User Data Protection

Privacy Policy Wawartoto – Our Commitment to Protecting Your Personal Information

At wawartoto, privacy is more than a word in an official document. It is a responsibility we take seriously every day β€” from how we collect data to how we ensure your information stays safe and is never misused.

Six Core Pillars Privacy Protection We

The following are the core principles that shape how wawartoto manages and protects users' personal information

πŸ”’

End-to-End Data Encryption

All personal information and transaction data is encrypted using 256-bit SSL technology β€” the same standard used by international-grade financial institutions.

🚫

No Sale of Data to Third Parties

Wawartoto has never and will never sell, rent or permit third parties to use your personal data for marketing purposes without your consent.

πŸ“‹

Minimum Data Collection

We only collect data that is genuinely necessary for platform operations. No excessive information is requested, and every piece of data collected has a clear purpose.

πŸ‘οΈ

User Access Rights

You have the right to view, amend, or request deletion of your personal data at any time. We provide a straightforward and transparent process for managing your privacy rights.

πŸ›οΈ

Malaysia Legal Compliance

Wawartoto's privacy policy fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

πŸ””

Immediate Breach Notification

In the event of any data security breach, wawartoto is committed to notifying affected users within 72 hours and taking immediate remediation action.

Last updated: 1 January 2026  |  Version 2.4

Note: This Privacy Policy explains how wawartoto manages users' personal data. By using our platform, you agree to the terms stated here. Please read this document carefully.

1 Introduction

Wawartoto ("we", "Platform") values the privacy of every user who registers and uses our services. This Privacy Policy document explains in detail the types of personal information we collect, the purposes for collecting it, how we store and protect it, and the rights you hold as a user.

This policy applies to all users who access the wawartoto.app website, use our mobile app, or interact with any services provided by wawartoto. We encourage you to read this document in full and contact us if anything is unclear.

wawartoto fully complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia. We are committed to safeguarding your personal information in accordance with all applicable legal provisions.

2 Personal Data We Collect

We collect your personal information through two main channels β€” information you provide directly and information collected automatically when you use the wawartoto platform.

2.1 Information You Provide Directly

  • Full name as it appears on your identification document
  • Email address and phone number
  • Date of birth for age verification
  • Bank account or e-wallet information for withdrawal processing
  • Copy of identification document (MyKad/passport) for the KYC process
  • Address information for verification purposes

2.2 Information Collected Automatically

  • IP address and device information used
  • Browser type and version
  • Game session information and activity history on the platform
  • Website usage data including pages visited and visit duration
  • Cookie and related tracking technology data
Data Categories Example Primary Purpose
Identification Data Name, IC, date of birth Identity verification & KYC
Contact Data Email, phone number Communication & support
Financial Data Bank account number, e-wallet Withdrawal processing
Technical Data IP, device, browser Security & fraud detection
Activity Data Game history, transactions Services & compliance

3 Purpose of Personal Data Use

Wawartoto uses your personal data only for the following legitimate and stated purposes:

  • Account Management: To register, verify and maintain your user account
  • Transaction Processing: Facilitate deposits, withdrawals, and all financial activities on the platform
  • Identity Verification (KYC): Comply with anti-money laundering legal requirements
  • Platform Security: Detect and prevent fraud, unauthorized use, and suspicious activity
  • Customer Support: Handle inquiries, complaints, and technical support requests
  • Service Improvement: Analyze usage patterns to improve the user experience
  • Legal Compliance: Meet relevant regulatory reporting and compliance obligations
  • Service Communications: Send important notifications related to your account and services

4 Data Sharing With Third Parties

Wawartoto does not sell or share user personal data for third-party marketing purposes. However, there are limited situations where we may need to share certain information with the following parties:

4.1 Trusted Service Providers

We work with selected payment processing companies, IT service providers, and security auditors. All these partners are bound by strict confidentiality agreements and may only use your data for the specific agreed purposes.

4.2 Legal Requirements

Wawartoto may be required to disclose user information to authorities when mandated by law, court order or official investigations relating to the prevention of financial crime. Any such disclosure is made only to the extent required by law.

