Privacy Policy jacktoto — Your Personal Data Protection

1. Personal Information We Collect

Jacktoto collects various types of personal information from members to ensure that the services provided are secure, seamless and meet the needs of members in Malaysia. This data collection is carried out transparently and solely for the purposes stated in this policy.

The following are the categories of information we collect:

2. How We Use Your Personal Data

All information collected by jacktoto is used solely for legitimate purposes necessary to operate our platform services. We do not use your data beyond the scope stated here without obtaining your prior consent.

The primary purposes for which your personal data is used are as follows:

• Account Management: Create, verify and maintain your member account, including the identity verification (KYC) process required by the licensing authority.
• Transaction Processing: Process deposits, withdrawals and any financial transactions related to your account using your preferred payment methods such as FPX, Touch 'n Go, GrabPay and Boost.
• Service Delivery: Allow you to access all games and features on the jacktoto platform, including Live Casino, Slots, Sports Betting and bingo.
• Security & Fraud Prevention: Detect and prevent fraudulent activity, money laundering, account abuse and any other unlawful activity.
• Legal Compliance: Fulfil the legal and regulatory obligations imposed on online gambling platforms, including AML and KYC requirements.
• Service Communications: Send important notifications regarding your account, transactions, policy changes and security information.
• Responsible Marketing: With your consent, sending you information about relevant promotions, bonuses, and special offers.
• Platform Improvements: Analyse usage patterns on an aggregated and anonymised basis to improve the performance, design and user experience of the jacktoto platform.
• Customer Support: Provide assistance and resolve any complaints or enquiries you submit to our support team.

We ensure that every use of your personal data has a valid legal basis — whether based on your consent, contractual necessity, legal obligation or the legitimate interests of jacktoto that do not override your fundamental rights.

3. Data Sharing & Disclosure

Jacktoto does not sell, rent or distribute your personal data to third parties for their own marketing or commercial purposes. However, in the course of operating our platform, there are certain situations where your personal data may be shared with the following parties:

• Payment Service Providers: Required transaction information is shared with trusted payment solution providers to securely process your deposits and withdrawals.
• Game Service Providers: Third-party game software providers, such as slot and Live Casino providers, may receive technical data required to deliver the gaming experience.
• Identity Verification Services: KYC information is shared with licensed identity verification service providers to meet regulatory requirements.
• Statutory Authorities: jacktoto will disclose personal data to regulatory authorities, law enforcement or courts when required to do so by law or a valid court order.
• Analytics Partners: Anonymised and aggregated usage data (with no personal identification) may be used for platform analytics.

All third parties receiving jacktoto member personal data are bound by strict confidentiality agreements and are obligated to protect that data to a standard no less than our own data protection standards.

4. Cookies, Tracking Technologies & Your Choices

Jacktoto uses cookies and similar tracking technologies to enhance your experience on our platform, ensure proper functionality and analyse usage patterns. We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login authentication, gaming sessions, and security. These cookies cannot be disabled as the platform cannot function properly without them.
• Performance Cookies: Collect information about how you use the platform — pages visited, time spent — to help us improve performance and user experience. All data is anonymised.
• Functional Cookies: Allow the platform to remember your preferences such as language, display settings and region to deliver a more personalised experience.
• Analytics Cookies: Used by our internal analytics tools to understand aggregate usage patterns for product development purposes. This data is not shared with advertisers.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of some parts of the JackToto platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

5. Data Security Measures

The security of your personal data is jacktoto's top priority. We have implemented comprehensive layers of technical, physical and organisational protection to safeguard your information from unauthorised access, loss, misuse or disclosure.

Key security measures we implement include:

• 256-bit SSL Encryption: All communications between your browser and jacktoto's servers are encrypted using the latest TLS protocols, ensuring your data cannot be intercepted in transit.
• Two-Factor Authentication (2FA) System: We offer and encourage the use of two-factor authentication for an added layer of protection on your account.
• 24/7 Monitoring: Our cybersecurity team continuously monitors systems to detect any unusual activity or potential threats.
• Internal Access Control: The principle of least privilege is enforced — staff may only access data necessary for their specific roles, and every access is automatically logged.
• Encrypted Data Storage: All personal data stored on our servers is encrypted at rest using industry-leading encryption algorithms.
• Regular Penetration Testing: jacktoto undergoes regular security and penetration testing by independent security experts to identify and address any vulnerabilities.
• Incident Response Procedures: We maintain a comprehensive security incident response plan. In the event of any data breach that affects you, we will notify you within the timeframe required by law.

While we take all reasonable steps to protect your data, no security system is entirely foolproof. We encourage you to also play your part in keeping your account secure by using a strong, unique password and never sharing your login credentials with anyone.

6. Your Rights Over Personal Data

As a jacktoto member, you have clear and enforceable rights over your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to making it easy for you to exercise these rights.

To exercise any of the above rights, please contact our Data Protection Officer via email at [email protected] or through the platform's live chat. We will process your request within 30 business days of receipt.

7. Data Retention Period & Deletion

Jacktoto retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data: For the duration of your active membership and up to 7 years after account closure to meet financial record-keeping and audit requirements.
• Financial Transaction Records: Minimum 7 years after each transaction occurs, in line with Malaysia's accounting and tax legal requirements.
• KYC Documents: Up to 5 years after the termination of the business relationship, or longer if required by statutory authorities.
• Security & Technical Logs: For 12 months for security and investigation purposes, after which it is automatically anonymised or deleted.
• Support Communications: Up to 3 years to facilitate reference and resolution of any disputes that may arise.
• Marketing Data: Until you withdraw your consent, after which it will be deleted within 30 business days.

Once the retention period expires, your personal data will be securely deleted or permanently anonymised so it can no longer be linked to your identity. The secure deletion process includes multiple data overwrites in accordance with recognised data deletion standards.

8. Third-Party Links & Services

Jacktoto integrates certain third-party services essential to platform operations, including game software providers, payment solutions, and internal analytics tools. All such integrations are governed by strict data processing agreements.

We would like to highlight several important points regarding third parties:

• Jacktoto only works with third-party providers that have a strong track record in security and privacy and comply with recognised industry standards.
• All third-party providers with access to member data are required to sign a comprehensive Data Processing Agreement (DPA).
• Data shared with third parties is limited to the minimum information necessary for the delivery of the relevant service.
• Jacktoto periodically monitors third-party provider compliance and reserves the right to terminate the partnership if privacy standards are not met.

9. Children's Privacy

The jacktoto platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

We enforce strict age verification during the registration and KYC process. Should we discover that personal data has been inadvertently collected from an underage individual, we will take immediate action to:

• Immediately restrict access to the account in question.
• Delete all personal data associated with the individual.
• Return any existing account balance to the relevant party.
• Notify the relevant statutory authorities if required by law.

Parents or guardians who suspect that a child under their care has registered on the jacktoto platform are urged to contact us immediately at [email protected] for prompt action.

10. Policy Changes & How to Contact Us

Jacktoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. Any material changes will be communicated to you via email or in-platform notification at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically to ensure you are always aware of how we protect your personal information. The date of the most recent update is always displayed at the top of this document.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact our Data Protection Officer:

We are committed to responding to all privacy-related enquiries within 5 business days. For cases requiring further investigation, we will keep you updated on the progress periodically.