Jambitoto Privacy Policy – Malaysia User Data Protection

At Jambitoto, your privacy is not merely a legal obligation — it is a responsibility we take seriously. This document explains exactly what data we collect, why it is collected, how it is used, and the rights you hold as a user of our platform.

Updated: 1 June 2026 256-bit SSL Encryption Bahasa Melayu (ms-MY)
Our Privacy Commitment
Your data not for sale to any third party
256-bit SSL encryption for all transactions
You have the right to request, amend or delete your data
Card or banking information not stored on our servers
Compliance PDPA (Personal Data Protection Act) Malaysia

This Privacy Policy forms part of your agreement with Jambitoto. Please read it together with Terms and Conditions us for a full overview of your rights and responsibilities as a platform user.

1. Introduction and Scope of Privacy Policy

This Privacy Policy ("Policy") is published by Jambitoto ("we", "Platform") and applies to all users who access or use our platform via the website jambitoto.run or our official mobile app.

Jambitoto is committed to protecting the privacy of every user in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management. We believe every user has the right to know exactly what happens to their personal data.

By registering or using the Jambitoto platform, you agree to the collection and use of your personal data as described in this Policy. If you do not agree, please discontinue use of the platform and contact us to request account deletion.

This Policy should be read together with Terms and Conditions and Responsible Gaming Policy us. All three documents together form the complete agreement between you and jambitoto.

2. Personal Data We Collect

We only collect data that is genuinely necessary to provide you with a safe, fair, and efficient service. The following are the categories of data we collect:

Data Category Example Information Requirements
Identity Data Full name, date of birth, MyKad/passport number Mandatory – for KYC and age verification
Contact Data Email address, phone number Mandatory – for account communications
Financial Data Bank name, bank account number (for withdrawals only) Mandatory – for withdrawal processing
Technical Data IP address, device type, operating system, browser Automatic – for account security
Gaming Data Betting history, wins, losses, session duration Automatic – for compliance and service purposes
Preference Data Favourite games, account settings, notification preferences Optional – for personalising your experience

Important Note: We do not store your credit/debit card numbers, bank PINs, or banking passwords. All card transactions are processed directly through licensed and encrypted payment operators.

3. How We Collect Your Data

Your personal data is collected through several different methods as you interact with the Jambitoto platform:

A) Directly from You

  • During the account registration process — name, email, date of birth and password
  • During the KYC verification process — a copy of your identity document and proof of address
  • When uploading documents for bank account verification during the withdrawal process
  • When contacting customer support via live chat or email

B) Automatically

  • IP address and location information (country/city only, not precise GPS) each time you log in
  • Device information, operating system, and browser version you are using
  • Game history, wagering activity and in-platform actions
  • Access times, session duration, and pages visited within the platform

C) Via Cookies and Similar Technologies

We use cookies and tracking technologies to improve platform functionality, maintain your login session, and analyze usage patterns in aggregate. Further details are available in Section 7 of this document.

4. Purpose of Personal Data Use

Jambitoto uses collected personal data only for legitimate and relevant purposes, including:

  • Account Management: Registration, identity verification (KYC), secure login and profile updates
  • Service Provision: Processing deposits, withdrawals, bonus disbursements, and access to games
  • Platform Security: Detecting and preventing fraud, money laundering, and account misuse
  • Legal Compliance: Fulfilling anti-money laundering (AML) compliance obligations and prescribed reporting requirements
  • Service Communications: Sending transaction notifications, security updates, and important account information
  • Personalise Your Experience: Recommending relevant games, personalizing the interface, and delivering targeted promotions
  • Responsible Gaming: Monitoring play patterns to identify users who may need support
  • Platform Improvements: Analyzing usage data in aggregate to improve service quality

We will not use your data for any purposes beyond those stated above without first obtaining your consent.

5. Data Sharing with Third Parties

Jambitoto does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data may be shared only in the following circumstances:

  • Payment Service Providers: Licensed payment processors that handle your deposits and withdrawals — only the data required for the relevant transaction
  • Game Providers: Third-party slot and casino providers that supply games within our platform — player ID only, without full personal information
  • Statutory Authorities: To law enforcement agencies or authorities when required by court order or legal obligation
  • Identity Verification Services: Third-party KYC service providers we use to verify user identity — governed by strict confidentiality agreements
  • Technical Services: Cloud infrastructure and cybersecurity providers that help us operate the platform securely

All third parties we work with are required to comply with data protection standards equal to or higher than those we have set. They are not permitted to use your data for any purpose other than the services they provide to us.

6. Data Storage and Security Measures

The security of your data is our top priority. The following are the technical and organizational measures we implement to protect your personal information:

  • 256-bit SSL encryption for all data transmitted between your device and our servers
  • Passwords are stored in hashed form — we do not have access to your original password.
  • Data separation — sensitive information is stored separately with strict access controls
  • Regular data access audits to detect any unauthorised access
  • Two-factor authentication is available for all user accounts
  • Continuous 24/7 security monitoring using the latest threat detection systems

Data Retention Period

Your personal data is retained for as long as your account remains active. Once an account is terminated or deleted at your request, we will delete or encrypt your data within 90 days — except for data that must be retained under legal obligations (such as financial records required to be kept for 7 years under Malaysian law).

