Privacy & Data Protection

Privacy Policy Agentoto — Your Personal Data Protection

Agentoto is committed to protecting every member's privacy. This document transparently explains how we collect, use, store and protect your personal information.

256-bit SSL Encryption

All data transmitted with full encryption

Malaysia PDPA Compliant

Complying with the Personal Data Protection Act 2010

No Data Selling

Your data is not sold to third parties

Full Access Rights

You may review, amend or delete your data

This policy is effective from 1 January 2026 and supersedes all previous versions.

Your privacy is agentoto's top priority. By using our platform, you agree to the collection and use of information as described in this Privacy Policy. Please read this document carefully before using the platform.

1

Introduction and Scope of This Policy

Agentoto ("we", "Platform") is committed to protecting the privacy of every user who interacts with our platform. This Privacy Policy explains in detail how agentoto collects, processes, stores, shares and safeguards your personal data when you use our website, mobile app or any of the services we offer.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. Our goal is to ensure you always understand what information we hold about you and how we use it.

This Privacy Policy applies solely to the agentoto platform and does not cover third-party websites or services you may access through links within our platform.

When you register as an agentoto member, make a deposit, use games or contact our support team, you give us implicit consent to process your personal data in accordance with the terms of this policy.

2

Personal Data We Collect

Agentoto collects various categories of personal data depending on how you interact with our platform:

Data Category Example Information How It's Collected
Identity Full name, date of birth, identity card number Registration form, KYC
Contact Email address, mobile phone number Registration, communications
Financial Bank account number, transaction records, balance Deposits, withdrawals
Technical IP address, device type, web browser, OS Automatically upon access
Games Betting history, wins, play time Platform activity
Communication Live chat records, support emails, complaints Support interactions

We only collect data that is strictly necessary for legitimate purposes. Data that is no longer needed will be deleted in accordance with our data retention policy. You have the right to know exactly what data we hold about you at any time.

3

Purpose of Personal Data Use

Agentoto uses your personal data for the following legally permitted purposes:

  • Account management: Create, verify and maintain your member account securely
  • Transaction processing: Process deposits, withdrawals and all financial transactions accurately
  • Identity verification (KYC): Meet legal obligations related to identity verification and anti-money laundering
  • Customer support: Respond to enquiries, resolve complaints and provide effective assistance
  • Platform security: Detect and prevent fraud, unauthorised access and suspicious activity
  • Service improvement: Analyse usage patterns to improve the platform user experience
  • Marketing communications: Send information about promotions and offers (with your consent)
  • Legal compliance: Fulfil reporting obligations to the relevant regulatory bodies
Agentoto will not use your data for any purpose other than those stated above without first obtaining your additional consent.
4

Data Sharing and Disclosure

Agentoto does not sell, rent or trade your personal data to any third party for marketing purposes. Your data is shared only in the following limited situations:

  • Service providers: Companies we use for platform operations — such as payment gateways, cloud computing providers, and identity verification services — are all bound by strict confidentiality agreements
  • Game providers: Licensed gaming companies providing game content require minimal data for licence management
  • Regulatory body: When required by law or by direction of a legitimate authority such as a financial intelligence unit
  • Security audit: Independent audit firms conducting platform security reviews — only data required for audit purposes
All third parties that receive your data from agentoto are bound by data protection agreements and must process your data to the same high standards we uphold.

In scenarios where agentoto is involved in a merger, acquisition or asset sale, user data may be transferred to the new entity. In such situations, you will be notified in advance and your rights will be fully preserved.

5

Data Storage and Security Measures

Agentoto stores your personal data on servers protected by the highest industry security standards. All data is stored in encrypted format using AES-256 encryption for stored data, and 256-bit SSL/TLS encryption for data transferred between your device and our servers.

