We collect only the data necessary to provide our services — identity details, contact information, transaction history, and device/session data for security purposes.
Your data is used to operate your Account, process MYR transactions, conduct KYC verification, personalise your experience, and comply with our licensing obligations.
We do not sell your personal data. Limited sharing occurs only with licensed payment processors, KYC verification partners, and regulatory bodies as required.
All data is encrypted in transit (TLS 1.2+) and at rest. Access to personal data is restricted to authorised personnel only, under strict internal access control policies.
You have the right to access, correct, export, and request deletion of your personal data. Requests are processed within 30 days of receipt of sufficient identification.
We use essential cookies for session management and optional analytics cookies to improve the platform. You may manage cookie preferences through your browser settings.
Whether you are based in Kuala Lumpur, Penang, Johor Bahru, or anywhere else in Malaysia, you hold the following rights in relation to the personal data kebuntoto holds about you.
Request a copy of all personal data we hold about you, including transaction records and account history.
Ask us to correct inaccurate or incomplete personal data in your Account records at any time.
Request deletion of your personal data where it is no longer required for the purposes it was collected, subject to legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as where you contest its accuracy.
Receive your personal data in a structured, machine-readable format for transfer to another service provider.
Object to our processing of your personal data for direct marketing or profiling purposes at any time.
How to Exercise Your Rights: To submit any data rights request, contact our support team at [email protected]. Requests are typically acknowledged within 3 business days and fully actioned within 30 calendar days of receipt of sufficient identity verification.
This Privacy Policy ("Policy") describes how Kebuntoto ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the User", "the Player") who access or use the kebuntoto website at https://kebuntoto.cam, and all associated services, betting products, and promotional features made available thereon.
We are committed to handling your personal information with care, transparency, and in accordance with internationally recognised data protection principles. This Policy is intended to give you a clear and honest account of our data practices, so that you can make informed decisions about your use of the kebuntoto platform.
By registering an Account or continuing to use the kebuntoto platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately.
Malaysian Users: While this Policy is written under international data protection principles, Malaysian users may also have rights and protections under the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Policy is intended to be consistent with PDPA principles to the extent applicable.
For the purposes of this Privacy Policy, the following definitions apply:
Kebuntoto acts as the Data Controller in respect of all Personal Data collected through the kebuntoto platform. As Data Controller, we are responsible for ensuring that your Personal Data is processed lawfully, fairly, and transparently in accordance with applicable data protection legislation.
For all data protection enquiries, requests, and complaints, our designated point of contact is our support team, reachable at [email protected]. When contacting us on data protection matters, please include "Data Protection Request" in your subject line and provide your Account username and description of your request to ensure efficient handling.
We collect Personal Data through several channels — directly from you during registration and use of the platform, automatically through your device and browser, and from third-party service providers where permitted. The categories of data we collect include:
We process your Personal Data only where we have a lawful basis to do so. The following table summarises the primary lawful bases we rely on for each category of processing:
| Processing Activity | Lawful Basis |
|---|---|
| Account registration and management | Performance of Contract |
| Processing deposits and withdrawals in MYR | Performance of Contract |
| KYC identity verification | Legal Obligation; Legitimate Interests |
| Fraud detection and security monitoring | Legitimate Interests; Legal Obligation |
| Responsible gambling tools and age verification | Legal Obligation; Legitimate Interests |
| Customer support communications | Performance of Contract; Legitimate Interests |
| Marketing communications (email/push) | Consent (withdrawable at any time) |
| Analytics and platform improvement | Legitimate Interests; Consent (for non-essential cookies) |
| Regulatory reporting | Legal Obligation |
We use the Personal Data we collect for the following purposes:
Kebuntoto does not sell, rent, or commercially trade your Personal Data to any third party. We may share your data with the following categories of recipients only to the extent strictly necessary:
All third-party Data Processors engaged by kebuntoto are required to process Personal Data only on our documented instructions and to maintain technical and organisational security measures equivalent to or greater than our own standards.
Important: Kebuntoto will never contact you to request your password, full payment card number, or any sensitive data via email, WhatsApp, or unsolicited communication. If you receive such a request purportedly from kebuntoto, treat it as fraudulent and contact our support team immediately.
