Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by Dapurtoto ("we", "us", "our", "the Operator", "the Platform") and applies to all personal data collected through the Dapurtoto website and associated services accessible at dapurtoto.cam.

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws and international privacy standards. This Policy explains in detail what personal information we collect, the purposes for which we process it, how long we retain it, who we may share it with, and what rights you have as a data subject.

By registering an account on Dapurtoto, accessing the Platform, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read in conjunction with our Terms & Conditions.

02 Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the Operator, who determines the purposes and means of Processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of the Operator, under contractual obligation.
• "Data Subject" means the individual to whom Personal Data relates — in the context of this Policy, primarily the registered User.
• "KYC Data" means identity verification documentation collected as part of the Know Your Customer compliance process, including government-issued identification and proof of address.
• "Cookies" means small text files placed on a User's device by the Platform for the purposes of session management, analytics, and platform functionality.
• "Services" means the full range of casino gaming, sports betting, live dealer, and related services offered through the Dapurtoto Platform.

03 Data We Collect

Dapurtoto collects Personal Data through several channels: information you provide directly during registration and account management; data generated automatically through your use of the Platform; and information received from third-party service providers where applicable. The categories of data we collect are set out below.

04 How We Use Your Data

Dapurtoto processes Personal Data only for specified, explicit, and legitimate purposes. We do not process Personal Data in a manner incompatible with the purposes for which it was collected. The primary purposes for which we process your data are as follows:

• Account Registration and Management: To create, maintain, and administer your Dapurtoto account, including processing login credentials and profile updates.
• Identity Verification (KYC): To verify your identity and age as required by our anti-money laundering and responsible gambling obligations. This is a legal requirement and is mandatory before withdrawals are processed.
• Transaction Processing: To facilitate deposits and withdrawals via Malaysian payment methods including FPX, DuitNow, Touch 'n Go eWallet, Maybank, CIMB, Public Bank, Hong Leong Bank, Boost, GrabPay, and cryptocurrency channels.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct.
• Regulatory Compliance: To meet our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws.
• Responsible Gambling Monitoring: To monitor player activity patterns for signs of problem gambling and to apply responsible gambling tools including deposit limits, loss limits, and self-exclusion measures where appropriate.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and develop new features that improve the experience for Malaysian players.
• Marketing and Promotions: Where you have provided consent, to send you information about Dapurtoto promotions, new games, and relevant offers. You may withdraw consent at any time through your account settings.
• Legal Claims: To establish, exercise, or defend legal claims where necessary.

05 Legal Basis for Processing

Dapurtoto processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you — including account management, payment processing, and service delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing necessary to comply with applicable laws — including KYC identity verification, anti-money laundering reporting, and regulatory record-keeping requirements — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out to protect the platform from fraud, improve our services, and ensure platform security is based on our legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Where required by law or where we rely on consent as the basis for processing — such as for direct marketing communications — we will seek your explicit consent and provide a straightforward mechanism to withdraw it at any time.

06 Data Sharing & Disclosure

Dapurtoto does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your Personal Data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: We share necessary transaction data with payment processors and e-wallet operators (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks) to facilitate deposits and withdrawals.
• Identity Verification Providers: We engage third-party KYC service providers to assist with identity verification and document authentication. These providers are contractually bound to process data only for verification purposes.
• Technology and Infrastructure Providers: We work with cloud hosting, cybersecurity, and analytics service providers who process data on our behalf under data processing agreements that impose equivalent data protection obligations.
• Game Software Providers: Game outcome and usage data may be shared with licensed game providers to facilitate gameplay, resolve game disputes, and audit RTP compliance. No personal identity data is shared with game providers beyond what is technically necessary.
• Regulatory and Law Enforcement Authorities: We will disclose Personal Data to competent authorities where required to do so by applicable law, court order, or regulatory direction — including financial intelligence units, anti-money laundering agencies, and law enforcement agencies.
• Fraud Prevention Agencies: Where we have reasonable grounds to suspect fraud, we may share relevant data with industry fraud prevention organisations and law enforcement bodies.

