Official Documents

Nettoto Privacy Policy — Data Protection for Malaysia Members

Your privacy is our priority. This document clearly explains how nettoto collects, uses, stores, and protects your personal information as a registered member of our platform.

256-bit SSLFull data encryption
PDPA CompliancePersonal Data Protection Act 2010
No Data SalesYour data is never sold
Last updated: 1 January 2026

Nettoto ("we", "Platform", "nettoto") takes our responsibility to protect every member's privacy seriously. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and outlines our practices regarding the personal information we handle.

By using the nettoto platform — whether via the website, mobile app, or any other channel — you acknowledge that you have read and understood this policy. We encourage you to review this document from time to time as we may update it when there are service changes or legal requirements.

This policy applies to all registered nettoto members in Malaysia regardless of the access method used. The information you provide is fully protected under our integrated security framework.

1. Introduction & Policy Scope

Nettoto is committed to ensuring that the privacy of every individual who interacts with our platform is respected and protected at every level. This Privacy Policy outlines the types of personal information we collect, the purposes for collection, the parties who may receive such information, and the security measures we take to protect your data.

The scope of this policy covers all data processing activities carried out by nettoto in relation to registered members, website visitors, mobile app users, and any party that interacts with our services. It does not cover third-party websites or services that may be linked from our platform.

Nettoto acts as the data controller for information collected through this platform. We have a Data Protection Officer responsible for ensuring compliance with all legal obligations relating to privacy and data protection.

2. Information We Collect

Nettoto collects your personal information through various means as you use our platform. The information collected is divided into two main categories: information you provide directly and information collected automatically.

Category Type of Information Collection Method
Personal Identity Full name, date of birth, identity card or passport number Account registration & KYC process
Contact Information Malaysia phone number, email address, residential address Registration form & profile updates
Financial Information Bank account number, bank name, deposit and withdrawal transaction history Payment processing
Activity Data Game history, wagering, wins, login and logout Automatic platform usage
Technical Data IP address, device type, operating system, web browser, device ID Automatic platform access
Communication Data Support chat records, emails, feedback, and complaints Interactions with the support team
nettoto only collects information that is necessary for specific purposes. We do not collect sensitive information such as your medical details, religious beliefs, or political views.

3. How We Use Your Information

Every piece of information we collect has a clear and legitimate purpose. We do not use your data for any unrelated purpose without first obtaining your consent. The following are the primary purposes for which nettoto uses your personal information:

  • Create and manage your member account and verify your identity through the KYC process
  • Process deposit and withdrawal transactions securely through integrated payment methods
  • Provide effective and responsive customer support services 24 hours a day
  • Send important information related to your account, transactions, promotions, and policy updates
  • Detect and prevent fraudulent activity, money laundering, and platform abuse
  • Meet compliance obligations under applicable laws and industry regulations
  • Analyze usage patterns to improve the overall platform experience and services
  • Support responsible gaming programs and identify concerning gambling patterns

Our legal basis for processing your data is contractual compliance (to deliver the services you requested), legal obligation (for regulatory compliance), legitimate interest (for platform security), and your consent (for marketing communications).

4. Sharing Information with Third Parties

Nettoto does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes without your explicit consent. However, there are certain situations where we need to share your information with the following parties:

  • Payment Processors: Transaction information is shared with approved payment processors to enable deposits and withdrawals to be processed securely
  • Game Providers: Minimal game data is shared with licensed game providers to ensure game integrity
  • Regulatory Authorities: Information is shared when required by law, court order, or directive from a legitimate regulatory authority
  • KYC Services: Identity data is shared with accredited identity verification service providers for compliance purposes
  • Auditors & Legal Advisors: Shared on a need-only basis during investigations or legal matters
All third parties working with nettoto are required to comply with strict confidentiality agreements and are only permitted to use your information for the specific purposes designated by nettoto.

In the event of a company merger, acquisition, or asset transfer, your personal information may be transferred to a new entity. In such cases, you will be notified in advance and an equivalent or stricter privacy policy will apply.

5. Data Security

Nettoto continually invests in the latest security infrastructure to ensure your personal information is always protected. We implement multiple layers of technical and organizational security controls that work together to prevent unauthorized access, disclosure, or loss of data.

