afktoto Privacy Policy

1.Introduction

afktoto ("the Platform", "we", "us", "our") operates the online gaming and sports betting website accessible at afktoto.cam. We recognise that the personal information you provide to us is important, and we are committed to handling it with care, transparency, and in accordance with internationally recognised data protection principles.

This Privacy Policy ("the Policy") sets out the categories of personal data we collect from users ("you", "the User", "the Player"), the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you regarding your information. This Policy applies to all individuals who register an account, visit the afktoto website, or otherwise interact with our services.

By registering an account on afktoto, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. This Policy should be read alongside the Terms & Conditions and the Responsible Gambling Policy, both of which form part of your agreement with afktoto.

2.Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, afktoto.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "Consent" means freely given, specific, informed, and unambiguous agreement to the processing of Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification process afktoto uses to confirm the identity of account holders.
• "Cookie" means a small data file placed on a user's device by a website to remember preferences, session information, or tracking data.

3.Data Controller

afktoto acts as the Data Controller in respect of Personal Data collected through the afktoto.cam website and associated services. As Data Controller, afktoto determines what data is collected, the lawful basis for processing, how long data is retained, and to whom data may be disclosed.

afktoto operates under international gaming licensing and maintains internal data governance procedures consistent with its obligations under that licence. Where third-party service providers process data on our behalf, they do so as Data Processors under written agreements that bind them to appropriate data protection standards.

4.Data We Collect

4.1 Registration and Account Data

When you register an account with afktoto, we collect information including:

• Full legal name;
• Date of birth (used to verify you are aged 21 or above);
• Email address and contact number;
• Residential address, including country and city (e.g., Kuala Lumpur, Penang, Johor Bahru);
• Username and encrypted account credentials.

4.2 Identity Verification (KYC) Data

To comply with our licensing obligations and to prevent fraud and underage access, we may request documentary evidence of identity and address. This may include a copy of your Malaysian MyKad, passport, or other government-issued identification, as well as proof of residential address such as a utility bill or bank statement.

4.3 Financial and Transaction Data

We collect information relating to deposits, withdrawals, and account balances. This includes the payment method used (for example, Maybank2u, Touch 'n Go eWallet, DuitNow, FPX, or cryptocurrency wallet address), transaction amounts in MYR or other denominations, transaction timestamps, and payment reference numbers. We do not store full card numbers or banking passwords.

4.4 Gaming and Wagering Activity

We record details of all bets placed, games played, session duration, bonus redemptions, and wagering history. This data is used for account management, responsible gambling monitoring, dispute resolution, and fraud prevention purposes.

4.5 Technical and Device Data

We automatically collect technical data when you access our platform, including:

• IP address and approximate geolocation;
• Browser type, version, and operating system;
• Device type and screen resolution;
• Pages visited, navigation paths, and session timestamps;
• Referring URLs.

4.6 Communications Data

Where you contact afktoto through live chat, email, or any other support channel, we retain records of that correspondence. This includes the content of messages, the date and time of contact, and any information provided during the interaction.

5.How We Use Your Data

afktoto processes your Personal Data for the following purposes:

afktoto does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review, except where expressly required for fraud prevention or regulatory compliance.

6.Legal Basis for Processing

afktoto relies on the following legal bases when processing your Personal Data:

• Contract Performance: Processing necessary to provide the services you have requested, including account management, payment processing, and the operation of gaming and betting features.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and licensing conditions.
• Legitimate Interests: Processing carried out in furtherance of afktoto's legitimate business interests, including fraud detection, security, platform improvement, and responsible gambling monitoring, where those interests are not overridden by your rights.
• Consent: Where processing is based on your consent, such as the sending of promotional communications, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

7.Sharing Your Data

afktoto does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data in the following circumstances:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in operating the platform, processing payments, conducting identity verification, providing customer support infrastructure, and analysing platform performance. These providers act as Data Processors under written agreements and are permitted to use your data only for the purposes specified by afktoto.

Payment processing partners relevant to Malaysian users include providers that facilitate transactions through FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect, as well as cryptocurrency processing partners. These providers are subject to their own data protection policies.

7.2 Legal and Regulatory Disclosures

afktoto may disclose Personal Data where required by applicable law, a court order, a regulatory authority, or a government body with lawful authority to request such disclosure. We will, where legally permissible, notify you of any such request.

