Privacy Policy Balaitoto – Malaysia Player Data Protection

Welcome to the Privacy Policy Balaitoto. We, the management team of Balaitoto, accessible at balaitoto.best, taking our responsibility seriously to protect the personal information of all players who register and play on our platform.

This Privacy Policy clearly explains how Balaitoto collects, uses, discloses, and protects your personal data. It has been prepared in compliance with Personal Data Protection Act (PDPA) 2010 Malaysia and relevant international standards.

By registering an account and using Balaitoto's services, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact us to proceed with account closure.

This policy applies to all users in Malaysia who access the Balaitoto platform via web browser, mobile app, or any other digital channel we operate. We encourage you to read this policy in full to understand your rights and choices as a Balaitoto player.

Balaitoto collects only the data genuinely necessary to deliver a safe, fair, and legally compliant service. The following are the categories of data we collect:

2.1 Account Registration Information

• Full name (as per MyKad or passport)
• An active email address
• Mobile phone number (for OTP verification)
• Date of birth (to verify you are 18 years of age or above)
• Encrypted password (unreadable by our staff)

2.2 Identity Verification Information (KYC)

To meet Anti-Money Laundering (AML) legal requirements, Balaitoto may request:

• A valid copy of your MyKad or Malaysian passport
• Proof of current address (utility bill or bank statement not older than 3 months)
• Bank statement to verify your payment method

2.3 Financial & Transaction Information

• Deposit and withdrawal history
• Payment methods used (Touch 'n Go, DuitNow, FPX, GrabPay, Boost, ShopeePay)
• Transaction amounts in Malaysian Ringgit (MYR)
• Date and time records of all transactions

2.4 Gaming & Activity Data

• Betting history: football, live casino, jackpot, e-sports, slots
• Betting limits set by the player
• Gaming session duration and access patterns

2.5 Technical Data

• IP address and general location (state within Malaysia)
• Device type and operating system
• Browser type and version
• Cookie and session data

Every piece of data collected by Balaitoto has a clear and lawful purpose. We do not use your data beyond the boundaries set out in this policy.

Primary Purpose of Data Use:

• Account management: Registering, verifying, and maintaining your player account on Balaitoto.
• Transaction processing: Managing deposits and withdrawals via DuitNow, FPX, Touch 'n Go, and any other payment methods you choose.
• Legal compliance: Compliant with the PDPA 2010, AML/CFT, and applicable Malaysian financial regulations.
• Platform security: Detecting and preventing fraud, account manipulation, or suspicious activity.
• Customer support: Responding to enquiries, complaints, and support requests via live chat or email at support@balaitoto.best.
• Personalise your experience: Recommending relevant promotions, bonuses, and games based on your preferences.
• Marketing communications: Sending promotional information, welcome bonus offers, and important updates (with your consent only).
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and offer appropriate support.

Balaitoto does not sell, rent, or trade your personal data to third parties for marketing purposes. However, there are certain situations where we may need to share your information:

4.1 Third-Party Service Providers

We work with trusted service providers to operate Balaitoto, including payment processors (DuitNow and FPX gateways), gaming software providers, and cloud services that store your data. All these providers are bound by strict data protection agreements.

4.2 Malaysian Regulatory Authorities

We may share your data with Malaysian government agencies when required by law, including the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or other authorised legal authorities.

4.3 Fraud Prevention

In cases of suspected fraud or unlawful activity, Balaitoto reserves the right to share relevant information with law enforcement authorities or other platforms within the industry to protect the integrity of the platform and the interests of all players.

4.4 Business Restructuring

In the event of any acquisition, merger, or transfer of Balaitoto's assets, player data may be transferred to the new entity, provided that the same or higher level of data protection is maintained.

Balaitoto continuously invests in the latest security infrastructure to ensure your personal data is protected at all times.

• 256-bit SSL Encryption: All communications between your browser and Balaitoto's servers are encrypted using TLS 1.3 — the same standard adopted by Malaysia's leading financial institutions.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial and KYC information, is encrypted using AES-256.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an extra layer of protection on their Balaitoto account.
• Regular Security Audits: We conduct penetration testing and third-party security audits on a quarterly basis.
• 24/7 Monitoring: Our security team continuously monitors for abnormal activity to detect threats promptly.
• Strict Access Controls: Only authorised personnel may access player data, with all access logged and audited.

Under Malaysia's PDPA 2010, you have the following rights regarding the personal data we hold:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your information is inaccurate or incomplete, you have the right to request that we correct it.
• Right to Withdraw Consent: You may withdraw your consent to marketing communications at any time via your account settings or by contacting us.
• Right to Complain: If you believe your privacy rights have been violated, you may file a complaint with the Department of Personal Data Protection Malaysia.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the way we process your data.

To exercise any of these rights, please contact our privacy team at support@balaitoto.best by clearly stating your request. We will respond within 14 business days.

Balaitoto uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymised information on how players use our website to help us improve our services.
• Functional Cookies: Saves your preferences such as language, display settings, and gaming preferences.
• Marketing Cookies: Used to deliver relevant advertisements and promotions. You may opt out of these cookies at any time.

You can manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Balaitoto platform.

Balaitoto retains your personal data only for as long as necessary for the purposes outlined in this policy or as required under Malaysian law.

• Active account data: Retained for as long as your Balaitoto account remains active.
• Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysia's financial and taxation legal requirements.
• KYC Data: Retained for 5 years after account closure in accordance with AML/CFT requirements.
• Communication logs: Retained for 2 years for dispute resolution purposes.
• Marketing data: Deleted within 30 days of your consent being withdrawn.

Once the retention period expires or you request deletion of your data (subject to legal obligations), your data will be securely deleted using industry-recognised data destruction methods.

Balaitoto is an adult entertainment platform that is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

During registration, we require date of birth verification and may request identity documents to confirm age. Should we discover that a minor's data has been collected without our knowledge, the account will be closed immediately and the data deleted.

Parents and guardians who discover that a minor is using the Balaitoto platform are urged to contact us immediately at support@balaitoto.best.

Balaitoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service improvements.

When significant changes occur, we will notify you through:

• In-account notifications on your Balaitoto account
• Email to your registered address
• Announcements on the balaitoto.best homepage

The effective date of the latest version of the Privacy Policy will always be displayed at the top of this document. Continued use of Balaitoto's services after any changes take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Balaitoto Privacy Policy, please contact our Data Protection Officer:

• Email: support@balaitoto.best
• Live Chat: Available 24/7 on the Balaitoto platform
• Response Time: Within 14 business days for all privacy-related requests

For formal complaints we are unable to resolve, you may contact Department of Personal Data Protection Malaysia at the Ministry of Communications and Digital Malaysia.