Privacy Policy Kangtoto – Malaysia Player Data Protection

1. Who Is Your Data Controller

Kangtoto, accessible at kangtoto.world, is the data controller for the personal data you provide when using our platform. This means Kangtoto is responsible for determining the purposes and means of processing your personal data, and for ensuring it is handled to the highest standards of security and privacy.

If you have any questions, concerns, or complaints about how Kangtoto handles your personal data, you may reach our support team by email at support@kangtoto.world or via live chat, available 24 hours a day on the Kangtoto platform.

2. Personal Data We Collect

Kangtoto collects personal data from various sources when you use our platform. The type of data we collect depends on how you interact with Kangtoto.

2.1 Data You Provide Directly

This is the information you provide directly when using Kangtoto:

• Registration information: Your username, active Malaysian phone number, email address (if provided), and the password you set when registering your Kangtoto account.
• Identity verification information: Full name, MyKad number, and a copy of your identification document, which may be requested for withdrawal verification or anti-money laundering compliance purposes.
• Payment information: Details of the payment methods you use for deposits and withdrawals, including your Touch 'n Go, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, or ShopeePay account numbers. We do not store credit or debit card details directly — all transactions are processed through secure payment gateways.
• Communications with support: The content of live chat conversations, emails, or any other communications you have with the Kangtoto support team.

2.2 Data Collected Automatically

When you use the Kangtoto platform, our systems automatically record certain information:

• Usage data: Pages you visit, games you play, betting markets you access, session duration, and login and logout times.
• Technical data: IP address, web browser type, operating system, device type (smartphone, tablet, desktop), screen resolution, and other relevant technical information.
• Transaction data: A complete record of all deposits, withdrawals, bets placed, winnings, losses, and bonus usage in your Kangtoto account.
• Cookie and tracking data: Information collected through cookies, web pixels, and similar tracking technologies, as further described in the Cookie Policy section below.

3. Purposes for Using Personal Data

Kangtoto uses the personal data collected for the following purposes:

4. Sharing Data with Third Parties

Kangtoto does not sell players' personal data to any party. However, we may share your personal data with certain third parties in limited situations and for legitimate operational purposes, as outlined below:

4.1 Payment Service Providers

To process your deposits and withdrawals, Kangtoto shares the necessary transaction information with registered local Malaysian payment providers. This includes Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay service providers. Such data sharing is strictly limited to the information required to complete each transaction and is governed by confidentiality agreements.

4.2 Game Providers

To provide slots, Live Casino, and other games on Kangtoto, we work with licensed game providers. These providers may receive certain technical data related to your gaming session — such as session IDs, bet values, and game outcomes — for game settlement and audit purposes. They do not receive your full personal identification information.

4.3 Legal Authorities

Kangtoto may be required to disclose players' personal data to government authorities, law enforcement agencies, or relevant regulatory bodies if lawfully requested through a court order, warrant, or valid legal demand. In such circumstances, we will disclose only the information required under the relevant legal provision.

4.4 Technical Service Providers

Kangtoto engages technical service providers, including server hosting services, email service providers, and analytics tools, to operate the platform. These providers act as data processors under Kangtoto's direction and are bound by data processing agreements that prevent them from using player data for their own purposes.

5. Cookie Policy and Tracking Technologies

Kangtoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit Kangtoto.

5.1 Types of Cookies Used

• Essential cookies: These cookies are required for the core functions of the Kangtoto platform, such as maintaining your login session and ensuring transactions run smoothly. Without them, the platform will not function properly. These cookies cannot be disabled.
• Performance and analytics cookies: These cookies help Kangtoto understand how players use the platform by collecting information such as the most frequently visited pages, time spent on each page, and any error messages encountered. This allows us to continually improve the platform over time.
• Functional cookies: These cookies allow the Kangtoto platform to remember your preferences — such as your chosen language, location state, and display settings — to deliver a more personalised experience.
• Session cookies: These temporary cookies are deleted automatically when you close your browser. They are used to maintain your session state while you are using the Kangtoto platform.

