mktoto Privacy Policy

Introduction

mktoto respects the importance of privacy and is committed to handling personal information responsibly. This Privacy Policy describes the categories of information that mktoto may process, the reasons for processing it, the circumstances in which it may be disclosed and the choices available to users.

This policy applies whenever you access https://mktoto.lat, register or maintain a mktoto account, browse sports or casino content, use an available payment method, activate responsible-gambling controls or communicate with support. It should be read together with the mktoto Terms and Conditions.

By using the platform, you acknowledge that mktoto may process your information as described in this policy. Where consent is required for a specific activity, mktoto will seek that consent separately. If you disagree with this policy, you should discontinue use and contact support regarding any legitimate privacy request.

Scope and Definitions

For this policy, “personal information” means information that identifies an individual directly or that can reasonably be combined with other information to identify that individual. It may include registration details, identity records, contact information, account activity, payment references, device data and support correspondence.

“Processing” includes collecting, recording, organising, using, reviewing, storing, sharing, restricting, deleting or otherwise handling personal information. “User” or “player” means any person who accesses or uses mktoto. “Service provider” means an organisation that performs a necessary operational function for or on behalf of mktoto.

Aggregated or anonymised information that can no longer reasonably identify a person may fall outside the definition of personal information. mktoto may use such information to understand platform performance, security trends, mobile usage and general interest in content such as EPL, Liga Super Malaysia, UFC, live casino or slot categories.

Information We Collect

The information collected by mktoto depends on how you use the platform. Some details are provided directly by you, while other records are produced through account activity, security systems or interactions with payment channels.

You must provide accurate information where it is required for account operation or verification. If requested information is not supplied, mktoto may be unable to open an account, complete a security review, process an eligible withdrawal or respond fully to a request.

Data Processing Purposes

mktoto processes personal information only where there is an appropriate operational, contractual, security, compliance or consent-based reason. The relevant purpose may differ according to the information and the service being used.

• Account administration: creating, maintaining and authenticating a mktoto account and preserving user preferences;
• Service delivery: displaying balances, recording activity and providing access to eligible sports and casino features;
• Identity checks: confirming age, identity, address and payment-method ownership;
• Transaction processing: managing eligible MYR deposits, withdrawals, reversals and reconciliation records;
• Security: detecting unauthorised access, duplicate accounts, suspicious transactions, collusion, fraud or misuse;
• Responsible gambling: applying deposit limits, cooling-off periods, self-exclusion instructions and appropriate account interventions;
• Support: answering enquiries, reviewing complaints and maintaining an accurate history of a case;
• Improvement: assessing mobile usability, page performance and recurring technical errors; and
• Legal obligations: preserving or disclosing records where properly required under applicable rules.

mktoto does not sell personal information as a standalone commercial product. Information is not to be used for an unrelated purpose unless that use is compatible with the original purpose, permitted by applicable requirements or supported by further notice or consent.

Payments and Identity Verification

Malaysian users may encounter payment references involving Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong. mktoto may process the provider name, MYR transaction amount, timestamp, reference number, account-holder details and payment status necessary to administer a transaction.

mktoto does not require users to publish complete banking credentials on public pages. Payment information should be submitted only through an appropriate account interface when genuinely required. Users must never send a password, personal identification number or one-time security code to support.

Verification may require an identity document, proof of address, payment ownership evidence or source-of-funds information. mktoto limits such requests to what is reasonably necessary for the relevant review. Documents may be assessed to confirm that the account belongs to an eligible adult and that transactions are consistent with lawful personal use.

A payment provider or Malaysian bank may process information under its own privacy practices. mktoto is responsible for its own handling of information but cannot control independent processing carried out by a user's chosen bank or e-wallet operator.

Cookies and Device Information

Cookies and similar local technologies may help mktoto maintain a secure session, remember preferences, balance traffic and understand how pages perform on mobile devices. Some technologies are necessary for authentication or security, while others support measurement and usability improvements.

Device information may include browser type, operating system, approximate location derived from an IP address, screen size, language settings, referring page, session duration and error reports. mktoto may use these details to distinguish legitimate access from automated or suspicious activity.

Browser controls may allow you to remove or block cookies. Restricting essential cookies can prevent login, preference storage or other mktoto features from functioning correctly. Cookie settings do not remove account records that mktoto must retain for security, transaction or legal purposes.

Information Sharing and Disclosure

mktoto may share limited personal information with service providers where disclosure is necessary to operate the platform. Relevant providers may assist with identity verification, payment processing, fraud detection, technical hosting, customer support, security monitoring or professional advice.

