Coloktoto takes the privacy of every Malaysian player seriously. This Policy transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Before reading the full policy, here are coloktoto's six core commitments to protecting the personal data of Malaysian players.
All data transmitted between your device and coloktoto's servers is protected with 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions such as Maybank and CIMB. Your information cannot be intercepted or read by unauthorized parties.
Coloktoto operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means all collection, processing, and storage of your personal data is carried out within Malaysia's recognized legal framework, giving you enforceable rights and protections under the law.
Coloktoto has never sold, rented, or traded users' personal data to any third party for marketing or commercial purposes, and never will. Your data belongs to you alone — coloktoto uses it solely for legitimate platform operations and legal compliance.
Only coloktoto staff who require access to your personal data to carry out their legitimate job functions are permitted to do so. Access is strictly governed by a role-based access control system, and all activity is logged for internal security audit purposes.
As a coloktoto user, you have full rights to access, correct, delete, or transfer your personal data. You may also object to certain data processing or withdraw previously given consent — all through clear and straightforward channels.
In the event of any security incident involving coloktoto users' personal data, we are committed to notifying the affected users and relevant authorities within the timeframe required by law, along with the steps taken to address the situation.
Coloktoto ("we", "platform", "company") operates the coloktoto.fun website and related services. We are committed to protecting the privacy of all users ("you", "user", "player") of our platform in accordance with the highest data protection standards applicable in Malaysia.
This Privacy Policy explains the types of personal data we collect, how we use it, who we share it with, how long we retain it, and the rights you have over that data. This Policy applies to all coloktoto platform users regardless of their location in Malaysia — whether you access our platform from Kuala Lumpur, Johor Bahru, Penang, Kota Kinabalu, or anywhere else in the country.
Coloktoto processes personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognized data protection principles. We take a privacy by design approach — meaning privacy considerations are built into every operational process and product development stage at coloktoto from the ground up, not added as an afterthought.
Coloktoto collects several categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data collected:
2.1 Data You Provide Directly
2.2 Automatically Collected Data
| Data Category | Example | Primary Purpose |
|---|---|---|
| Identity | Full name, IC number, date of birth | KYC, fraud prevention, legal compliance |
| Contact | Email, phone number | Communications, account verification, customer support |
| Finance | E-wallet method, bank account number | Deposit & withdrawal processing |
| Transactions | Betting history, deposits, withdrawals | Platform operations, AML compliance |
| Technical | IP address, device type, browser | Security & fraud detection |
| Usage | Pages visited, active session duration | Platform improvement, personalised marketing |
Coloktoto uses the personal data collected for the following legitimate and necessary purposes:
3.1 Platform Operations & Service Delivery
Your personal data is used to create and manage your coloktoto account, process deposits and withdrawals via your preferred Malaysian payment methods, enable access to all coloktoto games and services, and maintain accurate transaction records and gaming history for your reference.
3.2 Identity Verification & Legal Compliance
Coloktoto uses personal data to fulfill its legal compliance obligations, including age verification (ensuring users are 18 and above), KYC (Know Your Customer) procedures, and Anti-Money Laundering (AML) regulation compliance. These are mandatory legal requirements — not discretionary choices made by coloktoto.
3.3 Security & Fraud Prevention
Your personal data and platform usage data are used by coloktoto's security systems to detect and prevent fraudulent activity, unauthorized account access, money laundering, and platform abuse. These systems operate automatically around the clock to safeguard your account and funds.
3.4 Customer Communication & Support
Coloktoto uses your contact information to send important account notifications, transaction updates, responses to customer support enquiries, and — with your consent — relevant promotional content and the latest coloktoto offers tailored to your gaming interests.
3.5 Platform Improvement & Analytics
Aggregated, non-identifiable usage data is used by coloktoto to understand platform usage patterns, identify areas for improvement, develop new features, and optimize the overall user experience. These analytics help us make coloktoto better for all Malaysian players.
