kpktoto is committed to protecting the personal data of every registered player. This Privacy Policy explains what information we collect, why we collect it, how we use and safeguard it, and what rights you have as a user of our platform. We process personal data in accordance with applicable data protection principles and international best practices.
This Privacy Policy ("Policy") is published by kpktoto ("kpktoto", "we", "us", "our") and applies to all personal data collected from users ("you", "Player", "User") through our online betting and gaming platform accessible at kpktoto.lat and all associated mobile-optimised interfaces.
kpktoto operates as a Malaysian-focused online betting and live casino platform, serving players across Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other regions throughout Malaysia. In the ordinary course of providing our services — which include sports betting, live casino, slot games, lottery, and arcade products — we collect, process, and store certain categories of personal data.
We take our data protection obligations seriously. This Policy outlines our practices in plain, accessible language while maintaining the formal structure necessary for a legally meaningful disclosure. If you have questions about how your data is handled, please contact us using the details provided in Section 14.
By registering an account on kpktoto, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
The following terms carry specific meanings throughout this Policy:
kpktoto collects personal data across several categories depending on the stage of your engagement with the Platform:
When you create an account on kpktoto, we collect your full legal name, date of birth, Malaysian identification number (MyKad) or passport number, residential address, email address, and contact telephone number. This information is required to establish your account and to comply with KYC obligations.
To verify your identity and age, we may request copies of government-issued photo identification, proof of residential address (such as a utility bill or bank statement), and documentation evidencing ownership of the payment method used to fund your account. This is mandatory for all withdrawal requests.
We collect details of transactions conducted through your account, including deposit and withdrawal amounts, payment method identifiers (such as partial bank account numbers, e-wallet account identifiers, or cryptocurrency wallet addresses), and the transaction date and time. Full payment credentials (card numbers, bank login credentials) are never stored directly on our Platform — these are handled by our accredited payment processors.
We maintain records of all bets, wagers, and gaming sessions conducted through your account, including the markets or games selected, stake amounts, odds accepted, and outcomes. This data is used for account integrity, dispute resolution, responsible gambling monitoring, and regulatory compliance purposes.
We automatically collect technical information when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, screen resolution, time zone setting, referring URLs, and session duration. This data is used for security monitoring, fraud prevention, and platform optimisation.
If you contact our customer support team via live chat or email, we retain records of those communications, including the content of messages, the date and time of contact, and any resolutions provided. This information is used for quality assurance and dispute resolution purposes.
| Data Category | Examples | Collection Trigger |
|---|---|---|
| Registration | Name, email, DOB, address | Account sign-up |
| Identity (KYC) | MyKad, passport, proof of address | Withdrawal request / verification trigger |
| Financial | Transaction amounts, payment identifiers | Deposits, withdrawals |
| Betting Activity | Bets placed, game sessions, win/loss records | Platform usage |
| Technical | IP address, device ID, browser data | Platform access |
| Communications | Support chat logs, email correspondence | Customer support contact |
kpktoto processes your personal data on the following legal bases:
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. See Section 10 for details on exercising your rights.
The personal data we collect is used for the following purposes:
kpktoto does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances:
We share necessary transaction data with our accredited payment processing partners to facilitate deposits and withdrawals. These partners are bound by strict data processing agreements and are prohibited from using your data for any purpose beyond the specific transaction for which it was shared.
We use accredited third-party KYC verification services to validate identity documents and cross-check against relevant compliance databases. KYC providers process your data under binding contractual obligations consistent with applicable data protection standards.
We engage hosting, security, and analytics service providers who may have access to platform data solely for the purpose of providing their contracted services to kpktoto. All such providers operate under data processing agreements.
We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, or where we reasonably believe disclosure is necessary to prevent fraud, protect the rights of affected parties, or comply with a legal process.
