Danatoto is committed to protecting the personal data of every member who uses our platform. This Privacy Policy explains what information we collect, how we use it, who we may share it with, and the rights you hold over your own data. Please read this document carefully before registering an account.
This Privacy Policy ("Policy") is issued by Danatoto ("we", "us", "our", "Platform") and applies to all personal data collected from individuals ("you", "User", "Member") who access or use the Danatoto website at danatoto.casa and any related services, including sports betting, live casino products, promotional features, and customer support channels.
Danatoto operates under international online gaming licensing. We recognise our obligation to handle personal data responsibly, transparently, and securely. This Policy is designed to inform you clearly about our data practices, your rights, and how to exercise them.
By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy, and that you consent to the collection and processing of your personal data as described herein. If you do not consent to these practices, you should not use the Platform.
For the purposes of this Privacy Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, location data, email address, or online identifier. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | Danatoto, which determines the purposes and means of processing personal data. |
| "Data Processor" | A third party that processes personal data on behalf of Danatoto under a data processing agreement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data. |
| "KYC" | Know Your Customer — the identity and document verification process required before a Member may access full Platform functionality. |
| "Cookies" | Small text files placed on your device by the Platform to store session or preference information. |
Danatoto collects personal data through multiple touchpoints during your use of the Platform. The categories of data we collect, and the circumstances under which they are collected, are set out below.
When you create an account, we collect the information you provide directly, including your full legal name, date of birth, email address, mobile number, and residential address. This information is necessary to create and administer your account.
To comply with our international licensing obligations and anti-money laundering requirements, we collect identity documents including copies of your Malaysian identity card (MyKad), driver's licence, or passport; proof of residential address (such as a utility bill or bank statement); and in some cases, a selfie photograph for liveness verification.
We collect records of all deposits, withdrawals, and wagers placed on the Platform, including the payment method used (e.g., Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX), transaction amounts in MYR, transaction timestamps, and relevant payment reference numbers. We do not store full payment card numbers or complete bank account details on our servers.
We automatically collect data about how you interact with the Platform, including IP address, device type, operating system, browser type, pages visited, session duration, click events, game history, and betting patterns. This data helps us improve platform performance and detect irregular activity.
When you contact our support team via live chat, email, or WhatsApp, we retain records of those communications — including transcripts, email content, and timestamps — for quality assurance, dispute resolution, and compliance purposes.
Where you use responsible gambling tools such as deposit limits, session reminders, or self-exclusion, we record those preferences and the dates they were applied. This data is treated with the highest level of sensitivity and is used solely to honour your responsible gambling settings.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity | Full name, date of birth, MyKad number | Account creation, KYC, age verification |
| Contact | Email address, mobile number, residential address | Account communication, support, security alerts |
| Financial | Deposit/withdrawal records, payment method, MYR amounts | Payment processing, fraud prevention, AML compliance |
| Technical | IP address, device fingerprint, browser data | Security, fraud detection, platform optimisation |
| Behavioural | Game history, betting patterns, session duration | Responsible gambling monitoring, personalisation |
| Communications | Chat transcripts, email exchanges, support tickets | Dispute resolution, quality assurance, compliance |
Danatoto uses the personal data we collect for the following purposes:
Danatoto processes your personal data on the following legal bases, depending on the nature of the processing activity:
Danatoto does not sell your personal data to third parties. We may share your data with third parties only in the following circumstances:
We engage carefully selected third-party service providers who process data on our behalf — including payment processing partners, KYC verification service providers, fraud detection platforms, cloud infrastructure providers, and customer support tools. All processors are bound by contractual data processing agreements that require them to handle your data in accordance with applicable data protection standards.
Danatoto may be required to share player data with its gaming licensing authority as part of regulatory audit, compliance review, or licensing renewal processes.
We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
In the event of a merger, acquisition, or sale of all or part of Danatoto's business, personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is handled.
Cookies are small text files that are placed on your device when you visit the Platform. They allow us to recognise your browser, remember your preferences, and gather analytical data about how the Platform is used.
You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies may impair Platform functionality. For detailed instructions on managing cookies across major browsers, refer to your browser's help documentation.
Danatoto retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations, whichever is longer.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.
Danatoto implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
Subject to applicable law and our regulatory obligations, you have the following rights in relation to the personal data we hold about you:
To exercise any of the rights listed above, please contact our Data Privacy team via email at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing the request.
The Danatoto Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in our registration and KYC process, and we take all reasonable steps to prevent minors from accessing our services.
If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will promptly close the relevant account, delete all associated personal data, and reverse any transactions processed during the period of access. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].
As an internationally licensed platform serving Malaysian users, Danatoto may transfer personal data to, or access it from, jurisdictions outside Malaysia. This may occur when data is processed by our licensed infrastructure providers, KYC partners, or payment processors who operate internationally.
Where personal data is transferred to a jurisdiction that does not provide the same level of data protection as Malaysia, Danatoto ensures that appropriate safeguards are in place — such as contractual data transfer agreements, binding corporate rules, or transfer mechanisms recognised under applicable data protection frameworks — before any transfer takes place.
Danatoto may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. When material changes are made, we will notify registered Members by email and display a prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform after any revision constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data Danatoto holds about you, please contact our support team using the details below. Our Data Privacy team is available to assist you and will respond to all substantive enquiries within 30 days.
When submitting a data rights request, please include your registered email address, account username, and a clear description of the nature of your request. For identity verification purposes, we may ask you to provide a copy of a valid identification document before processing sensitive data requests.
We hold your privacy to a high standard. Here are the core protections in place for every registered Danatoto member across Malaysia.
Every connection between your browser and Danatoto is protected by industry-standard 256-bit SSL/TLS encryption — the same level used by major international banking institutions.
We verify every member's identity and age before enabling full platform access. This protects the integrity of our platform and ensures no minor can access our betting or casino services.
Your personal data is never sold, rented, or traded to third-party advertisers or data brokers. We share data only where legally required or with processors bound by strict data agreements.
Promotional emails and push notifications are only sent with your explicit consent. You can withdraw that consent at any time — your gameplay experience is never affected by opting out.
You can request deletion of your personal data at any time. We honour erasure requests promptly, subject only to regulatory retention obligations that apply to all licensed gaming operators.
KYC documents, financial records, and sensitive account data are stored in encrypted form at rest on secured infrastructure — accessible only by authorised personnel under strict access controls.
If you have questions about this Privacy Policy, want to exercise your data rights, or simply want to know more about how Danatoto protects your personal information, our support team is available 24/7 and responds in English, Bahasa Melayu, and Chinese.
21+ only. Please gamble responsibly. | Responsible Gambling | Terms & Conditions