Coloktoto processes your personal data on the basis of one or more valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). Understanding these grounds is important as they determine the rights available to you in relation to that processing:
Coloktoto does not sell or trade your personal data to any third party for commercial purposes. However, in the course of operating the platform, coloktoto may share your personal data with certain parties under limited and controlled circumstances:
5.1 Trusted Service Providers
Coloktoto works with carefully selected third-party service providers to support platform operations — including payment processors (to facilitate transactions via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX), cloud and infrastructure service providers, gaming software providers, and security solution vendors. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes related to the services they provide to coloktoto.
5.2 Authorities & Legal Requirements
Coloktoto will disclose personal data to the relevant authorities where required by Malaysian law, court order, or applicable regulatory requirements. This includes compliance with financial crime investigations, anti-money laundering actions, or enquiries from the Malaysian Anti-Corruption Commission (MACC) or other legitimate authorities. Coloktoto will not disclose such information beyond what is legally required.
5.3 Business Restructuring
In the event of any merger, acquisition, asset sale, or business restructuring at coloktoto that involves the transfer of user data, you will be notified in advance through a clear notice, and appropriate options will be provided to you in accordance with applicable laws.
Coloktoto retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by Malaysian law. The following are the general retention periods we follow:
On the technical security front, coloktoto implements a range of measures to protect your personal data:
Coloktoto uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. Cookies are small text files stored on your device by your web browser when you visit the coloktoto platform.
Here are the types of cookies used by coloktoto:
You can manage or disable non-essential cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and your overall experience on the coloktoto platform. For guidance on managing cookies, refer to the help section of your preferred web browser.
As a coloktoto user whose personal data we process, you hold certain rights under Malaysia's PDPA 2010. Coloktoto respects and facilitates the exercise of these rights:
You have the right to request a copy of the personal data coloktoto holds about you. Data access requests will be processed within 14 business days.
If your personal data on coloktoto is inaccurate or incomplete, you have the right to request a correction promptly through your account settings or via customer support.
You may request the deletion of your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose — subject to coloktoto's legal retention obligations.
You have the right to object to the processing of your personal data for specific purposes, including direct marketing. coloktoto will honour such objections without any negative impact on your account.
In certain circumstances provided for by law, you may request that coloktoto restrict the processing of your personal data while a dispute or review is ongoing.
You have the right to receive your personal data in a machine-readable format and to request that it be transferred to another data controller of your choosing, where technically feasible.
To exercise any of the rights above, please contact coloktoto's Data Protection Officer by email at support@coloktoto.fun with the subject line "Privacy Rights Request". Include your full name, account number, and a clear description of your request. Coloktoto will respond within 14 business days and endeavor to fulfill your request in full within 30 calendar days.
The coloktoto platform is strictly for adults aged 18 and above. Coloktoto does not knowingly collect, store, or process any personal data from individuals under the age of 18.
Should coloktoto discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Parents or guardians who have reason to believe their child has registered an account with coloktoto are urged to contact us immediately at support@coloktoto.fun.
Coloktoto encourages parents and guardians to make use of parental control tools available on shared devices to prevent unauthorised access to online betting platforms by minors.
Coloktoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or developments to coloktoto's services. Any amendments will take effect on the date specified in the updated policy.
For material changes that affect how we use your personal data, coloktoto will notify you via your registered email or through a prominent notification within the coloktoto platform at least 30 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision about your continued use of our platform.
The latest version of this Privacy Policy is always available on this page. We encourage you to review it periodically to stay informed about how coloktoto protects your information.
If you have any questions, concerns, or complaints regarding coloktoto's Privacy Policy or how we handle your personal data, you may contact our Data Protection Officer through the following channels:
If you are not satisfied with coloktoto's response to your privacy concern, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010. Information on how to file a complaint with that authority is available through the official channels of Malaysia's Department of Personal Data Protection.