Data Protection

Privacy Policy lakototo — Protection Personal Data You Are Our Priority

Lakototo takes the privacy of every member seriously. This document transparently explains how we collect, use, protect, and manage your personal data — so you can play with peace of mind without worrying about the security of your information.

Updated: 1 January 2026  ·  Version 3.1
Encryption SSL 256-bit
Data not sold
Access strictly limited
Audited periodic

This Privacy Policy ("Policy") explains how lakototo ("Platform", "We") collects, uses, discloses and protects your personal information when you use our website, mobile app and services.

By registering or continuing to use the lakototo platform, you agree to the practices described in this policy. If you do not agree, please discontinue use of the platform and contact us to request data deletion.

Quick summary: lakototo only collects data that is strictly necessary for platform operations. We do not sell, rent, or share your data with advertisers. Your privacy is your right, not something to be traded.
1

Introduction & Scope of This Privacy Policy

The lakototo Privacy Policy applies to all users who access our platform via the website at lakototo.net, the Android app, the iOS app, or any digital channel operating under the lakototo brand. This policy also covers information we collect through customer service interactions, live chat and email communications.

We understand that trusting any platform with your personal information is not a decision you take lightly. That is why lakototo is committed to managing your data responsibly, transparently, and in accordance with strict international data protection standards.

In the context of an online gaming platform, we are also subject to certain legal requirements regarding identity verification and anti-money laundering that require us to retain specific records for periods defined by the relevant authorities.

2

What Personal Data Do We Collect?

Lakototo collects various types of data depending on how you interact with our platform. Below is a detailed breakdown of the data we collect and its purpose:

Data Type Example Purpose Required?
Personal Identity Full name, date of birth, identification card number KYC verification, legal compliance Required
Contact Information Email address, phone number Account verification, service communications Required
Financial Information Bank account number, account holder name Payment processing, fund withdrawals Required
Technical Data IP address, device type, web browser Security, fraud detection Automatic
Gaming Activity Data Betting history, play time, wins Compliance, responsible gaming Automatic
Optional Information Language preferences, notification settings User Experience Improvement Options
lakototo does not directly collect your credit or debit card numbers. All card transactions are processed securely through registered payment processors that comply with PCI-DSS standards.
3

How Do We Use Your Data?

Every piece of data we collect has a clear and legitimate purpose. lakototo does not use your data for purposes unrelated to platform operations or that you have not been made aware of.

  • Account management: Creating, verifying, and maintaining your account, including the KYC process and identity verification.
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions on the platform.
  • Platform security: Detecting and preventing fraud, money laundering, unauthorised access, and other illegal activities.
  • Customer support: Handling your enquiries, complaints, and support requests effectively.
  • Legal compliance: Complying with applicable legal requirements, regulations, and directives from relevant authorities.
  • Service improvement: Analysing usage patterns to improve platform performance, design, and user experience.
  • Responsible gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support.
  • Service communications: Sending important notifications related to your account, transactions, and policy updates (not unauthorised marketing).
4

Data Sharing — Who Can Access Your Information?

This is the most important section for most of our members: lakototo does not sell, rent, or trade your personal data to third parties for marketing purposes. This is an absolute policy that cannot be changed.

However, there are limited situations where we need to share data with certain parties:

  • Payment processors: The minimum data required to process your financial transactions through approved, PCI-DSS compliant payment gateways.
  • KYC providers: Identity information required for eKYC verification through approved providers that have a confidentiality agreement with lakototo.
  • Legal authority: Data required by court orders, legal investigations or legitimate regulatory compliance requirements.
  • Technical service providers: Cloud and security infrastructure providers bound by strict confidentiality agreements, with access limited only to what is necessary for their technical duties.

All third parties with access to any lakototo member data are contractually bound to protect that data to the same or higher standard that we apply ourselves.

In the event of a company merger or asset acquisition, relevant member data may be transferred to the new entity. We will notify members in advance with sufficient notice before any such transfer takes place.
5

How Does lakototo Protect Your Data?

Lakototo continuously invests in security infrastructure to ensure your data is protected at every stage — in transit, at rest, and during processing.

