Ozototo is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how it is used, and the rights you hold as a user of our platform. Please read it carefully alongside our Terms & Conditions.
All personal data held by Ozototo is encrypted at rest and in transit using industry-standard TLS 1.3 and AES-256 protocols. Your information is never stored in plaintext.
Ozototo does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared only with essential service providers under strict contractual obligations.
You have the right to access, correct, and request deletion of your personal data at any time. Submit a data request via our support team and we will respond within 30 days.
We use cookies strictly for platform functionality, session management, fraud prevention, and performance analytics. We do not use cookies to track your activity across unrelated third-party websites.
Identity documents submitted for KYC verification are used solely for age and identity confirmation. They are stored securely and retained only for as long as required by our compliance obligations.
Promotional communications are entirely opt-in. You may withdraw consent to receive marketing emails or SMS messages at any time via your account settings or by contacting our support team.
This Privacy Policy is issued by Ozototo ("we", "us", "our"), the operator of the online gaming platform accessible at https://ozototo.cam ("the Platform" or "the Website"). This Policy applies to all users ("you", "your") who access, register with, or otherwise interact with the Platform, including users based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations from which the Platform is accessed.
We are committed to handling your personal data with care, transparency, and in accordance with applicable data protection principles. This Privacy Policy describes the categories of personal data we collect, the purposes for which we process it, the parties with whom we share it, the period for which we retain it, and the rights you have in relation to your data.
By creating an account on Ozototo, depositing funds, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
Data Controller: Ozototo operates as the data controller in respect of personal data collected through the Platform. For all data-related enquiries, contact us via the details set out in Section 14 of this Policy.
The following definitions apply throughout this Privacy Policy:
Ozototo collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party service providers involved in payment processing and identity verification.
| Category | Examples | When Collected |
|---|---|---|
| Registration Data | Full name, date of birth, email address, mobile number, residential address | Account creation |
| Identity Documents | MyKad, passport, driver's licence copies | KYC verification |
| Payment Data | e-Wallet IDs (Touch 'n Go, Boost, GrabPay), bank account details, cryptocurrency wallet addresses | Deposit / withdrawal requests |
| Communication Data | Support chat transcripts, email correspondence, feedback submissions | Support interactions |
| Preferences | Responsible gambling settings, notification preferences, language settings | Account settings updates |
When you access the Platform, we automatically collect technical and behavioural data including:
We may receive supplementary personal data from payment processors (such as transaction status confirmations from DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank), KYC verification providers, fraud detection services, and, where applicable, affiliated partner programmes. This data is received solely for purposes consistent with those described in this Policy.
Ozototo processes personal data for the following clearly defined purposes:
Important: Ozototo does not engage in automated decision-making or profiling that produces legal or similarly significant effects on users without human review. Responsible gambling monitoring flags are reviewed by a qualified member of our compliance team before any account-level action is taken.
Ozototo processes your personal data on the following lawful bases:
Ozototo does not sell your personal data. We do not share your personal data with third parties for their own independent marketing or commercial purposes. Personal data is disclosed only in the following limited circumstances:
We engage carefully selected third-party processors to support our operations, including: payment gateway operators (including those handling Malaysian e-wallet and FPX/DuitNow transactions), KYC and identity verification platforms, cloud hosting and data storage providers, customer support infrastructure providers, and fraud detection and cybersecurity services. All processors operate under written data processing agreements that restrict their use of your data to the specific purpose for which it was shared.
We may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, regulation, legal process, or lawful government request. Where legally permitted, we will notify you of such requests.
In the event of a merger, acquisition, or sale of all or substantially all of Ozototo's assets, user data may be transferred as part of that transaction. Users will be notified via Platform notice or email prior to any such transfer, and the acquiring entity will be required to honour this Privacy Policy.
No Cross-Border Marketing Transfers: Ozototo does not transfer your personal data to third parties in foreign jurisdictions for the purpose of targeted advertising or list marketing. Any cross-border transfers to service providers are subject to adequate data protection safeguards as described in Section 12.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal / regulatory obligation |
| KYC documents | Duration of account + 5 years post-closure | AML compliance obligation |
| Transaction records | 7 years from transaction date | Financial regulatory requirement |
| Betting and gaming logs | 5 years from activity date | Dispute resolution / compliance |
| Support communications | 3 years from last interaction | Legitimate interest |
| Marketing consent records | Until consent withdrawn + 3 years | Accountability obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified individual.
Ozototo uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help us operate the Platform efficiently, remember your preferences, and maintain session security.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, fraud prevention signals | Session / up to 24 hours |
| Functional | Language preferences, responsible gambling limit settings, game lobby state | Up to 12 months |
| Analytics | Aggregated usage statistics to improve platform performance and UX | Up to 13 months |
Strictly necessary cookies cannot be disabled as they are essential to Platform operation. Functional and analytics cookies may be controlled through your browser settings. Note that disabling functional cookies may affect your Platform experience.
Ozototo implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely secure. While we apply diligent security practices, we cannot guarantee absolute security of your data. You are encouraged to use a strong, unique password for your Ozototo account and to enable any available two-factor authentication options.
As a data subject, you hold the following rights in relation to your personal data held by Ozototo. To exercise any of these rights, please contact us using the details in Section 14. We will respond to all valid requests within 30 calendar days.
Ozototo's services are strictly for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in our KYC process, and accounts where age verification cannot be satisfactorily completed will be suspended.
If you become aware that a minor has registered on our Platform or provided personal data without appropriate consent, please notify us immediately via our support team. We will investigate and take immediate steps to close the account and delete any data collected.
Underage Gambling: Allowing a person under the age of 21 to access online gambling services is illegal in many jurisdictions and contrary to Ozototo's policies. We invest in technology and operational controls to prevent underage access and take this obligation seriously.
In the course of operating the Platform, personal data may be transferred to and processed in countries outside Malaysia by third-party service providers such as cloud infrastructure operators and KYC verification platforms. Where such transfers occur, we ensure that appropriate safeguards are in place, including contractual clauses equivalent to applicable data protection standards, so that your data receives a consistent level of protection regardless of where it is processed.
We do not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate supplementary measures. If you have questions about specific transfer mechanisms in place, please contact us at the details in Section 14.
Ozototo reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered users via email and/or a prominent notice on the Platform prior to the effective date of the revised Policy.
The "Last Updated" date at the top of this page always reflects the most recent version. We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.
For all data privacy enquiries, access requests, or concerns about how Ozototo handles your personal data, please contact our Data Protection team through the following channels. We aim to acknowledge all data-related requests within 5 business days and to provide a substantive response within 30 calendar days.
Available 24/7. For urgent account access or data security issues, live chat is the fastest channel.
For formal data access, correction, or erasure requests:
[email protected]Plain text — not a clickable link.
For full terms governing your use of Ozototo, please refer to our Terms & Conditions. For responsible gambling tools and support resources, please visit our Responsible Gambling page.
Ozototo combines Malaysia's best sports betting markets and casino games with genuine commitment to player privacy, data security, and responsible gaming. Visit our homepage to learn more.
For players aged 21 and above only. | Terms & Conditions | Responsible Gambling