Privacy Policy

This Privacy Policy ("Policy") describes how Jamintoto ("Company", "we", "us", "our"), the operator of the online gaming platform accessible at https://jamintoto.cam ("Platform"), collects, processes, stores, uses, and protects the personal data of users ("User", "you", "your") who access or interact with our services.

We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Policy has been prepared in accordance with applicable international data protection principles and the operational requirements of the online gaming industry.

By registering an account, using the Platform, or interacting with any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Policy, the following terms shall have the meanings ascribed below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, and online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, deletion, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, Jamintoto acts as the Data Controller in respect of your personal data.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller in accordance with documented instructions.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
• "KYC" — Know Your Customer; the identity verification process conducted by Jamintoto as part of its regulatory and AML obligations.
• "Cookie" — a small text file stored on your device by a website to enable functionality, analytics, and session management.

Jamintoto collects the following categories of personal data, depending on how you interact with the Platform:

We collect personal data through the following means:

4.1 Direct Collection

Data you provide to us directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to a survey or promotional communication.

4.2 Automated Collection

Data collected automatically when you access or use the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser information, and session activity data.

4.3 Third-Party Sources

Data received from verified third-party payment processors (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and other participating Malaysian banking institutions) in connection with deposit and withdrawal transaction verification, and from identity verification service providers as part of the KYC process.

Jamintoto processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing required to enter into or perform a contract with you, including account registration, payment processing, and delivery of gaming services;
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including KYC/AML obligations, data retention requirements, and regulatory reporting;
• Legitimate Interests: Processing carried out in pursuance of our legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your rights and freedoms;
• Consent: Where you have given your explicit consent for a specific processing activity, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Jamintoto uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your player account, including authentication, preference management, and account security;
• Service Delivery: To provide access to games, betting markets, and all other features of the jamintoto Platform;
• Payment Processing: To process deposits and withdrawals via verified Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX, ensuring accurate and secure transaction handling in MYR;
• Identity Verification: To conduct KYC checks in compliance with applicable regulatory requirements;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct;
• Responsible Gambling: To monitor account activity for signs of problematic gambling behaviour and to enforce responsible gambling tools such as deposit limits and self-exclusion requests;
• Customer Support: To respond to your queries, resolve disputes, and manage complaints through our 24/7 support team;
• Platform Improvement: To analyse usage patterns and technical performance data to improve the reliability, speed, and quality of the Platform;
• Legal Compliance: To fulfil our obligations under applicable laws and regulations and to respond to lawful requests from regulatory or law enforcement authorities;
• Marketing Communications: Where you have provided consent, to send you promotional information about bonuses, promotions, and platform updates.

Jamintoto does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share personal data in the following limited circumstances:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers who process personal data on our behalf, strictly in accordance with our documented instructions. These include payment processors (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, RHB, and other FPX/DuitNow participating institutions), identity verification providers, cloud hosting infrastructure providers, and customer support platforms. All such providers are contractually bound to maintain confidentiality and implement appropriate data security measures.

7.2 Legal and Regulatory Disclosure

We may disclose your personal data to relevant governmental authorities, regulatory bodies, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or regulatory directive, or where disclosure is necessary to protect the rights and safety of Jamintoto, its users, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of business assets, personal data held by Jamintoto may be transferred to the acquiring entity, subject to the same protections described in this Policy. Affected users will be notified prior to any such transfer where reasonably practicable.

Jamintoto uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small data file stored on your device when you visit a website.

Types of Cookies We Use

You can manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use certain features of the Platform, including login and account management.

Jamintoto retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following principles:

• Active Accounts: Personal data associated with active accounts is retained for the duration of the account relationship and for a reasonable period thereafter;
• Closed Accounts: Following account closure, we retain certain categories of personal data — particularly identity documents, transaction records, and KYC materials — for a minimum of five (5) years in compliance with applicable anti-money laundering and financial record-keeping regulations;
• Communications Data: Support correspondence and chat transcripts are retained for a period of up to three (3) years for dispute resolution and quality assurance purposes;
• Technical Data: Log files and technical access records are retained for up to twelve (12) months unless required for longer retention in connection with an active security investigation;
• Marketing Data: Where you have consented to receive marketing communications, we retain your contact preferences until you withdraw consent or request deletion.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Jamintoto implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) with 256-bit encryption. Sensitive data at rest is also encrypted;
• Access Controls: Strict role-based access controls limit access to personal data to authorised personnel only, on a need-to-know basis;
• Two-Factor Authentication: We offer and strongly encourage the use of two-factor authentication (2FA) for all registered accounts;
• Security Monitoring: Continuous monitoring systems detect and respond to suspicious activity, login anomalies, and potential intrusion attempts in real time;
• Regular Audits: Our security practices are subject to periodic internal and external review to identify and remediate vulnerabilities.

You have the following rights in respect of the personal data that Jamintoto holds about you. To exercise any of these rights, please contact our support team at [email protected].

We will endeavour to respond to all data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by an additional thirty (30) days, in which case we will notify you promptly. We may need to verify your identity before processing your request.

The Jamintoto Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent access by underage individuals.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete such data, close the associated account, and, where applicable, report the matter to relevant authorities. If you believe that a person under 21 has registered on the Platform, please contact us immediately at [email protected].

In the course of providing our services, your personal data may be transferred to, stored, or processed in countries other than Malaysia. This may occur in connection with our use of cloud infrastructure providers, identity verification platforms, or payment processing partners that operate internationally.

Where such transfers occur, Jamintoto ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this Policy. These safeguards may include contractual clauses, data processing agreements, or transfers to jurisdictions recognised as providing an adequate level of data protection.

The jamintoto Platform may contain references to or integrations with third-party services (such as payment providers). This Policy does not govern the data practices of those third parties. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

Jamintoto is not responsible for the privacy practices, content, or security of any third-party platform, service, or application.

Jamintoto reserves the right to update or revise this Privacy Policy at any time. Where material changes are made, we will provide reasonable advance notice by email to your registered address and / or by displaying a prominent notification on the Platform. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any revisions, you should cease using the Platform and contact us to request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which Jamintoto processes your personal data, please contact us through the following channels. Our data-related queries are handled by our support team and treated with priority.