At CantikToto, your privacy is a fundamental commitment — not a checkbox. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is used, and the rights you hold as a user of our platform across Malaysia.
All data in transit protected by SSL
We never sell your personal data
Strict internal data access policies
Access, correct, or delete your data
We only collect data that is genuinely necessary to deliver our services.
You will always know exactly what we collect and why we collect it.
All data is stored on encrypted servers with restricted access controls.
Data is only shared with vetted third parties required to operate the platform.
Data is retained only for as long as legally or operationally required.
You can access, correct, or request deletion of your data at any time.
This Privacy Policy ("Policy") is issued by CantikToto ("CantikToto", "we", "us", or "our"), the operator of the online gaming platform accessible at https://cantiktoto.cam. This Policy explains how CantikToto collects, uses, discloses, stores, and protects the personal data of individuals ("you", "User", or "Member") who access or use our website, mobile interface, gaming services, customer support channels, and any related services (collectively, the "Platform").
CantikToto is committed to handling your personal data responsibly and in compliance with applicable data protection laws and regulations. This Policy applies to all personal data processed in connection with your use of the CantikToto Platform, regardless of your location within Malaysia or otherwise.
By registering an Account on the CantikToto Platform or continuing to use our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.
Note: If you do not agree with any part of this Privacy Policy, you should discontinue use of the Platform and contact our support team to arrange Account closure and data handling queries.
In this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, email address, contact number, payment details, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion. |
| "Data Controller" | CantikToto, the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party engaged by CantikToto to process Personal Data on its behalf in accordance with this Policy. |
| "Cookies" | Small text files placed on your device by the Platform to enable functionality, analytics, and personalisation features. |
| "KYC Data" | Know Your Customer data — identity documents and verification information collected for regulatory compliance purposes. |
| "Platform" | The CantikToto website, mobile interface, gaming environment, and all associated digital services accessible via https://cantiktoto.cam. |
CantikToto collects Personal Data that you provide directly, data generated by your use of the Platform, and data obtained from third-party service providers in connection with the delivery of our Services. The categories of Personal Data we may collect include:
When you register an Account, we collect your full legal name, date of birth, email address, contact telephone number, registered address, and a username and password of your choosing. This information is required to create and maintain your Account and to verify your identity.
To comply with regulatory requirements and to process withdrawals, we may request copies of government-issued identification documents such as your Malaysian identity card (MyKad), passport, or other valid photo identification, together with proof of address documentation. KYC data is handled with the highest level of confidentiality.
We collect data relating to deposits, withdrawals, and wagers conducted through your Account, including payment method references (such as your bank account number suffix, FPX transaction reference, or e-wallet identifier for Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, or Public Bank), transaction amounts in MYR, timestamps, and transaction outcomes. We do not store full card numbers or complete banking credentials.
We automatically collect technical data when you access the Platform, including your IP address, device type, browser type and version, operating system, referring URLs, pages visited, session duration, game history, and clickstream data. This data is used for security monitoring, platform optimisation, and responsible gambling analysis.
If you contact our customer support team via live chat, email, or any other channel, we retain records of those communications including the content of messages and the date and time of contact. This data is used to resolve queries and to improve our service quality.
Where you have opted in to receive marketing communications, we retain your marketing preferences and consent records. You may update or withdraw your marketing preferences at any time through your Account settings or by contacting our support team.
CantikToto processes your Personal Data for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, KYC data |
| Identity and age verification (21+ enforcement) | KYC data, registration data |
| Processing deposits and withdrawals in MYR | Financial data, KYC data |
| Delivering gaming services and maintaining game records | Usage data, transaction data |
| Fraud prevention and security monitoring | Technical data, financial data, usage data |
| Regulatory compliance and anti-money laundering (AML) | KYC data, financial data, communications data |
| Customer support and dispute resolution | Communications data, account data |
| Responsible gambling monitoring and interventions | Usage data, transaction data, communications data |
| Platform improvement and analytics | Technical data, usage data (aggregated or anonymised) |
| Sending promotional communications (with consent) | Registration data, marketing preferences |
CantikToto processes your Personal Data on the following legal grounds:
CantikToto does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your Personal Data with the following categories of recipients where strictly necessary:
We share financial data with payment processors and financial institutions required to facilitate deposits and withdrawals, including FPX network operators, Malaysian bank partners (such as Maybank, CIMB, Public Bank, Hong Leong), e-wallet platforms (Touch 'n Go eWallet, Boost, GrabPay), DuitNow network operators, and cryptocurrency exchange infrastructure providers.
