gototo Privacy Policy

1. Information We Collect

gototo collects your personal information through various means when you register, use or interact with our platform. The types of information collected include:

Account Registration Information:

• Full name as per identity card (MyKad)
• Active mobile number
• Valid email address
• Username and password (stored in encrypted form)
• Date of birth for age verification (21 years and above)

Financial and Transaction Information:

• E-wallet details for deposits and withdrawals (Touch 'n Go eWallet, Boost, ShopeePay)
• Bank account information for FPX Online Banking and DuitNow
• Crypto wallet address for USDT, BTC or ETH transactions
• Deposit, withdrawal and betting history records

Technical Information:

• IP address and device information
• Web browser type and version
• Session data and activity logs
• General geolocation information (country/region)

2. How We Use Your Information

Information collected is used for the following purposes, and does not go beyond the scope stated here:

• Creating and managing your player account on the gototo platform
• Processing deposits and withdrawals accurately and securely
• Verifying your identity to meet international licensing requirements (KYC)
• Providing 24/7 customer support via live chat and email
• Sending notices related to your account, transactions and policy changes
• Detecting and preventing fraud, money laundering and suspicious activity
• Analysing platform usage for technical improvement purposes
• Complying with legal obligations and instructions from relevant authorities

We do not use your data to make automated decisions that have a serious effect on your rights without human involvement. Every major decision relating to your account involves review by the relevant team.

3. Information Sharing and Disclosure

gototo does not share your personal information with third parties except in the following situations:

Trusted Service Providers:

We work with third-party service providers that assist in platform operations, including payment processors for e-wallets and FPX, technology infrastructure providers, and identity verification services. All these parties are bound by strict confidentiality agreements and are only permitted to process data under our instructions.

Legal Requirements:

We may disclose your information to relevant authorities when required by law, court order or in the context of financial crime investigations. In such cases, we will notify you where we are permitted to do so.

Business Transfers:

In the event of a merger, acquisition or sale of platform assets, user information may be transferred to the receiving entity. You will be notified in advance and given the option to delete your account before the transfer takes place.

4. Data Security

gototo implements various technical and organisational security measures to protect your personal information from unauthorised access, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for all communications between client and server
• User passwords stored in hashed form that cannot be decrypted
• Two-factor authentication (2FA) available for player accounts
• Continuous security monitoring and real-time threat detection
• Role-based access controls for internal staff
• Regular security audits by independent third parties

While we take all reasonable precautions, no digital system can be guaranteed one hundred percent secure. Should a security breach occur that affects your data, we will notify you within the required timeframe and take appropriate remedial action.

You are also responsible for keeping your own account secure. Ensure your password is strong, not shared with anyone, and notify us immediately if you suspect unauthorised access to your account.

5. Use of Cookies and Tracking Technologies

The gototo platform uses cookies and similar tracking technologies to improve your user experience. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for basic platform functions such as login sessions and account security. These cookies cannot be disabled.
• Functional Cookies: Save your preferences such as language and display settings for future use.
• Analytics Cookies: Help us understand how players use the platform so we can make improvements.
• Performance Cookies: Ensure the website runs optimally across different devices and browsers.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the gototo platform.

6. Data Retention Period

gototo retains your personal information for as long as necessary for the purposes stated in this policy. Retention periods are determined based on the following factors:

• Active account data is retained for as long as your account remains active on the platform
• Financial transaction records are retained to meet applicable audit and legal requirements
• Security logs are retained for a set period for platform protection purposes
• Data collected during the identity verification (KYC) process is retained for the period required by our international licensing

When your data is no longer needed, we will delete or anonymise it in a secure and irreversible manner. You may contact us to find out more about specific retention periods for particular data categories.

7. Child Protection and Age Restrictions

The gototo platform is NOT suitable for individuals under the age of 21. We do not knowingly collect or process personal information from individuals under the age of 21.

Our account registration process requires age verification, and we reserve the right to request identity verification documents (such as MyKad) to confirm that users meet the required age requirement.

If we find that information from an underage user has been collected without our knowledge, we will promptly delete that information and close the associated account. Any balance in the account will be returned in accordance with the established procedure.

8. Cross-Border Data Transfers

As a platform operating under international licensing, your personal information may be processed at locations outside Malaysia. In such cases, we ensure that a level of protection equivalent to this policy is observed by all parties involved.

We use internationally recognised protection mechanisms for cross-border data transfers, including data processing agreements that comply with adopted data protection standards.

9. Contact Us About Privacy

If you have any questions, concerns, or complaints about how we handle your personal information, you may contact us through the following channels:

• 24/7 live chat available on the gototo website in Malay and English
• Support email: [email protected]

Our support team will endeavour to respond to all privacy-related enquiries within a reasonable time. For requests that require account review or data disclosure, you may be asked to provide proof of identity for security purposes.

We are committed to resolving every concern fairly and transparently. If you are not satisfied with our response, you have the right to refer the matter to the relevant authority under the applicable jurisdiction.