What Information Do We Collect from You?
Bobatoto collects various types of information to provide you with a safe, seamless, and relevant experience on our platform. This information is gathered when you register, use the platform, or interact with our services in Malaysia.
- Full name, date of birth, and phone number
- Email address used for registration
- Password (stored in encrypted form)
- Identity document for identity verification
- Delivery or residential address (where applicable)
- Deposit and withdrawal transaction records in MYR
- Payment method used (e-wallet, bank)
- Bank account or e-wallet number (partially masked)
- Transaction history for compliance and security purposes
- Transaction verification details
- IP address and general location information
- Device type, operating system, and browser
- Login session time and duration
- Pages visited and in-platform interactions
- In-platform gaming and betting activity
- Language preferences and account settings
- Feedback and interactions with customer support
- Technical error logs for system improvements
How Is Your Information Used?
All information collected by bobatoto is used responsibly for specific, legitimate purposes. We do not use your data for any purpose beyond what is stated in this policy without your prior consent.
Verify identity, process registrations, and maintain the security of user accounts.
Securely and accurately processes deposits and withdrawals in MYR.
Detect fraudulent activity, comply with Malaysian law, and protect users' interests.
Addressing enquiries, resolving technical issues, and improving the user experience.
Analyse usage patterns to improve platform functionality and the overall user experience.
Sending important notifications related to your account, security, and service updates.
How Do We Use Cookies and Tracking Technologies?
Bobatoto uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit our platform.
Essential Cookies
These cookies are essential for the platform's core functions — including keeping you logged in, processing transactions securely, and preventing fraudulent activity. Without them, the platform cannot operate properly and you will be unable to use our services.
Analytics & Performance Cookies
We use these cookies to understand how users interact with the platform — which pages are visited most, how long users stay, and where technical issues occur. This helps us continuously improve the platform.
How Long Is Your Data Retained and How Secure Is It?
User data security is a top priority at bobatoto. We apply strict technical and organisational safeguards to protect your personal information from unauthorised access, disclosure, alteration, or destruction.
Technical Security Measures
- SSL/TLS encryption for all data transmissions
- Passwords are stored using secure hashing techniques
- Two-factor authentication is available for added protection
- Continuous monitoring for suspicious account access
- Server infrastructure protected by firewalls and access controls
Data Retention Period
Active account data is retained for as long as your account remains active. Following account closure, core data is kept for the minimum period required under Malaysian law, including for financial audit and compliance purposes.
Financial transaction records are retained in accordance with applicable legal requirements, typically between seven and ten years. Data that is no longer needed will be securely deleted or anonymised.
When Is Your Information Shared with Third Parties?
Bobatoto does not sell or rent users' personal information to any third party for marketing purposes. However, there are limited circumstances where data may be shared with certain parties.
Transaction information is shared with licensed payment processors that handle deposits and withdrawals in MYR. They are bound by strict confidentiality agreements.
We may be required to disclose information to Malaysian government authorities or law enforcement agencies if mandated by law or court order.
Technical infrastructure providers that assist in operating the platform may access data solely for technical purposes, and are bound by strict data protection agreements.
What Are Your Rights Regarding Your Personal Data?
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding your personal data held by bobatoto. We are committed to making it straightforward for you to exercise these rights.
You have the right to request a copy of the personal information we hold about you. Requests can be submitted through customer support.
If any of your information is inaccurate or out of date, you have the right to request a correction. Some details can be updated directly through your account settings.
In certain circumstances, you may request the deletion of your personal data, subject to legal requirements to retain specific records.
You have the right to object to the processing of your personal data in certain circumstances, including for marketing communications.
To exercise any of the rights above, or if you have questions about this Privacy Policy, please contact our privacy team at: [email protected]
We will endeavour to process each request within 30 days of receipt. Any changes to this privacy policy will be communicated via the platform or your registered email. For more information about our services, visit the FAQ.
Still Have Questions About Your Data Privacy?
The bobatoto team is here to help with any questions about privacy and data protection. Reach out to us or check the FAQ section for more information.