Kurniatoto Privacy Policy

1. Introduction

Kurniatoto ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all users ("you", "the Player", "the User") who access or interact with the Kurniatoto platform at kurniatoto.cam. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we may share it with, and what rights you hold in relation to that data.

This Policy applies to all personal data collected through the Kurniatoto website, mobile interface, registration process, customer support interactions and any other service channel operated by or on behalf of Kurniatoto. It covers players located across Malaysia — including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam — as well as other jurisdictions where the Platform is accessible.

By creating a Kurniatoto account or continuing to use the Platform after the effective date of this Policy, you confirm that you have read and understood how your personal data will be handled. If you do not agree with the terms of this Privacy Policy, you should not register for or use the Kurniatoto platform.

2. Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

3. Data We Collect

Kurniatoto collects only the personal data that is necessary to deliver our services, comply with legal obligations and protect the Platform against fraud and misuse. The categories of data we collect include the following:

3.1 Registration Data

When you create a Kurniatoto account, we collect your full legal name, date of birth, email address, phone number and residential address. This information is required to establish and maintain your account and to fulfil our age verification and KYC obligations.

3.2 Identity Verification Documents

As part of the KYC process, we may request copies of government-issued identification (such as a Malaysian National Identity Card or passport), proof of residential address (such as a utility bill or bank statement) and payment method documentation. These documents are collected and stored securely and are used solely for verification purposes.

3.3 Financial and Transaction Data

We record details of all deposits, withdrawals, wagers and bonus transactions associated with your account. This includes transaction amounts in MYR, timestamps, payment method identifiers (for example, the last four digits of a card or the registered name of a Touch 'n Go eWallet account) and transaction reference numbers.

3.4 Technical and Device Data

Our systems automatically collect technical data when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL and session duration. This data is used for security monitoring, fraud prevention and platform optimisation.

3.5 Behavioural and Usage Data

We record information about how you navigate and use the Platform, including pages visited, games played, betting history, promotional offers viewed and features accessed. This data helps us understand how players interact with Kurniatoto and where improvements can be made.

3.6 Communications Data

When you contact Kurniatoto through live chat, email or any other channel, we retain records of those communications, including the content of messages, timestamps and the outcome of any support interaction. These records are used to improve service quality and resolve disputes.

4. Data Processing

Kurniatoto processes your personal data for the following purposes. Where a specific legal basis applies, it is noted in Section 5 below.

5. Legal Basis for Processing

Kurniatoto processes personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil our obligations under the user agreement — including account creation, payment processing and KYC verification — is necessary for the performance of the contract between you and Kurniatoto.
• Legal obligation: Certain processing activities, including age verification, anti-money-laundering checks and record-keeping, are required by applicable laws and licensing conditions.
• Legitimate interests: We process technical, security and behavioural data on the basis of our legitimate interest in maintaining a secure, fair and properly functioning platform.
• Consent: Where we rely on your consent — for example, to send promotional emails or to set non-essential cookies — we will obtain that consent separately and you may withdraw it at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1 We Do Not Sell Your Data

Kurniatoto does not sell, rent or trade your personal data to any third party for their own marketing or commercial purposes.

6.2 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf and under documented data processing agreements. These providers include payment gateway operators (covering Malaysian channels such as Touch 'n Go eWallet, DuitNow, FPX and major banks), identity verification platforms, cloud infrastructure providers, fraud detection services, and customer support tools. All such providers are contractually obligated to process your data only as instructed by Kurniatoto and in accordance with applicable data protection standards.

6.3 Regulatory and Legal Disclosure

Kurniatoto may disclose personal data to regulators, law enforcement agencies, licensing authorities or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, safety or property of Kurniatoto, its users or the public.

6.4 Business Transfers

In the event of a merger, acquisition, sale of assets or corporate restructure involving Kurniatoto, personal data may be transferred to the relevant successor entity. Users will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device by a website. Kurniatoto uses cookies and similar technologies — including local storage and session tokens — to operate the Platform, remember your preferences, maintain your login session and collect anonymised analytics data.

