Operatoto takes the protection of your personal information seriously. This document clearly explains how we collect, use, store, and protect your data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Privacy is more than a legal document to us – it is a genuine commitment reflected in every aspect of how operatoto operates.
All data transmitted between your device and operatoto's servers is protected with industry-standard 256-bit SSL encryption. This means your account information, passwords, and financial transactions cannot be intercepted by any third party.
Member personal data is stored on servers protected by multi-layered access controls. Only authorised personnel have access to member personal information, and all access is logged for security audit purposes.
Operatoto does not sell, rent, or share members' personal data with any third party for marketing purposes without your explicit consent. Your data belongs to you — we are only its custodian.
Operatoto's entire data management policy is designed and audited to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to access, correct, and delete your data at any time.
Through your account settings, you can manage communication preferences, control shared data, and request deletion of your data. Operatoto provides easy-to-use privacy control tools without the need to go through complicated processes.
In the event of any security breach affecting your personal data, operatoto is committed to notifying affected members within 72 hours, in line with international data protection best practices.
Under Malaysia's PDPA and Operatoto's internal policies, you as a member have the following rights regarding your personal data.
You have the right to request a copy of the personal data we hold about you at any time. Requests will be processed within 21 working days.
If any information we hold is inaccurate or out of date, you have the right to request immediate correction through your account settings.
You may request the deletion of your personal data upon account closure, subject to mandatory legal record-keeping requirements.
You may object to the processing of your personal data for direct marketing purposes at any time, without any conditions or charges.
You have the right to receive your personal data in a machine-readable format and transfer it to another service provider of your choice.
In certain circumstances, you may request that the processing of your personal data be temporarily restricted while a dispute or review is pending.
When you register and use the Operatoto platform, we collect several categories of personal information to ensure our services run smoothly, securely, and in compliance with legal requirements. The types of information we collect include:
The information we collect is used solely for legitimate and clearly stated purposes. Below are the main ways Operatoto uses members' personal data:
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Identity verification & KYC | Identity, official documents | Legal Obligation |
| Deposit & withdrawal processing | Financial information, bank account | Contract Performance |
| Member account management | Contact information, usage data | Contract Performance |
| Fraud detection & security | Technical data, activity records | Legitimate Interest |
| Promotional & bonus communications | Contact information, member preferences | Consent |
| Platform & UX improvements | Usage data, technical data | Legitimate Interest |
Operatoto will not use your personal data for any purposes not listed above without obtaining your consent first. If we wish to use your data for a new purpose, you will be notified and asked to provide consent again.
Every processing of personal data by operatoto has a clear legal basis under Malaysia's PDPA. We process your data on one or more of the following grounds:
Operatoto does not sell members' personal data to any third party. However, in the course of operating the platform, we may share limited data with the following categories of third parties, solely for the stated purposes:
The Operatoto website and mobile app use cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and ensure platform security. The cookies we use are grouped into several categories:
You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the Operatoto platform.
Operatoto implements a comprehensive range of technical and organizational security measures to protect your personal data from unauthorized access, loss, alteration, or accidental disclosure:
Operatoto retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable laws and regulations. Our data retention guidelines are as follows:
Once the retention period has expired, your personal data will be securely deleted or anonymised in accordance with certified data disposal procedures.
In some circumstances, your personal data may be transferred to or processed outside Malaysia, particularly when we use cloud service providers or international technology platforms. In all such data transfers, Operatoto ensures that:
Operatoto services are intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under the age of 18. If you believe we have inadvertently collected personal information of someone under 18, please contact us immediately and we will take action to delete that information as soon as possible.
Operatoto applies strict age verification procedures during registration, including official identity document verification, to ensure that only eligible individuals can access our platform.
If you have any questions, concerns, or wish to exercise your data protection rights, you may contact Operatoto's Data Protection Officer through the following methods:
We are committed to responding to all privacy-related enquiries within 14 working days from the date of receipt. For more complex requests, we will notify you of a more accurate expected resolution timeframe.