7.3 Anti-Money Laundering and Fraud Prevention

Where afktoto has reason to suspect fraudulent activity, money laundering, or other criminal conduct, we may share relevant Personal Data with appropriate authorities, financial intelligence bodies, or other online gaming operators through approved information-sharing channels.

7.4 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of afktoto's business, Personal Data held at that time may be transferred to the acquiring entity. Users will be informed of any such transfer and of any material changes to this Policy that result from it.

8.Data Retention

afktoto retains Personal Data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law or our licensing obligations. The following general retention principles apply:

• Account Data: Retained for the duration of the account relationship and for a minimum period thereafter as required for legal and compliance purposes.
• Transaction Records: Retained for a minimum of five years following the relevant transaction to comply with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for the duration of the account and for a minimum period following account closure, in accordance with applicable licensing requirements.
• Communications and Support Records: Retained for up to three years from the date of the interaction, or longer where relevant to an unresolved dispute or investigation.
• Technical and Analytics Data: Aggregated or anonymised where possible following the purpose being fulfilled.

Upon the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with afktoto's internal data disposal procedures.

9.Security Measures

afktoto implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transmission of data over encrypted connections (TLS/SSL);
• Restricted access to Personal Data on a need-to-know basis, enforced through access control policies;
• Secure storage of account credentials using industry-standard hashing practices — plaintext passwords are never stored;
• Regular internal security reviews and vulnerability assessments;
• Staff training on data handling obligations and security awareness.

Notwithstanding these measures, no method of electronic transmission or storage is entirely secure. Users are encouraged to protect their own accounts by using strong, unique passwords and notifying the afktoto support team immediately if they suspect any unauthorised access.

10.Cookies & Tracking Technologies

afktoto uses cookies and similar tracking technologies to improve the platform experience, maintain session state, and analyse usage patterns. Cookies are small text files stored on your device when you visit the website. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the platform to function correctly, including session authentication and security cookies. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect aggregated data about how users interact with the platform, helping us identify areas for improvement.
• Functional Cookies: Used to remember your preferences, such as language settings or account display options.
• Marketing Cookies: Used only where you have provided explicit consent to receive promotional content relevant to your preferences.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the afktoto platform. afktoto does not use third-party advertising networks that track you across unrelated websites.

11.Your Rights

Subject to applicable law and verification of your identity, you have the following rights in respect of your Personal Data held by afktoto:

• Right of Access: You may request a copy of the Personal Data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while a dispute is under review.
• Right to Data Portability: Where processing is based on consent or contract performance, you may request that your data be provided in a structured, commonly used format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. afktoto will assess whether its legitimate interests override your rights in the specific circumstances.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact afktoto using the details provided in Section 15. We aim to respond to all data rights requests within 30 days. Where requests are complex or numerous, we may extend this period by a further 30 days, of which you will be informed.

12.Protection of Minors

afktoto strictly prohibits the use of its platform by persons under the age of 21. We do not knowingly collect Personal Data from individuals under 21 years of age. Where afktoto discovers or has reason to believe that Personal Data has been submitted by a person under the age of 21, the relevant account will be suspended, all associated data reviewed, and the account closed in accordance with our Terms and Conditions.

Age verification is conducted as part of the KYC process and may be required at registration or prior to the processing of any withdrawal. If you believe that a minor has accessed the platform or submitted personal information, please notify us immediately using the contact details in Section 15.

13.International Data Transfers

afktoto operates on an international basis and may process or store Personal Data on servers located outside Malaysia. Where Personal Data is transferred to countries that may not provide the same level of data protection as Malaysia, afktoto takes steps to ensure that appropriate safeguards are in place, including contractual protections with the relevant service providers.

By using the afktoto platform, you acknowledge that your Personal Data may be transferred to, processed in, or stored in jurisdictions other than Malaysia, subject to the safeguards described in this Policy.

14.Changes to This Policy

afktoto reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where new categories of data are collected or new processing purposes are introduced — afktoto will provide notice through the platform interface or by email to the address registered on your account prior to the changes taking effect.

The effective date at the top of this Policy will be updated each time a revision is made. Your continued use of the afktoto platform following the posting of any revised Policy constitutes your acceptance of the updated terms.

15.Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the afktoto privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week through the Platform interface

afktoto will acknowledge all privacy-related enquiries within 5 business days and aims to resolve complaints within 30 days of receipt. Where you are not satisfied with our response, you may have the right to lodge a complaint with an applicable data protection authority or supervisory body.