Kaskustoto is committed to protecting your personal data. This Policy explains what we collect, why we collect it, how we use it, and the rights you hold as a user of our platform.
Six core privacy commitments that define how we handle your personal data — from the moment you register to every transaction you make on the Platform.
All data transmitted between your device and the Kaskustoto Platform is protected by industry-standard 256-bit SSL/TLS encryption. Your personal details, payment information, and account credentials are never transmitted in plain text.
Personal data and financial records are stored in segregated, access-controlled environments. Internal access to personal data is restricted on a strict need-to-know basis, with audit trails maintained for all access events.
Kaskustoto does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Data shared with service providers is governed by strict contractual data processing agreements.
You have the right to access, correct, export, restrict, and request deletion of your personal data at any time. Submit a data request via our support team and we will respond within the timelines set out in this Policy.
We do not hold your data indefinitely. Retention periods are defined by legal obligation and operational necessity. Account data is retained for a minimum of five years after account closure to comply with anti-money laundering legislation.
Cookies used on the Kaskustoto Platform serve specific, disclosed purposes — session management, fraud detection, and platform performance analytics. Tracking cookies used for behavioural advertising are not deployed without your prior consent.
This Privacy Policy ("Policy") describes how Kaskustoto ("Company", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("User", "you", "your") who access or use the Kaskustoto platform at https://kaskustoto.cam (the "Platform"), including all associated services, features, and communications channels.
Kaskustoto operates as an online sportsbook and live casino platform serving players across Malaysia, including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam. In providing our services, we necessarily collect and process personal data to deliver a safe, secure, and compliant gambling environment.
This Policy is intended to be read alongside our Terms & Conditions and our Responsible Gambling Policy. Together, these documents govern the relationship between you and Kaskustoto. By registering an account or using the Platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
Kaskustoto collects personal data in the categories described below. We collect only data that is necessary for the purposes identified in Section 5.
When you create an Account, we collect your full legal name, date of birth, nationality, Malaysian identification number (MyKad) or passport number (for non-citizens), residential address, email address, and mobile phone number. This data is essential for account creation, age verification, and compliance with our legal obligations.
Prior to processing withdrawals or where we are required to verify identity for compliance purposes, we collect copies of government-issued identity documents, proof of address documents (such as utility bills or bank statements), and proof of payment method ownership (such as screenshots of e-wallet accounts or bank cards).
We collect records of all deposits, withdrawals, bonuses credited, wagers placed, and game outcomes associated with your Account. Payment method identifiers — such as masked bank account numbers, e-wallet registered phone numbers (for Touch 'n Go eWallet, Boost, GrabPay), FPX transaction references, DuitNow QR codes, and cryptocurrency wallet addresses — are recorded for transaction reconciliation, fraud prevention, and regulatory reporting purposes.
When you access the Platform, we automatically collect your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time and duration of visits, and session identifiers. This data is used for fraud detection, platform security, and performance optimisation.
Records of communications between you and Kaskustoto — including live chat transcripts, email correspondence, and support ticket content — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.
Where you use responsible gambling tools — including deposit limits, loss limits, session time reminders, cooling-off periods, or self-exclusion — we record your elections and the dates on which they were applied. This data is used to enforce your chosen restrictions and to meet our responsible gambling obligations.
Kaskustoto collects personal data through the following means:
The following table sets out the principal purposes for which Kaskustoto processes personal data, together with the categories of data involved:
| Processing Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, identity data |
| Age verification and KYC compliance | Identity documents, date of birth, address |
| Processing deposits and withdrawals | Financial data, payment method identifiers |
| Fraud prevention and platform security | Technical data, financial data, KYC data |
| Anti-money laundering (AML) screening | Identity data, financial data, transaction records |
| Customer support and dispute resolution | Communications data, account data, transaction records |
| Responsible gambling administration | Responsible gambling data, account activity |
| Platform performance and analytics | Technical data, usage data (anonymised or aggregated) |
| Legal and regulatory compliance | All categories as required by applicable law |
| Service communications (account notices) | Email address, mobile number |
Kaskustoto processes your personal data one or more of the following legal bases, depending on the specific processing activity:
Kaskustoto does not sell, rent, or trade personal data. We may share personal data with the following categories of recipients, solely to the extent necessary for the stated purpose:
Transaction data and payment method identifiers are shared with our payment processing partners — including FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong Bank), e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), DuitNow network participants, and cryptocurrency exchange processors — solely for the purpose of processing your deposit and withdrawal requests.
