Personal Data Protection

Privacy Policy Gintoto – Our Commitment to Protecting Your Information

At Gintoto, your privacy is not merely a legal obligation — it is a core value we uphold. This document clearly explains how we collect, use, and protect your personal data.

Updated: June 2026 · Version 3.1
Active Protection
256-bit SSL encryption on all transactions
Data is not sold to third parties
Secure KYC with restricted access
Secure servers with 24/7 monitoring
User rights are fully respected

Gintoto's Six Pillars of Data Protection

Your privacy is protected at every level. Here's how we keep your data secure with gintoto.

End-to-End Encryption

Every communication between your device and gintoto's servers is encrypted with 256-bit SSL — the same standard used by Malaysia's major banks to protect financial transactions.

No Data Sales

Your personal information is never sold, rented, or exchanged with third parties for any marketing or commercial purpose. Your data belongs to you — and we respect that.

Restricted KYC Access

Identity verification documents submitted during the KYC process are accessible only to specifically authorized personnel. All access is logged and regularly audited.

Secure Data Storage

Your data is stored on servers protected by multiple layers of physical and digital security. Active monitoring systems operate around the clock to detect any threats.

Right of Access & Deletion

You have the right to request a copy of the data we hold, correct inaccurate information, or request deletion of your data — subject to applicable legal obligations.

Rapid Breach Notification

In the event of a security incident affecting your data, gintoto is committed to notifying you in a timely manner and taking immediate action to mitigate the risk.

Important Note: This Privacy Policy applies to all users of the Gintoto platform, including the website and mobile app. By using our services, you agree to the collection and use of data as described here.

01

Privacy Policy Introduction and Scope

Gintoto ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the Gintoto platform via our official website or mobile app.

This document is prepared in line with international data protection best practices. We are committed to ensuring that your personal data is handled transparently, responsibly, and securely at all times.

This policy applies to all registered Gintoto players in Malaysia and any individual accessing our platform, regardless of the access method used.

02

Types of Data We Collect

Gintoto collects your personal data through several different means. Below is a summary of the types of data we collect and their sources:

Data Category Example Information How It Is Collected
Personal Identity Full name, IC/passport number, date of birth Registration form & KYC
Contact Information Phone number, email address, residential address Account registration
Financial Data Bank account number, transaction records, deposit/withdrawal history Platform transactions
Technical Data IP address, device type, browser, operating system Automatically during use
Gaming Data Wagering history, games played, session duration Activity on the platform
Communication Data Customer support chat logs and feedback Support interactions

Gintoto only collects data that is genuinely necessary for platform operations and legal compliance. We do not collect sensitive information such as biometric data or health information unless specifically required for compliance purposes.

All KYC documents you upload — such as identity card images or bank statements — are stored in a protected environment and accessed only by authorised personnel for verification purposes.

03

Purpose of Personal Data Usage

Every piece of data we collect has a clear and legitimate purpose. gintoto uses your personal information for the following:

  • Account Management: Creating and managing your user account, including the identity verification (KYC) process required to ensure platform security.
  • Transaction Processing: Handling deposits, withdrawals, and other financial transactions in Malaysian Ringgit accurately and securely.
  • User Experience Improvement: Personalising your gaming experience, including game recommendations and relevant promotions based on your gaming history.
  • Fraud Prevention: Detecting and blocking suspicious or fraudulent activity to protect you and the platform from threats.
  • Customer Support: Providing effective assistance when you contact our support team.
  • Legal Compliance: Meeting legal and regulatory obligations applicable to the platform's operations.
  • Service Communications: Sending important notifications about your account, transactions, or policy changes that affect you.

We do not use your data for purposes beyond those stated above without first obtaining your consent.

