Data Protection

Privacy Policy Koitoto — Your Data Safe & Private

At Koitoto, your privacy is not merely a legal obligation — it is our core value. This document clearly and honestly explains how we collect, use, and protect your personal information as a member of our platform.

Last Updated: 1 January 2026  ·  Version 3.1
Our Privacy Commitment
256-bit SSL encryption
No sale of data to third parties
Right to access & data deletion
Secure data storage
International standards compliance

Six Principles Data Protection Koitoto

The way we handle your data is built on six fundamental principles that cannot be compromised.

End-to-End Encryption

All data transmitted between your device and Koitoto's servers is protected with 256-bit SSL encryption — the same standard used by Malaysia's major banks.

No Data Sharing

Your personal information is not sold, rented, or shared with any third party for marketing purposes. Your data belongs entirely to you.

Secure Storage

Your data is stored on servers protected with strict access controls, continuous monitoring, and secure backups across multiple locations.

Data Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. Contact our team and we will respond within 72 hours.

Minimum Collection

Koitoto only collects data that is genuinely necessary to operate the service — not excessive data gathered purely for analytics purposes.

Global Standards Compliance

The koitoto privacy policy complies with international data protection standards, ensuring your privacy rights are upheld in line with global best practices.

1. Introduction & Scope of This Policy

This Privacy Policy explains how Koitoto ("us", "our platform") collects, uses, stores, and protects your personal information when you use our website, mobile app, and all services we offer.

By registering an account or continuing to use the services Koitoto, you agree to the terms stated in this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account.

This Policy applies to all registered members, website visitors, and koitoto mobile app users regardless of your location.

We update this Privacy Policy from time to time. Any significant changes will be communicated via an in-platform notification or email to the address you registered.

2. Personal Data We Collect

Koitoto only collects information that is strictly necessary to provide a safe, legitimate, and quality service. Below are the categories of data we collect:

Data You Provide Directly

  • Registration information: full name, date of birth, email address, phone number.
  • Verification documents (KYC): identity card, passport, or bank statement for identity verification.
  • Payment information: bank account number or e-wallet details registered for deposits and withdrawals.
  • Communications: messages you send to our support team.

Automatically Collected Data

  • Usage data: games you play, deposits and withdrawals, session duration.
  • Technical data: IP address, device type, operating system, web browser type.
  • Cookie data: session cookies and preference cookies to enhance your experience.
  • Location data: general location based on IP address for compliance and security purposes.
Data Type Purpose of Collection Retention Period
Identity Information Account registration & KYC 5 years after account closure
Financial Data Deposit & withdrawal processing 7 years (audit requirement)
Usage Data Service improvements 2 years
Technical Data Security & Anti-Fraud 12 months
Support Communications Customer service records 3 years

3. How We Use Your Data

Data collected by Koitoto used solely for the following purposes:

  • Account management: creating and maintaining your account, processing deposits and withdrawals.
  • Identity verification: conducting KYC checks to meet compliance requirements and prevent fraud.
  • Platform security: detecting and preventing unauthorised access, fraud, and money laundering.
  • Customer service: processing your enquiries, complaints, and requests.
  • Responsible gaming: monitoring gameplay patterns to identify players who may need assistance.
  • Service improvements: analysing usage to improve the overall user experience.
  • Communications: sending important account-related notifications and promotions you have opted in to receive.

Koitoto never using your data to sell to advertisers, share with other platforms without your consent, or for any purpose outside the scope of our services.

4. Data Sharing with Third Parties

Koitoto does not sell or rent your personal data to any third party. However, there are limited situations where we need to share certain information:

Approved Service Providers

We work with trusted third-party service providers to handle payment processing, identity verification, and technical infrastructure. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes we specify.

Legal Requirements

Koitoto may disclose personal information if required by law, court order, or a legitimate law enforcement agency. In such cases, we will notify you in advance unless prohibited by law from doing so.

Koitoto never shares data with entities that are not directly involved in the operation of our platform. If you receive any communication claiming to be from Koitoto but requesting sensitive information, please report it to our support team immediately.

5. Data Security & Technical Protection

We continuously invest in security infrastructure to keep your data safe. The technical protection measures we employ include:

  • 256-bit SSL/TLS encryption for all data communications between the platform and your device.
  • Encryption of data at rest — sensitive data such as financial information is encrypted in our database.
  • Two-factor authentication (2FA) available and recommended for all accounts.
  • 24/7 security monitoring by our cybersecurity team.
  • Penetration testing conducted periodically by independent auditors.
  • Strict access controls — only authorised personnel may access sensitive data, and every access is logged and monitored.

While we take all reasonable steps to protect your data, no security system is completely foolproof. We encourage you to take your own protective measures as well, such as using a strong and unique password for your Koitoto account.

6. Use of Cookies

Koitoto uses cookies to enhance your experience on our platform. Below are the types of cookies we use:

Essential Cookies

These cookies are required for the platform's core functions — such as maintaining your login session and ensuring account security. They cannot be disabled without affecting core platform functionality.

Performance & Analytics Cookies

These cookies help us understand how players use the platform — which pages are visited most often, time spent, and technical issues that need to be resolved. This information is collected in aggregate and does not identify you individually.

Preference Cookies

These cookies store your preferences such as language, display theme, and other personal settings to ensure a more comfortable experience on your next visit.

You can manage cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

7. Your Rights as a Data Owner

As a member Koitoto, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team and we will respond within 72 working hours.

1
Right to Access

You have the right to request a copy of all personal data we hold about you.

2
Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction.

3
Right to Erasure

You may request deletion of your personal data, subject to legal requirements.

4
Right to Restriction

You may request that we restrict the processing of your data in certain situations.

5
Right to Data Portability

You may request your data in a machine-readable format for transfer.

6
Right to Object

You may object to the processing of your data for specific purposes such as direct marketing.

8. Changes to This Privacy Policy

Koitoto reserves the right to update this Privacy Policy from time to time in line with changes to laws, technology, or our business operations. Any significant changes will be communicated via:

  • In-platform notifications and the Koitoto mobile app.
  • Email to the address registered in your account.
  • A notification banner on the homepage for a minimum period of 14 days.

Continued use of the platform Koitoto after the effective date of changes will be considered acceptance of the updated Privacy Policy. The last updated date is always displayed at the top of this document for your reference.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, the koitoto support team is available 24/7 via live chat within the platform.

Your Privacy is Protected — Play with Peace of Mind

Koitoto is committed to protecting every member's privacy. Register today and enjoy a safe, fair, and personalised gaming experience — with your data under your own control.

Bahasa Melayu