7.2 Types of Cookies We Use

• Essential cookies: Required for the Platform to function. These include session authentication tokens and security identifiers. They cannot be disabled without preventing core platform features from working.
• Functional cookies: Used to remember your preferences, such as language selection and display settings, across sessions.
• Analytics cookies: Used to collect anonymised information about how users navigate the Platform. This data is used in aggregate to improve page structure and content — it does not identify you personally.
• Marketing cookies: Set only with your consent, these cookies may be used to present relevant promotional content. You may withdraw consent at any time via your browser settings.

7.3 Managing Cookies

You may configure your browser to decline or delete cookies at any time. Note that disabling essential cookies will impair your ability to log in and use core Platform features. Kurniatoto does not respond to browser "Do Not Track" signals at this time.

8. Data Retention

Kurniatoto retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, licensing conditions or legitimate operational needs.

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years to support financial audits, dispute resolution and regulatory compliance.
• KYC documents: Retained for the minimum period required under applicable licensing and AML obligations, typically five (5) years from the date of verification.
• Support communications: Retained for up to three (3) years following the closure of the relevant support interaction.
• Analytics data: Retained in anonymised or aggregated form for internal analysis and platform improvement without a fixed expiry period.

When personal data is no longer required for any permitted purpose, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

9. Data Security

Kurniatoto implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted database storage for sensitive account and transaction information.
• Role-based access controls ensuring that only authorised personnel may access player data.
• Regular security assessments and monitoring of our systems and infrastructure.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised access.

While Kurniatoto takes its data security obligations seriously, no digital platform can guarantee absolute security. Players are equally responsible for protecting their own login credentials. You should use a strong, unique password for your Kurniatoto account and never share your login details with a third party. If you suspect any unauthorised access to your account, please contact our support team immediately.

10. Your Rights

Subject to applicable law and the limitations of our regulatory and contractual obligations, you hold the following rights in relation to your personal data held by Kurniatoto:

To exercise any of these rights, please contact the Kurniatoto support team via the details provided in Section 14. We will acknowledge your request within a reasonable period and respond fully within 30 days, unless a statutory extension applies. Note that certain rights may be limited where processing is required to comply with legal obligations — for example, AML record-keeping requirements may restrict the erasure of transaction records during the statutory retention period.

11. Protection of Minors

Kurniatoto is strictly available to persons aged 21 years and above. We do not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that personal data has been submitted by a person under the minimum age, we will promptly close the associated account and delete the data in question.

If you are a parent or guardian and believe that a minor has registered an account or submitted personal data to Kurniatoto, please contact our support team immediately so that we can take appropriate action.

12. International Data Transfers

Kurniatoto operates within an international online gaming context. Personal data collected from Malaysian players may be stored and processed on servers located outside Malaysia, including in jurisdictions covered by our international operating licence.

Where personal data is transferred internationally, Kurniatoto takes appropriate steps to ensure that an adequate level of protection is maintained, including the use of contractual safeguards with third-party service providers and the selection of processors operating in jurisdictions with recognised data protection standards.

Malaysian users acknowledge that Malaysia currently does not operate a dedicated online gambling regulatory authority and that Kurniatoto's data handling practices are governed by the terms of its international licensing framework and this Privacy Policy.

13. Amendments to This Policy

Kurniatoto reserves the right to update or amend this Privacy Policy at any time. Revisions will be communicated by publishing the updated Policy on this page with a new "Last Updated" date. Where changes are material — for example, a new category of data is being collected or a new processing purpose is being introduced — we will provide additional notice via your registered email address or through an in-platform notification.

Your continued use of the Kurniatoto platform following the publication of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with any changes, you should discontinue use of the Platform and request account closure.

14. Contact Us

For any questions, requests or concerns relating to this Privacy Policy or the handling of your personal data, please contact the Kurniatoto Data Support Team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the in-platform chat interface

When submitting a data rights request, please provide your full registered name, the email address associated with your account, and a clear description of the request you are making. This will allow us to locate your records efficiently and respond within the required timeframe.