Data Protection & Privacy
This Privacy Policy explains how Miototo collects, uses, stores, and protects the personal data of players and visitors on the miototo platform. We are committed to handling your information responsibly and in accordance with applicable data protection principles. Please read this Policy carefully before using our services.
Last Updated: 1 January 2026Miototo ("the Company", "we", "us", "our") operates the online betting and gaming platform accessible at miototo.cam (the "Platform"). This Privacy Policy ("Policy") sets out the basis on which personal data collected from users of the Platform ("you", "the User", "the Player") will be processed by us.
Miototo is committed to safeguarding the privacy and security of personal data entrusted to us by players across Malaysia, including users accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations. We operate under the principle that personal data should be collected only to the extent necessary, used only for clearly defined purposes, and protected at all times with appropriate technical and organisational measures.
By registering an Account on the miototo Platform, by accessing the Platform, or by otherwise providing us with your personal data, you acknowledge that you have read this Privacy Policy and agree to the collection and use of your personal data in the manner described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform.
Miototo does not sell your personal data to third parties. We do not use your data for unsolicited marketing without your prior consent. Your data is stored using industry-standard encryption. You have the right to access, correct, and request deletion of your personal information at any time by contacting our support team.
For the purposes of this Privacy Policy, the following definitions apply:
Miototo collects personal data from you in the course of your registration, use of the Platform, and interactions with our customer support team. The categories of personal data we collect include the following:
Miototo collects your personal data through the following mechanisms:
Miototo processes your personal data one or more of the following legal bases, depending on the nature of the processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract — necessary to provide the Platform service |
| KYC identity verification | Legal obligation — regulatory compliance requirement |
| Deposit and withdrawal processing | Performance of a contract — necessary to complete financial transactions |
| Fraud detection and prevention | Legitimate interests — protecting the platform and users from fraudulent activity |
| Responsible gambling monitoring | Legal obligation and legitimate interests — player protection requirements |
| Customer support communications | Performance of a contract — service delivery |
| Marketing communications (where applicable) | Consent — only where you have opted in to receive promotional communications |
| Platform analytics and improvement | Legitimate interests — improving platform performance and user experience |
Miototo uses the personal data we collect for the following purposes:
To create, maintain, and manage your Account on the miototo Platform, including verifying your identity, processing your registration, and maintaining accurate records of your account activity.
To process deposits and withdrawal requests made via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank online banking, and Hong Leong Connect. All transactions are denominated in Malaysian Ringgit (MYR).
To fulfil mandatory Know Your Customer obligations, anti-money laundering compliance requirements, and any other applicable regulatory obligations. This includes retaining identity documents and transaction records for legally mandated periods.
To monitor for and detect fraudulent activity, unauthorised account access, multi-accounting, abuse of bonus structures, and other security threats. This includes automated monitoring systems and manual review processes.
To monitor betting patterns and identify indicators of problem gambling behaviour, in order to fulfil our responsible gambling obligations. This may include contacting you with responsible gambling information or applying account restrictions where required. Players must be21 years of age or above.
To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions.
To analyse aggregated and anonymised usage data for the purpose of improving Platform performance, enhancing the user experience, and developing new features and services.
To send promotional offers, bonus notifications, and other marketing communications, but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time by contacting our support team or updating your Account preferences.
Miototo does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your personal data with third parties in the following limited circumstances:
Your financial and identity data is shared with payment processing partners to the extent strictly necessary to execute deposit and withdrawal transactions. All payment processors engaged by miototo are subject to contractual data processing obligations and applicable security standards.
KYC data, including identity documents and verification selfies, is processed by third-party identity verification service providers under data processing agreements. These providers assist with document authentication and fraud screening.
We may disclose your personal data to regulatory authorities, law enforcement agencies, or other competent authorities where required to do so by applicable law, by court order, or in connection with legal proceedings. We will notify you of such disclosures where legally permitted to do so.
Your data may be shared with companies within the miototo corporate group and with carefully selected third-party service providers engaged to support Platform operations — such as hosting providers, analytics platforms, and customer support infrastructure providers. All such parties are bound by confidentiality and data protection obligations.
No Sale of Data: Miototo does not at any time sell personal data to data brokers, advertising networks, or any third party for purposes unrelated to the operation of the Platform.
The miototo Platform uses cookies and similar technologies to enable essential Platform functionality, maintain your session state, and collect aggregated analytics data. The categories of cookies deployed are as follows:
These cookies are essential for the operation of the Platform and cannot be disabled. They enable core functions such as user authentication, session management, and security features. No personal data collected by strictly necessary cookies is used for marketing purposes.