  • 256-bit SSL/TLS encryption for all data transmitted between your device and nettoto servers
  • Encryption at rest for all sensitive information in our databases
  • Two-factor authentication (2FA) is available for all member accounts as an added layer of security
  • 24/7 system monitoring to detect suspicious activity and unauthorized access attempts
  • Strict internal access controls — only authorised staff may access members' personal data
  • Regular security audits by independent third parties to verify the integrity of our systems
  • A comprehensive incident response plan to manage any security breaches efficiently
In the event of any data security breach that may affect your information, nettoto is committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices.

6. Cookies & Tracking Technologies

Nettoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognize you, remember your preferences, and make your experience smoother.

  • Essential Cookies: Required for core platform functions such as login authentication and session security — cannot be disabled
  • Performance Cookies: Gather information about how you use our website to help us improve platform functionality
  • Functional Cookies: Remember your preferences such as language, display settings, and login details for your convenience
  • Analytics Cookies: Helps us understand aggregated, anonymized usage patterns for service improvement purposes

You can control and manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and your experience on the nettoto platform. Third-party cookies used for internal analytics are limited to providers that comply with strict data protection standards.

7. Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 and industry best practices, you have certain rights regarding the personal information held by nettoto. We are committed to making it easy for you to exercise these rights.

Right of Access

You have the right to request a copy of the personal information we hold about you at any time.

Right to Rectification

You may ask us to correct any information that is inaccurate or incomplete.

Right to Erasure

Under certain circumstances, you may request that we delete your personal information from our records.

Right to Object

You may object to the processing of your data for certain purposes, including direct marketing.

Data Portability Right

You may request your data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

You may request that we restrict the processing of your data while a dispute or investigation is ongoing.

To exercise any of the above rights, contact the nettoto data protection team via live chat or email. We will respond within 30 business days from the date your request is received.

8. Data Retention Period

Nettoto retains your personal information only for as long as it is needed for the purposes stated in this policy, or as required by law. Once the retention period ends, your data will be securely deleted or anonymized in a way that prevents re-identification.

  • Active account information: Retained for the duration of your active membership at nettoto
  • Financial transaction records: Retained for a minimum of 7 years in compliance with tax law and AML requirements
  • Customer support communication logs: Retained for 3 years from the date of last interaction
  • Technical and security log data: Retained for 12 months for investigation and security purposes
  • Closed account records: Retained for 5 years from the closing date for legal compliance
  • Verified KYC information: Retained for 6 years after the business relationship ends

Once the applicable retention period has expired, your data will be permanently deleted using secure erasure methods that ensure no recovery of information is possible. This process is carried out automatically through our integrated data management system.

9. Changes to the Privacy Policy

Nettoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our services, new legal requirements, or evolving industry best practices. All changes take effect immediately upon publication on this page.

For changes deemed material or significant, we will provide clearer notice — whether through in-platform notifications, an email message to your registered address, or a prominent notice on the nettoto website homepage. We encourage you to review this page periodically, especially after receiving any notification from us.

Continued use of the nettoto platform after changes to the Privacy Policy are published will be considered your acceptance of the updated terms. If you disagree with the changes, please stop using the platform and contact us to close your account.

10. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, the nettoto data protection team is ready to assist you.

  • In-platform live chat — available 24/7 in Bahasa Melayu, English and Mandarin
  • Email our data protection team at: [email protected]
  • We will acknowledge receipt of your inquiry within 24 hours and provide a full response within 30 business days

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory body in your state. nettoto will fully cooperate with any official investigation conducted by the authorities.

We value your trust in nettoto. Privacy is not merely a legal obligation for us — it is the foundation of the relationship we build with every member.

Your Privacy Protected at Every Level

Nettoto implements data protection not merely to comply with the law, but because we believe member trust is our most valuable asset.

Bank-Grade Encryption

All data transmitted between your device and nettoto's servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

Malaysia PDPA Compliance

Nettoto operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data handling processes have been reviewed and approved by our legal advisors.

No Data Selling

Your personal information has never been and will never be sold, rented, or traded to advertisers or third-party companies for any commercial purpose.

Full Control in Your Hands

You have the full right to access, correct, download, or request deletion of your personal data through our responsive support team.

Continuous Threat Monitoring

Our security system monitors suspicious activity around the clock. Any anomalies are detected and addressed automatically before they can affect your account.

Multilingual Privacy Support

The nettoto data protection team can be contacted in Bahasa Melayu, English, and Mandarin — ensuring you can always communicate in the language most comfortable for you.

Your Data Is Safe. Now Let's Play.

With full confidence that your personal information is protected at every level, enjoy the best gaming experience with nettoto. Register today and join the millions of members who have trusted our platform.

Bahasa Melayu