Official Documents

Privacy Policy Colitoto — Malaysia User Data Protection

Your privacy is colitoto's top priority. This document clearly explains how we collect, use, store, and protect your personal data as a user of our platform.

Updated: January 2026  |  Version 2.5
Your Data, Your Property
Full protection with 256-bit SSL encryption

How Colitoto Protects Your Privacy

The six core pillars of data protection that underpin Malaysian users' trust in the colitoto platform.

High-Standard Encryption

All data transmitted between your device and colitoto's servers is protected by 256-bit SSL encryption — the same technology used by leading banking institutions in Malaysia.

Personal Data Control

You have the full right to review, update, or request deletion of your personal data at any time through your account settings or by contacting our team.

No Data Sales

Colitoto has never and will never sell, rent, or share users' personal data with third parties for marketing purposes without your explicit consent.

Secure Data Storage

Your data is stored in high-grade data centres with strict physical and digital access controls. Only authorised personnel are permitted to access sensitive user information.

Data Breach Notification

In the event of any security incident involving your data, colitoto is committed to notifying you within the timeframe required by applicable law.

Legal Compliance

Colitoto's privacy policy is aligned with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

Welcome to the colitoto Privacy Policy page. We understand how important your privacy is, and we take this responsibility seriously. This document transparently explains our data management practices — what we collect, why we need it, and how we keep it secure.

By using the colitoto platform — whether via the website colitoto.fun or our mobile app — you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to manage your data.

Note: This Privacy Policy is to be read together with Terms and Conditions colitoto. Both documents together form the complete agreement between you and our platform.

1Information We Collect

Colitoto collects several categories of information to provide you with a safe, seamless, and personalised experience. This information is collected directly from you, automatically as you use the platform, or from trusted third-party sources.

Data Categories Examples How It's Collected
Identity Data Full name, date of birth, identification card number Registration & KYC
Contact Data Email address, phone number Account Registration
Financial Data Bank account details, transaction records Deposit & Withdrawal
Technical Data IP address, device type, web browser Automatically during use
Gaming Data Betting history and games played Automatically during gameplay
Communication Data Support chat records and feedback Support Interactions

We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical information or religious background unless specifically required by law.

2How We Use Your Information

Every piece of information we collect is used for a clear and legitimate purpose. colitoto does not use user data for unrelated purposes without your prior consent.

  • Account Management: To create, verify, and securely maintain your user account.
  • Transaction Processing: To accurately and securely process deposits, withdrawals, and all financial transactions on the platform.
  • Identity Verification (KYC): To meet anti-money laundering (AML) compliance requirements and verify user identity before withdrawals are processed.
  • Platform Improvements: To analyze usage patterns and improve the overall performance, functionality, and user experience of the colitoto platform.
  • Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, misuse, or unauthorized access to the platform.
  • Service Communications: To send important notifications related to your account, transactions, policy updates, and promotional information you have agreed to receive.
  • Customer Support: To help resolve queries and complaints you submit to the colitoto support team.

Data Minimisation Principle: Colitoto adheres to the principle of data minimisation — we only retain data that is necessary, for as long as it is needed, and delete or anonymise it once it is no longer relevant.

3Third-Party Data Sharing

Colitoto does not sell or rent your personal data to any third party. However, in the course of operating the platform, we may share certain information with the following parties within defined limits:

  • Payment Service Providers: Required transaction information is shared with payment processors such as FPX, Touch 'n Go, and DuitNow to facilitate smooth transactions.
  • Game Software Providers: Basic gaming data is shared with third-party software providers that supply Slot Games, Fish Shooting Games, and Bingo on our platform, strictly for operational purposes.
  • Identity Verification Agency: KYC information may be shared with approved identity verification service providers to meet legal compliance requirements.
  • Legal Authorities: Colitoto will disclose user information to government authorities or law enforcement when lawfully required by court order or applicable legislation.

Our Guarantee: All third parties we work with are bound by strict data protection agreements. They are only permitted to use your data for the specific agreed purposes and may not share it further.