Analytics cookies collect aggregated, anonymised information about how visitors use the Platform — such as pages visited, session duration, and navigation paths. This data is used solely to improve Platform performance and is not linked to individual user identities.
Preference cookies store your selected settings, such as language preferences and display options, to provide a more personalised Platform experience across sessions.
You may configure your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. Your continued use of the miototo Platform constitutes acceptance of our use of cookies as described in this section.
Miototo retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with our data lifecycle management procedures.
Miototo implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
While miototo employs industry-standard security measures, no digital platform can guarantee absolute protection against all security threats. You are responsible for maintaining the security of your Account credentials and for notifying us immediately if you suspect unauthorised access to your Account.
Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by Miototo:
You have the right to request a copy of the personal data we hold about you. Upon receiving a verified access request, we will provide a summary of your personal data within a reasonable timeframe.
You have the right to request correction of personal data that is inaccurate or incomplete. Where the correction relates to data used for KYC or compliance purposes, supporting documentation may be required.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overiding legal obligation requires its retention. Please note that certain data — particularly KYC documentation and transaction records — must be retained for regulatory periods and cannot be deleted on request prior to those periods expiring.
You may request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data or object to its processing on legitimate interests grounds — pending resolution of that objection.
Where we process your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of the rights described above, please contact miototo's customer support team via live chat or by email at the address set out in Section 15. We will respond to verified requests within a reasonable period. We may need to verify your identity before processing a request to protect against unauthorised data access.
The miototo Platform is strictly intended for use by individuals aged21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the mandatory KYC process prior to the processing of any withdrawal from a Player's Account.
Where we become aware that personal data has been collected from a person under the minimum age requirement, we will immediately suspend the associated Account, delete the personal data collected (except to the extent required for regulatory compliance purposes), and return any deposits to the payment method used, subject to verification.
If you have reason to believe that a minor has created an Account on the miototo Platform, please contact our customer support team immediately so that the matter can be addressed promptly.
The miototo Platform may reference or interact with third-party services — including payment processors, game content providers, and identity verification platforms — in the course of delivering its services to you. These third parties have their own privacy policies governing the data they collect and process. Miototo is not responsible for the privacy practices of third-party service providers operating independently of our direct control.
All third-party processors engaged by miototo are required, by contract, to process personal data only in accordance with our instructions and to maintain appropriate security standards. We conduct due diligence on third-party processors prior to engagement and review these arrangements periodically.
Miototo reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will use reasonable endeavours to notify you via the Platform or through your registered contact details. The date of the most recent revision is displayed at the top of this Policy.
Your continued use of the miototo Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data we hold about you, please contact the miototo data privacy team through the following channels. Our customer support agents are available 24 hours a day, 7 days a week via live chat on the Platform.
For formal written data subject requests (access, rectification, erasure, or restriction), please contact us via email and include sufficient information to enable us to verify your identity and locate your Account.
Data Enquiries — Support Email:
[email protected]
(For the fastest response, please use live chat on the Platform. Email responses may take longer to process.)
For questions relating to responsible gambling, self-exclusion, or account restrictions, please visit our dedicated Responsible Gambling page or contact our support team directly via live chat.
These cards summarise Miototo's core privacy commitments. For complete and binding terms, please refer to the full Policy text above.
Miototo does not sell, rent, or trade your personal data to third parties for commercial purposes. Your information is used solely in connection with the operation of the miototo Platform and fulfilling regulatory obligations.
All data transmitted between your device and the miototo Platform is protected using 256-bit SSL/TLS encryption. Passwords are stored in encrypted form only — plaintext credentials are never retained.
You have the right to access, correct, and request deletion of your personal data at any time. Contact our support team to exercise these rights. Certain regulatory data must be retained for legally mandated periods.
Payment data shared with our processors — covering Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Boost, GrabPay, and others — is processed under strict contractual data protection obligations.
We do not send promotional communications without your prior explicit consent. You can withdraw marketing consent at any time through your account settings or by contacting our support team.
Miototo does not knowingly collect data from persons under 21. KYC verification enforces the minimum age requirement. Accounts found to belong to underage users are closed immediately and data deleted within regulatory limits.
Continue with Miototo
If you have any questions about how your data is handled on the miototo Platform, our support team is available around the clock via live chat. For account enquiries, visit our homepage or consult our FAQ.
21+ Gambling can be addictive. Please play responsibly. Visit our Responsible Gambling page for tools and support resources.