Privacy Policy sakutoto

1Introduction

Sakutoto takes your privacy very seriously. We understand that when you entrust us with your personal information, it is a significant responsibility — and we do not take that lightly.

This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. We operate according to the following principles in all data-related matters:

• Accuracy — We only collect data that is strictly necessary for the stated purposes
• Transparency — We clearly explain why data is collected and how it is used
• Security — Robust technical and organizational safeguards are in place to protect your data
• User Controls — You have meaningful rights over your personal data

2Personal Data We Collect

Sakutoto collects several categories of information depending on how you interact with our platform. Here is an overview of the data collected:

a) Data You Provide Directly

• Full name as shown on a valid identification document
• Date of birth and basic demographic information
• Email address and mobile number
• Residential or mailing address
• Bank account or digital wallet details for transaction purposes
• Copy of identification document for the KYC (Know Your Customer) process

b) Automatically Collected Data

• Device IP address and basic network information
• Browser type, operating system and device information
• Game session data including login times, games played and session duration
• Transaction log data — deposits, wagering and withdrawals
• Platform interaction data — clicks, navigation and usage patterns

3How We Use Your Data

Sakutoto uses your personal data solely for legitimate and necessary purposes. Below is the full list of purposes:

• Account management — Creating, verifying, and managing your account on the sakutoto platform
• Transaction processing — Processing deposits, wagering, and withdrawals securely and accurately
• KYC & AML Compliance — Verifying your identity and complying with anti-money laundering legal requirements
• Customer Support — Providing effective assistance whenever you need help
• Platform security — Detecting and preventing fraud, abuse, or unauthorized access
• Service improvement — Analyzing usage patterns to enhance the overall user experience
• Service communications — Sending important notifications related to your account, transactions, or policy changes

4Legal Basis for Data Processing

Every instance of personal data processing carried out by sakutoto has a valid legal basis. We process your data based on:

• Contract performance — Processing necessary to fulfill the agreement between you and sakutoto (including transaction processing and account management)
• Legal obligation — Compliance with regulatory requirements, including Malaysia's PDPA, AML and KYC requirements
• Legitimate interest — Legitimate business interests such as fraud prevention and platform security
• Consent — For specific purposes such as marketing communications, where you have given explicit consent

5Data Sharing with Third Parties

Sakutoto does not sell your personal data. We only share data in the following limited and lawful circumstances:

• Service providers — Technical partners who help us operate the platform (payment processors, cloud service providers, game suppliers) — they are bound by strict data protection agreements
• Regulatory authorities — When required by Malaysian law or a valid court order
• AML partners — Parties that assist us in meeting anti-money laundering requirements
• Business transfers — In the event of a merger or acquisition, the acquiring party will be bound by the same or stricter Privacy Policy

6Data Security

Sakutoto implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data in transit
• Encryption of sensitive data stored in our database
• Role-based access control — only staff who require it may access specific data
• Periodic security audits by independent third parties
• 24/7 monitoring to detect suspicious activity
• Two-factor authentication (2FA) available for user accounts
• Regular secure and encrypted data backups

7Your Rights Regarding Personal Data

Under Malaysia's PDPA and international data protection standards, you have the following rights regarding your personal data held by Sakutoto:

To exercise any of the rights above, contact us at [email protected]. We will process your request within 30 days. Some requests may be subject to legal obligations that prevent us from fully complying — we will clearly explain if this is the case.

8Cookies and Tracking Technologies

Sakutoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Necessary Cookies — Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Functional Cookies — Remembering your preferences such as language and display settings for your convenience.
• Analytics Cookies — Helps us understand how the platform is used so we can make continuous improvements. Data collected is aggregated and does not identify you individually.

9Child Protection

The sakutoto platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a child's data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

If you believe a child has registered an account on sakutoto, please contact us immediately at [email protected] so that we may take the appropriate action.

10Privacy Policy Amendments

Sakutoto reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When we make material changes:

• We will display a new "Updated" date at the top of this page
• Notifications will be sent to registered members via email or in-platform notification
• Changes will not take effect less than 14 days after notification, unless required by law

Your continued use of the sakutoto platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

11Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, the sakutoto Data Protection team is ready to assist:

We respect your privacy rights and will handle every inquiry seriously and professionally. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department or the relevant regulatory authority.