  • 256-bit SSL/TLS encryption: All communications between your device and lakototo servers are fully encrypted using the latest TLS 1.3 protocol.
  • Data-at-rest encryption: Sensitive personal data is stored in encrypted form in our database, not as plain text.
  • Tiered access control: Only staff with a legitimate operational need may access member data, and every access is logged and audited.
  • 24/7 security monitoring: Intrusion detection and anomaly monitoring systems operate continuously to identify any suspicious activity.
  • Regular security audits: Independent security audits are conducted every six months to identify and fix any vulnerabilities before they can be exploited.
  • Two-factor authentication (2FA): 2FA options are available for all accounts as an extra security layer fully controlled by you.
While we take all reasonable steps to protect your data, no system is 100% immune. We encourage you to use a strong password, enable 2FA, and report any suspicious activity to our support team promptly.
6

Your Rights as a Data Owner

As an individual whose data we process, you have a range of protected rights. lakototo is committed to helping you exercise these rights quickly and without unnecessary obstacles.

Right of Access

Request a copy of all personal data we hold about you within 30 days.

Right to Rectification

Correct any inaccurate or incomplete data through your account settings or via support.

Right to Erasure

Request deletion of your data, subject to applicable legal retention requirements.

Right to Object

Object to the processing of your data for specific purposes such as analytics or marketing.

Right to Portability

Receive your data in a machine-readable format for transfer to another platform.

Right to Restriction

Request that processing of your data be temporarily restricted while a dispute or review is ongoing.

To exercise any of the above rights, contact our privacy team by email at [email protected] or via live chat on the platform. We will respond within 30 business days.

7

Cookies, Tracking & Similar Technologies

The lakototo platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small files stored on your device when you visit our website.

  • Essential cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
  • Functional cookies: Storing your preferences such as language and display settings for your convenience.
  • Analytics cookies: Collecting anonymised data on how users interact with the platform to help us improve our services. Can be disabled.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the lakototo platform.

8

How Long Do We Retain Your Data?

Lakototo does not retain your personal data longer than necessary. Retention periods depend on the type of data and the relevant operational or legal requirements:

  • Active account data: Retained for as long as your account is active and for the required period after account closure in accordance with legal requirements.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial laws on anti-money laundering.
  • Technical and security logs: Retained for 12 months for issue resolution and security investigation purposes.
  • Customer support data: Retained for 3 years after a case is closed for reference should the issue recur.

Once the retention period ends, data is securely deleted using methods that ensure it cannot be recovered by any party.

9

Child Protection

The lakototo platform is strictly for individuals aged 18 years and above. We do not knowingly collect, store or process personal data from children.

Our identity verification (KYC) process actively screens out users who are below the legal age limit. If we become aware that data belonging to someone under 18 has been collected unintentionally, we will promptly take action to delete that data and close the account in question.

If you believe a child has registered a lakototo account, please contact us immediately at [email protected] so we can take the appropriate action.
10

Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Privacy Email: [email protected] (mark the subject as "Privacy Inquiry")
  • Live Chat: Available on the lakototo platform 24/7 — select the "Privacy & Data" category
  • FAQ Page: Answers to frequently asked questions about privacy are available in the FAQ us

We are committed to responding to all privacy-related enquiries within 72 hours on business days. For more complex data rights requests, the response period is up to 30 business days in line with international standards.

lakototo reserves the right to amend this Privacy Policy from time to time. Any material changes will be communicated to members via an in-platform notice at least 14 days before they take effect.

6 Ways lakototo Protecting Your Privacy, Every Day

Privacy protection at lakototo goes beyond documentation — it is a daily practice carried out at every level of our operations.

End-to-End Encryption

Every byte of data moving between your device and lakototo servers is encrypted using TLS 1.3 with SSL 256-bit — the same standard used by leading financial institutions and banks worldwide.

Strict Access Control

A role-based access control system ensures that only staff who genuinely need access to specific data are permitted to do so — and every access is logged for audit purposes.

No Data Selling

Lakototo's clearest policy: your data has never been and will never be sold, rented or traded to third-party advertisers or data brokers, regardless of any offer received.

Regular Security Audits

An independent security firm conducts penetration testing and code audits every six months. Findings are issued to relevant parties and all issues are resolved before the report is published.

Minimum Data Retention

Lakototo only retains data that is strictly necessary for its stated purposes. Data that has passed its retention period is securely and permanently deleted — not merely archived.

Full Notification Control

You have full control over the notifications you receive. lakototo does not send marketing messages without your consent and provides easy unsubscribe options for all types of communication.

Your Data Is Safe at lakototo — Register & Start Playing Today

With robust data protection and a transparent privacy policy, lakototo is a platform you can trust completely. Over 500,000 Malaysian members have chosen us.

Bahasa Melayu