As an internationally licensed platform, kebuntoto may transfer your Personal Data to and process it in countries outside of Malaysia. This may include transfers to data centres, KYC verification partners, or payment processors located in other jurisdictions.
Where such transfers occur, we ensure that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that which it would receive in its country of origin. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions deemed to provide adequate data protection.
We retain your Personal Data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law and licensing obligations. Our general retention schedule is as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of Account plus 5 years after closure |
| KYC identity documents | As required by licensing obligation (typically 5 years from last transaction) |
| Financial transaction records | 7 years (AML/financial regulation requirement) |
| Betting and gaming activity logs | 5 years from last activity |
| Customer support records | 3 years from last interaction |
| Marketing consent records | Until consent withdrawn plus 12 months for audit trail |
| Analytics and session logs | 13 months (rolling) |
Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.
The kebuntoto platform uses cookies and similar tracking technologies to enable core platform functionality, enhance your user experience, and, where you have consented, to gather analytics data that helps us improve our services.
You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling essential cookies will impair your ability to use the kebuntoto platform and may prevent Account login. Please consult your browser's help documentation for specific instructions on managing cookie preferences.
Kebuntoto implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay in accordance with our obligations under applicable data protection law.
Your Role in Security: You are responsible for maintaining the confidentiality of your Account credentials. Use a strong, unique password and do not share your login details with anyone. Enable any two-factor authentication features available in your Account settings. Contact support immediately if you suspect unauthorised access to your Account.
The kebuntoto platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is enforced through the KYC process, which requires submission of government-issued identity documents confirming date of birth prior to processing any withdrawal request.
If we become aware that we have inadvertently collected Personal Data from a person under 21 years of age, we will immediately suspend the relevant Account, retain the data only as required for investigation purposes, and delete it thereafter in accordance with our data retention policy. Any funds in the Account will be handled in accordance with our Terms and Conditions and licensing obligations.
Parents and guardians who believe that a minor has registered on the platform should contact us immediately at [email protected] so that we may take appropriate action without delay.
You have the following rights in relation to your Personal Data held by kebuntoto, as summarised in the overview section above. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". Your request must include:
We will acknowledge your request within 3 business days and complete it within 30 calendar days. Where a request is complex or where we receive a high volume of requests, this period may be extended by a further 30 days, and we will notify you accordingly.
We will not charge a fee for any reasonable data rights request. However, requests that are manifestly unfounded, excessive, or repetitive may be subject to an administrative fee or may be declined, in which case we will explain our reasons.
If you are dissatisfied with how kebuntoto has handled your Personal Data or responded to a data rights request, you have the right to lodge a complaint. We request that you first contact us directly so that we have the opportunity to address your concern:
If you are not satisfied with our response, you may escalate your complaint to the data protection supervisory authority of the jurisdiction in which kebuntoto is licensed, or to the relevant authority in your country of residence where applicable. For Malaysian users, this includes the right to refer complaints to the Department of Personal Data Protection (JPD) of Malaysia in respect of any alleged breach of the Personal Data Protection Act 2010.
Kebuntoto reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. Where changes are material, we will provide advance notice to registered users via email or a prominent in-platform notification before the updated Policy takes effect.
The current version of this Policy is always available at https://kebuntoto.cam/privacy-policy. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of how we protect your data.
Your continued use of the kebuntoto platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.
For all privacy-related enquiries, data rights requests, or complaints, please contact the Kebuntoto data protection team using the following channels:
For data protection requests specifically, please use the subject line "Data Protection" or "Privacy Request" and include your Account username or registered email to allow us to locate your records promptly. Full details on exercising your rights are set out in Section 13 above.
Related Policies: This Privacy Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, which form part of the complete framework governing your use of the kebuntoto platform.
We take your privacy seriously — encrypted data, no third-party selling, clear rights, and transparent practices. Join Malaysian players from Kuala Lumpur, Penang, Shah Alam, and beyond who trust kebuntoto for secure MYR betting.
🔞 For players aged 21 and above only. Responsible Gambling →
All data encrypted in transit and at rest
We never sell your personal data
Access, correct, or delete your data anytime
Privacy queries answered around the clock