Privacy Policy

This Privacy Policy ("Policy") describes how JumboToto ("we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with the online gambling and sports betting platform operated at jumbototo.cam (the "Platform"). It applies to all users who visit, register on, or interact with the Platform, including players based in Malaysia.

JumboToto takes the privacy of its players seriously. We are committed to handling personal data responsibly and in accordance with applicable data protection principles, including the requirements imposed by our international gaming licence. This Policy sets out, in plain and transparent language, everything you need to know about how your personal information is handled when you use JumboToto.

By registering an account or using the JumboToto Platform in any way, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact support to close your account.

The following terms have the meanings given below wherever they appear in this Policy:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means JumboToto, which determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in practice, you, the player.
• "KYC" means Know Your Customer — the identity and address verification process required by our licensing obligations.
• "Cookies" means small text files placed on your device by our Platform to collect browsing and session data, as described in Section 8.
• "Third-Party Processor" means any external entity that processes Personal Data on behalf of JumboToto under a data processing agreement.

JumboToto collects Personal Data in the following categories, depending on how you interact with the Platform:

We do not collect sensitive Personal Data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except to the extent that such data is voluntarily disclosed by you in a support communication or is necessary for responsible gambling interventions.

JumboToto collects Personal Data through the following channels:

• Direct collection: Information you provide when registering an account, completing the KYC process, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and behavioural data collected automatically as you use the Platform, including through cookies, server logs, and analytics tools (see Section 8).
• Payment processors: Financial transaction data received from payment service providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, and cryptocurrency processing services.
• Identity verification providers: Confirmation data received from third-party KYC and AML screening services used to verify your identity and conduct sanctions screening.
• Fraud detection services: Risk signals and device fingerprint data received from fraud prevention partners to protect the Platform and all players from fraudulent activity.

JumboToto processes your Personal Data on the following legal grounds:

• Contractual necessity: Processing that is necessary to perform our contract with you — including operating your account, processing deposits and withdrawals, and providing gambling services.
• Legal obligation: Processing required to comply with our international gaming licence obligations, including KYC identity verification, AML transaction monitoring, age verification, and record-keeping requirements.
• Legitimate interests: Processing for the purposes of fraud prevention, platform security, responsible gambling monitoring, and improving our services — where such interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent for specific processing activities (such as non-essential cookies or optional marketing communications), we will obtain that consent explicitly and separately. You may withdraw consent at any time by contacting support.

JumboToto uses your Personal Data for the following purposes:

• To create and maintain your player account, including processing registration and verifying your identity.
• To process deposits, withdrawals, and all financial transactions associated with your account, including via e-wallets (Touch 'n Go eWallet, Boost, GrabPay), bank transfers (Maybank, CIMB, Public Bank, Hong Leong via DuitNow / FPX), and cryptocurrencies (USDT, BTC).
• To conduct KYC and AML compliance checks as required by our licensing obligations.
• To verify that you meet the minimum age requirement of 21 years for all gambling activities on the Platform.
• To detect, investigate, and prevent fraud, cheating, multi-accounting, and other prohibited conduct.
• To monitor betting activity for responsible gambling indicators and to apply player protection measures where appropriate.
• To provide customer support, respond to queries, and resolve disputes.
• To send you service-related communications, including account notifications, security alerts, and updates to our policies.
• To analyse Platform usage patterns and improve the quality, performance, and personalisation of our services.
• To comply with any legal obligations, court orders, or regulatory requirements applicable to JumboToto.

JumboToto does not sell your Personal Data. We share your data only in the following limited and controlled circumstances:

• Payment service providers: We share necessary financial data with payment processors (including e-wallet operators and banking institutions) to execute deposits and withdrawals.
• Identity verification providers: We share identity document data with third-party KYC and AML screening providers to fulfil our licensing obligations. These providers are contractually obligated to process data only for the specified purpose and under appropriate data protection safeguards.
• Fraud prevention services: We may share technical and behavioural data with fraud detection partners to identify and prevent prohibited activity.
• Licensing regulators: We may be required to disclose player data to our licensing regulator as part of audits, compliance inspections, or regulatory investigations.
• Law enforcement and legal authorities: We will disclose Personal Data to law enforcement agencies, courts, or government bodies when required to do so by applicable law, court order, or regulatory requirement, or where we reasonably believe disclosure is necessary to prevent crime, fraud, or harm.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of JumboToto's business, Personal Data held by JumboToto may be transferred to the successor entity, subject to equivalent data protection commitments.

