Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Laetoto ("Company", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "User", "Player") who register for or use the Laetoto online casino and sports betting platform accessible at laetoto.cam ("the Platform").

Laetoto operates as an online gaming and wagering service directed at Malaysian players aged 21 and above. This Policy applies to all personal data we process in connection with your use of the Platform, including data submitted during registration, KYC verification, financial transactions, customer support interactions, and general use of our services.

By registering for a Laetoto Account or using our Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy is incorporated into and should be read alongside our Terms & Conditions.

2. Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial data, or online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means Laetoto, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of Laetoto, such as payment processors or identity verification providers.
• "KYC" means Know Your Customer — the identity and age verification process required before full Account functionality is unlocked.
• "Sensitive Personal Data" means Personal Data concerning health, financial status, identification documents, or other categories that require heightened protection.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

3. Personal Data We Collect

Laetoto collects the following categories of personal data in the course of operating our Platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — minimum age 21)
• Malaysian identification number (MyKad) or passport number
• Gender
• Nationality and country of residence

3.2 Contact Data

• Email address
• Malaysian mobile phone number
• Residential address (including postcode and city, e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam)

3.3 Financial & Transaction Data

• Bank account numbers and payment method identifiers used for deposits and withdrawals
• Transaction history — all deposits, withdrawals, bets placed, and bonuses claimed, denominated in Malaysian Ringgit (MYR)
• E-wallet identifiers for Touch 'n Go eWallet, Boost, and GrabPay
• FPX and DuitNow transaction references
• Bank details for Maybank, CIMB, Public Bank, and Hong Leong transactions

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Browser type, version, and operating system
• Device type and unique device identifiers
• Login timestamps and session duration data
• Pages visited, games played, and features accessed on the Platform
• Referring URL and search terms used to find the Platform

3.5 KYC Document Data

• Copies of government-issued identity documents (MyKad, passport)
• Proof of address documents (utility bills, bank statements)
• Proof of payment method ownership (screenshots or statements)
• Selfie or facial image submitted for liveness verification

3.6 Communications Data

• Content of live chat conversations and email correspondence with our support team
• Records of any formal complaints submitted
• Promotional communication preferences

4. How We Collect Your Data

Laetoto collects personal data through the following means:

• Direct submission: Information you provide when registering, completing KYC, making a deposit or withdrawal, contacting our support team, or submitting a complaint.
• Automated collection: Technical and usage data collected automatically as you navigate the Platform, via cookies, log files, and analytics tools.
• Third-party verification: Identity and age verification data returned by third-party KYC service providers when you submit identity documents.
• Payment processors: Transaction confirmation and status data returned by Malaysian payment processors including Maybank, CIMB, DuitNow, FPX, and e-wallet operators.
• Anti-fraud services: Risk scoring and device fingerprinting data from fraud prevention partners used to protect Account security.

5. Legal Basis for Processing

Laetoto processes your personal data on one or more of the following legal bases:

6. How We Use Your Personal Data

Laetoto uses the personal data we collect for the following purposes:

• To create, manage, and maintain your Account on the Platform.
• To verify your identity and age (21+ requirement) through our KYC process.
• To process MYR deposits and withdrawals through Malaysian payment channels including Maybank, CIMB, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay.
• To administer bonus offers, promotions, and loyalty programme benefits in accordance with our Terms & Conditions.
• To detect and prevent fraud, money laundering, and other unlawful activity on the Platform.
• To monitor gambling behaviour and provide responsible gambling interventions where appropriate.
• To respond to customer support queries, complaints, and feedback.
• To send you service communications (account notices, security alerts, policy updates).
• To send you promotional communications about bonuses, tournaments, and new features — where you have consented to receive such communications.
• To analyse usage patterns and improve the Platform's features, performance, and user experience.
• To comply with legal, regulatory, and audit obligations applicable to our operations.

7. Disclosure of Personal Data

Laetoto does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with the following categories of recipients strictly on a need-to-know basis:

• Payment processors and financial institutions: To facilitate MYR deposits and withdrawals — including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX operators.
• KYC and identity verification providers: To verify your identity, age, and document authenticity.
• Anti-fraud and compliance partners: To screen Transactions for money laundering, fraud, and sanctions compliance.
• Technology service providers: Cloud hosting, database management, and security service providers who process data on our behalf under binding data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory demand.
• Professional advisors: Legal counsel, auditors, and consultants where necessary to operate our business lawfully.

