Kangtoto Privacy Policy — Data Protection for Malaysian Members

Kangtoto is an online Sports Betting and casino platform operating at kangtoto.in, serving players in Malaysia. In the course of providing this service, we collect and process certain personal information from our members. This Privacy Policy explains exactly what information we collect, how it is used, who can access it, and how we keep it protected.

We understand that trust is the foundation of the relationship between a platform and its users. When you register as a member of kangtoto, you are entrusting us with your personal information — and we do not take that responsibility lightly. That is why we have written this policy in plain, straightforward English, free of confusing legal jargon, so you truly understand the rights and protections you have.

This Privacy Policy applies to all your interactions with kangtoto — including use of the website, any related applications, customer support services, and all financial transactions made through our platform. By using the services kangtoto, you agree to the data collection and usage practices described in this document.

Kangtoto only collects information that is strictly necessary to operate our services safely and efficiently. We do not collect excessive data or data that is irrelevant to the purpose of the service.

It is important to understand that kangtoto does not directly collect credit or debit card numbers — all payments are processed through registered third-party payment providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX via Maybank2u or CIMB Clicks) that maintain their own security standards. We receive only transaction confirmations, not your full card details.

Every piece of data we collect has a clear and legitimate purpose. Kangtoto uses your information solely for the following purposes:

• Account Management: Creating and managing your member account, processing logins, and maintaining account security through OTP verification and suspicious activity detection.
• Transaction Processing: Verifying and processing deposits and withdrawals to your preferred Malaysian payment method — whether Touch 'n Go, GrabPay, DuitNow, or FPX — securely and on time.
• Gaming Service Provision: Lets you play all games on the platform kangtoto, including live casino, Blackjack, Malaysia Super League football betting, EPL, badminton, e-sports, slots, and more.
• Identity Verification and Compliance: To meet legal requirements relating to Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations associated with the operation of a betting platform.
• Platform Security: Detecting and preventing fraud, bonus abuse, account breach attempts, and any activity that violates kangtoto's Terms & Conditions.
• Customer Support: Providing accurate and relevant assistance whenever you reach out to our support team, 24/7.
• Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to understand how to improve the user experience, platform performance, and game offerings that are more relevant to Malaysian players.
• Important Communications: Sending account-related notifications, security updates, transaction confirmations, and promotional information (if you have agreed to receive marketing communications).

Kangtoto will not use your data for any purpose beyond those stated above without first obtaining your explicit consent. If you do not wish to receive marketing communications, you can unsubscribe at any time through your account settings or by contacting our support team.

This is what most users care about — and we understand why. Below is an honest and comprehensive explanation of who may access your data beyond kangtoto itself:

• Payment Providers: Information required to process your transaction is shared with your chosen payment provider — such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX. This is the minimum sharing necessary to complete your financial transaction. All of these providers maintain their own privacy policies.
• Game Providers: To enable live casino, Blackjack, slots, and other games to function, basic session information is shared with our game providers (such as Evolution Gaming, Pragmatic Play, and SA Gaming). Only the technical information required for game operations is shared — not your full personal details.
• Legal Requirements: Kangtoto may be required to disclose certain information to authorities if mandated by Malaysian law, a valid court order, or in the context of fraud or financial crime investigations. In such cases, we will disclose only the minimum information necessary.
• Business Transfers: In the event of a merger, acquisition, or asset transfer involving kangtoto, member data may be transferred as part of the business assets. In such situations, members will be given reasonable notice and your privacy rights will continue to be protected.

Data security is not an afterthought at kangtoto — it is the foundation of our entire platform's operations. Below are the technical and organisational measures we have put in place to safeguard your data:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and kangtoto's servers is encrypted using SSL/TLS protocol with 256-bit keys — the same standard used by Malaysia's major banking institutions, including Maybank and CIMB.
• Stored Data Encryption: Sensitive data stored in our databases — including passwords (in hashed form), KYC information, and transaction history — is kept in encrypted form. Even in the unlikely event that our servers were accessed without authorisation (which has not occurred to date), encrypted data is useless without the separate decryption key.
• 24/7 Security Monitoring: Our automated monitoring system tracks all activity on the platform in real time, detecting suspicious patterns such as repeated login attempts, access from unusual locations, or activity that may indicate account compromise.
• Internal Access Controls: Staff kangtoto may only access member data that is necessary for carrying out their specific job responsibilities. Access to sensitive data is restricted, logged, and regularly audited.
• Two-Factor Authentication (2FA): 2FA is available to all member accounts as an added layer of security. For certain operations such as large withdrawals, additional verification may be required automatically by our system.
• Regular Security Testing: Platform kangtoto undergoes regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.

While we take all reasonable precautions, no system in the world can guarantee absolute 100% security. In the highly unlikely event of a data breach affecting members' personal information, kangtoto committed to notifying affected members in a timely manner and taking immediate steps to mitigate the impact.

Like most websites and online platforms, kangtoto uses cookies and related tracking technologies to ensure the platform functions properly and to provide you with a better experience. Below are the types of cookies we use:

You can manage your cookie preferences through your browser settings. However, disabling essential cookies will affect core platform functionality and may prevent you from logging in or completing transactions. Kangtoto does not use third-party tracking cookies for targeted advertising.

As a member of kangtoto, you have the following rights regarding your personal data. We fully respect these rights and will treat every request with the seriousness it deserves:

To exercise any of the rights above, send your request to us via email at support@kangtoto.in or via live chat on the platform. We will process your request within 30 days and notify you of the action taken, or the reason if a request cannot be fully fulfilled.

Kangtoto only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Below are our data retention guidelines:

• Active Account Data: For as long as your account remains active at kangtoto, we retain all data related to your account's operations.
• Financial Transaction History: Deposit, withdrawal, and betting history records are retained for a minimum of 7 years from the transaction date — a standard financial compliance requirement related to anti-money laundering laws.
• KYC Data: Identity verification documents are retained for a minimum of 5 years after the business relationship with kangtoto concluded, in line with legal requirements.
• Security Logs: Access logs and technical security data are retained for 2 years to support investigations into any security incidents that may arise.
• Support Communication Records: Customer support conversation records are retained for 2 years after a case is closed, for reference and service improvement purposes.
• Account Closed: Once your account is closed, any personal data no longer required for legal or legitimate business purposes will be deleted or anonymised within 90 days.

Kangtoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When we make significant changes, we will notify you via:

• In-platform notifications kangtoto that appears upon login
• Email to your registered address (if you have provided an email)
• Updated on the "Last updated" date shown at the top of this page

Minor clarifications or administrative changes may be made without prior notice. Continued use of the kangtoto after an amended Privacy Policy takes effect constitutes your acceptance of the updated version. We recommend reviewing this page periodically.

If you disagree with any changes made to the Privacy Policy, you have the right to stop using the platform and close your account. Please contact our support team for assistance with the account closure and data deletion process.

If you have any questions, concerns, or requests regarding this Privacy Policy or how kangtoto handles your personal data, we encourage you to reach out to us directly. Our team is ready to assist in Bahasa Malaysia:

• Privacy Email: support@kangtoto.in — mark the email subject as "Privacy Inquiry" to ensure it is routed to the right team
• Live Chat: Available on the platform kangtoto 24 hours a day, 7 days a week — click the chat icon to start a conversation in Bahasa Malaysia

We are committed to responding to all privacy-related inquiries within 5 business days. For more complex data rights requests, such as full data access or deletion, processing may take up to 30 days. We will keep you informed of your request's progress throughout that period.