Full Data Protection

Privacy Policy nettoto – Malaysia Player Personal Data Protection

At nettoto, we take your privacy seriously. This policy explains transparently how we collect, store, use, and protect your personal data — so you know exactly what happens with your information at every step.

Last updated: 15 January 2026  |  Read time: ±10 minutes
Commitment nettoto Privacy in Summary

Six core principles that shape how nettoto handles the personal data of Malaysian players every day.

Full 256-bit SSL Encryption

All data transmitted between your device and nettoto's servers is protected by SSL 256-bit encryption — the same standard used by Malaysia's major banks — ensuring no third party can intercept your information.

Data Minimisation

Nettoto only collects data that is genuinely necessary to operate the platform — nothing more, nothing less. We do not collect information that is irrelevant or unnecessary for the stated purposes.

No Sale of Data to Third Parties

Your personal data is never sold, rented, or exchanged to third parties for marketing purposes without your explicit consent. This is an absolute commitment from nettoto that has never been compromised.

You Control Your Own Data

You have the right to access, amend, download, or request deletion of your personal data at any time via your account panel or by contacting our support team directly.

Secure Servers & Regular Backups

Your data is stored in data centres protected by strict physical and digital access controls. Regular backups ensure your data is never lost in the event of an unexpected technical incident.

Transparent & Easy to Understand

Our privacy policy is written in plain, easy-to-understand language — not complex legal jargon. We believe every player deserves a clear understanding of how their data is handled.

Note: This Privacy Policy forms part of the agreement between you and nettoto. By using our platform, you agree to the terms set out in this policy. Please read it carefully and contact us if you have any questions.

1. Introduction

Nettoto cares about your privacy. We understand that sharing personal information with any online platform requires a great deal of trust — and we do not take that responsibility lightly.

This Privacy Policy outlines our practices regarding the collection, use, storage, and protection of personal data for players using the nettoto platform at nettoto.fun. It also explains your rights as a data owner and how to exercise those rights.

This policy applies to all users of the nettoto platform, including those who browse the website, register as members, make deposits, play games, or use any other services we offer. Whether you access our platform from Malaysia or any other country, this Privacy Policy applies to you.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection principles across all our data handling practices.

2. Types of Data We Collect

Nettoto only collects data for legitimate and stated purposes. The following are the categories of data we collect:

Personal Identification Data:

  • Full name as it appears on your official identification document.
  • Date of birth for age verification.
  • National identification number (MyKad) or passport number.
  • Current residential address.
  • Active mobile phone number.
  • A valid email address.

Financial Data:

  • Bank account or digital wallet details used for transactions (full account numbers are not stored — only the last few digits for reference).
  • Deposit and withdrawal history.
  • Transaction records and financial activity on the platform.

Technical & Usage Data:

  • IP address and approximate location data (state/city).
  • Device type, operating system, and web browser used.
  • Login history including date, time, and location.
  • Game history and wagering activity on the platform.
  • Cookie and browsing session data.
Data Categories Purpose of Collection Retention Period
Personal Identification Account Registration & KYC Throughout active account + 5 years
Financial Data Transaction processing 7 years (legal requirement)
Technical Data Security & improvements 2 years
Game History Audit & dispute resolution 5 years
Cookie Data User experience Up to 12 months

3. How We Use Your Data

The data we collect is used for the following legitimate and transparent purposes:

  • Account Management: Create, verify, and maintain your account securely, including the required KYC process.
  • Transaction Processing: Process deposits, withdrawals, and all financial transactions accurately and on time.
  • Platform Security: Detect and prevent fraud, multi-account use, money laundering, and any suspicious or terms-violating activity.
  • Customer Support: Resolve complaints, inquiries, and technical issues you report to our support team.
  • Legal Compliance: Comply with applicable legal and regulatory obligations, including anti-money laundering reporting requirements.
  • Platform Improvements: Analyze usage patterns in aggregate (not individually) to improve the nettoto interface, games, and services.
  • Essential Communications: Send account-related notifications such as transaction confirmations, security alerts, and important policy updates.
  • Marketing Communications: Send information about promotions, bonuses, and the latest offers — you can opt out of marketing communications at any time.

Nettoto will not use your data for any purpose beyond those stated above without obtaining your consent first.