All third-party Data Processors engaged by Laetoto are bound by contractual data protection obligations that require them to process personal data only in accordance with our instructions and to maintain appropriate security measures.

8. Payment Data & MYR Transactions

Laetoto processes all financial transactions in Malaysian Ringgit (MYR). When you make a deposit or submit a withdrawal request, your payment data — including bank account numbers, e-wallet identifiers, or FPX reference numbers — is transmitted to the relevant Malaysian payment gateway using encrypted connections.

Laetoto does not store full payment card numbers. For bank transfers and e-wallet transactions, we retain only the transaction reference, amount, timestamp, and the last four digits or masked identifier of the relevant payment instrument as required for transaction history and dispute resolution.

9. Cookies & Tracking Technologies

Laetoto uses cookies, web beacons, pixel tags, and similar tracking technologies on our Platform. These are small text files or code snippets stored on your device that allow us to recognise your browser, maintain your session, personalise your experience, and analyse Platform usage.

9.1 Types of Cookies We Use

You may configure your browser to refuse non-essential cookies; however, doing so may affect the functionality of certain Platform features. Essential and security cookies cannot be disabled without disrupting core Platform operation.

10. Data Retention

Laetoto retains personal data for as long as your Account remains active and for a period thereafter as required by applicable law, anti-money laundering (AML) regulations, and our internal data governance policy. The following general retention periods apply:

• Account and identity data: Retained for the duration of the Account plus a minimum of 7 years following Account closure, in compliance with AML and record-keeping obligations.
• Transaction records: Retained for a minimum of 7 years following the date of the transaction.
• KYC documents: Retained for the duration of the Account plus 7 years, or longer where required by applicable law.
• Customer support records: Retained for 3 years from the date of the last interaction.
• Marketing preference data: Retained until you withdraw consent or request erasure.
• Technical and usage data: Typically retained for 13 months in analytics systems before anonymisation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

11. Data Security

Laetoto implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Encryption of sensitive data at rest using AES-256 or equivalent standards.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Two-factor authentication for Account login and for internal staff access to data systems.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third parties.
• Real-time anomaly detection and intrusion prevention systems monitoring for suspicious activity.
• Secure, access-controlled data centres with physical security protocols.

While Laetoto takes all reasonable measures to protect your data, no digital transmission or storage system is completely immune from security threats. You are responsible for maintaining the confidentiality of your own Account credentials. If you suspect that your Account has been compromised, please notify us immediately at [email protected].

12. International Data Transfers

Laetoto's primary operations are directed at Malaysian users and our data infrastructure is designed to minimise unnecessary international transfer of personal data. Where it is necessary to transfer personal data to service providers or processors located outside Malaysia — for example, for cloud hosting, security services, or third-party game studio integration — we ensure that such transfers are subject to appropriate safeguards.

These safeguards may include: standard contractual clauses, binding corporate rules, adequacy decisions, or other mechanisms that provide an equivalent level of protection to that afforded under applicable Malaysian data protection law.

13. Your Data Subject Rights

As a data subject, you have the following rights in relation to the personal data Laetoto holds about you. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

14. Minors & Age Restrictions

The Laetoto Platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect or process the personal data of individuals under the age of 21. If we discover or are notified that personal data belonging to a person under 21 has been collected, we will immediately suspend the associated Account, delete the personal data, and void any associated transactions.

If you are a parent or guardian and believe that a minor under 21 has registered on our Platform or provided us with personal data, please contact us immediately at [email protected] so that we can take appropriate action.

15. Amendments to This Policy

Laetoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The date of the most recent revision is displayed at the top of this page.

Where amendments are material — for example, a change to the categories of data we collect or the purposes for which we use it — we will notify registered Users via email prior to the changes taking effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how Laetoto protects your personal data.

16. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the personal data Laetoto holds about you, please contact us through the following channels:

• Data Support Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the Platform — average response under 60 seconds.
• Email Response Time: Within 2 hours for general support; within 5 business days for formal data subject requests.

When submitting a data subject request, please include your registered Account email address, your full name, and a clear description of your request. We may request additional information to verify your identity before processing a data access, correction, or erasure request.