All Third-Party Processors engaged by JumboToto are subject to contractual data processing agreements that require them to protect your Personal Data and process it only for the purposes for which it was shared.

JumboToto uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise your browser, maintain your session, and understand how the Platform is used.

The categories of cookies we use are as follows:

• Essential cookies: Required for the Platform to function. These include session management cookies that keep you logged in during an active session. These cookies cannot be disabled without impacting core Platform functionality.
• Security cookies: Used to detect fraud, enforce rate limiting, and identify suspicious login behaviour. These are strictly necessary for Platform security.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, including which pages are visited, session duration, and navigation paths. This data is used to improve the Platform.
• Preference cookies: Used to remember your settings and preferences, such as language preference and display options.

You may manage cookie preferences through your browser settings. Note that disabling essential or security cookies may prevent you from accessing certain features of the Platform.

JumboToto retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. Our general retention schedule is as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by our AML and gaming licence obligations.
• Transaction records: Retained for a minimum of five (5) years, in accordance with financial record-keeping requirements under our international gaming licence.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer where required by applicable law.
• Support communications: Retained for two (2) years from the date of the interaction, unless a longer retention period is required for dispute resolution.
• Technical and log data: Retained for up to twelve (12) months from collection, unless retained longer for security investigation purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our internal data destruction procedures.

JumboToto implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption for all Personal Data stored on JumboToto servers.
• TLS 1.3 encryption for all data transmitted between your device and the Platform.
• Two-factor authentication (2FA) available for player accounts.
• Access controls limiting staff access to Personal Data on a strict need-to-know basis.
• Regular security assessments and penetration testing conducted by qualified security professionals.
• Intrusion detection systems and real-time monitoring for suspicious access patterns.

While we take every reasonable precaution to protect your data, no system is completely immune from risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, JumboToto will notify affected users without undue delay and take all appropriate remedial action.

Subject to applicable law and the conditions set out below, you have the following rights with respect to your Personal Data held by JumboToto:

To exercise any of the above rights, please submit a written request to our support team via live chat or email. We will verify your identity before processing any data subject request and will respond within thirty (30) calendar days. Some requests may be subject to conditions or limitations where we are required by law to retain or process certain data.

The JumboToto Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process Personal Data from persons under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will immediately delete that data and close the associated account.

As part of our KYC process, we verify the age of all players using government-issued identity documents. Registration of an account constitutes a representation that you are at least 21 years old. JumboToto may take legal action in respect of fraudulent age misrepresentation.

Parents and guardians who believe that a minor may have registered on JumboToto are encouraged to contact our support team immediately so that we can take prompt action.

JumboToto operates under an international gaming licence, and some of our service providers and data processors are located outside Malaysia. As a result, your Personal Data may be transferred to and processed in countries other than your country of residence.

Where such transfers occur, JumboToto ensures that appropriate safeguards are in place to protect your Personal Data, including contractual obligations requiring our service providers to maintain data protection standards consistent with those described in this Policy. We will not transfer your Personal Data to any jurisdiction that does not offer an adequate level of data protection without implementing appropriate safeguards.

The JumboToto Platform may contain references to or integrations with third-party services, such as payment processors, identity verification providers, and live game streaming providers. These third-party services operate under their own privacy policies, which are independent of this Policy.

JumboToto is not responsible for the data protection practices of any third-party service. We encourage you to review the privacy policies of any third-party services you interact with in connection with using JumboToto, particularly payment service providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, and other financial institutions.

JumboToto reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Effective Date" at the top of this document and, where required, notify registered players by email. We may also display a notice on the Platform drawing your attention to any significant changes.

Your continued use of the Platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should discontinue use of the Platform and contact us to close your account.

We recommend reviewing this Policy periodically to stay informed about how we handle your Personal Data. Archived versions of this Policy are available from our support team upon request.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by JumboToto, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 on the JumboToto Platform. The fastest channel for urgent data protection queries. Average first-response time: under 2 minutes.
• Support Email: [email protected] — please mark your email "Privacy / Data Request" in the subject line. Responses within 4 hours during business hours, with data subject requests addressed within 30 calendar days.

When submitting a data subject request, please include your registered username and email address so that we can verify your identity before processing your request. We may request additional verification in order to protect your data from being disclosed to an unauthorised party.