Joitoto's Six Data Protection Principles

At joitoto, privacy is more than a legal document — it is a daily practice embedded in every aspect of our platform operations.

256-bit SSL Encryption

All data transmitted between your device and joitoto servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

Data Not Sold to Third Parties

Joitoto never sells, rents, or shares players' personal information with third parties for marketing or commercial purposes without the player's explicit consent.

Secure Data Storage

Player data is stored on encrypted servers with multi-location backups. Access to player data is restricted to authorised staff who require it for their specific duties.

Minimum Data Collection

Joitoto only collects data that is strictly necessary to deliver our services — no excessive data collection or information irrelevant to platform use.

Player Rights Guaranteed

Every joitoto player has the right to access, correct, request deletion of, or restrict the processing of their personal data — and joitoto makes this process straightforward without unnecessary burden.

24/7 Security Monitoring

Joitoto's automated monitoring system operates around the clock to detect any unauthorized access attempts or suspicious activity involving player data.


1. Scope of This Privacy Policy

This Privacy Policy ("Policy") describes the information handling practices of joitoto ("Platform", "We") with respect to personal information collected through the joitoto platform — including the website, mobile app, and all related services.

This Policy applies to all players who register an account, visit the website without registering, use the joitoto app, or interact with any service we offer. By using joitoto's services, you agree to the practices described in this Policy.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy joitoto, all of which together form the complete agreement between you and joitoto.

2. Types of Personal Data We Collect

Joitoto collects various types of information to enable us to provide a safe, efficient, and relevant service to every player. The following are the categories of data we collect:

Data Category Example Information Purpose of Collection
Personal Identity Full name, date of birth, IC/passport number KYC and account verification
Contact Information Email address, phone number, residential address Communication and support
Financial Data Bank account number, deposit/withdrawal records Payment processing
Activity Data Game history, wagering logs, account statistics Platform operations and audit
Technical Data IP address, device type, browser, approximate location Security and verification
Cookie Data Language preferences, login sessions, analytics User experience

joitoto does not collect more information than is necessary. Each data category has a clear purpose and is not used for any other purpose without prior notice.

3. How Your Data Is Used

Personal information collected by joitoto is used for the following purposes:

  • Identity verification and KYC: To verify that players are who they claim to be and meet joitoto's platform eligibility requirements
  • Account management: To create, maintain, and protect your joitoto account from unauthorized access
  • Payment processing: To process deposits, withdrawals, and other financial transactions securely and accurately
  • Service provision: To provide access to games, bonuses, and relevant platform features
  • Communication: To send important notifications related to your account, transactions, and security
  • Security monitoring: To detect and prevent fraud, multi-account usage, and suspicious activity
  • Legal compliance: To fulfill legal and regulatory obligations related to joitoto's operations
  • Platform improvements: To analyze usage patterns and improve the overall user experience

Joitoto does not use player data for any purpose beyond those stated above without prior notice and, where applicable, the consent of the player concerned.

4. Data Sharing with Third Parties

Joitoto does not sell players' personal data to any third party. However, there are certain situations where we need to share information with the following parties to enable the platform to operate:

  • Payment and banking providers: To process deposits and withdrawals requested by players
  • Game providers: To verify player identity for access to certain games — only the minimum required information is shared
  • Technical service providers: Includes server hosting, security systems, and analytics — all subject to strict confidentiality agreements
  • Legal authorities: When required by law or a valid court order

joitoto never shares player data for marketing, advertising, or third-party business purposes unrelated to platform operations. Any data sharing is carried out on a minimum-necessary basis only.

5. Data Retention and Security Measures

Joitoto stores player data in a secure environment with multi-layered protection measures:

  • 256-bit SSL encryption for all data communications in transit
  • Data encryption at rest for sensitive information such as financial details and identity documents
  • Role-based access controls ensuring only authorised staff can access specific data
  • Data backed up across multiple server locations to ensure continuity and data recovery
  • Real-time monitoring system that detects and blocks unauthorized access attempts
  • Regular security audits conducted by joitoto's internal and external security teams

Data retention period: joitoto retains player data for as long as necessary to fulfill the purpose of collection or to comply with legal requirements. Active account data is retained for the duration the account remains active. Once an account is closed, certain data is kept for a period defined by applicable law before being securely deleted.

