Dumaitoto Privacy Policy — Our Members' Data Security

1 Introduction & Purpose of This Policy

Dumaitoto ("we", "our platform") is a professionally operated and responsibly managed online betting and gaming platform. We understand that your trust is our most valuable asset, and protecting your privacy is our foremost responsibility.

This Privacy Policy clearly explains how dumaitoto collects, uses, stores, processes, and — in limited circumstances — discloses your personal information. It applies to all users of the dumaitoto platform, including website visitors, prospective members, registered members, and former members.

By using dumaitoto's services, you agree to the practices described in this privacy policy. If you do not agree with any part of this policy, please discontinue use of our platform.

2 Information We Collect

To provide you with a secure, fair, and personalised experience, dumaitoto collects several categories of information. Below is a detailed explanation of the types of data we may collect:

A. Information You Provide Directly

• Registration details: Full name, date of birth, identity card or passport number, email address, phone number, and residential address.
• Financial information: Bank account number, digital wallet details, and other payment method information used for deposits and withdrawals.
• Verification documents (KYC): Copies of your identification document, bank statement, or other documents required for the identity verification process.
• Communications: The content of messages you send to our support team, feedback, and any other written communications.

B. Information Collected Automatically

• Device data: Device type, operating system, device model, unique device identifier, and screen resolution.
• Network data: IP address, ISP (internet service provider), estimated geographic location based on IP, and connection type.
• Usage data: Pages visited, time spent on the platform, games played, total wagers, activity logs, and usage patterns.
• Cookie data: Session cookies, preference cookies, and analytics identifiers that help us understand how our platform is used.

3 How We Use Your Information

Dumaitoto uses collected data solely for legitimate and transparent purposes. The following are the primary purposes for which your information is used:

4 Data Sharing & Disclosure

Dumaitoto does not sell, rent, or trade your personal information to any third party for marketing purposes. However, in the following limited circumstances, we may need to share your data:

Approved Service Providers

We work with carefully selected third-party service providers to help us operate the platform, including payment processors, cloud infrastructure providers, and identity verification services. All such providers are bound by strict confidentiality agreements.

Legal & Regulatory Requirements

Dumaitoto may disclose your information to law enforcement authorities, regulatory bodies, or courts when required to do so by Malaysian law or a valid court order. In such situations, we will endeavour to inform you in advance unless prohibited from doing so by law.

Platform & User Protection

If we suspect fraud, money laundering, or serious security threats, we reserve the right to disclose relevant information to the appropriate authorities to protect the platform and other users.

5 Data Security & Technical Protection

Dumaitoto continuously invests in enterprise-grade cybersecurity infrastructure to ensure your data remains protected at all times. The technical and organisational measures we implement include:

• Data encryption in transit: All communications between your browser and our servers are secured with TLS 1.3 and 256-bit SSL encryption.
• Data encryption at rest: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256.
• Tiered access control: Only authorised staff with a legitimate business need may access member personal data, and all access is logged and monitored.
• Regular security audits: We conduct regular penetration testing and independent security audits to identify and address any vulnerabilities.
• Two-Factor Authentication (2FA): All staff accessing internal systems are required to use 2FA, and we encourage members to enable it as well.
• Real-time threat monitoring: Our security systems operate 24/7 to detect and respond to any suspicious activity.

6 Cookies & Tracking Technologies

Dumaitoto uses cookies and similar tracking technologies to enhance the user experience, understand how our platform is used, and ensure the security of your session.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
• Functional Cookies: Storing your preferences such as preferred language, display settings, and frequently used information for your convenience.
• Analytics Cookies: Helps us understand platform usage patterns in aggregate and anonymised form for service improvement purposes.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie preferences through your web browser. However, disabling essential cookies may affect the functionality of the dumaitoto platform.

7 Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data held by dumaitoto:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or outdated information.
• Right to Erasure: You may request deletion of your personal data, subject to applicable legal requirements and active contractual obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data under certain circumstances.
• Right to Data Portability: You may request a copy of your data in a machine-readable format.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the above rights, please contact our team via live chat or email. We will process your request within 14 business days. In complex cases, this period may be extended to up to 30 days, with prior notice to you.

8 Children's Privacy

Dumaitoto is an online gambling platform strictly restricted to users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that we have collected personal data from someone under the age of 18, the account in question will be closed immediately and all related data will be deleted within a short period.

If you believe we may have collected personal data of a child, please contact us immediately at [email protected] so we can take prompt action.

9 Links to Third-Party Websites

The dumaitoto platform may contain links to third-party websites or services from time to time. This privacy policy does not apply to those third-party sites, and dumaitoto is not responsible for their privacy practices.

We encourage you to read the privacy policy of every website you visit. The presence of a link on our platform does not imply that we endorse or are responsible for the content or privacy practices of that website.

10 Changes to This Privacy Policy

Dumaitoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technological developments, or new legal requirements. When we make material changes, we will:

• Updating the "Last updated" date at the top of this page.
• Sending notifications to members via email or in-account notices for material changes.
• Displaying a clear notice on the platform's home page for a specified period.

Continued use of the dumaitoto platform after changes take effect constitutes acceptance of the updated terms. We encourage you to review this page periodically.

FAQ Privacy FAQ