Rajatoto values your privacy. This document transparently explains how we collect, use, store, and protect your personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).
The six core principles that guide how rajatoto handles the personal data of Malaysian members
All data transmitted between your device and rajatoto's servers is encrypted using 256-bit SSL — the same level of protection used by leading Malaysian banks such as Maybank and CIMB.
The rajatoto Privacy Policy is designed and enforced in accordance with Malaysia's Personal Data Protection Act 2010. Your rights as a data subject are fully recognised and respected by us.
Rajatoto has never and will never sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. Your data is not our product.
We only collect data that is genuinely necessary to provide the services you request. Each type of data collected has a clear and justifiable purpose.
You have the right to view the personal data we hold about you, request corrections if any details are inaccurate, and request deletion of your data under certain conditions set out by the PDPA.
In the event of a security incident affecting your data, rajatoto will notify you via your registered email address within a reasonable timeframe in accordance with applicable compliance requirements.
Welcome to the rajatoto Privacy Policy page. We — the operators of the rajatoto platform, reachable at support@rajatoto.fun — are the data controller responsible for your personal data under the Malaysian Personal Data Protection Act 2010 (PDPA).
Your privacy is more than a legal requirement to us — it is a core value we take seriously. This policy is written in clear, straightforward language so you genuinely understand what happens with your data, rather than having to wade through pages of impenetrable legal jargon.
By using the rajatoto platform — whether through the website or mobile app — you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, we encourage you to contact us first before continuing to use the platform.
Scope of This Policy: This Privacy Policy applies to all personal data collected through the rajatoto platform, including during account registration, use of casino games, Sports Betting, e-sports betting, financial transactions, and communications with our support team.
Rajatoto collects your personal data through several means — directly when you provide it to us, automatically as you use the platform, and in some cases from legitimate third-party sources. Below is a detailed breakdown of each data category:
| Data Category | Specific Examples | Purpose of Collection |
|---|---|---|
| Identity Data | Full name, MyKad/passport number, date of birth, gender | Identity verification, KYC compliance |
| Contact Data | Email address, phone number, residential address | Account communications, two-factor authentication |
| Financial Data | Payment method details (TNG, GrabPay, DuitNow, FPX), transaction records | Processing deposits and withdrawals, AML compliance |
| Account Data | Username, password (encrypted), account preferences | Account management, login security |
| Communication Data | Email content, live chat transcripts, complaint information | Customer support, service improvement |
When you use the rajatoto platform, our systems automatically record certain information for operational and security purposes:
In certain cases, rajatoto may receive your personal data from legitimate sources such as identity verification service providers, fraud prevention agencies, or payment method providers for verification and compliance purposes. All such third-party sources are bound by strict data protection agreements with us.
Rajatoto uses your personal data only for legitimate, clearly defined purposes. The primary purposes for which we use your data are as follows:
With your consent, rajatoto may send you marketing communications including promotional updates, the latest bonus offers, and platform news. You may withdraw this consent at any time through your account settings or by contacting us directly.
Purpose Limitation Principle: Rajatoto will not use your data for any purpose other than those stated here without notifying you in advance and obtaining your consent where required by law.
Under Malaysia's PDPA, rajatoto only processes your personal data where a valid legal basis exists. The bases we rely on are as follows:
Every data processing activity at rajatoto has an identified legal basis. If you would like to know the specific legal basis for any particular processing activity involving your data, please contact us using the details provided at the end of this policy.
Rajatoto does not sell your personal data to any third party. However, in order to operate effectively and meet our legal obligations, we share your personal data with the following categories of recipients under strictly limited and controlled circumstances:
We share necessary data with providers who help us deliver rajatoto's services, including:
All of these service providers are bound by strict data processing agreements and are only permitted to use your data in accordance with rajatoto's instructions.
Rajatoto may disclose your personal data to Malaysian statutory authorities where required by law or upon a valid official request, including for the purposes of criminal investigations, anti-money laundering requirements, or tax obligations.
Outside of the categories listed above, rajatoto will only share your personal data with other third parties with your explicit prior consent.
International Data Transfers: Where your data needs to be transferred outside Malaysia, rajatoto ensures that a level of protection equivalent to the Malaysian PDPA is in place through appropriate contractual agreements with the overseas recipients.
