Privacy Policy

This Privacy Policy (the "Policy") is issued by YoungToto (the "Platform", "we", "us", or "our") and applies to all personal data processed in connection with your use of the YoungToto online casino and sports betting platform, accessible at https://youngtoto.cam and any associated mobile interface.

YoungToto respects your right to privacy and is committed to handling your personal data responsibly, transparently, and in accordance with applicable international data protection principles. This Policy explains in plain terms: what categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, the period for which we retain it, and the rights available to you as a data subject.

By registering an account on YoungToto, completing any transaction, or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and YoungToto.

The following definitions apply throughout this Privacy Policy:

YoungToto collects the following categories of Personal Data in the course of operating the platform and fulfilling our legal, regulatory, and contractual obligations:

YoungToto collects Personal Data through the following channels and mechanisms:

• Direct Registration: When you create an Account, you voluntarily provide identity data, contact data, and account credentials.
• KYC Submission: When you submit identity verification documents as part of our mandatory KYC process prior to your first withdrawal.
• Deposit and Withdrawal Transactions: Financial data is generated and recorded automatically each time you conduct a transaction via any supported Malaysian payment method, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.
• Platform Usage: Technical data and activity data are collected automatically as you interact with the platform, including pages visited, games played, bets placed, and session duration.
• Cookies and Local Storage: Session and analytics data is collected via cookies and browser local storage as described in Section 10.
• Support Interactions: Communications data is collected when you contact us via live chat or email at [email protected].
• Third-Party Verification Partners: Where we use third-party KYC or fraud-screening services, additional identity verification data may be received from such partners.

YoungToto processes your Personal Data for the following clearly defined purposes:

• Account Management: To create, maintain, and administer your player account, including authentication and session management.
• Identity Verification (KYC): To verify your identity and age in compliance with anti-money laundering (AML) requirements and our 21+ age enforcement policy.
• Transaction Processing: To facilitate deposits, withdrawals, and any other financial transactions on your account via your selected Malaysian payment method.
• Bonus & Promotions Administration: To administer bonus credits, verify wagering requirements, and manage promotional entitlements.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crime.
• Responsible Gambling: To implement and monitor responsible gambling tools including deposit limits, session timers, cool-off periods, and self-exclusion requests.
• Customer Support: To respond to enquiries, process complaints, and provide technical assistance via live chat and email.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the platform's features, performance, and user experience.
• Legal & Regulatory Compliance: To comply with applicable licensing conditions, regulatory reporting requirements, and responses to lawful authority requests.
• Security: To protect the integrity of the platform and the security of player accounts against unauthorised access, data breaches, and cyber threats.

YoungToto processes Personal Data on one or more of the following lawful bases, as applicable to the specific processing activity:

• Contractual Necessity: Processing is necessary to perform our contractual obligations to you under the Terms & Conditions — including account management, transaction processing, and support services.
• Legal Obligation: Processing is required to comply with applicable laws and regulatory obligations, including KYC/AML requirements and responsible gambling regulatory conditions under our international licence.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a safe, secure, and commercially viable platform — including fraud prevention, platform security, and aggregate analytics — provided such interests are not overridden by your fundamental rights.
• Consent: Where processing is not covered by the above bases — for example, in relation to optional marketing communications — we will seek your explicit consent and provide clear mechanisms to withdraw that consent at any time.

YoungToto does not sell, rent, or trade your Personal Data to third parties for marketing purposes. We may disclose your Personal Data to the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: Malaysian payment partners (including those operating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank-based rails) receive transactional data necessary to process deposits and withdrawals.
• KYC and Identity Verification Partners: Third-party identity verification services receive document data and identity data to complete our mandatory KYC process.
• Fraud Prevention & AML Screening Services: Transaction and identity data may be shared with third-party screening services to detect financial crime, in accordance with our regulatory obligations.
• Technology Infrastructure Providers: Cloud hosting, content delivery, and platform infrastructure providers may have access to server-level data, subject to contractual confidentiality and data protection obligations.
• Regulatory Authorities: We may be required to disclose Personal Data to relevant licensing authorities, law enforcement agencies, or courts of competent jurisdiction in response to lawful requests or legal process. YoungToto will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisors: Legal, compliance, and financial advisors may access Personal Data on a strictly confidential basis where necessary for the conduct of professional services.

