At viptoto, your privacy is more than a legal obligation – it is our genuine commitment. This Policy clearly explains how we collect, use, protect, and manage your personal information every time you use our platform.
Important Note: This Privacy Policy forms part of your agreement with viptoto. By using our platform, you agree to the data collection and usage practices described below. Please read this document carefully.
viptoto ("we", "our platform") respects the privacy of every user and is committed to protecting your personal information. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of personal information you provide to us or that we collect when you use the viptoto platform.
This Policy applies to all users of the viptoto website, mobile apps for Android and iOS, and any other services provided by viptoto. By accessing or using our platform, you acknowledge that you have read and understood this Privacy Policy.
Viptoto operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant data protection laws. We take our responsibilities as a data controller seriously and strive to ensure your personal information is handled in the most responsible manner.
Viptoto collects your personal information through several different means depending on how you interact with our platform. Below are the categories of information we collect:
This information is collected during account registration, identity verification (KYC), customer support requests and financial transactions.
When you use the viptoto platform, we automatically record technical information including:
Viptoto may receive information about you from the payment providers you use (DuitNow, FPX, Touch 'n Go, and others) for transaction verification and fraud prevention purposes. This information is used in a limited and strictly defined manner.
Viptoto uses the information collected for legitimate purposes only. Below is a summary of our data usage:
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| User account management | Name, email, phone number, password | Contract fulfilment |
| Identity verification (KYC) | IC/passport, date of birth, address | Legal obligations |
| Payment processing | Bank / e-wallet details | Contract fulfilment |
| Fraud prevention & security | IP, activity logs, device data | Legitimate interests |
| Customer Support | All information related to your enquiry | Contract fulfilment |
| Marketing & promotions | Email, phone (with consent) | Consent |
| Responsible gaming monitoring | Wagering patterns, gameplay activity | Legal obligations |
Viptoto will not use your data for any purpose other than those stated above without first obtaining your additional consent.
Viptoto does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your information is only shared in the following situations:
All third parties receiving your data from viptoto are required to comply with data protection standards equivalent to this Privacy Policy.
Viptoto invests seriously in data security infrastructure. The protection measures we have implemented include:
While we take all reasonable precautions, no security system is entirely foolproof. We encourage you to take your own protective measures as well, such as using a strong, unique password and enabling 2FA.
Viptoto uses cookies and similar tracking technologies to enhance user experience, analyse platform traffic, and tailor content to your preferences. The types of cookies we use:
You can manage your cookie settings through your browser settings at any time. However, disabling certain cookies may affect the functionality of the viptoto platform.
As a registered viptoto user, you have the following rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you. Requests can be submitted through viptoto customer support.
If any of your personal information is inaccurate or incomplete, you may request a correction through your account settings or by contacting customer support.
In certain circumstances, you may request the deletion of your personal data. However, some data may need to be retained to fulfil legal obligations.
You may object to the processing of your data for direct marketing purposes at any time by contacting our support team.
You have the right to receive your personal data in a machine-readable format for transfer to another platform, where this is technically feasible.
To exercise any of the above rights, contact the viptoto support team through the channels provided on the platform. We will respond within 30 business days.
Viptoto retains your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.
All data is stored on protected servers with strict access controls and comprehensive physical security procedures.
Viptoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons.
When we make material changes to this Privacy Policy, we will:
We encourage you to review this Privacy Policy periodically. Continued use of the viptoto platform after changes are published means you accept the updated policy.
If you have any questions, concerns, or wish to exercise your privacy rights under this Privacy Policy, the viptoto support team is ready to help.
You can reach us via:
Our team will respond to privacy-related enquiries within 5 business days and to data rights requests within 30 business days.
Privacy at viptoto isn't just a document – it's a daily practice. Here's exactly how we protect your data at every step.
All data transmitted between your device and viptoto's servers is secured with 256-bit SSL encryption – the same standard used by major Malaysian banking institutions to protect online transactions.
Your bank account and e-wallet details are not stored on viptoto's primary servers. We use a tokenisation system where only secure tokens are stored, not your actual account numbers.
Viptoto only collects information that is strictly necessary to provide our services. We do not collect excessive data or information irrelevant to the platform's operational needs.
Viptoto operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular privacy impact assessments and ensure all data processing activities are lawful.
The viptoto platform undergoes regular security audits by independent third-party cybersecurity firms. This ensures our security practices consistently meet or exceed the latest industry standards.
You have full control over marketing communications from viptoto. Unsubscribing from any communication channel can be done easily through your account settings or via customer support.