Key security measures we implement include:

  • End-to-end encryption for all data communications and transactions
  • Tiered access control — only authorised staff may access sensitive data
  • Continuous 24/7 security monitoring to detect and respond to threats
  • Regular security audits by accredited independent audit firms
  • Strict disaster recovery and data backup procedures
  • Two-factor authentication (2FA) for all internal system access

Agentoto retains your personal data for as long as your account is active and for the period required by law after account closure, typically between 5 to 7 years depending on the data category and regulatory requirements.

While we implement all reasonable security measures, no system can be guaranteed 100% secure. We encourage you to take additional precautions by using a strong password and enabling 2FA on your account.
6

Cookies and Tracking Technologies

Agentoto uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for the following purposes:

  • Essential Cookies: Required for core platform functions such as login, session verification and security — cannot be disabled
  • Performance Cookies: Collect information on how you use the platform to help us improve the user experience
  • Functional Cookies: Remember your preferences such as language, theme and platform settings for future visits
  • Analytics Cookies: Help us understand platform usage patterns in aggregate and anonymised form

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect platform functionality. Essential cookies cannot be disabled as they are required for platform security and core functionality.

7

Your Rights Regarding Personal Data

Under Malaysia's PDPA and agentoto's policy, you have the following rights regarding your personal data:

Access Rights

Register Free

Right to Rectification

Register

Right to Erasure

Under certain circumstances, you may request that your personal data be deleted from our systems.

Right to Restriction of Processing

You may request that we restrict the processing of your data under certain circumstances provided by law.

Right to Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact the agentoto support team via live chat or email. We will endeavour to process your request within 14 business days from the date it is received.

8

Children's Data Protection

The agentoto platform is strictly for users aged 18 and above. agentoto does not intentionally collect or process personal data from individuals under the age of 18.

If we discover that personal data has been collected from individuals under 18 years of age without proper age verification, we will take immediate action to delete that data and close the account in question.

If you are a parent or guardian who has become aware that a child under your care has registered for or used the agentoto platform, please contact our support team immediately so we can take the appropriate action.

9

Privacy Policy Amendments

Agentoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or new platform features. All amendments will be published on this page with an updated effective date.

For significant and material amendments to how we process your data, agentoto will endeavour to notify you via email or in-platform notification before the changes take effect. This gives you time to read and consider the updates.

We encourage you to review this Privacy Policy page periodically, especially before providing any new personal information to the platform.
10

How to Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the agentoto Data Protection Officer (DPO) through the following channels:

  • Live Chat: Available 24/7 directly from the agentoto platform — select the "Privacy & Data" category when starting a conversation
  • Email: [email protected] — for official data rights requests, please include "Privacy Request" in the email subject line
  • Frequently Asked Questions: Visit page FAQ for answers to general privacy and data queries

We are committed to addressing every privacy concern seriously and transparently. Each complaint will be thoroughly investigated and you will receive a response within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

How Agentoto Protecting Your Privacy

Six layers of data protection we implement for your peace of mind

End-to-End Data Encryption

All your data — whether in transit or at rest — is protected by SSL 256-bit and AES-256 encryption. No sensitive information is stored in plain text format on any of our servers.

Strict Access Control

Sensitive data such as financial information and identification details is accessible only to authorised personnel, through a tiered access control system with a complete audit trail.

Malaysia PDPA Compliance

The agentoto privacy policy is fully drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a Malaysian are protected under local law.

Independent Regular Audits

Agentoto's privacy and data security practices are reviewed regularly by accredited independent audit firms. These audit reports ensure we consistently meet the highest standards in the industry.

Minimum Data Retention

Agentoto retains data only for as long as strictly necessary. Data that is no longer relevant is securely deleted in accordance with our strict data deletion procedures.

Data Breach Notification

In the event of a data breach involving your information, agentoto is committed to notifying you within the timeframe required by law and taking remedial action promptly.

Play with Confidence at Agentoto

Your privacy and data security are fully protected. Join the Malaysian player community that trusts agentoto for a safe and enjoyable gaming experience.

By registering, you agree to the Terms & Conditions and agentoto's Privacy Policy. 18+ only. | Responsible Gaming

Bahasa Melayu