07 Cookies & Tracking Technologies

Dapurtoto uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and analyse how the site is used. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain security tokens, and enable core features such as the game lobby and payment interface. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: These remember your preferences such as language settings, display preferences, and responsible gambling tool configurations. They improve your experience but are not strictly required for core functionality.
• Analytics Cookies: We use first-party analytics tools to understand how users interact with the Platform — which pages are visited most frequently, where users drop off, and how features are used. This data is aggregated and anonymised. We do not use Google Analytics or similar third-party analytics on user account pages.
• Security Cookies: These assist in fraud detection by tracking session anomalies, unusual login patterns, and multiple account detection signals.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to use the Platform. For further information on managing cookies in popular browsers used in Malaysia, refer to the help documentation for your browser of choice.

08 Data Retention

Dapurtoto retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The following retention periods apply as general guidance:

• Account and Identity Data: Retained for the duration of your account relationship plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five (5) to seven (7) years following the date of each transaction, as required by financial regulatory obligations.
• KYC Documentation: Retained for the period required by applicable anti-money laundering legislation, typically five (5) years from the end of the business relationship.
• Customer Support Records: Live chat transcripts and email correspondence are retained for a minimum of two (2) years from the date of the interaction.
• Technical and Usage Data: Typically retained in identifiable form for up to twenty-four (24) months, after which data may be anonymised for aggregate analytics purposes.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

Following the expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup or archiving processes, data will be isolated from active processing until deletion can be completed.

09 Security Measures

Dapurtoto implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Multi-factor authentication requirements for staff access to systems holding Personal Data.
• Role-based access controls ensuring that only authorised personnel can access data relevant to their specific function.
• Regular third-party penetration testing and security audits of the Platform and underlying infrastructure.
• Intrusion detection and prevention systems monitoring for anomalous access patterns.
• Secure, geographically redundant server infrastructure with physical access controls.
• Data breach response procedures including notification protocols in accordance with applicable legal requirements.

10 Your Rights as a Data Subject

As a data subject, you have certain rights over your Personal Data. Dapurtoto is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights include:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our obligations to retain data under applicable law (particularly KYC and AML requirements).
• Right to Restriction of Processing: You may request that we restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is carried out by automated means and based on your consent or a contract, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our assessment of whether those interests override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11 Minors & Age Policy

The Dapurtoto Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. If you are under 21, you must not register an account, use the Platform, or provide any Personal Data to Dapurtoto.

If we become aware that we have inadvertently collected Personal Data from an individual under the age of 21, we will promptly delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered on our Platform, please contact our support team immediately.

Parents and guardians are encouraged to use parental control software and internet filtering tools to prevent minors from accessing online gambling platforms. Our Responsible Gambling page provides further guidance on protecting young people.

12 Third-Party Services & Links

The Dapurtoto Platform may integrate with third-party services for specific functions — including payment processing, identity verification, live game streaming from licensed studios, and platform analytics. When you interact with these integrated services, additional data processing may occur under the terms of those third parties' own privacy policies.

Dapurtoto does not control and is not responsible for the privacy practices of third-party services integrated into the Platform. We select our third-party service providers carefully and require them to maintain data protection standards consistent with our own obligations. However, we recommend reviewing the privacy documentation of any significant third-party service you interact with.

All third-party payment providers used by Dapurtoto — including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX-connected Malaysian banks — are subject to their own privacy policies and applicable Malaysian financial regulations, including Bank Negara Malaysia guidelines on data protection for payment service providers.

13 International Data Transfers

The operation of an online platform of Dapurtoto's nature may involve the transfer of Personal Data to servers or service providers located outside of Malaysia. Where such transfers occur, Dapurtoto takes steps to ensure that your Personal Data receives an equivalent level of protection to that afforded within Malaysia.

Measures we implement to safeguard international data transfers include:

• Use of data processing agreements incorporating standard contractual clauses with overseas processors.
• Transfer of data only to jurisdictions or organisations that maintain adequate data protection standards.
• Encryption of all data in transit using industry-standard protocols.
• Minimisation of data transferred internationally — we transfer only what is necessary for the specific processing purpose.

14 Amendments to This Policy

Dapurtoto reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where changes are material — meaning they meaningfully affect how we collect, use, or protect your Personal Data — we will notify you via:

• A prominent notice on the Dapurtoto Platform upon your next login.
• An email notification to your registered email address, where a significant change to data processing rights is involved.

The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or Dapurtoto's data processing practices, please contact us through the following channels:

When submitting a data rights request, please provide: your full name, your registered Dapurtoto email address, the nature of your request, and any relevant transaction or account references. We may need to verify your identity before processing your request to protect against unauthorised data access.