We engage third-party KYC and identity verification service providers to assist in verifying the identity and age of Users. These providers are contractually bound to process your data solely for the purpose of identity verification and in compliance with applicable data protection standards.
We share limited data with technology partners who provide infrastructure services including cloud hosting, data analytics, cybersecurity monitoring, and customer support software. All such providers are subject to data processing agreements that restrict their use of your data.
Where game software is provided by licensed third-party developers, certain gameplay data may be shared with those providers for the purposes of game delivery, result verification, and RTP (Return to Player) auditing.
CantikToto may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required by applicable law, where disclosure is necessary to prevent or detect criminal activity, or where ordered to do so by a court of competent jurisdiction.
Commitment: In all cases of data sharing, CantikToto applies the principle of data minimisation — sharing only the data that is strictly necessary for the specific purpose at hand. We do not share your data for third-party advertising or profiling purposes.
CantikToto uses cookies and similar tracking technologies to enable essential platform functionality, improve user experience, and monitor Platform performance. When you first access the Platform, you will be presented with a cookie consent notice.
The categories of cookies used on the Platform include:
You may manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect certain platform features. CantikToto does not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.
CantikToto retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 7 years after closure |
| KYC / identity verification documents | 5 years from last account activity (regulatory requirement) |
| Financial transaction records | 7 years from transaction date (AML compliance) |
| Customer support communications | 3 years from date of last contact |
| Usage and technical logs | Up to 12 months from collection date |
| Marketing consent records | Until consent is withdrawn, plus 3 years thereafter |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.
CantikToto implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While CantikToto employs industry-standard security measures, no online platform can guarantee absolute security. Users are encouraged to use strong, unique passwords and to enable 2FA on their Accounts to further protect their data.
The CantikToto Platform primarily serves users in Malaysia, and the majority of data processing operations are conducted within data centres serving the Asia-Pacific region. However, some of our technology and service providers may be located in other jurisdictions.
Where Personal Data is transferred outside of Malaysia to a third country, CantikToto ensures that appropriate safeguards are in place to protect the transferred data in accordance with applicable data protection standards. Such safeguards may include standard contractual clauses, binding corporate rules, or reliance on jurisdictions with equivalent data protection frameworks.
By using the CantikToto Platform, you acknowledge that your Personal Data may be transferred to and processed in countries other than Malaysia, subject to the safeguards described above.
As a User of the CantikToto Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team at the details provided in Section 14.
Request a copy of the Personal Data CantikToto holds about you, including information on how it is used.
Request correction of inaccurate or incomplete Personal Data held on your Account.
Request deletion of your Personal Data where there is no longer a legal basis for its retention ("right to be forgotten").
Request that we limit the processing of your data in certain circumstances, such as during a dispute.
Request a copy of your Personal Data in a structured, machine-readable format for transfer to another controller.
Object to processing of your Personal Data based on legitimate interests, or to the use of your data for direct marketing purposes.
Response Timeline: CantikToto will acknowledge all data rights requests within 5 business days and endeavour to fulfil valid requests within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline.
CantikToto's Platform and Services are strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory part of our registration and KYC process, and we enforce this requirement rigorously.
If CantikToto becomes aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated Account. Any winnings accrued by underage users will be forfeited in accordance with our Terms & Conditions.
If you believe that a minor has registered on our Platform, please contact us immediately at the details provided in Section 14.
CantikToto reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform operations. The effective date of the most current version is displayed at the top of this page.
Where changes to this Policy are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will notify registered Account holders via email and/or by displaying a prominent notice on the Platform prior to the changes taking effect.
Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. We recommend reviewing this page periodically to remain informed of how your data is handled.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by CantikToto, please contact our Data Protection team through the following channels:
CantikToto will acknowledge all privacy-related enquiries within 5 business days. We are committed to resolving data concerns fairly, transparently, and in a timely manner. Where you are not satisfied with our response, you retain the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
Related Documents: This Privacy Policy is part of a set of policies governing your use of CantikToto. Please also review our Terms & Conditions and Responsible Gambling Policy for a complete understanding of your rights and obligations.
Your Data, Your Rights
CantikToto is Malaysia's most trusted online casino — built on transparency, security, and a genuine commitment to fair play. 21+ only. Play responsibly.