Sasaktoto is committed to protecting the personal data of every player on our platform. This Privacy Policy explains in plain terms what data we collect, why we collect it, how we use and protect it, and the rights available to you as a Malaysian user.
All personal data transmitted between your browser and sasaktoto's servers is protected by industry-standard 256-bit SSL encryption. The same technology used by leading Malaysian banks safeguards every interaction on our platform.
Identity documents you submit for KYC verification — including your MyKad, passport, or driving licence — are stored with enhanced security controls, accessed only by authorised compliance personnel, and never shared with third-party advertisers.
You have the right to access, correct, restrict, or request deletion of your personal data at any time. Sasaktoto provides clear procedures for exercising each of these rights, detailed in Section 8 of this policy.
Sasaktoto does not sell, rent, or trade your personal information to any third-party marketing organisations. Data sharing with external parties is limited strictly to service providers, payment processors, and regulatory obligations.
We use cookies and similar technologies to improve platform performance and personalise your experience. Our Cookie Policy section explains each category of cookie used, why it is used, and how you can manage your preferences.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention schedules are outlined in Section 7.
Sasaktoto ("Company", "we", "us", "our") operates the online gaming and sports betting platform accessible at sasaktoto.cam. We are committed to protecting and respecting the privacy of every individual who accesses or uses our platform, including all registered players, visitors, and prospective users located in Malaysia and elsewhere.
This Privacy Policy ("Policy") sets out the legal basis on which any personal data we collect from you, or that you provide to us, will be processed by the Company. It describes the types of data we collect, the purposes for which we use that data, the parties with whom we may share it, and the rights and choices available to you in connection with your personal information.
This Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy, which together govern the relationship between you and sasaktoto. By registering an account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy.
Scope: This Policy applies to personal data collected through the sasaktoto website, mobile-optimised site, and any associated digital communications including email newsletters and promotional messages. It does not apply to third-party websites that may be linked from our platform.
For the purposes of this Privacy Policy, the following terms shall carry the meanings assigned to them below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion. |
| "Data Subject" | The individual to whom personal data relates — in the context of this Policy, primarily the registered user or visitor of the sasaktoto platform. |
| "Data Controller" | Sasaktoto, as the entity that determines the purposes and means of processing personal data collected through the platform. |
| "Third Party" | Any natural or legal person other than the Data Subject and Sasaktoto, including service providers, payment processors, and regulatory authorities. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for one or more stated purposes. |
| "KYC Documents" | Identity verification materials submitted by the User, including but not limited to Malaysian MyKad, driving licence, passport, and utility bills issued within the preceding three months. |
Sasaktoto collects personal data in order to operate the platform, comply with legal and regulatory obligations, process financial transactions, and deliver a secure and personalised gaming experience to players across Malaysia. We collect the following categories of personal data:
Sasaktoto collects personal data through the following channels and mechanisms:
Sasaktoto processes personal data on the basis of the following lawful grounds: (a) the performance of a contract with you; (b) compliance with legal obligations; (c) our legitimate business interests; and (d) your consent where explicitly obtained. The specific purposes for which we use your personal data are as follows:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity, contact, and login data | Contract performance |
| Age verification (21+ enforcement) | Date of birth, KYC documents | Legal obligation |
| Processing deposits and withdrawals | Financial and payment data | Contract performance |
| Anti-money laundering (AML) compliance | Identity, financial, and transaction data | Legal obligation |
| Fraud prevention and security monitoring | Technical, usage, and financial data | Legitimate interests |
| Personalising platform experience | Usage and gaming preference data | Legitimate interests / Consent |
| Sending promotional communications | Contact and preference data | Consent |
| Responsible gambling monitoring | Gaming activity and financial data | Legal obligation / Legitimate interests |
| Resolving disputes and complaints | Communication and account data | Legitimate interests / Legal obligation |
| Platform analytics and improvement | Technical and aggregated usage data | Legitimate interests |
Marketing Communications: Sasaktoto will only send promotional emails, SMS notifications, or in-platform messages to users who have explicitly opted in to receive such communications. You may withdraw your consent and opt out of all marketing communications at any time by updating your account preferences or contacting our support team.
