Aatoto Privacy Policy – Protection of Your Personal Data

Introduction

Aatoto is fully committed to protecting the privacy and personal data security of every member who registers and uses our platform. This Privacy Policy is drafted to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in the online gambling industry. Each time you use the aatoto website, register a new account, make a financial transaction, or simply browse our content, you agree to the terms outlined in this Privacy Policy.

We do not treat data protection as a mere formality. It is embedded in our operational culture — from our engineering team to our customer support team. Your trust is the asset we value most.

Information We Collect

In operating the platform, aatoto collects several types of information from members, including:

• Registration Information: Full name, email address, mobile number, date of birth, and country of residence during the account registration process.
• Identity Verification Documents (KYC): National ID or passport, and proof of residence (utility bill or bank statement) for account verification and regulatory compliance purposes.
• Financial Information: Details of your chosen payment method, including online banking, digital wallets (e-wallet), and deposit and withdrawal transaction information.
• Platform Usage Data: Gaming activity, betting history, login history, IP address, device type, and browser information.
• Communications: Any emails, live chat sessions, or interactions with our support team that are recorded for service improvement purposes.

We only collect information that is strictly necessary. We do not request or store credit card numbers directly — all financial transactions are processed through trusted, integrated payment gateways that comply with PCI-DSS standards.

How We Use Your Information

The information we collect is used for the following purposes:

• Identity verification and member account management.
• Fast and secure processing of deposit, bonus, and withdrawal transactions.
• Detection and prevention of fraud, money laundering, and platform abuse.
• Full compliance with all applicable gambling laws and regulations.
• Providing responsive and effective customer support.
• Send promotional information, exclusive offers, and important account updates (you may unsubscribe at any time).
• Continuous improvement of the user experience across the platform, mobile app, and games offered.

Aatoto will not sell, rent, or provide your personal data to any third party for marketing purposes without your prior explicit consent.

Sharing Information With Third Parties

There are limited situations where aatoto may need to share your information with certain parties. This is only done when strictly necessary and within tightly controlled boundaries:

• Trusted Service Providers: Payment gateway providers, identity verification services, and technical infrastructure partners supporting platform operations — all bound by strict confidentiality agreements.
• Legal Compliance: When required by authorities, courts, or law enforcement agencies within the relevant jurisdiction.
• Fraud Prevention: In cases of suspected fraud or money laundering, relevant information may be shared with the appropriate authorities in accordance with legal procedures.

In all of the above scenarios, aatoto ensures that shared data is kept to a minimum, remains relevant, and is protected by legally binding data protection agreements.

Data Security

Data security is not just a promise — it is implemented through robust technical systems and protocols. aatoto uses 256-bit SSL encryption for all communications between your browser and our servers. Stored data is protected by strict access control layers, and only authorised personnel may access sensitive member information.

We also conduct regular security audits, penetration testing, and 24-hour threat monitoring. While no system can guarantee absolute 100% security, aatoto continuously strives to maintain security standards that exceed industry expectations.

Data Retention Period

Aatoto retains your personal information for as long as necessary for the purposes stated in this policy, or as required by law. Generally, transaction records and identity verification documents are retained for a minimum of seven (7) years after account closure, in line with financial and gambling regulatory requirements. Data that is no longer needed will be securely deleted or anonymized.

Your Rights as a User

As an aatoto member, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Update or correct inaccurate or outdated information.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time.
• Right to Complain: Lodge a complaint regarding data processing with the relevant data protection authority.

To exercise any of the rights above, please contact the aatoto support team through the official channels available on our platform. We will process your request within 14 business days.

Cookies and Tracking Technologies

Aatoto uses cookies and similar technologies to enhance your browsing experience, analyze website traffic, and personalize content. Cookies used include session cookies (automatically deleted when the browser is closed) and persistent cookies (stored for a set period). You can manage cookie settings through your browser preferences, though this may affect certain platform functions.

Changes to This Privacy Policy

Aatoto reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to you via email or in-platform notification at least seven (7) days before taking effect. Continued use of the aatoto platform after the effective date constitutes acceptance of the updated terms.

This Privacy Policy was last updated on January 2026. For any questions or concerns regarding your privacy, please contact our team through the official aatoto support channels.