Official Documents

Privacy Policy Sakutoto –
Data Protection Your Privacy

We understand that your personal information is a trust we hold with full responsibility. This policy transparently explains how sakutoto collects, uses, and protects every piece of data you entrust to us.

Updated: 1 January 2026  |  Version 2.4
Our Privacy Commitment

Six Principles That Protect Your Data

Before reading the full policy, familiarise yourself with the six core principles that guide how Sakutoto handles the personal information of all members.

Lawfully Collected

Your data is only collected through lawful and transparent means — during registration, platform use, or when you contact our support voluntarily. There is no covert data collection.

High-Level Encryption

All stored and transmitted data is protected with SSL 256-bit encryption. Sensitive data such as payment details is processed through additional security layers that meet PCI-DSS standards.

You Are in Control

You may request a copy, correction, or deletion of your personal data at any time. sakutoto respects your right to control your own information without bureaucratic hassle.

Not Sold to Third Parties

Your personal data has never been and will never be sold to any third party for marketing or commercial purposes. This is not merely a promise — it is a non-negotiable operational policy.

Collected Only as Necessary

Sakutoto collects only the data strictly necessary to provide our services. We do not request excessive information and periodically review the data we retain.

Compliance with Malaysian Law

This Privacy Policy is designed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We continuously ensure our data handling practices meet current legal requirements.

1 Information We Collect

Sakutoto collects personal information through several key channels in the course of operating our platform. All data collection is done transparently and with your consent.

A. Registration and KYC Information

When you register an account at sakutoto, we collect the information needed to create and verify your identity:

  • Full name as it appears on official identification documents
  • Malaysian Identity Card number (MyKad) or passport number
  • Date of birth to verify eligibility for users aged 18 and above
  • Active email address for official communications
  • Mobile phone number for two-factor authentication (2FA)
  • Bank account or digital wallet details for deposit and withdrawal purposes

B. Platform Usage Information

While you use the Sakutoto platform, our systems automatically record technical information required for smooth operation:

  • IP address and device information (device type, operating system, browser version)
  • Login session data including access time and location
  • Records of deposit, withdrawal, and wagering activity transactions
  • Game history and betting patterns for fraud detection purposes
  • Communication logs with the customer support team
Important Note

Usage information is collected automatically as an operational and security requirement. This data is not used to make individual decisions that could affect your rights except in cases of fraud detection based on concrete evidence.

C. Information You Provide Voluntarily

From time to time, you may provide additional information through voluntary interactions such as customer satisfaction surveys, complaints, or support requests. This information is used solely for the purpose stated at the time of collection.

2 How We Use Your Data

Sakutoto uses collected personal data only for legitimate, stated purposes. Below is a detailed breakdown of each use case:

Purpose of Use Data Used Legal Basis
Account management and identity verification Name, IC, email, phone number Contract fulfillment
Deposit and withdrawal processing Banking details, transaction records Contract fulfillment
Fraud detection and security IP address, login patterns, account activity Legitimate interests
Anti-money laundering compliance Full KYC, financial records Legal obligations
User experience improvement Anonymised usage data Legitimate interests
Promotional communications (with consent) Email, phone number Consent

We do not make decisions that materially affect you based solely on automated data processing without human review. All actions that significantly impact your account involve assessment by our team.

3 Data Sharing with Third Parties

Sakutoto takes a strictly limited approach to data sharing. Our principle is simple: your data is not shared unless there is a clear and legitimate reason to do so.

Trusted Service Providers

We work with selected third-party service providers to support platform operations. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes:

  • Payment processors – to facilitate secure deposits and withdrawals
  • KYC service providers – for legally required identity verification
  • Cloud service providers – for secure and redundant data storage
  • Cybersecurity firms – for active threat monitoring and detection

Mandatory Disclosure to Authorities

In certain situations, sakutoto may be legally required to disclose information to competent authorities, including law enforcement agencies, financial regulators, or courts. Such disclosures are made only when legally required and will be communicated to you where possible, unless prohibited by a court order.

What We Do Not Do

Sakutoto never sells, rents, or trades your personal data to advertisers, marketing companies, or any commercial entity not directly involved in operating our services. This is a line we have never crossed.

4 Data Security and Encryption

Protecting your data from unauthorized access, loss, or misuse is a core operational priority at sakutoto. We continuously invest in security infrastructure that meets international industry standards.

SSL 256-bit – All communications between your device and Sakutoto's servers are protected with SSL 256-bit encryption, the same standard used by banking institutions.

