Privacy Policy

1. Introduction

relaxtoto ("we", "us", "our", "the Platform") operates the online betting and gaming platform accessible at relaxtoto.cam. In the course of providing our services to registered players ("you", "the User", "the Player"), we collect and process personal data as described in this Privacy Policy.

This Privacy Policy applies to all personal data collected through the relaxtoto website, mobile web application, customer support channels, and any associated digital services. It should be read alongside our Terms & Conditions, which govern the overall service relationship between you and relaxtoto.

By creating an account on relaxtoto and accepting our Terms and Conditions, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you should not register an account or use our services.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, relaxtoto.
• "Data Processor" means any third party that processes Personal Data on behalf of relaxtoto under a contractual arrangement.
• "Data Subject" means the individual to whom Personal Data relates — in this context, any registered Player or visitor to the relaxtoto platform.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data.
• "KYC" means Know Your Customer — the identity and address verification process required under our licensing and anti-money laundering obligations.
• "Cookies" means small text files placed on a user's device by a website that are used to store preferences, session data, and behavioural information.

3. Data Controller

relaxtoto acts as the Data Controller for all Personal Data collected through its platform and services. As Data Controller, relaxtoto is responsible for determining the purposes for which your Personal Data is collected and the manner in which it is processed.

For data protection enquiries, players may contact our support team via live chat on the platform or via the email address above. We aim to respond to all data-related enquiries within 30 days of receipt.

4. Data We Collect

4.1 Registration Data

When you register an account on relaxtoto, we collect the personal information you provide directly, including your full legal name, date of birth, residential address (including city and postcode — for example, players in Kuala Lumpur, Penang, or Johor Bahru), email address, and preferred contact number.

4.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and licensing requirements, we collect identity verification documents prior to processing any withdrawal. These include government-issued photo identification (Malaysian MyKad, Passport, or Driver's Licence), proof of address (utility bill or bank statement dated within three months), and a verification selfie. KYC documents are handled with heightened security controls and retained only for as long as required by applicable regulatory obligations.

4.3 Financial Data

We collect information relating to your payment transactions, including your preferred payment method (e.g., Maybank, CIMB, Touch 'n Go eWallet, DuitNow, GrabPay, FPX), transaction amounts in MYR or cryptocurrency, deposit and withdrawal history, and account balance. Full card or bank account numbers are not stored by relaxtoto — payment processing is handled by certified third-party payment service providers.

4.4 Gaming Activity Data

We record all betting and gaming activity associated with your account, including wagers placed, games played, bet amounts, winnings, session durations, and bonus usage. This data is necessary for the operation of the service, dispute resolution, responsible gambling monitoring, and regulatory compliance.

4.5 Technical and Device Data

When you access the relaxtoto platform, we automatically collect certain technical data including your IP address, device type and model, operating system, browser type and version, referring URLs, and approximate geolocation derived from IP. This data is used for platform security, fraud prevention, and improving service delivery.

4.6 Communications Data

If you contact our customer support team via live chat or email, we retain records of those communications, including the content of your messages and the date, time, and channel of contact. This information is used to resolve your enquiry, train our support team, and maintain a history of interactions for dispute resolution purposes.

4.7 Behavioural and Preference Data

We collect data about how you interact with the platform, including pages visited, features used, game preferences, session frequency, and responses to promotional communications. This data informs product development, responsible gambling risk profiling, and — where you have given consent — personalised communications.

5. Data Processing

relaxtoto processes your Personal Data for the following specific purposes:

Processing Purpose	Data Used	Legal Basis
Account registration and management	Registration data, contact details	Contractual necessity
Identity verification (KYC)	KYC documents, date of birth	Legal obligation
Payment processing and fraud prevention	Financial data, IP address, device data	Contractual necessity / Legitimate interests
Provision of gaming services	Gaming activity data, account balance	Contractual necessity
Customer support	Communications data, account data	Contractual necessity
Responsible gambling monitoring	Gaming activity, session data, behavioural data	Legal obligation / Legitimate interests
Regulatory compliance and AML	KYC data, financial data, transaction history	Legal obligation
Platform security and abuse prevention	Technical data, behavioural data	Legitimate interests
Marketing and personalised promotions	Preference data, gaming history, contact details	Consent
Platform analytics and improvement	Technical data, behavioural data	Legitimate interests

6. Legal Basis for Processing

6.1 Contractual Necessity

Much of the Personal Data we process is necessary to fulfil the contractual relationship established when you register an account and accept our Terms and Conditions. Without processing your registration data, financial data, and gaming activity data, we could not provide the services you have contracted us to deliver.

6.2 Legal Obligation

We are required by our operating licence and applicable anti-money laundering regulations to collect and verify identity documents, monitor transaction patterns, retain financial records, and report suspicious activity to relevant authorities. Processing carried out under this basis cannot be refused or restricted by the Data Subject.

6.3 Legitimate Interests

We process certain data on the basis of our legitimate interests in maintaining platform security, preventing fraud and bonus abuse, monitoring for problem gambling indicators, and improving our services. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms as a Data Subject.

6.4 Consent

Where we process your Personal Data for marketing purposes — such as sending promotional emails about bonuses, new games, or Liga Super Malaysia betting markets — we do so only with your explicit consent. You may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting our support team.

