1. Introduction
Birutoto is committed to protecting the personal information of every member who uses our platform. This Privacy Policy outlines our practices in handling your personal data in accordance with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA).
By registering and using Birutoto's services, you confirm that you have read and fully understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.
2. Information We Collect
Birutoto collects several categories of information from members to ensure the platform operates smoothly, securely, and in compliance with regulatory requirements. The following are the types of information we collect:
Account Registration Information
When you register a birutoto account, we collect basic information such as your full name, email address, mobile phone number, date of birth, and the password you create. All this information is required to create a valid and identifiable account.
Identity Verification Information (KYC)
As part of the Know Your Customer (KYC) process, we may request copies of identity documents such as a national ID, passport, or driver's license. We also collect proof of address, such as utility bills or bank statements not older than three months. These documents are stored securely using military-grade encryption.
Financial Information
To process deposits and withdrawals, we collect payment method details you use, including bank account numbers, e-wallet details, and transaction records. We do not directly store credit or debit card information — all transactions are processed through certified, secure payment processors.
Usage and Technical Data
We automatically collect technical information when you access the Birutoto platform, including your IP address, device type, operating system, web browser type, pages visited, access times, and betting activity history. This data is used solely to improve the user experience and ensure platform security.
Cookies and Tracking Technologies
Birutoto uses cookies and similar tracking technologies to enhance platform functionality, remember your preferences, and analyse usage patterns. You can manage cookie settings through your web browser, though some platform features may not function properly if cookies are disabled.
3. How We Use Your Information
The information we collect is used for legitimate and limited purposes. birutoto will not use your data for any purpose not stated in this policy without obtaining your consent first.
| Purpose of Use | Data Type | Legal Basis |
|---|---|---|
| Account Management | Registration information, KYC | Contract fulfillment |
| Transaction Processing | Financial information, transaction records | Contract fulfillment |
| Regulatory Compliance | KYC, transaction records | Legal obligations |
| Platform Security | Technical data, IP address | Legitimate interests |
| Service Improvement | Usage data, cookies | Legitimate interests |
| Marketing Communications | Email, phone number | Your consent |
4. Sharing Information with Third Parties
Birutoto takes seriously its responsibility not to disclose your personal information to unauthorised parties. However, there are limited situations where we may need to share data with certain parties:
- Service Providers: Trusted payment processors, gaming software providers, and technical infrastructure suppliers that help us operate the platform. All third parties are bound by strict confidentiality agreements.
- Regulatory Authorities: Where required by law or court order, we will disclose the necessary information to the relevant authorities, including anti-money laundering investigations.
- Business Transfers: In the event that birutoto is involved in a merger, acquisition, or asset sale, user information may be transferred as part of that transaction, subject to prior notice to members.
5. Data Security
Protecting your personal data from unauthorized access, loss, or misuse is a core technical priority at birutoto. We implement comprehensive security measures across multiple layers:
Data Encryption
All data transmitted between your device and birutoto's servers is protected using 256-bit SSL/TLS encryption — the same standard used by banking institutions and government agencies. This ensures no third party can intercept or read your data in transit.
Access Control
Access to member personal data is restricted to staff who require the information to perform their duties only. All personnel with access to sensitive data are bound by confidentiality agreements and undergo regular data security training.
Continuous Monitoring
The birutoto system is actively monitored around the clock to detect any suspicious activity or unauthorized access attempts. Any identified security threats are addressed immediately by our technical security team.
Two-Factor Authentication (2FA)
Birutoto provides a two-factor authentication feature to add an extra layer of protection to your account. We encourage all members to enable 2FA to keep their accounts secure even if their password is compromised.
6. Data Retention Period
Birutoto retains your personal information only for as long as necessary to fulfil the purposes stated in this policy or to comply with applicable legal requirements.
- Active account data: Retained for the duration your account is active and up to five years after account closure for legal compliance purposes.
- Financial transaction records: Retained for a minimum of seven years in accordance with financial and anti-money laundering legal requirements.
- Technical logs and usage data: Retained for no more than 12 months, then automatically deleted or anonymised.
- KYC Documents: Retained for the duration the account is active plus five years after account closure.
When data is no longer needed, Birutoto ensures it is deleted or anonymised securely using certified data disposal procedures.
7. Your Rights as a Data Owner
Under Malaysia's Personal Data Protection Act 2010 and Birutoto's policy, you have several important rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal information we hold about you at any time.
- Right to Rectification: If your information is inaccurate or outdated, you have the right to request that we update it promptly.
- Right to Withdraw Consent: You may withdraw consent for marketing communications at any time via the unsubscribe link in our emails or by contacting our support team.
- Right to Erasure: Under certain circumstances permitted by law, you may request that we delete your personal data.
- Right to Restriction of Processing: You have the right to request that we restrict how we process your data in certain circumstances.
To exercise any of the above rights, please contact our privacy team via email at [email protected]. We will process your request within 14 business days.
8. Children's Privacy
The birutoto platform is exclusively for individuals who are of age 18 years and above. We do not knowingly collect or process personal information from minors. If we discover that a child's information has been collected without our knowledge, the relevant account will be terminated immediately and all associated data will be permanently deleted.
If you believe that a minor has registered on our platform, please contact our support team immediately so that appropriate action can be taken.
9. Changes to the Privacy Policy
Birutoto reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or improvements to the security technologies we use.
Any significant changes to this policy will be communicated to members via their registered email or in-platform notifications at least 14 days before the changes take effect. Continued use of the birutoto platform after the effective date constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by birutoto, please do not hesitate to contact us. Our privacy team is available to assist you every day, around the clock.