04

Data Sharing with Third Parties

Gintoto does not sell, rent, or trade your personal data to third parties for marketing purposes. However, in certain situations, we may share your information with the following parties:

  • Payment Service Providers: Transaction information is shared with authorised payment processors (such as banks and e-wallet providers) solely for the purpose of processing your transactions.
  • Game Providers: Minimum technical data required to run games is shared with registered game providers such as Pragmatic Play and Evolution Gaming.
  • Authority: Gintoto will disclose required information to legitimate authorities when compelled by a court order or applicable legislation.
  • Technical Partners: Technical infrastructure and cloud service providers that help operate our platform are bound by strict confidentiality agreements.

Our Guarantee: All third parties working with gintoto are bound by strict data protection agreements and must handle your information to the same security standards we uphold.

05

Data Security Measures

Gintoto invests seriously in security infrastructure to protect your data. The technical and organizational measures we implement include:

  • 256-bit SSL Encryption for all data transmitted between your device and our servers.
  • Hashed password storage using modern cryptographic algorithms — gintoto does not store passwords in plain text.
  • Two-factor authentication (2FA) available for all accounts to add an extra layer of security.
  • 24/7 system monitoring by our security team to detect and respond to any threats in real time.
  • Regular security audits by independent third parties to evaluate and reinforce our security defences.
  • Internal access controls strict controls ensure only authorised personnel can access sensitive data.

While we take all reasonable measures, no system can guarantee 100% absolute security. However, gintoto is committed to continuously strengthening our security defences in line with evolving technology and emerging threats.

06

Cookie and Tracking Technology Usage

The gintoto platform uses cookies and similar tracking technologies to enhance user experience, understand usage patterns, and ensure the security of your login sessions.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Preference Cookies: Saving your preferences such as language, display settings, and login details to make future access easier.
  • Analytics Cookies: Helps us understand how players use our platform so we can improve it. This data is collected in aggregate and does not identify individuals.
  • Security Cookies: Used to detect suspicious activity and protect your account from unauthorized access.

You can manage your cookie preferences through your browser settings at any time. However, disabling essential cookies may affect platform functionality.

07

User Rights Regarding Personal Data

As a gintoto user, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 30 days.

Right to Rectification

If any information we hold is inaccurate or outdated, you have the right to request a prompt correction.

Right to Deletion

You may request the deletion of your personal data, subject to legal obligations and legitimate operational requirements.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform if desired.

To exercise any of the above rights, please contact the gintoto support team via Live Chat or email. Requests will be processed within 30 calendar days of receipt.

08

Data Retention Period

Gintoto does not store your data indefinitely. Retention periods depend on the type of data and applicable legal requirements:

  • Active Account Data: Retained for as long as your account remains active and operational.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable financial legal requirements.
  • KYC Documents: Retained for the duration of the active account period plus 5 years after account closure.
  • Customer Support Logs: Retained for 3 years for reference and dispute resolution purposes.
  • Technical Data (Logs): Retained for 12 months before being automatically deleted.

Once the retention period expires, your data will be securely deleted or anonymised from our systems, unless a legal obligation requires longer retention.

09

Changes to This Privacy Policy

Gintoto may update this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements to our services.

When material changes occur, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Sending notifications to all registered members via their registered email address.
  • Displaying a clear notice on the platform for at least 14 days before the changes take effect.

Continued use of the gintoto platform after changes take effect will be considered acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before the effective date.

10

How to Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your data rights, the gintoto privacy team is here to help.

You can reach us through the following channels:

  • Live Chat: Available on the platform 24 hours a day, 7 days a week — the fastest way to get a response.
  • Email: Send your privacy enquiries to [email protected] — we will reply within 2 business days.

For data rights requests (such as access, correction, or deletion), please clearly state the type of request and include the necessary identity verification details so we can process it accurately and securely.

All privacy-related requests are handled by specially trained staff and resolved within 30 calendar days of receipt. You will receive an acknowledgement within 3 business days.

Your Data Is Safe, Your Gaming Experience Is Secured at Gintoto

With high-level data encryption and a full commitment to your privacy, Gintoto is a safe place to enjoy online entertainment. Register today and play with peace of mind.

256-bit SSL
No Data Sales
Secure KYC
User Rights Respected
Bahasa Melayu