Privacy Policy

Privacy Policy lakototo –
Your Personal Data Protection Is Guaranteed

Your privacy is more than a legal obligation to us — it is the trust you place in lakototo every time you log in. This document clearly explains what we do with your data, why we need it, and how you can control it.

Updated: 1 January 2026
Our Data Protection Commitment

Lakototo complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management. We never sell users' personal data to any third party for marketing purposes.

1

Introduction – Who Is Responsible for Your Data?

This Privacy Policy is published by lakototo, operator of an online betting platform in lakototo.pro. As the data controller, lakototo is fully responsible for how members' personal data is collected, stored, processed, and protected.

This document applies to all individuals who register as members, browse our website, or use any services offered through the lakototo platform. By using our platform, you agree to the terms set out in this Privacy Policy.

If you have any questions regarding privacy or wish to exercise your rights as a data subject, you can reach our privacy team through the official support channels available 24 hours a day.

2

Personal Data We Collect

We only collect data that is strictly necessary to provide a safe, seamless, and compliant service. No excess data is collected without a clear purpose.

Data Categories Example Information Reason Collected
Personal Identity Full name, date of birth, gender, MyKad number Identity verification (KYC), fraud prevention
Contact Information Email address, phone number, residential address Account communications, security notifications
Financial Data Payment method details, transaction history Deposit and withdrawal processing
Usage Data Game history, login activity, session duration Platform improvement, fraud detection
Technical Data IP address, device type, browser, approximate location Account security, performance optimization

Data is collected through three main methods: information you provide directly during registration and platform use, data automatically generated when you use our services, and in limited cases, data we receive from licensed third-party identity verification providers.

3

How We Use Your Personal Data

Every piece of data we collect is used for a specific and legitimate purpose. We do not use your data for any purpose beyond what is stated here without obtaining your consent first.

  • Account management: Securely create, verify, and maintain your member account.
  • Transaction processing: Process deposits, withdrawals, and all financial activity within your account.
  • Identity verification (KYC): Fulfill anti-money laundering (AML) compliance and financial crime prevention requirements.
  • Platform security: Detect and prevent fraud, hacking, and activities that violate our terms of use.
  • Customer support: Handle your inquiries, complaints, and technical support requests.
  • Service communications: Send important notifications about your account, security, and service changes.
  • Continuous improvement: Analyze aggregate (not individual) usage patterns to improve the platform experience.
  • Legal compliance: Meet reporting requirements set by relevant regulatory bodies.

For marketing communications such as promotional notifications and special offers, we will only send these to you if you have given explicit consent during registration or later through your account settings.

4

Sharing Information with Third Parties

Lakototo does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data is only shared in very limited situations and for legitimate purposes only:

  • Payment service providers: Transaction information required to process deposits and withdrawals via FPX, e-wallets, and other payment methods you select.
  • Identity verification providers: KYC data required for legitimate identity verification for regulatory compliance purposes.
  • Licensed game providers: Session information technically required to run games from third-party providers integrated within our platform.
  • Regulatory bodies and authorities: When required by law, court order, or for official investigation purposes.
  • Professional advisors: Auditors, lawyers, and consultants within a limited scope and bound by professional confidentiality.

All third parties that receive lakototo user data are bound by strict data protection agreements and are only permitted to use that data for the agreed purposes.

5

Data Security – How We Protect Your Information

The security of your personal data is a technical priority we never compromise on. lakototo continuously invests in the latest security infrastructure and procedures to keep your data safe at all times.

  • 256-bit SSL Encryption protects all data transmitted between your device and lakototo's servers — including logins, transactions, and all in-platform communications.
  • Encryption at rest ensures all data stored in our databases is protected even when at rest.
  • Strict access control ensures that only specifically authorized personnel can access user data, with every access automatically logged.
  • Regular security audits conducted by independent parties to identify and address any vulnerabilities before they can be exploited.
  • Real-time threat monitoring uses an always-on AI system to detect and block intrusion attempts or suspicious activity.

While we take all reasonable precautions, no system can guarantee 100% absolute security. In the event of any security breach that affects your data, we will notify you within 72 hours in accordance with the relevant compliance requirements.

6

Cookies, Tracking Technologies & Your Preferences

The lakototo platform uses cookies and similar tracking technologies to deliver a better user experience and more secure platform operation. The following are the types of cookies we use:

  • Essential cookies: Required for core platform functions — login, session security, and navigation. These cookies cannot be disabled.
  • Performance cookies: Collect anonymous information about how users interact with the platform to help us improve performance and usability.
  • Preference cookies: Remember your settings and preferences such as language, display theme, and gaming preferences.
  • Analytics cookies: Helps us understand aggregate usage patterns for product improvement purposes.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

7

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy frameworks, you have the following rights regarding your personal data held by lakototo:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 business days.

Right to Rectification

You may request correction of inaccurate or incomplete data via your account profile section or by contacting our support team.

Right to Erasure

You may request deletion of your personal data, subject to applicable legal retention requirements (typically 7 years for financial records).

Right to Object to Processing

You may object to the processing of your data for specific purposes, such as marketing communications, at any time.

Right to Data Portability

You may request a copy of your data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data while an issue is being resolved.

To exercise any of the above rights, contact our privacy team via live chat or the official support email. We will verify your identity before processing any data-related request.

8

Data Retention & Deletion

Lakototo does not retain your personal data longer than necessary for the stated purposes or as required by applicable law.

  • Active account data: Retained for the duration of active membership and for a specified period after account closure.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with financial reporting and tax requirements established in Malaysia.
  • KYC Data: Retained for a minimum of 5 years after account closure in accordance with international AML requirements.
  • Technical & security logs: Retained for 12 months for security incident investigation purposes if needed.
  • Support communication data: Retained for 2 years for service reference and quality improvement.

Once the relevant retention period expires, data will be securely deleted or anonymized in a way that ensures it cannot be linked to any specific individual.

9

Amendments to This Privacy Policy

Lakototo reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, or updated legal requirements.

Any significant changes will be notified to registered users via email or in-platform notification at least 14 days before the amendments take effect. The "updated" date displayed at the top of this document always reflects the latest version of the Privacy Policy in force.

Continued use of the lakototo platform after amendments take effect constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we manage your personal data.

10

Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your privacy rights, our team is ready to assist through the following support channels:

Live Chat

The fastest way to get help. Available 24/7 with an average response time of under 3 minutes.

Privacy Email

For formal privacy inquiries and data access requests: [email protected]

Response within 3 business days.

Why Your Privacy Is Safe with lakototo

Six layers of protection ensuring the security of your data at all times

End-to-End Encryption

All data transmitted between your device and our servers is protected with 256-bit SSL encryption — the same security standard used by major banking institutions.

Strict Access Control

Only staff with specific authorisation may access user data. All access is logged and automatically monitored to prevent unauthorised use.

Malaysia PDPA Compliance

Our operations fully comply with Malaysia's Personal Data Protection Act 2010, giving you clear and enforceable legal protection.

No Data Sales

Your personal data has never been and will never be sold to advertisers, data brokers, or any third party for commercial purposes. This is an unchanging commitment.

User Privacy Controls

You have full control — access, correct, or request deletion of your data at any time via your account settings or by contacting our support team.

Regular Security Audits

Lakototo's security systems are regularly audited by independent security experts to ensure your data protection consistently meets the latest industry standards.

🔒

Your Data is Protected. Play with Peace of Mind at lakototo.

With multi-layered data protection and a clear privacy commitment, you can focus on your gaming experience without worrying about the security of your information.

Bahasa Melayu