Service providers should receive only the information reasonably required for their assigned function and must handle it under suitable confidentiality and security obligations. mktoto may also disclose information where reasonably necessary to:

• Comply with a valid legal process or applicable requirement;
• Protect a player's safety, rights or property;
• Investigate fraud, money laundering, account compromise or prohibited conduct;
• Enforce the mktoto Terms and Conditions;
• Respond to a dispute involving a bank, e-wallet or payment transaction; or
• Support a legitimate corporate reorganisation subject to appropriate safeguards.

Where information must be processed in another location, mktoto will take reasonable steps to use appropriate contractual, technical or organisational protections. No digital transfer can be guaranteed completely risk-free, but the sensitivity of the information will be considered when safeguards are selected.

Data Security

mktoto applies proportionate safeguards intended to protect personal information against accidental loss, unauthorised access, improper alteration and unlawful disclosure. Measures may include access controls, authentication, monitoring, data separation, encrypted transmission where appropriate and documented review procedures.

Access to player records is limited according to operational need. Personnel and authorised providers should use personal information only for assigned responsibilities. Security practices are reviewed as technology, risks and platform functions change.

Users also have an important role. Choose a strong and unique password, secure the email address connected to your mktoto account, sign out on shared devices and report unexplained activity promptly. mktoto support will never need your password or one-time banking code.

If a security incident affects personal information, mktoto will investigate, contain the issue where possible and provide notices when required. The content and timing of any notice will depend on the nature of the incident, available facts and applicable obligations.

Data Retention

mktoto retains personal information only for as long as reasonably necessary for the purpose for which it was collected and for any related security, dispute, payment, responsible-gambling or legal requirement. Different categories of information may therefore have different retention periods.

An account-closure request does not always permit immediate deletion of every record. mktoto may need to retain transaction history, identity-verification evidence, self-exclusion records, complaint correspondence or fraud-prevention markers for an appropriate period. Retained records should not be used for an incompatible purpose.

When personal information is no longer required, mktoto may securely delete it, anonymise it or place it beyond ordinary operational use. Anonymised statistics may be kept to evaluate performance and long-term service trends because they no longer reasonably identify an individual.

User Rights and Privacy Requests

Depending on the applicable circumstances, a mktoto user may request access to personal information, correction of inaccurate details, restriction of certain processing, deletion where retention is no longer justified or withdrawal of consent for consent-based activity.

mktoto may need to verify the identity of a requester before providing records or changing account information. This protects users from fraudulent privacy requests. A request may be limited or refused where fulfilling it would expose another person's information, undermine security, conflict with a required retention period or otherwise be inappropriate under applicable rules.

Requests should identify the relevant account and clearly describe the information or action sought. mktoto will review a valid request within a reasonable period and explain if further information or additional time is required.

Responsible-Play Information

mktoto may process gambling activity and account-control information to support responsible-play measures. Relevant information can include deposit patterns, session frequency, limit changes, cooling-off requests, self-exclusion status and communications expressing concern about gambling behaviour.

This information may be used to apply a requested restriction, review signs of potential harm and determine whether an appropriate account intervention is necessary. A self-exclusion record may be retained after account closure to help prevent accidental or deliberate reactivation during the applicable exclusion period.

Responsible-play information is treated as sensitive in context and should be accessed only for legitimate operational, safety, security or compliance purposes. mktoto does not guarantee that monitoring will identify every instance of harmful behaviour. Each player remains responsible for setting affordable limits, taking breaks and seeking help when gambling stops being enjoyable.

Changes to This Privacy Policy

mktoto may update this Privacy Policy when platform functions, security practices, payment arrangements or applicable requirements change. The revised policy will be published on this page and may include an updated review date.

Where a change materially affects how mktoto handles personal information, an additional notice may be provided through the platform where practical. Users should review this page periodically. Continued use after an updated policy takes effect acknowledges the revised information, but it does not replace consent where fresh consent is specifically required.

Contact Us

Questions about this Privacy Policy or the handling of personal information may be directed to mktoto support. Privacy requests should state the relevant account details, describe the requested action and include only the information reasonably necessary for identity verification.

Support email: [email protected]
Service language: English for Malaysian users
Availability: 24 hours a day, seven days a week

The support email is displayed as plain text and is not clickable. Never include an account password, e-wallet PIN, banking password or one-time security code in a message. mktoto may request suitable verification before disclosing or changing personal information.