Identity documents and related verification data are shared with accredited third-party KYC verification services to complete the identity verification process and to screen against sanctions lists, PEP databases, and adverse media sources.
Technical data, device identifiers, IP addresses, and behavioural signals may be shared with fraud detection and cybersecurity service providers engaged to protect the Platform and its users from fraudulent activity, account takeover, and financial crime.
Where required for game session management, technical identifiers (such as session tokens and anonymised player IDs) may be shared with licensed game studios whose content is offered on the Platform. No directly identifiable personal data (such as full name or contact details) is passed to game providers.
Kaskustoto will disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where required by applicable law, legal process, or government request, or where disclosure is necessary to protect the rights, property, or safety of the Company, its users, or the public.
In the event of a merger, acquisition, asset sale, or restructuring involving Kaskustoto, personal data held on the Platform may be transferred to a successor entity, subject to the same privacy protections described in this Policy. Users will be notified of any such transfer via email prior to the effective date.
The Kaskustoto Platform primarily stores and processes personal data on servers located in Southeast Asia. However, in order to provide certain platform functions — including game delivery, fraud screening, and KYC verification — personal data may be transferred to, and processed in, countries outside Malaysia.
Where personal data is transferred internationally, Kaskustoto ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards may include contractual data processing agreements, standard contractual clauses, or reliance on the recipient country's adequacy determination under applicable data protection law.
Kaskustoto retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML legislative requirement |
| KYC & identity documents | Duration of account + 5 years post-closure | AML legislative requirement |
| Transaction records | Duration of account + 7 years post-closure | Financial reporting requirements |
| Support communications | 3 years from date of communication | Dispute resolution & quality assurance |
| Technical & device data (logs) | 12 months from collection | Fraud prevention & security |
| Responsible gambling elections | Duration of account + 5 years post-closure | Regulatory compliance |
| Marketing consent records | Until consent is withdrawn + 3 years | Consent record-keeping |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.
The Kaskustoto Platform uses cookies and similar tracking technologies for the purposes described below. You may manage your cookie preferences through your browser settings; however, disabling certain cookies may affect the functionality of the Platform.
These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, security token validation, and load balancing. These cookies cannot be disabled without materially impairing your ability to use the Platform.
We use aggregated and anonymised analytics data — collected via first-party analytics tools — to understand how users navigate the Platform, which features are most used, and where performance bottlenecks occur. This data informs product development decisions and does not identify individual users.
Functional cookies remember your preferences — such as your preferred language, display settings, and odds format — to provide a more personalised experience on return visits. These cookies are not used for advertising purposes.
Device fingerprinting and session integrity cookies are used to detect fraudulent access attempts, identify duplicate account creation, and protect your account from unauthorised access. These cookies operate alongside IP analysis and behavioural signals as part of our fraud prevention infrastructure.
As a user of the Kaskustoto Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection team using the details in Section 15. We will respond to verified requests within 30 calendar days of receipt.
The Kaskustoto Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated Account.
If you are a parent or guardian and you believe that your child has accessed the Platform or provided personal data to us, please contact our support team immediately using the details in Section 15. We will investigate and respond promptly.
Kaskustoto implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:
While Kaskustoto employs industry-standard security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials. If you suspect that your Account has been compromised, please contact our support team immediately.
Kaskustoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When material changes are made, we will notify registered users by email to the address associated with their Account at least 7 calendar days prior to the effective date of the revised Policy.
The current version of this Policy, together with the effective date of the most recent revision, is always available at https://kaskustoto.cam/privacy-policy. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree to the revised Policy, you may request Account closure in accordance with the process described in ourTerms & Conditions.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Kaskustoto Data Protection team through the following channels:
This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all prior versions of the Kaskustoto Privacy Policy.
Your privacy and the security of your personal data are foundational to how Kaskustoto operates. Explore the platform knowing your data is protected by the practices described in this Policy. For players aged 21 and above only.
Have questions about our data practices? Contact us via 24/7 live chat. Read our Terms & Conditions or visit our Responsible Gambling page for more information.