Kaskustoto Privacy Policy – Malaysia Member Data Protection

Kaskustoto collects personal information from members at various stages of platform use. The information collected can be divided into two main categories: information you provide directly, and information collected automatically while you use our platform.

Information You Provide Directly

Information Collected Automatically

• Device data: Device type, operating system, phone model, screen resolution
• Network data: IP address, internet service provider (ISP) name, city or state location based on IP
• Usage data: Pages visited, games played, session duration, in-platform actions
• Transaction data: Deposit, withdrawal, wagering, and wins history
• Cookie data: Session details, language preferences, login status

Kaskustoto collects personal information through several different channels, depending on how you interact with our platform:

• During account registration: You actively fill in the registration form with basic information such as your name, email, and phone number.
• During the KYC process: You upload identity verification documents such as a national ID, passport, or bank statement as part of the account verification process.
• During transactions: Every time you make a deposit or submit a withdrawal request, transaction details are automatically recorded in our system.
• Through cookies and tracking technologies: When you browse our platform, cookies and similar technologies automatically collect information about your usage habits.
• Through customer support communications: Any information you share during live chat sessions, email, or other support channels will be retained for future reference.
• From trusted third parties: In some cases, we may receive additional information from identity verification service providers or fraud prevention agencies we work with.

Every piece of information we collect has a specific and clear purpose. kaskustoto does not collect unnecessary data, and all data usage is subject to the principle of data minimisation. The following are the primary purposes for which your data is used:

• Account management: To securely create, verify, and maintain your member account.
• Transaction processing: To accurately and securely process deposits, withdrawals, and all financial activities in your account.
• Identity verification (KYC): To meet legal compliance requirements and prevent fraud, money laundering, and platform abuse.
• Customer support: To provide effective and personalised assistance whenever you contact our support team.
• Marketing communications: To send information about promotions, bonuses, and special offers — only to members who have consented to receive such communications.
• Platform improvements: To analyse usage patterns and improve user experience, technical stability, and overall platform performance.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, hacking, or any form of platform abuse.
• Legal compliance: To comply with legal obligations, court orders, or requests from relevant regulatory authorities.

Kaskustoto does not sell, rent, or trade members' personal information to any third party for commercial purposes. However, in certain limited situations, we may share some of your information with the following parties:

• Payment service providers: Required transaction information is shared with payment gateways and banks involved in processing your deposits and withdrawals.
• KYC and identity verification service providers: Your identity documents may be shared with trusted third-party verification services to expedite and validate the KYC process.
• Game providers: Basic game session information may be shared with third-party game providers to ensure a smooth and fair gaming experience.
• Regulatory bodies and law enforcement: When required by law, court order, or official request from a relevant government agency.
• Trusted analytics services: Usage data that cannot personally identify individuals may be shared with analytics platforms to help us understand usage patterns and improve the platform.

All third parties we work with are required to comply with strict data protection standards and are only permitted to use shared information for the specified purposes.

Protecting your personal information from unauthorized access, loss, or misuse is kaskustoto's highest technical priority. We continuously invest in cybersecurity infrastructure to keep your data protected at all times.

• 256-bit SSL encryption: All data transmitted between your device and kaskustoto servers is encrypted using the latest TLS/SSL protocols, ensuring no third party can intercept or read your data in transit.
• Secure password storage: Your password is never stored in plain text — it is encrypted using a one-way hashing algorithm that cannot be decrypted.
• Two-factor authentication (2FA): kaskustoto supports two-factor authentication to add an extra layer of security to your account.
• 24/7 security monitoring: Our systems are continuously monitored to detect any unusual activity or unauthorised access attempts.
• Data segregation: Sensitive data such as banking information is stored in systems separate from general usage data, with strict access controls.
• Regular security audits: The kaskustoto platform undergoes periodic independent security audits by recognised cybersecurity firms to ensure data protection standards remain up to date.

Kaskustoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance cookies: Collecting information on how you use our platform to help us identify and resolve performance issues.
• Functional cookies: Remembering your preferences such as language, display settings, and login details for a more convenient experience.
• Analytical cookies: Used to understand traffic patterns and platform usage in aggregate, without personally identifying any individual.

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality or user experience of the Kaskustoto platform. For analytics and marketing cookies, you may opt out via your account settings.

Kaskustoto does not store your personal data indefinitely. Data retention periods are determined based on operational requirements, legal obligations, and legitimate business needs:

• Active account data: Retained for as long as your account is active and in use.
• Closed account data: Basic account information and transaction records are retained for at least 5 years after account closure to meet legal and audit requirements.
• KYC records and identity documents: Retained for the period required by applicable anti-money laundering laws, typically between 5–7 years.
• Customer support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Cookie and session data: Session cookies expire when you close your browser; persistent cookies expire after a set period, typically between 30 days and 1 year.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

As a kaskustoto member, you have certain rights regarding your personal information. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the kaskustoto customer support team via 24/7 live chat or our official email. We will process your request within 30 days of receipt.

The kaskustoto platform is exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.

Should we discover that personal information of a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the associated account. If you believe someone under the age of 18 has registered an account at kaskustoto, please notify our support team immediately.

Kaskustoto reserves the right to update or modify this Privacy Policy at any time. Any significant changes will be communicated to members via in-platform notifications or official email at least 7 days before the changes take effect.

The "Last Updated" date shown at the top of this document reflects when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Continued use of the kaskustoto platform following any changes to this policy constitutes your acceptance of the updated version.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, the Kaskustoto privacy team is ready to assist you through the following channels:

• Live Chat 24/7: The fastest way to get an immediate response — available directly within the Kaskustoto platform at all times.
• Support Email: Email our privacy team at [email protected] for more detailed inquiries or those requiring written documentation.
• FAQ Page: Review FAQ page us for answers to the most frequently asked questions about privacy and data security.

We are committed to responding to all privacy-related inquiries within 3 business days. For personal data rights requests, the response period is up to 30 days in accordance with applicable legal requirements.