In all cases of third-party data sharing, kpktoto implements contractual safeguards to ensure that your personal data is processed only for stated purposes and in accordance with applicable data protection requirements.
kpktoto uses cookies and similar tracking technologies to enable Platform functionality, improve user experience, and support security and analytics operations. The following types of cookies are used:
You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. Strictly necessary cookies are exempt from consent requirements as they are essential to service delivery.
kpktoto retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with our legal obligations. The following general retention principles apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.
kpktoto implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These measures include:
While kpktoto takes all reasonable precautions to safeguard your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users promptly in accordance with applicable notification obligations.
Subject to applicable law, you have the following rights in relation to your personal data processed by kpktoto:
You may request a copy of the personal data we hold about you, together with information about how it is being used and with whom it has been shared.
You may request correction of any inaccurate or incomplete personal data we hold about you. Many account details can be updated directly through your account settings. For identity document corrections, please contact our support team.
In certain circumstances, you may request deletion of your personal data. Note that we may be required to retain certain data for legal compliance purposes (such as AML record-keeping) even following an erasure request.
You may request that we restrict processing of your personal data in specified circumstances — for example, while a dispute regarding data accuracy is being resolved.
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be able to demonstrate compelling legitimate grounds that override your objection.
Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Marketing opt-out options are available through your account settings or by contacting support.
To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to all valid requests within a reasonable timeframe, typically within 30 days. We may request proof of identity before processing rights requests to ensure we disclose data only to the correct individual.
kpktoto is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21 years. Our registration process includes mandatory age declaration, and accounts are subject to age verification through KYC documentation.
If you believe that a person under 21 has accessed the Platform or provided personal data to kpktoto, please notify us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, delete any personal data collected from an underage individual and permanently close the associated account.
🔞 kpktoto is for players aged 21 and above only. Providing false information about your age at registration is a serious breach of our Terms & Conditions and may constitute fraud under applicable law.
kpktoto's primary operations and data storage infrastructure are focused on the Asian Pacific region. In certain circumstances, personal data may be processed by service providers located outside Malaysia — for example, cloud hosting providers or international KYC verification services.
Where personal data is transferred internationally, kpktoto ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that impose obligations on the recipient to maintain data protection standards equivalent to those required under applicable law.
We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.
kpktoto reserves the right to update or amend this Privacy Policy from time to time. Material changes — particularly those that affect how we use your data or your rights — will be communicated to registered users by email notification or a prominent notice on the Platform at least seven (7) days before the amendment takes effect.
Your continued use of the kpktoto Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the amended Policy, you should stop using the Platform and may request account closure in accordance with our Terms & Conditions.
The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.
For any queries, requests, or concerns relating to this Privacy Policy or the processing of your personal data by kpktoto, please contact our data protection team through the following channels:
We aim to acknowledge all privacy-related requests within two (2) business days and to provide a substantive response within thirty (30) days. Complex requests may require additional time, in which case we will notify you of the expected timeline.
This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions of this Policy are superseded by this document as of the effective date stated above.
Six ways kpktoto safeguards your personal information
Every data transmission between your device and the kpktoto Platform is protected by 256-bit SSL/TLS encryption — the same standard used by major financial institutions. Your personal and financial data is never transmitted in plain text.
kpktoto does not sell, rent, or trade your personal data to third parties for commercial purposes. Data sharing occurs only with vetted service providers under binding data processing agreements, and only to the extent necessary for service delivery.
Our mandatory KYC process protects both you and the platform. By verifying the identity of every player before processing withdrawals, we prevent fraudulent account activity and ensure funds are returned only to their rightful owner.
You have real, actionable rights over your personal data — including the right to access, correct, delete, and restrict processing. kpktoto responds to all valid data rights requests within 30 days and does not obstruct the exercise of your rights.
kpktoto retains personal data only for as long as necessary — and no longer. Defined retention periods apply to all data categories, with secure deletion or anonymisation applied automatically at the end of each retention period.
Our platform undergoes regular penetration testing and continuous security monitoring. Access to personal data is restricted to authorised staff only, with all access logged and auditable. Six years of operation with zero confirmed data breach incidents.
Our support team is available around the clock to address any questions about how your data is handled. You can also read our FAQ for answers to common platform queries.
🔞 kpktoto is strictly for players aged 21 and above. Play responsibly.