Important Note: This Privacy Policy explains how Jambitoto handles personal data. By using our platform, you agree to the terms set out here. Please read it carefully.
1. Introduction
Jambitoto (hereinafter referred to as "we", "the platform", or "Jambitoto") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and global industry best practices in data management.
We understand that your personal data is highly sensitive, especially in the context of an online financial and entertainment platform. We therefore do not take this responsibility lightly. Every data-related decision is made with your interests and safety as a member as the top priority.
This policy applies to all users of the Jambitoto platform, covering our official website, mobile app, and all official communication channels. If you have any questions after reading this policy, our support team is available via the platform's live chat.
2. Personal Data We Collect
Jambitoto only collects data that is genuinely necessary to provide safe, legitimate, and high-quality services. The following are the categories of data we collect:
| Data Category | Sample Information | Purpose of Collection |
|---|---|---|
| Identity Data | Full name, MyKad/passport number, date of birth, selfie photo | Identity verification (KYC), fraud prevention |
| Contact Data | Email address, phone number, residential address | Account communications, important notifications |
| Financial Data | Bank account number, bank name, transaction records | Deposit and withdrawal processing |
| Usage Data | Login, betting history, gaming activity | Account security, service improvement |
| Technical Data | IP address, device type, web browser, cookie data | Security, platform performance analytics |
In addition to information you provide directly during registration, we also collect data automatically when you use the platform — including navigation data, session duration, and general usage patterns. This data is not directly linked to your identity unless required for security purposes.
We never collect sensitive data such as health information, religious beliefs, or political views. Data collected is strictly limited to what is required for platform operations.
3. How We Use Your Data
Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any purpose outside the following scope without obtaining additional consent from you:
- Account Management: Creating, verifying, and maintaining your member account, including the mandatory KYC identity verification process.
- Transaction Processing: Processing deposits, withdrawals, and other financial activities related to your account quickly and securely.
- Service Communications: Sending important notifications related to your account, changes to terms, security alerts, and platform updates.
- Fraud Prevention: Detecting and preventing unauthorised activity, money laundering, and any form of platform abuse.
- Responsible Gaming Monitoring: Identifying betting patterns that may require intervention to protect member wellbeing.
- Platform Improvement: Analysing usage patterns in aggregate (not individually) to improve the overall user experience.
- Legal Compliance: Fulfilling the reporting and record-keeping obligations set by the relevant authorities.
If you give your consent, we may also use your email or phone number to send you promotional information and special offers. You can withdraw this consent at any time through your account settings.
4. Data Sharing with Third Parties
Jambitoto does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, in the following limited situations, we may share data with trusted parties:
- Payment Service Providers: Required transaction information is shared with payment processors that have undergone rigorous security assessments to enable your deposits and withdrawals to be processed.
- KYC Service Providers: Identity verification data is shared with licensed verification service providers to ensure compliance with anti-money laundering (AML) requirements.
- Relevant Authorities: We will disclose data if required by a court order, regulatory directive, or other valid legal obligation.
- Technology Partners: Technical infrastructure providers (such as cloud services and security monitoring) may have limited access to operational data within environments protected by strict confidentiality agreements.
All third parties working with jambitoto are required to comply with data protection standards equal to or higher than those we practise. Legally binding data processing agreements are signed with every partner.
5. Data Security
We continuously invest in the latest security infrastructure to keep your data safe. The protective measures we have in place include:
- 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers, ensuring no third party can intercept that communication.
- Data-at-rest encryption for sensitive information stored in our database, including financial details and identity documents.
- Two-Factor Authentication (2FA) available to all member accounts to add an extra layer of protection against unauthorised access.
- 24/7 security monitoring by our specialist cybersecurity team, who monitor any unusual activity in real time.
- Role-based access control which ensures that only staff who require access to specific data are permitted to do so, in accordance with the principle of least privilege.
- Regular penetration testing by independent security auditors to identify and patch any system vulnerabilities before they can be exploited.
While we take all reasonable precautions, no online system can be guaranteed 100% secure. We therefore encourage you to play your part in protecting your account — use a strong password, enable 2FA, and never share your login credentials with anyone.
6. Data Retention Period
We do not retain your data longer than necessary. Our retention periods are determined based on operational requirements and legal obligations:
- Active account data retained for as long as your account remains active on the jambitoto platform.
- Closed account data retained for a minimum of 7 years after account closure to comply with AML legal requirements and financial reporting obligations.
- Financial transaction records retained for 7 years in compliance with the requirements of the Anti-Money Laundering and Anti-Terrorism Financing Act 2001.
- Security and access logs retained for 12 months for investigation purposes in the event of a security incident.
- Marketing data (if you have consented) retained until you withdraw that consent.
Once the retention period expires, your data will be securely deleted or fully anonymised so it can no longer be linked to your identity.
7. Your Rights as a Member
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold. We respect and facilitate the exercise of each of these rights:
Right of Access
You have the right to request a copy of the personal data we hold about you at any time.
Right to Rectification
If any of your data is inaccurate or outdated, you may request that we correct it.
Right to Erasure
You may request data deletion in certain circumstances, subject to legal retention obligations.
Right to Object
You may opt out of having your data processed for direct marketing purposes at any time, without providing any reason.
Right to Data Portability
You may request your data in a structured, machine-readable format for transfer to another platform.
Right to Restrict Processing
Under certain circumstances, you may request that we temporarily restrict the way we process your data.
To submit any request related to your privacy rights, please contact our privacy team via the platform's live chat. We will process your request within 30 working days.
8. Cookies & Tracking Technologies
Jambitoto uses cookies and similar technologies to ensure the platform runs smoothly and to deliver a personalised experience. The following are the types of cookies we use:
You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the Jambitoto platform.
9. Protection of Underage Members
The Jambitoto platform is restricted to individuals aged 18 and above. We do not knowingly collect personal data from children or individuals below the specified age limit.
If we discover that a child's personal data has been collected without proper age verification, we will take immediate action to delete that data and close the account in question. Parents or guardians who find that their child has registered on our platform without permission are requested to contact our support team immediately.
Our KYC process is specifically designed to prevent underage registration. All new accounts are required to submit valid identification documents before the first withdrawal can be processed.
10. Privacy Policy Amendments
Jambitoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to our systems. We are committed to notifying you of any material changes:
- In-platform notifications will be displayed to all active users when material changes to this policy occur.
- A notification email will be sent to your registered address at least 14 days before the changes take effect.
- The "Updated" date at the top of this page will always reflect the latest version of the policy currently in effect.
- Previous versions of this policy are kept in our archive and can be requested through our support team for reference.
Continued use of the Jambitoto platform after the effective date of any change will be deemed as your acceptance of the amended Privacy Policy. If you do not agree, you have the right to close your account before the effective date.
Have questions about how we handle your privacy? Our team is ready to help via the platform's live chat, available 24 hours a day, 7 days a week.