Section 1
Introduction
This Privacy Policy ("Policy") is issued by Ketuatoto ("ketuatoto", "the Platform", "we", "us", "our") and governs the collection, processing, storage, and sharing of personal data relating to all users ("User", "Player", "you") of the ketuatoto platform accessible at https://ketuatoto.cam.
ketuatoto operates as an international online sports betting and live casino platform serving Malaysian players and other eligible users. In the course of providing our services — including account registration, sports betting, live casino gaming, deposits, and withdrawals in Malaysian Ringgit (MYR) via payment channels such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong — we collect and process certain personal data.
By registering an account on the Platform or otherwise accessing our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent, you must refrain from using the Platform and may request account closure by contacting our support team.
This Policy was last updated on 1 January 2026. We recommend reviewing this page periodically. Continued use of the Platform following any amendments constitutes acceptance of the updated Policy.
Section 2
Definitions
For the purposes of this Policy, the following terms carry the meanings assigned below:
| Term |
Meaning |
| "Personal Data" |
Any information that identifies or could reasonably identify a natural person, directly or indirectly — including name, identification number, contact details, location data, IP address, and financial information. |
| "Processing" |
Any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, or erasure. |
| "Data Controller" |
The entity that determines the purposes and means of processing personal data. For users of the ketuatoto Platform, this is ketuatoto. |
| "Third Party" |
Any natural or legal person other than the User and ketuatoto, including payment processors, KYC verification providers, and analytics services. |
| "KYC" |
Know Your Customer — identity verification process requiring submission of government-issued identification documents prior to processing withdrawal requests. |
| "Cookies" |
Small text files placed on a User's device by a web server to store session or preference information used to operate or optimise the Platform. |
Section 3
Data We Collect
ketuatoto collects the following categories of personal data in connection with the operation of the Platform:
3.1 Identity Data
- Full legal name as it appears on government-issued identification;
- Date of birth (used for age verification — users must be 21 or above);
- National identification number (MyKad) or passport number;
- Photographic identification documents submitted during KYC verification.
3.2 Contact Data
- Email address registered on the account;
- Malaysian mobile phone number;
- Residential address (required at withdrawal stage for certain payment methods).
3.3 Financial Data
- Payment instrument details (bank account numbers, e-wallet registered phone numbers) as provided during deposit and withdrawal transactions;
- Transaction history including deposit amounts, withdrawal amounts, dates, and associated payment methods;
- Cryptocurrency wallet addresses where applicable.
3.4 Technical Data
- IP address and geolocation data at time of login;
- Device type, browser version, and operating system;
- Session duration, pages visited, and interaction logs within the Platform.
3.5 Behavioural & Gambling Activity Data
- Betting history, wagering patterns, game preferences, and session frequency;
- Responsible gambling settings including deposit limits and self-exclusion status;
- Correspondence with ketuatoto's support team.
Section 4
How We Collect Your Data
ketuatoto collects personal data through the following primary channels:
- Direct Submission: Information you provide when registering an account, completing the KYC verification process, submitting a deposit or withdrawal request, or contacting our support team;
- Automated Technologies: Data collected automatically when you access the Platform, including cookies, server logs, browser fingerprinting, and analytics tools that record usage patterns;
- Payment Processors: Transaction confirmation data shared by our payment partners — including e-wallet providers (Touch 'n Go, Boost, GrabPay) and banking partners (Maybank, CIMB, Public Bank, Hong Leong) — as part of the deposit and withdrawal clearing process;
- Third-Party Verification Services: Identity verification and anti-fraud data obtained from third-party KYC and compliance service providers as part of our regulatory obligations;
- Public Sources: Where permitted by applicable law, we may supplement your profile with data sourced from publicly available databases for anti-money laundering screening purposes.