YoungToto operates under international online gaming licensing and may process and store Personal Data on servers located outside of Malaysia. Where Personal Data is transferred to recipients in jurisdictions that do not provide an equivalent level of data protection to that applicable in your home jurisdiction, YoungToto implements appropriate safeguards to protect such data, including:

• Contractual data protection clauses (standard contractual clauses or equivalent) binding recipient parties to equivalent data protection standards.
• Technical security measures including end-to-end encryption for data in transit between jurisdictions.
• Limiting international transfers to service providers whose jurisdictions have been assessed as providing adequate data protection frameworks.

By using the YoungToto platform, Malaysian players acknowledge and consent to the transfer of their Personal Data to servers and service providers located in jurisdictions outside Malaysia, subject to the safeguards described in this Section.

YoungToto retains Personal Data only for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable regulatory obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle management procedures.

YoungToto uses cookies and similar browser-based storage technologies to operate and improve the platform. The following categories of cookies are deployed:

• Strictly Necessary Cookies: These cookies are essential to the operation of the Platform. They enable core functionality such as session management, user authentication, and security token validation. These cookies cannot be disabled without impairing platform access.
• Functional Cookies: These cookies enable enhanced features such as remembering your preferred language, saving your session preferences, and maintaining your last-viewed state. Disabling functional cookies may degrade your user experience.
• Analytics Cookies: Aggregate, anonymised usage data (page views, session duration, navigation paths) is collected to understand how the platform is used and identify areas for improvement. Individual players are not identifiable from analytics data.

YoungToto does not deploy third-party advertising or cross-site tracking cookies. Your browsing behaviour on YoungToto is not shared with advertising networks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into and using the Platform. Most modern browsers allow you to view, delete, and block cookies via their privacy or settings menus.

Subject to applicable data protection principles and any overriding legal obligations (such as AML record-keeping requirements), you hold the following rights with respect to your Personal Data:

To exercise any of these rights, please contact our data team via email at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 days. Complex or voluminous requests may require up to 90 days, in which case we will notify you of the extended timeline.

YoungToto is strictly an adults-only platform. Registration and use of the Platform is limited to persons aged 21 years and above. We do not knowingly collect, process, or store Personal Data from individuals under the age of 21.

If YoungToto becomes aware, or has reasonable grounds to suspect, that a registered player is under 21 years of age, the relevant Account will be immediately suspended pending age verification. Where the player is confirmed to be under 21, the Account will be permanently closed, all activity on the Account will be voided, and any deposited funds will be returned to the originating payment source.

Parents and guardians who believe that a minor may have registered on YoungToto are encouraged to contact us immediately via live chat or at [email protected].

YoungToto implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS 1.3 Encryption: All data transmitted between your browser or device and YoungToto's servers is encrypted in transit using TLS 1.3, the current industry-standard transport layer security protocol.
• AES-256 At-Rest Encryption: Personal Data and financial records stored on our servers are encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to Personal Data is strictly limited to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication requirements.
• Intrusion Detection: Real-time monitoring systems are deployed to detect and respond to potential security threats, unusual access patterns, and data breach indicators.
• Regular Security Audits: YoungToto's platform infrastructure undergoes periodic security assessments and penetration testing by qualified information security professionals.
• Data Breach Response: In the event of a confirmed Personal Data breach that poses a significant risk to affected players, YoungToto will notify affected players without undue delay following discovery and remediation of the breach.

While YoungToto takes all reasonable precautions to protect your data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. You also bear responsibility for maintaining the security of your own Account credentials.

YoungToto may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, updates to applicable legal requirements, or improvements to our platform. Material changes will be communicated to registered players via a platform notification or email to your registered address at least 7 days prior to the effective date of the amended Policy.

The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the YoungToto platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms.

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way in which YoungToto processes your Personal Data, please contact us using the details below. We take all privacy-related enquiries seriously and aim to respond within 5 business days.

• Data Enquiries Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed to our data team promptly.
• Live Chat: Available 24/7 via the YoungToto platform. For complex data rights requests, email is preferred to ensure a written record.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the supervisory authority in your jurisdiction, or to the data protection authority of the jurisdiction under which YoungToto holds its international operating licence.