Hukumtoto Privacy Policy

Hukumtoto is an online betting and live casino platform serving Malaysian players. In the course of providing our services — including sports wagering on Liga Super Malaysia, EPL, UFC, and other markets, live dealer casino games, slot titles, payment processing, and customer support — we collect, hold, and use personal data about you.

This Privacy Policy explains what personal data we collect, the purposes for which we use it, how long we retain it, who we may share it with, and what rights you hold in relation to your data. We are committed to handling your information lawfully, fairly, and transparently.

This Policy applies to all personal data processed in connection with your use of the Hukumtoto website and associated services, regardless of the device or network through which you access the platform.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

Hukumtoto collects personal data through three principal channels:

Information you provide directly:

• Registration details: full name, date of birth, email address, and contact number;
• Identity and address verification documents, such as a MyKad, passport, or utility bill, provided during KYC;
• Payment information: bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), DuitNow registered number, FPX credentials, or cryptocurrency wallet addresses used for deposits and withdrawals;
• Communications submitted through live chat, support tickets, or the email address [email protected]; and
• Responsible gambling preferences, such as deposit limits, self-exclusion requests, or cooling-off period instructions.

Information collected automatically:

• Technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and connection type;
• Behavioural data: pages visited, session duration, betting patterns, game history, deposit and withdrawal activity, and navigation paths within the platform; and
• Cookie and tracking data as further described in the Cookies section of this Policy.

Information received from third parties:

• Identity verification results from KYC screening providers;
• Fraud risk scores or adverse-history signals from fraud-prevention services; and
• Payment confirmation and chargeback data from banking partners and e-wallet operators.

Hukumtoto processes your personal data on one or more of the following legal grounds, depending on the specific activity:

We use the personal data we collect for the following clearly identified purposes:

• Account services: creating and maintaining your member account, authenticating login sessions, processing bets and game rounds, and handling account settings including responsible gambling controls;
• Payment processing: executing deposits and withdrawals through Maybank2u, CIMB Clicks, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, BTC, ETH, and USDT — all balances held in Malaysian Ringgit (MYR);
• KYC and compliance: verifying your identity, confirming you are aged 21 or above, performing source-of-funds checks, and complying with applicable anti-money laundering requirements;
• Fraud prevention and security: detecting unusual activity, investigating suspected prohibited conduct, protecting account credentials, and maintaining platform integrity;
• Responsible gambling: monitoring activity patterns for potential problem gambling indicators, implementing player-requested limits and exclusions, and fulfilling obligations to promote safe play;
• Customer support: responding to live chat, support ticket, and email enquiries, investigating complaints, and resolving disputes;
• Service improvement: analysing platform usage, testing new features, improving game presentation, refining the mobile experience, and evaluating payment method performance; and
• Marketing (opt-in only): sending promotional offers, bonus alerts, and sporting event updates to players who have affirmatively consented to receive such communications.

Hukumtoto does not sell or rent personal data to unaffiliated third parties. We may share personal data in the following limited and controlled circumstances:

• Payment providers and banking partners: information necessary to process deposits via FPX, DuitNow, Maybank, CIMB, and supported e-wallets, and to complete withdrawal requests to verified accounts;
• KYC and identity verification providers: name, date of birth, document images, and address data necessary to complete required identity checks;
• Fraud detection and risk management services: technical identifiers, transaction patterns, and account metadata shared with specialist providers to detect and prevent financial crime;
• Game software providers: session tokens and game-round data shared with certified casino and slot providers to deliver gameplay and verify outcomes;
• Legal and regulatory authorities: personal data disclosed where required by a court order, lawful regulatory demand, legal process, or obligations arising under applicable Malaysian law; and
• Professional advisers: lawyers, auditors, and compliance consultants acting under confidentiality obligations in connection with Hukumtoto's legitimate business operations.

Where we engage third-party processors, we put in place written agreements requiring them to protect your data, use it only for the stated purpose, and comply with applicable data protection standards. We remain responsible for ensuring those agreements are respected.

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal and regulatory obligations, and resolve any disputes or enforcement actions that may arise. Retention periods vary by data category:

Following the expiry of the applicable retention period, personal data is deleted or anonymised in a manner that prevents reconstruction. Where full deletion is not technically immediate, data is rendered inaccessible pending scheduled purge cycles.

Hukumtoto implements technical and organisational security measures appropriate to the risk profile of the personal data we hold. These include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Hukumtoto platform;
• Encrypted storage of sensitive personal data and payment credentials at rest;
• Role-based access controls ensuring staff can access only the data strictly necessary for their function;
• Two-factor authentication options for player accounts and mandatory for internal administrative systems;
• Continuous monitoring for suspicious login activity, unusual transaction patterns, and network anomalies; and
• Regular review of security practices in response to emerging threats and industry developments.

While we take all reasonable steps to protect your data, no system is entirely immune to risk. You are responsible for maintaining the confidentiality of your account credentials and for promptly reporting suspected unauthorised access to our support team.

Subject to applicable law and the specific circumstances of your request, you hold the following rights in relation to the personal data Hukumtoto processes about you:

To exercise any of the above rights, contact our support team with your account username and a clear description of your request. We may ask you to verify your identity before proceeding. We will respond within a reasonable timeframe consistent with applicable data protection standards. Requests will not ordinarily attract a fee unless they are manifestly unfounded, excessive, or repetitive.

Hukumtoto uses cookies and similar technologies — including session tokens, local storage objects, and browser fingerprinting signals — to operate the platform, maintain authenticated sessions, remember your preferences, and analyse how Malaysian players interact with the site.

We use the following categories of cookies:

• Strictly necessary cookies: required for the platform to function, including session authentication, fraud prevention signals, and load-balancing identifiers. These cannot be disabled without impairing core services.
• Functional cookies: remember your language preference, display settings, and responsible gambling configuration between sessions.
• Analytics cookies: collect aggregate, anonymised data about page views, navigation paths, device types, and feature usage to help us improve the Hukumtoto experience over time.
• Marketing cookies (where consented): used to present relevant promotional content within the Hukumtoto platform to players who have opted in to marketing communications.

You may manage cookie preferences through your browser settings. Blocking all cookies may affect the functionality of the platform, including the ability to log in or place bets. We do not use third-party advertising cookies to track your behaviour across unaffiliated websites.

Hukumtoto is strictly an adult platform. No person under the age of 21 may register an account, deposit funds, place bets, or access any gambling service on this platform. We do not knowingly collect personal data from individuals under 21 years of age.

Age verification is a mandatory step in the registration and KYC process. If we discover that an account was created by or personal data was submitted by an individual under 21, we will close the account, cease processing that data, and handle any funds in accordance with applicable requirements and our Terms & Conditions.

Hukumtoto may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, security practices, or the ways in which we process personal data. Material changes will be communicated through a platform notice or by publishing the revised Policy with an updated effective date.

We encourage you to review this Policy periodically. Continued use of Hukumtoto after a revised Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the changes, you should stop using the platform and contact support to request account closure, subject to outstanding bets, pending KYC, and lawful retention obligations.

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or want to raise a concern about how Hukumtoto processes your personal data, please contact our support team through live chat or the email address below:

Email: [email protected] (displayed as plain text — not a clickable link)

Headquarters: Kuala Lumpur, Malaysia

Please include your account username and a clear description of your request or concern. We may ask you to verify your identity before disclosing, modifying, or deleting any data. We aim to acknowledge all privacy-related enquiries promptly and to resolve them within a reasonable period.

For questions relating to betting rules, payment disputes, or account management, please consult the FAQ or Terms & Conditions pages in the first instance.