Section 5
Data Processing & Purpose
ketuatoto processes personal data only for legitimate, specified purposes. The following table sets out each processing purpose and its associated legal basis:
| Processing Purpose |
Legal Basis |
| Account registration and identity verification |
Performance of contract; compliance with KYC obligations |
| Processing deposits and withdrawals in MYR |
Performance of contract; legitimate business interests |
| Anti-money laundering (AML) compliance screening |
Legal obligation under international compliance frameworks |
| Age verification (21+ enforcement) |
Legal obligation; responsible gambling compliance |
| Fraud detection and account security monitoring |
Legitimate interests in protecting the Platform and its users |
| Customer support and dispute resolution |
Performance of contract; legitimate interests |
| Platform analytics and service improvement |
Legitimate interests in developing and improving the Platform |
| Responsible gambling monitoring and intervention |
Legitimate interests; responsible gambling obligations |
| Sending account-related communications (transactional) |
Performance of contract |
| Sending promotional communications and bonus offers |
Consent (opt-in); you may withdraw consent at any time |
Section 6
Data Sharing & Disclosure
ketuatoto does not sell, rent, or trade your personal data to any third party for their own marketing or commercial use. We may share your personal data with trusted third parties solely in the following circumstances:
- Payment Partners: Transaction data is shared with our payment gateway partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks — as strictly necessary to process your deposit or withdrawal requests;
- KYC & Compliance Providers: Identity documentation and verification data may be shared with third-party KYC service providers engaged to conduct document authentication and sanctions screening on our behalf;
- Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent fraud or money laundering;
- IT Infrastructure & Cloud Service Providers: Our hosting, database, and platform infrastructure providers may process data on our behalf, subject to strict data processing agreements;
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of ketuatoto's assets, your data may be transferred to the successor entity, subject to the same protections as described in this Policy.
All third parties with whom we share personal data are contractually required to handle it securely, process it only for the specified purpose, and comply with applicable data protection standards. We do not authorise third parties to use your data for their own independent marketing activities.
Section 7
Data Retention
ketuatoto retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or contractual retention requirements. The following indicative retention periods apply:
- Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with international anti-money laundering record-keeping standards;
- Transaction and financial data: Retained for a minimum of 5 years following the date of each transaction for AML compliance and dispute resolution purposes;
- KYC documentation: Retained for the period required by our licensing jurisdiction's compliance framework, typically 5–7 years from submission;
- Support correspondence: Retained for up to 3 years following resolution of the relevant enquiry;
- Marketing consent records: Retained until consent is withdrawn, and for a period of 1 year thereafter as evidence of prior consent;
- Technical and log data: Typically retained for up to 12 months, unless required for longer in connection with a specific security investigation.
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.
Section 8
Security Measures
ketuatoto implements and maintains a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These include:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and our servers;
- Encryption of sensitive data fields at rest, including financial data and identity document references;
- Two-factor authentication (2FA) available for all user accounts;
- Strict role-based access controls ensuring only authorised personnel can access personal data, on a need-to-know basis;
- Regular penetration testing and vulnerability assessments conducted by independent security professionals;
- 24/7 automated fraud monitoring and anomaly detection systems;
- Secure data centre infrastructure with physical access controls and redundancy measures.
Notwithstanding these measures, no internet-based data transmission or storage system is entirely immune from risk. Users are responsible for maintaining the security of their own account credentials and for promptly reporting any suspected compromise to our support team.
Section 9
Cookies & Tracking Technologies
ketuatoto uses cookies, web beacons, pixel tags, and similar technologies to operate and improve the Platform. The following categories of cookies are deployed:
- Essential Cookies: Strictly necessary for the Platform to function — including session management, authentication tokens, and security verification. These cannot be disabled without impairing core functionality;
- Functional Cookies: Remember your preferences and settings — such as language, interface layout, and previously selected payment methods — to personalise your experience;
- Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform to help us identify areas for improvement. These cookies do not identify you individually;
- Security Cookies: Support fraud detection and bot prevention mechanisms to protect the integrity of the Platform and your account.
You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the performance or availability of some features on the Platform. ketuatoto does not currently deploy third-party advertising or behavioural targeting cookies.