5.2 Managing Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. However, please be aware that disabling certain cookies may affect the functionality of the Kangtoto platform and your gaming experience. Cookies that are essential to the platform's operation cannot be disabled if you wish to continue using Kangtoto.

6. Data Retention Period

Kangtoto retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by law. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account remains active with Kangtoto, plus any additional period required after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements.
• Customer support communication logs: Retained for 3 years from the date of communication for reference and dispute resolution purposes.
• Analytics cookie data: Anonymised analytics data is retained for a maximum of 26 months.
• Marketing data: Retained until you withdraw your consent for marketing communications.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised from Kangtoto's systems.

7. Personal Data Security

Kangtoto invests seriously in security infrastructure to protect our players' personal data. The technical and organisational security measures we have in place include:

• Data encryption in transit: All communications between your browser and Kangtoto's servers are protected with 256-bit SSL/TLS encryption.
• Encryption of stored data: Sensitive data stored in Kangtoto's databases is encrypted using robust encryption algorithms.
• Strict access controls: Access to player data within Kangtoto is governed by a "need-to-know" principle – only staff who require access to carry out their operational duties are granted authorisation.
• 24/7 security monitoring: Kangtoto's automated monitoring system detects and alerts on any suspicious activity or unauthorised access attempts in real time.
• Regular security audits: Kangtoto conducts regular security assessments and audits to identify and address any potential vulnerabilities in our systems.
• Staff training: All Kangtoto staff with access to player data receive comprehensive privacy and security training.

While we implement extensive security measures, no online system can be guaranteed 100% secure. We encourage players to take their own protective steps as well, such as using a strong password, enabling two-factor authentication, and never sharing their account details with anyone.

8. Your Rights Regarding Personal Data

As a Kangtoto player and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the rights listed above, please contact the Kangtoto support team by email at support@kangtoto.world or via live chat. Include your account username and a brief description of your request. We will respond within 5 business days and fulfil valid requests within the timeframe prescribed by law.

9. International Data Transfers

Kangtoto primarily processes data in an environment that complies with Malaysian local legal requirements. However, in certain operational situations — such as the use of hosting infrastructure or technical service providers — data may be processed on servers located outside Malaysia. In all such cases, Kangtoto ensures that such data transfers are protected by appropriate regulatory mechanisms and that the relevant service providers adhere to data protection standards equivalent to those required under Malaysian law.

10. Children's Privacy

The Kangtoto platform is strictly for individuals aged 18 and above. Kangtoto does not knowingly collect personal data from anyone under the age of 18. If we discover that a minor's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered an account with Kangtoto are encouraged to contact us immediately.

11. Links to Other Websites

The Kangtoto platform may contain links to other websites or services for informational or convenience purposes. Once you click a link that takes you away from the Kangtoto platform, this Privacy Policy no longer applies. Kangtoto is not responsible for the privacy practices of third-party websites, and we encourage you to read the privacy policy of every website you visit.

12. Amendments to the Privacy Policy

Kangtoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Players will be notified of any significant changes via a prominent notice on the Kangtoto platform or by email where an email address is on file. The "last updated" date at the top of this page will always reflect the date of the most recent amendment. Continued use of the Kangtoto platform after any amendments are published constitutes acceptance of the updated terms.

13. How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding Kangtoto's Privacy Policy or how we handle your personal data, please contact us:

• Email: support@kangtoto.world – please state "Privacy Enquiry" in the subject line of your email to ensure it is directed to the right team.
• Live Chat: Available 24/7 via the chat icon within the Kangtoto platform. Please state that your enquiry is related to data privacy.

We aim to respond to all privacy-related enquiries within 3 business days. For more formal complaints or cases involving a potential data breach, we will provide a detailed response within 14 business days.

If you are not satisfied with Kangtoto's response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority in Malaysia — the Department of Personal Data Protection under the Ministry of Communications and Digital Malaysia.