4. Data Sharing with Third Parties

Nettoto does not sell your personal data. However, in certain limited situations, we may share your data with the following parties:

  • Payment Processors: DuitNow, FPX, Touch 'n Go, Boost, and GrabPay to process your financial transactions. All processors are bound by strict confidentiality agreements and high data security standards.
  • Game Providers: Game software providers such as Pragmatic Play, Evolution Gaming, and PG Soft may receive minimal game session data from you for technical operational purposes.
  • Legal Authorities: We will disclose data when required by law, court order, or a competent regulatory authority in Malaysia.
  • IT Service Providers: Third-party companies that help us operate our technical infrastructure, bound by strict data processing agreements.
Our Guarantee: All third parties we work with are required to meet privacy and security standards equal to or exceeding nettoto's own. We are responsible for ensuring your data is protected at every level.

5. Data Storage & Security Measures

Nettoto continuously invests in security infrastructure to keep your data protected at all times. The security measures we implement include:

  • Data encryption in transit: SSL/TLS 256-bit encryption for all communications between your device and our servers.
  • Data encryption at rest: All sensitive data is stored in encrypted form in our database.
  • Strict access controls: Only authorised personnel may access player data, and all access is regularly audited.
  • Regular security testing: Penetration testing and security audits are conducted regularly by independent parties.
  • Data Backup: Data is automatically backed up to secure, separate locations to ensure continuity of service.
  • 24/7 Monitoring: An automated monitoring system detects any suspicious activity or unauthorized access attempts in real time.

While we take all reasonable precautions, no online system can be guaranteed 100% secure. Should a data breach materially affecting your personal data occur, we will notify you within a reasonable timeframe in accordance with applicable legal requirements.

6. Cookies & Tracking Technologies

Nettoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session security, and transaction operations. These cookies cannot be disabled.
  • Performance Cookies: Help us understand how players use the platform — data is collected in aggregate and without individual identification.
  • Functional Cookies: Save your preferences such as language and display settings so you don't have to reconfigure them each time.
  • Marketing Cookies: Used to deliver more relevant ads and promotions to you. You may opt out of this type of cookie.

You can manage or delete cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the nettoto platform.

7. Your Rights as a Data Subject

As a nettoto player and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights, which we fully respect:

Right of Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Request the correction of inaccurate or incomplete data in our records.

Right to Erasure

Request the deletion of your personal data, subject to legal retention obligations.

Right to Restriction of Processing

Request restriction of your data processing in certain situations permitted by law.

Right to Data Portability

Receive your data in a machine-readable format for transfer to another provider.

Right to Object

Object to the use of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact us via Live Chat on the platform or email us at [email protected]. We will respond within 30 business days.

8. Children's Data Protection

The nettoto platform is exclusively for individuals aged 21 years and above only. We do not knowingly collect personal data from individuals below this age limit.

We implement age verification during registration and through our KYC process. If we find that data from an individual under the age of 21 has been collected unintentionally, we will delete that data immediately and close the relevant account.

If you believe that someone under the age limit has registered or is using our platform, please notify us immediately through customer support so we can take appropriate action.

9. Third-Party Links & Services

The nettoto platform may contain links or integrations with third-party services such as payment processors and game providers. When you use these third-party services, their own privacy policies apply — and nettoto is not responsible for their privacy practices.

We encourage you to read the privacy policy of each third-party service you use within the nettoto platform. If you have any concerns about the security of a particular third-party service, please contact our support team first.

nettoto's Guarantee: We only work with third-party service providers that have a strong data security track record and have passed our internal review process. None of your data is shared with any third party that we do not trust.

10. Changes to This Privacy Policy

Nettoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other legitimate reasons.

  • Any significant changes will be communicated to players via in-platform notifications or email to your registered address.
  • The "Last updated" date at the top of this page will always reflect the latest version of this policy.
  • Continued use of the nettoto platform after changes are published will be considered your acceptance of the latest version of this Privacy Policy.

We encourage you to review this page regularly — at least every few months — to stay informed about how we handle your data.

11. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us via:

  • Live Chat: Available 24/7 directly within the nettoto platform — the fastest way to get a response.
  • Email: [email protected] — for written inquiries and official requests relating to personal data.

We are committed to responding to all privacy-related inquiries within a reasonable timeframe. For formal data subject access requests, the response period is up to 30 working days in line with the requirements of the Personal Data Protection Act 2010.

If you are not satisfied with how we have handled your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

Your Data Secure with nettoto

Your privacy is our priority. With full encryption, a transparent policy, and controls in your hands, nettoto is a platform you can trust for a safe and enjoyable gaming experience.

Platform for users aged 21 and above only. Play responsibly.

Bahasa Melayu