Sasaktoto does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
Cross-Border Transfers: Where personal data is transferred to service providers operating outside Malaysia, Sasaktoto ensures that appropriate safeguards are in place — including contractual data protection clauses or equivalent international transfer mechanisms — to maintain a standard of protection consistent with this Policy.
Sasaktoto retains personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. The following retention guidelines apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Regulatory / AML obligations |
| KYC identity documents | 5 years from date of submission | AML / Legal compliance |
| Transaction records | 7 years from transaction date | Financial regulatory requirements |
| Customer support communications | 3 years from last interaction | Dispute resolution |
| Marketing preference records | Until opt-out + 1 year | Evidence of consent |
| Technical / server log data | 12 months from creation | Security and fraud monitoring |
| Cookie and analytics data | As per cookie-specific expiry settings | Platform improvement |
Upon expiry of the relevant retention period, personal data will be securely deleted or anonymised in accordance with our internal data destruction procedures.
As a user of the sasaktoto platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to all valid requests within 30 days.
You may request a copy of the personal data sasaktoto holds about you, along with information about how it is being processed.
You may request correction of any inaccurate or incomplete personal data we hold about you, including name, address, or contact details.
In certain circumstances, you may request deletion of your personal data. Note that legal retention obligations may prevent full erasure in all cases.
You may request that we restrict processing of your data in specific circumstances, such as while a dispute over accuracy is being resolved.
Where processing is based on consent or contract, you may request your personal data in a structured, machine-readable format for transfer to another provider.
You may object to processing based on legitimate interests, including direct marketing. Marketing opt-outs take effect immediately upon receipt of your request.
How to Submit a Request: To exercise any of the rights listed above, email our Data Protection team at support@sasaktoto.cam with the subject line "Data Subject Request — [Your Right]". Please include your registered account email and, where applicable, a copy of your identity document to verify your identity before we process the request.
The sasaktoto platform integrates with a number of third-party service providers to deliver core platform functions. These include payment gateway providers supporting Malaysian payment methods, game content providers, identity verification services, and analytics tools. Each third-party provider is subject to its own privacy policy governing how it handles data received in connection with services delivered to sasaktoto.
Sasaktoto does not control the data practices of third-party providers once data leaves our direct control. We select all third-party partners carefully and require them to maintain data protection standards consistent with this Policy through contractual data processing agreements.
Any hyperlinks on the sasaktoto platform that direct users to external websites are provided for informational purposes only. Sasaktoto is not responsible for the privacy practices or data handling of any external website, and visiting such links is entirely at the user's own risk.
Sasaktoto employs a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:
Data Breach Notification: In the unlikely event of a personal data breach that poses a risk to your rights and interests, Sasaktoto will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.
The sasaktoto platform is strictly intended for individuals who are at least 21 years of age. We do not knowingly collect, store, or process personal data belonging to any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and accounts found to belong to underage individuals will be immediately suspended and their data deleted in accordance with our legal obligations.
If you have reason to believe that a minor has registered a sasaktoto account or provided us with personal data without appropriate authorisation, please contact us immediately at the email address set out in Section 14 so that we may take prompt remedial action.
Sasaktoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The date of the most recent revision is displayed prominently at the top of this page.
Where changes are material — meaning they significantly alter how we process your personal data or affect your rights — we will notify registered users by email to the address on file prior to the changes taking effect. For minor or non-material updates, your continued use of the sasaktoto platform following the publication of the revised Policy constitutes acceptance of the changes.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data sasaktoto holds about you, please contact our Data Protection team through the following channel:
Email: support@sasaktoto.cam (subject line: "Privacy Enquiry" or "Data Subject Request")
Live Chat: Available 24 hours a day, 7 days a week, on all platform pages
Response Time: Within 30 days for formal Data Subject Requests; within 24 hours for general privacy queries via email; typically under 5 minutes via live chat.
Sasaktoto is committed to resolving all privacy-related queries fairly and promptly. Where you believe your data protection rights have not been adequately addressed, you retain the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
Language: This Privacy Policy is published and shall be interpreted exclusively in the English language. Any translation made available for convenience carries no legal weight in the event of a conflict with the authoritative English version.
Your privacy is protected at every step. With transparent data practices, robust security measures, and full respect for your rights as a Malaysian player, sasaktoto is a platform you can trust with both your gaming and your personal information.
Gambling involves financial risk. Please play responsibly and only with funds you can afford to lose.