Encrypted Storage – Sensitive data is stored in encrypted format on servers protected by layered access controls and continuous auditing.

24/7 Monitoring – A real-time intrusion detection system monitors all unusual activity and responds automatically to detected threats.

Restricted Internal Access – Only staff with a clear job-related need are permitted to access members' personal data, and every access is logged and audited.

Shared Responsibility

While we take all reasonable steps to protect your data, account security also depends on your own actions — including using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

5 Cookies and Tracking Technologies

Sakutoto uses cookies and similar tracking technologies to ensure the platform functions properly and to deliver a better user experience. The types of cookies we use are as follows:

Cookie Types Purpose Duration Can It Be Disabled?
Essential Cookies Login sessions, security, authentication Session only No (critical)
Functional Cookies Save language settings and display preferences 1 year Yes
Analytics Cookies Usage statistics (anonymised) 6 months Yes
Security Cookies Fraud detection, bot protection 30 days No (critical)

You can manage your cookie settings through your browser at any time. Please note, however, that disabling essential cookies may affect core platform functionality such as the ability to login.

6 Data Retention and Deletion

Sakutoto does not retain personal data longer than necessary. Retention periods are determined based on operational requirements, legal obligations, and the need to resolve any disputes that may arise.

  • Active account data: Retained for the duration the account remains active plus 5 years after account closure (anti-money laundering legal requirement)
  • Financial transaction records: Retained for 7 years in accordance with Malaysia's accounting and tax law requirements
  • Support communication logs: Retained for 3 years for quality assurance and dispute resolution purposes
  • Anonymised analytics data: May be retained indefinitely as it cannot be linked back to any individual's identity
  • Cookies and session data: Automatically deleted according to the set retention period (refer to section 5)
Deletion Request

If you wish to delete your personal data, you may submit a request to our privacy team. Please note that some data may need to be retained for a period required by law even after a deletion request is received. We will inform you of which data can be deleted and which cannot.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and recognised international best practices, you have several rights you may exercise regarding your personal data at sakutoto:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide a report within 30 days of receiving your request.

Right to Rectification

If any data we hold is inaccurate or outdated, you have the right to request immediate correction. Updates to your name, address, and phone number can be made directly from your account settings.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your data ("right to be forgotten"), subject to applicable legal retention obligations.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain situations, such as during an investigation into data accuracy or an ongoing dispute.

Right to Object

You have the right to object to data processing for direct marketing purposes. You can unsubscribe from all promotional communications via your account settings.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format and transfer it to another service provider upon request.

To exercise any of the rights above, please contact our privacy team by email [email protected] stating the type of request, your full name, and account number. We will verify your identity before processing any request to ensure the security of your data.

8 Child Data Protection

The sakutoto platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If we find that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that information and close the associated account. Age verification through the KYC process is part of this protection mechanism.

Report to Us

If you believe that data belonging to someone under the age of 18 has been collected on our platform, please contact our team immediately at [email protected]. We will investigate and take action within 48 hours of receiving the report.

9 Changes to This Privacy Policy

Sakutoto reserves the right to update this Privacy Policy from time to time to reflect changes in laws, technology, or our business practices. Any material updates will be communicated via:

  • Email notification to all registered members at least 14 days before changes take effect
  • A prominent notice on the platform's home page throughout the notice period
  • Update the "Last Updated" date at the top of this document

Continued use of the sakutoto platform after the effective date of any changes constitutes acceptance of the updated policy. If you disagree with the changes made, you have the right to close your account before the changes take effect.

10 Contact Us for Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, our privacy team is ready to assist:

Privacy Email: [email protected] – for all requests related to data protection, deletion, or data access

General Support: [email protected] or via 24/7 live chat – for general enquiries about privacy and account security

We are committed to responding to all privacy inquiries within 5 business days. For urgent cases involving security breaches or data misuse, our team will respond within 24 hours.

Thank You for Your Trust

This Privacy Policy is sakutoto's written commitment to you as a member. We believe that transparency in data handling is the foundation of long-term trust. Thank you for choosing sakutoto as your betting platform.

Your Data, Our Protection

Play with Peace of Mind — Your Data Is Protected

Register an account at sakutoto and enjoy over 500 games with the confidence that your personal information is in safe, transparent, and responsible hands.

By registering, you agree to the Terms & Conditions and Privacy Policy us. 18+ only.

Bahasa Melayu