Pulitoto Privacy Policy — Malaysia Member Personal Data Protection

Pulitoto takes your privacy seriously. Learn how we collect, use, and protect your personal information at all times.

128-Bit SSL Encryption Data Stored Securely Updated: January 2026

Our Commitment to Your Privacy

Six core principles that underpin how Pulitoto manages and protects member personal data

Advanced-Grade Data Encryption

All your personal data and financial transactions are transmitted and stored using 128-bit SSL encryption. This means your information cannot be read or intercepted by unauthorised parties during transmission.

No Sale of Data to Third Parties

Pulitoto has never and will never sell, rent, or share your personal data with third parties for marketing purposes. Your data belongs entirely to you — it is not a business asset of ours.

Full Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. Pulitoto provides a straightforward and transparent process for you to manage your own personal information.

Secure Data Storage

The pulitoto database is stored in data centres protected by enterprise-grade physical and digital security. Access to member data is restricted to staff with a legitimate need only.

PDPA Legal Compliance

Our Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection regulations. We continuously update our practices in line with legislative changes.

Timely Notification

In the event of any security incident involving your data, pulitoto is committed to notifying you within the timeframe required by law, along with details of the remedial actions taken.

Your Rights as a pulitoto Member

Data protection rights you hold and can exercise at any time

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Correct any inaccurate or outdated data in your account.

Right to Erasure

Request deletion of your data when it is no longer needed by us.

Right to Object

Object to the processing of your data for direct marketing purposes.

Data Portability Right

Obtain your data in a machine-readable format for transfer.

Right to Restrict Processing

Restrict how we process your data in certain circumstances.

Latest Version: January 2026  |  Bahasa Melayu

Important Note: This Privacy Policy explains how Pulitoto collects, uses, stores, and protects your personal information. By registering and using our platform, you agree to the practices described in this document. Please read it carefully.

1 Introduction

Pulitoto ("we", "Platform", "company") is fully committed to protecting the privacy of every member who uses our online entertainment platform. This Privacy Policy clearly and transparently explains how we manage your personal data from the moment you register until you cease using our services.

We understand that your trust is the foundation of a strong relationship between members and the platform. We therefore take our responsibility to safeguard the information you entrust to us very seriously. Every data-related decision is made with the interests and safety of our members as the top priority.

This Privacy Policy applies to all Pulitoto services, including the main website, Android and iOS mobile apps, and all our official communication channels. It also covers all data collected when you interact with the platform, whether as a visitor or a registered member.

PDPA Compliance: pulitoto complies with the Malaysian Personal Data Protection Act 2010 (PDPA). We also incorporate international data protection best practices across all operations that involve members' personal data.

2 Personal Data We Collect

2.1 Data You Provide Directly

When you register an account or use our services, you provide us with the following information directly:

  • Full name as stated on your official identification document;
  • Date of birth for age verification;
  • Active email address for account communications;
  • Phone number for two-factor authentication and communications;
  • Current residential address;
  • Bank account or e-wallet details for processing deposits and withdrawals;
  • Identity verification documents (KYC) such as a national ID card or passport;
  • Any additional information you provide through customer support.

2.2 Data Collected Automatically

While you use the pulitoto platform, our systems automatically collect certain technical data for security and service improvement purposes:

Data Type Example Purpose
Device Data Phone model, OS version, device ID Security and optimisation
Network Data IP address, connection type Location Verification & Fraud Prevention
Session Data Login time, session duration Account security
Game Data Betting records, wins, and losses Compliance & Support
Transaction Data Amount, date, payment method Financial Processing & AML
Cookie Data User preferences, session tokens User Experience

2.3 Data from Third-Party Sources

In certain circumstances, we may receive information about you from trusted third-party sources, such as identity verification service providers, fraud prevention agencies, or payment providers, solely for the purpose of verifying and securing your account.

3 How We Use Your Personal Data

Pulitoto uses your personal data only for legitimate and necessary purposes. Below is a complete list of the purposes for which your data is used:

3.1 Account Management and Services

  • Creating and managing your member account;
  • Verifying your identity during the KYC process;
  • Processing deposits and withdrawals securely;
  • Providing responsive customer support;
  • Sending important notices relating to your account.

3.2 Security and Compliance

  • Detecting and preventing fraud, money laundering, and illegal activities;
  • Complying with legal and regulatory obligations;
  • Conducting required anti-money laundering (AML) checks;
  • Ensuring compliance with responsible gaming programmes;
  • Verifying that users meet the minimum age requirement.

3.3 Platform Improvement

  • Analysing usage patterns to improve the user experience;
  • Testing and developing better new features;
  • Resolving technical issues and software bugs;
  • Optimising platform performance across multiple devices.

3.4 Marketing Communications (With Your Consent)

With your explicit consent, we use your information to send promotional offers, the latest bonus updates, and relevant content that may interest you. You may withdraw this consent at any time through your account settings or by contacting us.