4Cookies & Tracking Technologies

The colitoto platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies: Helps us understand how users interact with the platform so we can make continuous improvements.
  • Functional Cookies: Stores your preferences such as language and display settings to deliver a more personalised experience.
  • Analytics Cookies: Used to collect aggregated, anonymised platform usage statistics for internal analytics purposes.

You can manage and delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the colitoto platform.

5Data Security & Storage

Colitoto continuously invests in high-grade security infrastructure to ensure your data is always protected against unauthorised access, modification, or disclosure.

  • All sensitive data is encrypted using AES-256 encryption at rest and SSL/TLS 1.3 in transit.
  • Access to internal data systems is strictly controlled through two-factor authentication (2FA) and the principle of least privilege.
  • 24/7 security monitoring is carried out by our cybersecurity team to detect any threats or anomalies in real time.
  • Penetration testing is conducted regularly by independent third parties to identify and address any system vulnerabilities.

Data Retention Period: Colitoto retains your personal data for as long as your account is active or as needed to provide services to you. After account closure, data will be retained for the minimum period required by law (typically 5 years) before being securely deleted or anonymised.

All data centres used by colitoto hold international security certifications and backup systems that ensure your data is never lost, even in the event of a technical failure.

6Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a colitoto user have the following rights regarding your personal data:

  • Access Rights: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
  • Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data, subject to applicable legal retention requirements.
  • Right to Restrict Processing: You have the right to request that we restrict how we process your data in certain circumstances.
  • Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
  • Right to Data Portability: You have the right to receive a copy of your data in a machine-readable format for transfer to another platform.

To exercise any of the above rights, please contact the colitoto support team through the in-platform channel. We will process your request within 30 business days of receipt.

7Children's Privacy

The colitoto platform is intended exclusively for adults aged 18 and above. We do not knowingly collect or store personal data from individuals under the age of 18.

Should we discover that personal data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete the information and close the account in question. Parents or guardians who find that their child has registered on the colitoto platform are advised to contact us immediately.

8Links to External Sites

The colitoto platform may occasionally contain links to third-party websites, particularly relating to payment service providers or game providers. Please note that this privacy policy applies solely to the colitoto platform.

When you click a link to an external site, you will be subject to that site's privacy policy. Colitoto is not responsible for the privacy practices of any third-party websites and encourages you to read their privacy policies before providing any personal information.

9Changes to the Privacy Policy

Colitoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant changes will be communicated to you via in-platform notifications or through the email registered to your account.

The "Last Updated" date at the top of this document will always reflect the date of the latest version of the Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

Your continued use of the colitoto platform after any changes to this Privacy Policy take effect will be considered your acceptance of those changes.

10Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you.

  • Email: [email protected] (displayed as text only)
  • Live Chat: Available 24/7 via the chat icon within the colitoto platform
  • Frequently Asked Questions: Visit the FAQ us for answers to the most frequently asked questions

We are committed to responding to all privacy-related enquiries within 3 business days. For formal requests regarding your personal data rights, please include "PDPA Rights Request" in your message subject line so our team can process it promptly.

Thank you for trusting colitoto with your personal data. Your trust is the foundation of the long-term relationship we aim to build with every user in Malaysia.

Your Data Is Secure
256-bit SSL encryption is active on every session. Your privacy is protected at all times.
Register Securely

Your Six Privacy Rights at Colitoto

As a colitoto platform user, you are protected by the following rights under Malaysia's PDPA.

Data Access Rights

Request a copy of all personal data we hold about you at any time through in-platform support.

Right to Rectification

Easily update or correct any inaccurate personal information in your colitoto account at any time.

Right to Erasure

Request deletion of your personal data when it is no longer needed, subject to legal retention obligations.

Right to Object to Marketing

Opt out of marketing communications from colitoto at any time through your account notification settings.

Right to Restrict Processing

In certain situations, you may request that we restrict the processing of your data while an issue is being resolved.

Right to Data Portability

Receive a copy of your data in a structured format for transfer should you wish to move to another platform.

Play Safely, Your Privacy Fully Protected

Create a free account today and enjoy a transparent, secure, and exciting online gaming experience alongside more than 100,000 Malaysian members who already trust colitoto.

Register Free Now Login
Bahasa Melayu