Privacy Policy Gengtoto

Gengtoto takes our responsibility to protect your personal information seriously. This Privacy Policy explains in detail how the gengtoto platform collects, processes, stores, discloses, and protects the personal information you provide to us when using our services.

This Policy applies to all registered members, prospective members, and any individual accessing the gengtoto website or mobile app – regardless of the access method used. It covers all products and services offered under the gengtoto brand, including online slots, Live Casino, Sports Betting, and the VIP programme.

By registering for or using the gengtoto platform, you confirm that you have read and agreed to this Privacy Policy. This Policy should be read together with Terms and Conditions gengtoto which forms the entire agreement governing the use of our platform.

Gengtoto collects various categories of information to enable us to provide a secure, efficient, and tailored service to our members. Below is a detailed breakdown of the information we collect:

• Full name as per official identification document
• Date of birth (for age verification)
• Malaysia National ID number (MyKad) or passport number
• Active email address
• Malaysian mobile phone number
• Account password (stored in encrypted hash form, not human-readable)

• Image or digital copy of National ID card or passport
• Bank statement or utility bill as proof of address
• Selfie holding your identification document (if required for further verification)

• Bank account number and bank name (for withdrawal processing)
• Deposit and withdrawal history
• Registered e-wallet information (TNG, GrabPay, and others)

• Game history, wagering, and results
• Preferred games and usage patterns
• Session time and play duration

• IP address and general location data (state/region)
• Device type, operating system, and browser version
• Cookie and login session data
• Activity log for security and fraud detection purposes

Gengtoto uses collected information solely for lawful, necessary, and relevant purposes in connection with the delivery of our services. We do not use your data for unrelated purposes or in ways that conflict with your interests.

• Account Management: Allowing you to log in, manage your profile, and securely access all gengtoto platform features
• Transaction Processing: Processing deposits, withdrawals, and bonus payments promptly and accurately
• Identity Verification: Ensuring only eligible individuals – aged 18 and above with valid identification – use the platform
• Platform Security: Detecting and preventing fraudulent activity, money laundering, and unauthorised access to your account
• Customer Support: Enabling our team to provide accurate and effective assistance when you contact us
• Service Improvement: Analysing usage patterns in aggregate to improve gengtoto's interface, performance, and product offerings
• Service Communications: Sending important notifications related to your account, transactions, terms updates, and promotions you have subscribed to
• Legal Compliance: Meeting reporting and record-keeping obligations required under Malaysian law

Gengtoto does not sell, rent, or trade member personal information to any third party for their own marketing purposes. This is a fundamental principle we do not compromise on.

However, in certain situations, gengtoto may need to share some of your information with the following parties:

We work with trusted third-party companies to support platform operations. This includes payment gateway providers, identity verification service providers, and gaming platform providers. All third parties are bound by strict confidentiality agreements and may only use your information for purposes we direct.

Gengtoto may disclose your personal information to Malaysian government authorities, law enforcement agencies, or courts when required by law, court order, or valid legal process. In such situations, we will endeavour to notify you in advance where the law permits.

Information may be shared with third-party security parties if gengtoto believes there is a serious threat to platform security, other members' accounts, or to prevent criminal activity.

Gengtoto continuously invests in security infrastructure to ensure your data is protected at every stage – in transit, in processing, and in storage.

All data transmitted between your device and gengtoto's servers is protected by 256-bit SSL/TLS encryption — the same standard used by banking institutions in Malaysia. This means sensitive information such as your password and banking details cannot be read by any party, even if the data is intercepted during transmission.

Access to member data within the gengtoto system is restricted on a need-to-know basis. Only staff with a legitimate operational need are permitted to access member personal data, and all access is logged and audited on a regular basis.

Member personal and financial data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and physical security controls. Passwords are stored as one-way hashes using irreversible algorithms.

Gengtoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website or use our app.

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are necessary for the platform to function properly.
• Performance Cookies: Helping us understand how users interact with the platform to identify and resolve technical issues.
• Functional Cookies: Saving your preferences such as language, theme, and display settings to ensure a more personalised experience.
• Analytics Cookies: Used in aggregate and anonymised form to understand general usage patterns and improve the platform.

You can control or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the gengtoto platform and prevent you from logging in or using certain features.

As a gengtoto member and data subject under Malaysia's PDPA, you have the following rights regarding the personal data we hold:

Gengtoto retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes set out in this Privacy Policy. The specific retention periods are as follows:

• Active Account Information: Throughout the active account period
• Financial Transaction Records: Minimum 7 years after the transaction, in line with Malaysian accounting legal requirements
• KYC Documents: Minimum 5 years after account closure or in line with Malaysia's AMLA requirements
• Game Activity Log: 2 years from the date of record
• Security and Technical Log: 90 days to 1 year depending on log type

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

The gengtoto platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that we have collected data from a minor, we will take immediate action to delete that data and close the account in question. If you believe a minor has registered a gengtoto account, please contact us immediately via Live Chat or our support email.

Gengtoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer.

For significant amendments that affect your rights, gengtoto will provide at least 14 days' notice before the changes take effect via email to your registered address and/or in-app notification. For minor amendments that do not materially affect your rights, updates will be displayed on this page with a revised update date.

Continued use of the gengtoto platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact gengtoto's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 on the gengtoto app or website — the fastest way to get immediate assistance
• Privacy Email: [email protected] – for data access requests, corrections, or privacy-related concerns
• General Support Email: [email protected] – for general account enquiries

We will endeavour to respond to all privacy-related enquiries within 14 business days. For more complex requests such as full data access requests, the response period may be up to 21 business days.