Privacy Policy Sesetoto – Member Personal Data Protection

Welcome to the Sesetoto Privacy Policy. This document is an agreement between you as a member and Sesetoto as the responsible data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). By registering and using our platform at sesetoto.fun, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

Sesetoto is an online entertainment platform offering a wide range of games and betting opportunities to Malaysian users aged 18 and above. In our daily operations, we collect certain personal information necessary to provide a safe, fair, and responsible service to each of our members.

This Privacy Policy applies to all Sesetoto service channels — including the sesetoto.fun website, Android and iOS mobile apps, and any other official communication channels. The effective date of this policy is as indicated in the hero section of this page.

Sesetoto collects various types of personal data depending on your interactions with our platform. This data is divided into several main categories:

Identity Data

Financial & Transaction Data

Technical & Usage Data

Your personal data is collected through several different methods as you interact with the Sesetoto platform:

• Account Registration — When you register a new account at Sesetoto, you voluntarily provide basic personal information such as your name, email, phone number, and date of birth.
• KYC Process — To comply with AML and KYC legal requirements, we collect copies of identity documents such as MyKad and proof of address during the identity verification process.
• Financial Transactions — Every deposit and withdrawal you make on the platform leaves a transaction record, which we retain for compliance and security purposes.
• Platform Usage — Our system automatically logs technical data such as your IP address, device type, and usage patterns while you use the platform.
• Support Communications — Any communications you have with the Sesetoto support team, whether via live chat or email, may be recorded for training and quality control purposes.
• Cookies and Tracking Technologies — Our platform uses cookies and similar tracking technologies to enhance the user experience and analyze usage patterns.

Sesetoto uses your personal data solely for legitimate and clearly stated purposes. Below is a complete table of data usage purposes and their underlying legal bases:

We will not use your data for any purpose other than those stated above without first obtaining your renewed consent. If you wish to withdraw consent for marketing purposes at any time, you may do so through your account settings or by contacting our support team.

Sesetoto does not sell your personal data to anyone. However, in the course of operating the platform, we may need to share certain data with trusted third parties for legitimate reasons. All such data sharing is subject to strict confidentiality agreements.

Protecting your personal data from unauthorised access, loss, or misuse is Sesetoto's absolute priority. We continuously invest in the latest security infrastructure to ensure your data remains safe at all times:

• 256-bit SSL Encryption — All data transmitted between your browser or app and the sesetoto servers is protected with 256-bit SSL encryption, ensuring no third party can intercept or read your data.
• Multi-Layer Secure Server — Your data is stored in data centers secured with firewalls, intrusion detection systems, and strict physical access controls. Only authorized personnel may access the servers.
• Two-Factor Authentication (2FA) — We provide and encourage the use of 2FA for all member accounts to add a significant additional layer of protection against unauthorized access.
• Round-the-Clock Monitoring — Sesetoto's cybersecurity team monitors the platform 24 hours a day, 7 days a week to detect and respond to any suspicious activity immediately.
• Regular Security Audits — We conduct periodic independent security audits by accredited third parties to identify and address any system vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a material data breach, we will notify affected members and the relevant authorities within the timeframe required by law.

Sesetoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They allow our platform to recognize you, remember your preferences, and provide a better and more personalized experience.

You can manage and delete cookies through your browser settings. Please note, however, that disabling essential cookies may affect the functionality of the Sesetoto platform and prevent you from accessing certain features.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data Sesetoto holds. We fully respect these rights:

To submit any request relating to the rights above, please contact our privacy team via the in-platform live chat or through our official email. We will respond to your request within 14 business days.

Sesetoto retains your personal data only for as long as it is needed for the purposes it was collected, or as required by Malaysian law. The following are our general data retention guidelines:

• Active Account Data — Personal data for active accounts is retained for as long as your account remains active and for a period of 7 years after the account is closed, for legal compliance purposes.
• Financial Transaction Records — Records of all financial transactions are retained for a minimum of 7 years from the transaction date, in line with the requirements of Malaysia's Anti-Money Laundering Act (AMLA).
• KYC Documents — Identity verification documents are retained for 5 years after the business relationship with the member ends, or longer if required by the relevant authorities.
• Support Communication Logs — Communication records with the support team are retained for 3 years for quality control and dispute resolution purposes.
• Analytics Data — Anonymized usage data may be retained indefinitely for platform improvement purposes, as no personally identifiable information is involved.

Upon expiry of the retention period, your data will be securely deleted or anonymised using industry-standard methods. Deletion is carried out systematically and regularly in accordance with our records management schedule.

Sesetoto is an online entertainment platform exclusively for adults aged 18 and above. We take the protection of minors extremely seriously and do not accept registrations from anyone under 18 years of age under any circumstances.

All new account applicants are required to verify their age during registration and go through a rigorous KYC process. If we determine that an account was registered by someone under 18 years of age, the account will be closed immediately and all balances will be returned in accordance with established procedures.

Sesetoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to our platform. All amendments will take effect immediately upon publication on this page.

If the amendments made are material and significant — for example, changes to the types of data collected or how data is shared — we will notify you by email or in-app notification at least 14 days before the amendments take effect. This gives you sufficient time to review the changes and make an informed decision.

We encourage you to review this Privacy Policy page periodically to ensure you are always informed about how we protect your information. The date of the latest revision is always displayed at the top of this page. Continued use of the Sesetoto platform after any amendment is published will be considered your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Sesetoto handles your personal data, our privacy team is ready to assist you at any time.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant data protection authority under PDPA 2010.