6. Cookies and Tracking Technologies

The joitoto platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze platform usage patterns.

Types of cookies used by joitoto:

  • Required session cookies: Required to enable core platform functions such as login, identity verification, and navigation — cannot be disabled
  • Functional cookies: Stores preferences such as your chosen language, display settings, and game mode — enabling a more personalized experience
  • Analytics cookies: Collects aggregated data on how the platform is used to help us identify areas for improvement — contains no personally identifiable information
  • Security cookies: Helps detect suspicious activity and protect your account from unauthorized access attempts

You can manage or disable certain cookies through your browser settings. However, disabling required cookies may affect the functionality of certain features on the joitoto platform.

7. Your Rights as a joitoto Player

As a joitoto player, you have the following rights regarding your personal data. joitoto is committed to facilitating the exercise of these rights without unnecessary burden:

8. International Data Transfers

In the course of platform operations, joitoto player data may be transferred to and stored on servers located outside Malaysia. joitoto ensures that any such data transfers are carried out with adequate safeguards and in compliance with internationally recognised data protection standards.

All third-party providers involved in international data transfers are required to comply with security and confidentiality standards no less stringent than those practiced by joitoto itself. Legally binding data processing agreements are in place with all relevant parties.

Regardless of where your data is physically stored, the level of protection applied to your personal information will always meet or exceed the standards set out in this Privacy Policy.

9. Protection of Children's Data

The joitoto platform is not intended for individuals under the age of 18. joitoto does not knowingly collect personal information from minors.

If joitoto discovers that personal data of an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that information and close the associated account.

If you become aware that someone under the age of 18 has registered or is using the joitoto platform, please contact our support team immediately so that appropriate action can be taken.

10. Amendments to This Privacy Policy

Joitoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the way we operate.

Any material changes to this Policy will be communicated to players via a prominent notice on the joitoto platform or by email. The date of the most recent update is always displayed at the top of this document. Continued use of the joitoto platform after any changes constitutes acceptance of the amended Policy.

We encourage players to check this page regularly for any updates.

11. How to Contact joitoto's Privacy Officer

For any questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data by joitoto, please contact us through the following channels:

  • Live Chat: Available 24/7 within the joitoto platform — the fastest channel for an immediate response
  • Privacy Email: [email protected] (typical response time: within 2 business days)
  • Service language: Bahasa Malaysia and English

We are committed to handling every privacy-related inquiry and request thoroughly and within a reasonable timeframe. Your privacy rights matter to us and no inquiry will be treated as trivial.

For more information on your rights and responsibilities regarding full platform usage, please refer to joitoto Terms and Conditions.


Joitoto Players' Rights Over Their Personal Data

Joitoto respects and upholds the privacy rights of every player. Here are the rights you hold.

Right of Access

You have the right to request a copy of all personal data joitoto holds about you. We will provide this information within a reasonable timeframe upon receipt of your request.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request a correction and joitoto will update it within a reasonable timeframe.

Right to Erasure

You may request deletion of your personal data under certain conditions, such as after account closure where no legal obligation requires further retention.

Right to Restriction

You may request that joitoto restrict the processing of your data in certain situations while a related dispute or review is pending resolution.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format to facilitate transfer to another platform where applicable.

Right to Object

You have the right to object to the processing of your personal data for certain purposes, including direct marketing, and joitoto will respect that objection.

To exercise any of the above rights, contact the joitoto privacy team via Live Chat or email at [email protected]


Your Privacy Is Fully Protected at joitoto

Play with peace of mind knowing your data is protected by bank-grade encryption and a genuine commitment to privacy. Register today and experience the difference.

For adults (18+) only. joitoto is committed to player privacy and data security.


Bahasa Melayu