amintoto Privacy Policy

1. Who We Are

amintoto ("we", "us", "our") is an online gaming platform operating at https://amintoto.lat, offering casino games, sports betting, live dealer tables, slots, fishing games, and virtual sports primarily to English-speaking players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and beyond.

This Privacy Policy describes how amintoto collects, processes, stores, and protects your personal data when you use our website and services. By accessing or using amintoto, you acknowledge that you have read, understood, and agree to the data practices described herein.

2. Information We Collect

amintoto collects personal information only where it is necessary to provide our gaming services, fulfil legal obligations, and maintain the security of our platform. The categories of data we may collect include:

2.1 Account Registration Data

• Full name as per your identity document
• Date of birth (to verify you are aged 21 and above)
• Email address
• Username and encrypted password
• Country and state of residence (e.g., Selangor, Penang, Johor)
• Preferred currency (MYR)

2.2 Identity Verification (KYC) Data

In compliance with anti-money laundering (AML) obligations and responsible gaming standards, amintoto may request:

• Copies of government-issued identification (e.g., MyKad, passport)
• Proof of address documents (e.g., utility bills, bank statements)
• Source of funds declarations where required

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method references (e.g., Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, or Crypto wallet identifiers)
• Transaction amounts and timestamps

Note: amintoto does not store full card or bank account numbers directly. Payment processing is handled by regulated payment service providers.

2.4 Gameplay and Activity Data

• Betting history, game sessions, wins, and losses
• Preferred games (slots, sportsbook, live casino, fishing games, virtual sports)
• Session duration and login timestamps
• Bonus and promotion usage

2.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser
• Cookie identifiers and session tokens
• Referring website or traffic source

2.6 Communications Data

• Support chat transcripts and email correspondence
• Feedback and survey responses
• Promotional opt-in preferences

3. How We Use Your Information

amintoto uses the personal data we collect for the following purposes:

• Account management: Creating, verifying, and maintaining your amintoto player account.
• Service delivery: Processing deposits and withdrawals in MYR, awarding bonuses, and facilitating gameplay across all amintoto products.
• Identity verification: Fulfilling KYC obligations to confirm you are aged 21 and above and to prevent fraud and money laundering.
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance via live chat or email.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and enforcing self-exclusion or deposit limits where requested.
• Marketing communications: Sending you personalised promotions, bonuses, and updates — only where you have opted in. You may opt out at any time.
• Security and fraud prevention: Detecting and preventing unauthorised access, fraudulent transactions, and abuse of our platform.
• Legal compliance: Meeting our obligations under applicable gaming regulations and cooperating with lawful requests from authorities.
• Platform improvement: Analysing aggregated usage data to improve the amintoto website, game selection, and overall user experience.

4. Legal Basis for Processing

amintoto processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you under our Terms & Conditions, including operating your account and processing transactions.
• Legal obligation: Processing necessary to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and gaming regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where such interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications and optional cookies, where you have provided clear, informed consent. You may withdraw consent at any time.

5. Sharing Your Information

amintoto does not sell your personal data. We may share your information only in the following limited, controlled circumstances:

5.1 Service Providers

We engage reputable third-party service providers who assist us in operating amintoto, including payment processors (handling Touch n Go, Boost, Maybank, CIMB, Public Bank, and Crypto transactions), KYC verification services, cloud hosting providers, and customer support platforms. These providers are contractually bound to handle your data only for the specific purposes we have authorised and in accordance with applicable data protection standards.

5.2 Legal and Regulatory Authorities

amintoto may disclose personal data to regulators, law enforcement agencies, courts, or other government authorities where required by law or where we have a good-faith belief that such disclosure is necessary to protect the rights, safety, or property of amintoto or its players.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of amintoto's business assets, your personal data may be transferred to the successor entity. We will notify affected users prior to any such transfer and ensure that equivalent privacy protections remain in place.

5.4 Aggregated and Anonymised Data

We may share aggregated, anonymised data that cannot reasonably be used to identify any individual with analytics partners or for research purposes to improve our services.

6. Cookies and Tracking Technologies

amintoto uses cookies and similar tracking technologies to enhance your experience on our platform. A cookie is a small text file placed on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential cookies: Required for core site functionality, such as keeping you logged in to your amintoto account, maintaining your session, and processing transactions securely. These cannot be disabled.
• Performance cookies: Used to collect anonymous information about how visitors use amintoto, helping us identify and fix performance issues and improve page speed.
• Functional cookies: Enable personalised features such as remembering your language preference, preferred game category, or display settings.
• Analytics cookies: Used to understand player behaviour in aggregate — such as which games are most popular in Kuala Lumpur versus Penang — so we can tailor our content and promotions accordingly.
• Marketing cookies: Set only with your consent to deliver relevant promotional content. You may opt out of marketing cookies at any time via your account settings.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling essential cookies may prevent certain features of amintoto from functioning correctly. Continuing to use our site without changing your settings is taken as consent to our use of non-essential cookies, consistent with this policy.

7. Data Retention

amintoto retains your personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable laws and regulations.

• Active accounts: Personal data is retained for the duration of your account's active status on amintoto.
• Closed accounts: Following account closure, we retain necessary records — including transaction history and KYC documents — for a minimum of five (5) years to comply with anti-money laundering regulations and gaming licensing requirements.
• Marketing data: Where you have opted in to marketing communications, we retain your preferences until you withdraw consent or request deletion.
• Support records: Customer support correspondence is retained for up to three (3) years to assist with dispute resolution and service quality monitoring.

Once retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

8. Security of Your Data

The security of your personal data is a top priority for amintoto. We implement a comprehensive set of technical and organisational safeguards, including:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers
• AES-256 encryption for sensitive data stored in our databases
• Strict access controls ensuring only authorised amintoto personnel can access personal data, on a need-to-know basis
• Regular security audits and penetration testing of our platform infrastructure
• Multi-factor authentication options for player accounts to prevent unauthorised access
• Continuous monitoring of our systems for suspicious activity or potential breaches

While amintoto takes every reasonable precaution, no online transmission is 100% secure. In the unlikely event of a data breach affecting your rights and freedoms, we will notify you and relevant authorities in accordance with applicable legal requirements, without undue delay.

9. Your Rights

As a player on amintoto, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 12.

• Right of access: You may request a copy of the personal data amintoto holds about you at any time.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: In certain circumstances, you may request that we limit our use of your personal data while a dispute or query is being resolved.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so you can transfer it elsewhere.
• Right to object: You may object to our processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.
• Right to withdraw consent: Where our processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

We will respond to all valid data rights requests within 30 days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

10. Children and Minors

amintoto is strictly an adult gaming platform. Access to and use of our services is permitted only to individuals aged 21 and above. We do not knowingly collect, process, or store personal data from anyone under the age of 21.

All account registrations are subject to mandatory age verification checks. Where we identify that an account has been created by a person under 21, we will immediately suspend the account, void any transactions, and securely delete all associated personal data to the fullest extent permissible by law.

If you believe that a minor may have registered on amintoto, please contact our support team immediately so we can investigate and take appropriate action.

11. Changes to This Policy

amintoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Display a prominent notice on the amintoto website
• Where appropriate, notify registered players directly via email

Your continued use of amintoto following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way amintoto handles your personal data, our dedicated privacy support team is here to help. You can reach us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on amintoto
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 days

When contacting us about a data rights request, please include your registered amintoto username and email address so we can verify your identity and process your request efficiently.