Section 10
Your Rights
Subject to applicable law and any overriding regulatory obligations (such as AML record-keeping requirements), you hold the following rights in respect of your personal data held by ketuatoto:
Right of Access
Request a copy of the personal data we hold about you and information on how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held on your account.
Right to Erasure
Request deletion of your personal data where no overriding legal obligation requires us to retain it.
Right to Restriction
Request that we restrict processing of your data in certain circumstances, such as while a dispute is under review.
Right to Portability
Request your data in a structured, machine-readable format where technically feasible and applicable.
Right to Object
Object to processing of your data based on legitimate interests, including objection to receiving marketing communications.
To exercise any of the above rights, please contact our support team via live chat or at [email protected] (plain text — not a clickable link). We will acknowledge your request within 5 business days and aim to respond substantively within 30 days. Identity verification will be required before any data is released or amended.
Please note that certain rights — particularly the right to erasure — may be limited where retention of your data is required by international AML regulations, licensing obligations, or pending dispute resolution. We will inform you of any such limitations when responding to your request.
Section 11
Minors & Age Verification
The ketuatoto Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals below the age of 21. Age verification is a mandatory component of our registration and KYC process.
If ketuatoto becomes aware that personal data has been collected from a person below the age of 21 — whether through misrepresentation at registration or any other means — we will immediately suspend the relevant account, reject any pending transactions, and permanently delete all associated personal data from our active systems, subject to any mandatory record-keeping obligations.
Parents or guardians who suspect that a minor has registered on the Platform are encouraged to contact our support team immediately. We take all such reports seriously and will act promptly upon receiving credible notification.
Section 12
International Data Transfers
As an internationally licensed platform serving Malaysian users, ketuatoto may transfer personal data to and process it in countries outside Malaysia, including those where our servers, payment processing infrastructure, or third-party KYC providers are located.
Where personal data is transferred internationally, ketuatoto takes appropriate measures to ensure that it receives an adequate level of protection — including the use of standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms — consistent with applicable data protection standards.
By using the Platform, you acknowledge and consent to your personal data being transferred to and processed in countries outside Malaysia as described in this Policy.
Section 13
Third-Party Services & Links
The ketuatoto Platform may reference or interact with third-party services — including payment gateways (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong) — in the course of delivering our services. These third parties operate under their own privacy policies and data protection frameworks, which are independent of ketuatoto.
ketuatoto is not responsible for the privacy practices or content of any third-party service. When you use a third-party payment method to deposit or withdraw, the relevant transaction data is processed by that third party in accordance with their own terms. We encourage you to review the privacy documentation of any third-party service you engage with.
ketuatoto does not embed third-party advertising networks, social media tracking pixels, or affiliate tracking technologies that share your browsing behaviour with external parties for commercial profiling purposes.
Section 14
Policy Amendments
ketuatoto reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. When material changes are made, we will endeavour to provide reasonable notice via the Platform or by email to your registered address.
The updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of the Platform following publication of any amendments constitutes your acceptance of the revised Policy. If you do not agree to any changes, you must cease using the Platform and may request account closure in accordance with our Terms and Conditions.
We recommend reviewing this Privacy Policy periodically. For significant changes, we will place a prominent notice on the Platform homepage for a reasonable period following the update.
Section 15
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ketuatoto, please contact us through the following channels:
- Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line for prompt routing;
- Live Chat: Available 24 hours a day, 7 days a week, directly within the ketuatoto Platform;
- Response Time: We aim to acknowledge all data-related requests within 5 business days and to respond substantively within 30 days of receipt.
Where you exercise a right under this Policy, we may require you to verify your identity before processing your request. This is to ensure that personal data is not disclosed to, amended by, or deleted at the request of unauthorised parties.
For matters relating to our Terms and Conditions, responsible gambling tools, or general account support, please also refer to the relevant pages linked in our site navigation. Our full Terms & Conditions and Responsible Gambling policy are available at all times via the site menu.
All formal data protection requests should reference your registered account username and email address. If you are submitting a subject access request, please specify the categories of data you wish to receive and the approximate time period covered.