Rajatoto uses cookies and similar tracking technologies to enhance your experience on our platform. The following is an overview of the types of cookies we use:
These cookies are essential for the core functionality of the rajatoto platform. Without them, certain parts of the platform will not work as intended. This includes login session cookies, security cookies and cookies that store your language preferences. These cookies cannot be disabled.
These cookies help us understand how members use the rajatoto platform — which pages are visited most frequently, how long the average session lasts and where users encounter difficulties. This information is used in aggregated, anonymised form to improve the platform.
These cookies allow the rajatoto platform to remember your preferences — such as your favourite sports displayed first, default betting limits, and other personalised display settings — making your experience more comfortable.
You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some areas of the rajatoto platform. For non-essential cookies, you will be given the option to accept or decline on your first visit to the platform.
Rajatoto implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. The key measures we have in place include:
256-bit SSL for all data in transit and AES-256 encryption for data stored in our databases.
An additional security layer for logins and withdrawals that protects your account even if your password is compromised.
A threat detection system that operates around the clock to identify and respond to suspicious activity.
Data is stored in data centres with strict physical access controls and redundant backup systems to ensure continuity of service.
Only authorised personnel may access members' personal data, and such access is strictly limited to what is required for their role.
Data is backed up regularly to a separate location to ensure recovery is possible in the event of an unexpected incident.
While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection against every threat. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.
Rajatoto retains your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable law. The general principles we follow are:
Once the retention period has ended and there is no longer a valid legal or business requirement to continue storing your data, your personal data will be securely deleted or anonymised.
Under the Malaysian PDPA, you have certain rights regarding your personal data as processed by rajatoto. We respect and facilitate the exercise of these rights:
Rajatoto recognises and facilitates the exercise of all rights granted to you under the Malaysian PDPA
You have the right to request a copy of the personal data we hold about you. We will provide this information in a clear, accessible format within 21 days of receiving your request.
If the personal data we hold about you is inaccurate, incomplete or outdated, you have the right to request that we correct or complete it promptly, at no charge.
Where processing is based on your consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of any processing that took place prior to your withdrawal.
You have the right to object to the processing of your personal data in certain circumstances, particularly where processing is carried out for direct marketing purposes or based on our legitimate interests.
Under certain circumstances defined by the PDPA, you have the right to request that we temporarily restrict the processing of your personal data while a matter is being resolved.
To exercise any of the rights above, contact us at support@rajatoto.fun with the subject line "Data Privacy Request", along with your username and details of your request. We will respond within 21 business days.
Rajatoto strictly does not accept or process personal data from individuals under 18 years of age. Our platform is exclusively for adults, and we have active age verification procedures in place to ensure this.
If we discover that personal data belonging to a minor (under 18 years of age) has been collected without our knowledge — possibly as a result of false information provided during registration — we will take immediate steps to delete that data and close the associated account.
To Parents and Guardians: If you believe your underage child has registered and used the rajatoto platform, please contact us immediately at support@rajatoto.fun so we can take the necessary action without delay.
Rajatoto reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, updated legal requirements or new services we introduce. The "Updated" date at the top of this page indicates when the policy was last reviewed.
For changes deemed material — such as changes to how we use your data or the introduction of new processing purposes — we will endeavour to notify you via your registered email or through a prominent notice on the rajatoto platform before the changes take effect.
Your continued use of the rajatoto platform after any amendments are published constitutes your acceptance of the updated policy. We encourage you to review this page regularly — at least once every three months if you are an active rajatoto user.
If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Privacy Officer at:
We are committed to addressing all privacy-related enquiries and concerns seriously and promptly. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.
Clear answers to the most frequently asked questions about data privacy at rajatoto
Protecting your data is part of our commitment to a safe and responsible gaming experience
Your deposit limit and session time settings under the responsible gaming programme are personal data that is fully protected and not disclosed to any other party.
Self-exclusion requests are handled in strict confidence. This information is not shared with any third party and is used solely to protect you in accordance with your own request.
Your gaming activity data is analysed in aggregate to identify patterns that may indicate signs of problematic behaviour — enabling us to proactively offer support where needed.
All data processing related to responsible gaming complies with Malaysia's PDPA 2010 — your privacy is respected in every aspect of our relationship with you.
Now you know how rajatoto protects your personal data. Register for free today and experience an online betting platform that is not only financially secure, but also privacy-secure — built specifically for Malaysians.
Privacy enquiries? Email us at support@rajatoto.fun — 24 hours a day, 7 days a week.