7. Data Sharing and Disclosure

7.1 Payment Service Providers

We share necessary financial and identity data with our certified payment processing partners to facilitate deposits and withdrawals via Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks. These processors are contractually bound to process data only for the purposes we specify and to maintain appropriate security standards.

7.2 Identity Verification Providers

KYC verification may be conducted in whole or in part by contracted third-party identity verification service providers. These providers receive only the data necessary to complete the verification process and are bound by confidentiality obligations.

7.3 Gaming Platform and Technology Providers

We work with licensed game studios and platform technology providers to deliver our casino and sports betting products. These providers may process limited account and session data as necessary to deliver the games and services you access through the relaxtoto platform.

7.4 Regulatory Authorities

We may be required to disclose Personal Data to regulatory authorities, licensing bodies, or law enforcement agencies where mandated by applicable law or our licensing conditions. Such disclosures will be made strictly in accordance with our legal obligations and will not exceed what is required.

7.5 No Sale of Personal Data

relaxtoto does not sell, rent, or trade your Personal Data to any third party for their independent marketing or commercial purposes. Data sharing is limited to the categories described in this section and is subject to contractual safeguards in each case.

8. Cookies & Tracking Technologies

8.1 What We Use

The relaxtoto platform uses cookies and similar tracking technologies (including web beacons and session tokens) to operate core platform functions, maintain your login session, remember your preferences, and gather aggregated analytics data about how the platform is used.

8.2 Types of Cookies

• Essential Cookies: Required for core platform functionality including authentication, session management, and security. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Used to remember your preferences such as language selection, preferred sports markets, and display settings.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate and use the platform. Used to identify usability issues and improve the service.
• Marketing Cookies: Used only where you have given consent to receive personalised promotional content based on your platform activity and preferences.

8.3 Managing Cookies

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the relaxtoto platform but may affect the availability of certain personalised features. Note that disabling essential cookies will impair your ability to log in and use core platform functions.

9. Data Retention

relaxtoto retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following indicative retention periods apply:

• Account and registration data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in line with AML and licensing requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years in accordance with standard financial record-keeping obligations.
• Gaming activity data: Retained for a minimum of 3 years to support dispute resolution and responsible gambling monitoring.
• Customer support communications: Retained for a minimum of 2 years from the date of the last interaction.
• Marketing consent records: Retained for the duration of consent and for a minimum of 1 year following withdrawal of consent as evidence of the consent given.

Where Personal Data is no longer required for any legitimate purpose, it will be securely deleted or anonymised in a manner that prevents re-identification.

10. Data Security

relaxtoto implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the relaxtoto platform;
• Encryption of sensitive data fields (including passwords and KYC document contents) at rest;
• Role-based access controls limiting employee access to Personal Data on a need-to-know basis;
• Regular third-party security audits and penetration testing of the platform;
• Two-factor authentication available for all player accounts;
• Automated fraud detection and unusual activity alerting systems.

In the event of a data breach that poses a risk to your rights and freedoms, relaxtoto will notify affected Data Subjects and relevant authorities in accordance with applicable data protection regulations and within the timeframes required by our licensing conditions.

11. Your Rights as a Data Subject

As a Data Subject, you hold the following rights in relation to your Personal Data held by relaxtoto. Requests to exercise any of these rights should be submitted to our support team via live chat or email and will be responded to within 30 days:

• Right of Access: You have the right to request a copy of all Personal Data we hold about you, along with information about how it is processed. We will provide this in a structured, commonly used format.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Some data fields (such as registered name and date of birth) may require supporting documentation to amend.
• Right to Erasure: In certain circumstances, you may request that we delete your Personal Data. This right is subject to overriding legal obligations — for example, we cannot erase KYC or financial records that we are legally required to retain.
• Right to Restrict Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest its accuracy or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your Personal Data be transferred to you or to another controller in a structured, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

12. Minors and Age Verification

The relaxtoto platform is strictly for use by persons aged 21 years and above. We do not knowingly collect, store, or process Personal Data relating to any individual under the age of 21. Age verification is conducted at the point of registration and during the KYC process.

If relaxtoto becomes aware that an account has been registered by or on behalf of a person under the age of 21, that account will be permanently closed, any associated funds will be dealt with in accordance with our licensing requirements, and all Personal Data collected in relation to that account will be retained only as required by applicable law and thereafter securely deleted.

If you are a parent or guardian and believe a minor has registered an account on our platform, please contact our support team immediately with relevant details so that appropriate action can be taken without delay.

13. International Data Transfers

relaxtoto operates under international online gaming licensing, and our data infrastructure, third-party service providers, and processing systems may be located in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Such safeguards may include contractual clauses requiring receiving parties to maintain data protection standards equivalent to those we apply, or reliance on the adequacy of data protection frameworks in the receiving jurisdiction. By using the relaxtoto platform and accepting this Privacy Policy, you consent to your Personal Data being transferred and processed in the jurisdictions in which our service providers and licensing infrastructure are based.

14. Changes to This Privacy Policy

relaxtoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players by email to their registered address and/or by publishing a prominent notice on the platform prior to the updated Policy taking effect.

The "Last Updated" date at the top of this page will be revised whenever the Policy is amended. Your continued use of the relaxtoto platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the platform and may request account closure in accordance with the procedure described in our Terms and Conditions.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the relaxtoto support team using the following channels:

Where you believe your data protection rights have not been adequately addressed, you retain the right to raise a complaint with the data protection supervisory authority in the jurisdiction applicable to your circumstances.