Our Commitment: wawartoto has never and will never sell user personal data to advertisers, marketing companies or any third party for commercial purposes.

5 Data Security and Protection

Wawartoto invests fully in a multi-layered security infrastructure to protect your personal data from both internal and external threats.

5.1 Technical Measures

  • 256-bit SSL encryption for all data communications
  • Password storage using irreversible bcrypt hashing
  • Two-factor authentication (2FA) for account access
  • Round-the-clock security monitoring by our information security team
  • Segregation of sensitive financial data in isolated server environments
  • Regular penetration testing by independent security experts

5.2 Organisational Measures

Access to user data within wawartoto is restricted on a need-to-know basis. All staff with access to sensitive data undergo information security training and are bound by strict confidentiality agreements.

6 Cookies and Tracking Technologies

The wawartoto platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly.

6.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login sessions and security
  • Analytics Cookies: Help us understand how users interact with the platform for improvement purposes
  • Preference Cookies: Save your personal settings such as language and display preferences

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the wawartoto platform.

7 Your Rights as a User

As a wawartoto user, you have the following rights regarding your personal data:

πŸ‘οΈ
Right of Access You have the right to request a copy of all personal data we hold about you
✏️
Right to Rectification You may request correction of inaccurate or incomplete data
πŸ—‘οΈ
Right to Erasure You may request deletion of your personal data, subject to legal obligations
⏸️
Right to Restriction of Processing You may request that we restrict data processing under certain circumstances
πŸ“¦
Right to Data Portability You have the right to receive your data in a machine-readable format
🚫
Right to Object You may object to data processing for direct marketing purposes

To exercise any of the above rights, please contact the wawartoto support team via live chat or email. We will process your request within 14 business days.

8 Data Retention and Deletion

Wawartoto retains user personal data for as long as your account is active and for the required period following account closure to meet legal obligations. Financial transaction records are kept for a minimum of 7 years in accordance with Malaysia's anti-money laundering legislation.

Data that is no longer needed will be securely deleted using industry-standard data deletion methods. We do not retain user data longer than necessary for the purposes stated in this policy.

9 Children's Privacy

The wawartoto platform is strictly for users aged 18 and above. We do not intentionally collect or process personal data from children or minors. If you believe a child has registered an account on our platform, please contact us immediately so that appropriate action can be taken.

10 Changes to This Privacy Policy

Wawartoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. Any material changes will be communicated to you via email or in-platform notification at least 14 days before they take effect.

We encourage you to review this page regularly. The "Last updated" date at the top of this document indicates when this Privacy Policy was last revised.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding our Privacy Policy or how we handle your personal data, please contact the wawartoto Privacy Officer via:

  • Live Chat: Available 24/7 from the platform β€” the fastest option for an immediate response
  • Privacy Email: [email protected]
  • Response Time: Within 14 working days for all privacy-related enquiries

Every privacy-related complaint will be investigated thoroughly, and you will receive a written response regarding the outcome within the stated timeframe.

Frequently Asked Questions About Privacy

Absolutely not. wawartoto does not sell, rent or share your personal data with any third party for marketing purposes. Your data is used solely to operate the platform, process transactions and fulfil legal obligations.

Yes, you may request the deletion of your personal data. However, please note that certain financial records must be retained for a minimum of 7 years under Malaysian law. After that period, all data will be permanently and securely deleted.

The identity verification (KYC) process is a legal requirement under anti-money laundering regulations. It protects you from identity misuse and ensures only you can withdraw funds from your account. All identification documents received are stored with full encryption and accessed only by authorized personnel.

wawartoto does not store credit or debit card information directly. All payment transactions are processed through PCI-DSS certified payment gateways, which handle and store sensitive financial data in a secure environment that is isolated from wawartoto's core systems.

After account closure, your personal data will be retained for the minimum period required by law (typically 7 years for financial records). After that period, all data will be permanently deleted. You will not receive any marketing communications after your account is closed.
πŸ›‘οΈ

Your Privacy Is Protected At Wawartoto

Join over 500,000 members who trust wawartoto to keep their personal information safe while enjoying the best online entertainment.

Bahasa Melayu