7. Cookies and Tracking Technologies

Jambitoto uses cookies and similar technologies to enhance the user experience and platform functionality. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. Cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting aggregated and anonymized information about how users use the platform — helping us identify and resolve issues.
  • Functional Cookies: Remembering your preferences such as favorite games, display settings, and notification choices for a more personalized experience.
  • Analytics Cookies: Used to understand platform usage patterns in aggregate — no individually identifiable information is collected.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Jambitoto platform.

8. Your Rights as a User

Under Malaysia's PDPA and the data protection principles we follow, you have the following rights regarding your personal data:

Right of Access Right to Rectification Right to Erasure Right to Object Right to Portability Right to Restrict Processing
  • Right of Access: You have the right to request a copy of the personal data we hold about you
  • Right to Rectification: If your data is inaccurate or outdated, you have the right to request a correction — you may also update basic information directly in your account settings.
  • Right to Erasure: You may request the deletion of your personal data, subject to legal retention obligations
  • Right to Object: You may object to the use of your data for specific purposes such as direct marketing
  • Right to Data Portability: You may request your data in a machine-readable format for transfer to another platform
  • Right to Restrict Processing: In certain circumstances, you may request that we restrict how we process your data

To exercise any of the above rights, contact our team via the platform's live chat or our support email. Requests will be processed within 30 business days.

9. Child Protection

The jambitoto platform is exclusively for adult users aged 18 years and above. We do not intentionally collect any personal data from individuals under the age of 18.

During registration, users are required to verify their age. The mandatory KYC process completed prior to the first withdrawal also serves as an additional age verification layer.

Should we discover that personal data of a minor has been collected without our knowledge, the account in question will be terminated immediately and all related data will be deleted. Parents or guardians who become aware that their child has registered on this platform are encouraged to contact us right away.

10. Cross-Border Data Transfers

In operating our platform, your personal data may be processed or stored on servers located outside Malaysia — including data centres in Southeast Asia, Europe, or North America — depending on the location of the infrastructure and gaming service providers we use.

All cross-border data transfers we carry out are subject to adequate safeguards, including:

  • Binding data processing agreements with all third-party providers
  • Compliance requirements aligned with Malaysia's PDPA and international standards
  • Data encryption during transmission across networks

11. Amendments to the Privacy Policy

Jambitoto reserves the right to update this Privacy Policy at any time to reflect changes in our data management practices, legal requirements, or new platform features.

When material changes occur, we will notify you via:

  • A clear notice on the platform's main page for a minimum of 14 days
  • Email notifications sent to your registered email address
  • Push notifications via the mobile app (if notifications are enabled)

The "Updated" date at the top of this document reflects the date of the latest version. Continued use of the platform after any amendment takes effect will be considered your acceptance of the updated Privacy Policy.

12. How to Contact Us Regarding Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or how we manage your personal data, please contact us via:

  • Live Chat: Available 24/7 via the live chat icon on the jambitoto platform — the fastest way to get a response
  • Privacy Email: [email protected] (displayed as text only)
  • Mobile App: The "Support" menu → "Privacy & Data Issues" in the official jambitoto app

Our privacy management team operates during office hours, Monday to Friday, 9 AM to 6 PM (WIB). For urgent account security issues, please use our 24/7 live chat channel. We are committed to responding to all privacy inquiries within 3 business days and resolving requests in full within 30 business days.

For more information about your rights regarding responsible gaming and account management, please refer to the Responsible Gaming us or the FAQ for answers to frequently asked questions.


Six Layers of Privacy Protection at jambitoto

256-bit SSL Encryption

All data transmitted between your device and jambitoto's servers is protected with the same industry-standard encryption used by leading banking institutions worldwide.

Two-Factor Authentication

You can enable two-factor authentication (2FA) to add an extra layer of security to your account. Without the verification code, no one can access your account even if they know your password.

Card Data Not Stored

Your credit card, debit card, or banking information is never stored on jambitoto servers. All transactions are processed directly through licensed and independently audited payment operators.

No Data Selling

Your personal data is never sold, rented, or exchanged with any third-party advertiser or marketer. Your information belongs solely to you and is used exclusively to provide platform services.

Malaysia PDPA Compliance

The jambitoto platform operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the full right to access, correct, or request deletion of your personal data at any time.

24/7 Security Monitoring

Our security monitoring system operates around the clock to detect any unusual activity, intrusion attempts, or unauthorised access to user data in real time.

Data Stored Responsibly

Your data is retained only for as long as required for the service or legal obligations. Accounts terminated at your request will be deleted within 90 days.

Privacy Communications in Bahasa Melayu

All privacy-related communications regarding your data are available in Bahasa Melayu. Our support team is ready to help you understand your privacy rights in the language you are most comfortable with.


Play with Peace of Mind — Your Privacy is Protected at Jambitoto

With 256-bit SSL encryption, PDPA compliance, and our commitment to never selling your data, you can focus on what matters most — enjoying the games you love.

Platform for adults aged 18 and above. Play responsibly.

Bahasa Melayu