay.

12. Third-Party Services

The wongtoto Platform may reference or integrate with third-party services, including Malaysian payment providers, identity verification services and platform analytics tools. The following points apply to third-party interactions:

• wongtoto is not responsible for the privacy practices of third-party services. When you interact with a payment provider such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX, that interaction is governed by the respective provider's own privacy policy.
• References to third-party payment brands on the wongtoto Platform are for informational purposes only and do not imply a data-sharing relationship beyond what is operationally necessary to process your transactions.
• wongtoto does not control and is not responsible for the content, data practices or privacy standards of any external website or service that a user may navigate to independently.

13. Policy Amendments

wongtoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law or Platform functionality. When material changes are made, the effective date at the top of this page will be updated.

Users are encouraged to review this Policy periodically to stay informed of any changes. Continued use of the wongtoto Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. Where changes materially affect user rights, wongtoto will take reasonable steps to communicate those changes through the Platform.

14. Contact Us

For any questions, concerns, access requests or complaints regarding this Privacy Policy or wongtoto's handling of your personal data, please contact us through the following channel:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week
• Response target: Privacy-related requests acknowledged within 5 business days; substantive responses within 30 days where reasonably practicable

When submitting a data access or deletion request, please include sufficient information to verify your identity and specify the nature of your request clearly. wongtoto will not process requests that cannot be verified without risking disclosure to the wrong party.

For full terms governing Platform use, please review the Terms & Conditions. For responsible gambling guidance and support, visit the Responsible Gambling page.