4 Data Sharing with Third Parties

Pulitoto does not sell your personal data. However, in limited and lawful circumstances, we share data with the following parties:

4.1 Approved Service Providers

We share necessary data with third-party service providers who assist us in operating the platform, including payment providers, KYC and identity verification service providers, cloud and IT infrastructure providers, and customer support service providers. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes we specify.

4.2 Authorities and Regulators

We will disclose personal data to legal authorities or regulatory bodies when required by law, court order, or direction from a competent authority. This includes tax authorities, law enforcement agencies, and relevant gambling licensing bodies.

4.3 Business Transfers

Should pulitoto be involved in any merger, acquisition, or asset sale, member data may be transferred as part of that transaction. In such cases, you will be notified in advance and the new entity will be bound by a Privacy Policy that provides equivalent or greater protection.

Our Guarantee: In all data-sharing arrangements, we ensure adequate protection through binding written agreements, and we will not share more data than is strictly necessary for the relevant purpose.

5 Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. Cookies help the platform remember your settings and preferences, and enable us to provide a better and more secure experience.

5.2 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login, session security, and transaction processing. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform to help us improve performance and functionality.
  • Functional Cookies: Remembering your preferences such as language, display settings, and game preferences for a more personalised experience.
  • Analytics Cookies: Helping us understand aggregated and anonymised usage patterns for continuous improvement.

5.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note, however, that disabling certain cookies may affect platform functionality and your gaming experience. Essential cookies cannot be disabled as they are required for platform security and core functionality.

6 Data Security

Pulitoto continually invests in security infrastructure to ensure your personal data remains protected at all times. The security measures we have implemented include:

  • SSL/TLS Encryption: All communications between your device and our servers are protected by 128-bit SSL encryption, rendering data unreadable to third parties during transmission;
  • Static Data Encryption: Sensitive data stored in our databases is encrypted using AES-256 encryption standards;
  • Strict Access Controls: Access to member data is restricted to staff with a legitimate business need, and all access is logged and monitored;
  • Two-Factor Authentication: Our internal systems require two-factor authentication for all administrative access;
  • 24/7 Monitoring: Our security systems are monitored around the clock to detect and respond to any threats;
  • Regular Security Audits: We conduct regular security audits and penetration testing by independent security experts.

Shared Responsibility: While we take all reasonable steps to protect your data, online security is a shared responsibility. You should also ensure your password is strong, not shared with others, and that the devices you use are secure.

7 Data Retention Period

Pulitoto retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law.

  • Active Account Data: Retained for as long as your account remains active;
  • Data After Account Closure: Retained for a minimum of 5 years after account closure to fulfil legal and regulatory requirements, including AML and tax obligations;
  • Transaction Records: Retained for 7 years in accordance with financial legal requirements;
  • Communication Logs: Retained for 2 years for customer support and dispute resolution purposes;
  • Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period expires and there is no legal requirement to continue storing it, your data will be securely deleted or permanently anonymised so it can no longer be linked to you.

8 How to Exercise Your Rights

To exercise any data protection rights you hold, you may contact our privacy team via email or live chat, including the following information:

  • Your full name and pulitoto account username;
  • Type of request (access, rectification, erasure, etc.);
  • A brief description of the data related to your request.

We will process your request within 30 calendar days. If your request is complex or we receive a high volume of requests, this period may be extended to 60 days, and we will notify you of the extension.

Identity Verification Required: To protect your privacy, we are required to verify your identity before processing any request relating to personal data. This is an important security measure to prevent unauthorised disclosure of data.

9 Children's Data Protection

The pulitoto platform is intended solely for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Should we discover that we have inadvertently collected data from a person under 18, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and discover that your child has registered an account on our platform, please contact us immediately through our customer support channels so we can take the appropriate action.

10 Links to Third-Party Websites

The pulitoto platform may, in certain contexts, contain links to third-party websites or services. Please be aware that our Privacy Policy does not apply to those external sites. We are not responsible for the privacy practices or content of third-party websites, and we encourage you to read the privacy policy of every website you visit independently.

11 Changes to the Privacy Policy

Pulitoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any significant changes will be communicated to you through:

  • A prominent notice on the platform's home page;
  • Email to your registered address at least 14 days before the changes take effect;
  • An in-account notice upon your next login.

The "Updated" date at the top of this document indicates the most recent date on which this Privacy Policy was amended. Your continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our privacy team through the following channels:

  • Live Chat: Available 24/7 directly on the pulitoto platform — the fastest way to get a response;
  • Email: [email protected] — for specific privacy enquiries and official data requests;
  • General Support Email: [email protected] — for general account-related enquiries.

We aim to respond to all enquiries within 2 business days. For formal data rights requests, the processing time is up to 30 days as stated in Section 8.

We're Here to Help: Our privacy team consists of trained personnel who understand the importance of data protection. Do not hesitate to contact us if you have any concerns — we will work to resolve every issue transparently and professionally.

Your Data Is Safe. Your Entertainment Is Assured.

Join over 500,000 Pulitoto members enjoying safe, trusted, and fun online entertainment in Malaysia.

Bahasa Melayu