This Privacy Policy explains how the mawartoto platform, accessed via mawartoto.ng, collects, uses, stores, and protects your personal data. By using our platform, you agree to the practices described in this document. Please read it carefully.
1 Introduction
Mawartoto values the privacy of every player who uses our platform. We understand that in the digital age, user trust in a platform depends greatly on how that platform handles their personal information. That is why this Privacy Policy is written in clear, plain language — not just a lengthy and confusing legal document.
This document applies to all users accessing the mawartoto.ng website, the mawartoto mobile app, and all services we offer under the mawartoto brand. This Policy is to be read together with Terms and Conditions page, which forms part of the overall agreement between you and mawartoto.
Mawartoto operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), which sets the minimum standards for the collection and processing of personal data in Malaysia. Our commitment goes beyond these minimum legal requirements — we believe players deserve a higher standard of protection.
2 Personal Data We Collect
Mawartoto collects your personal data through several different methods. Below are the types of data we collect and how they are collected:
Data You Provide Directly
- Full name as shown on official identity documents
- Date of birth for age verification
- Email address and mobile phone number
- Account password (stored in hashed form, not plain text)
- Current residential address
- Identity document details (MyKad or passport) collected during the KYC process
- Registered payment method details (bank account number or e-wallet)
Automatically Collected Data
- IP address and estimated geolocation information
- Device type, operating system, and browser used
- Gaming activity and transaction history within the platform
- Login session data and access timestamps
- Cookie and website performance tracking technology data
| Data Type | How It Is Collected | Primary Purposes |
|---|---|---|
| Identity Information | Account registration & KYC | Identity verification & fraud prevention |
| Financial Information | Deposit & withdrawal process | Transaction processing & AML compliance |
| Technical Data | Automatically during use | Account security & platform performance |
| Game History | Activity on the platform | Customer support & responsible gaming |
| Cookies & Analytics | Browser & app | User experience improvement |
3 Purposes for Using Your Personal Data
Mawartoto uses the personal data we collect for the following purposes. We only process your data where a valid legal basis exists to do so:
- Service provision: Manage your account, process deposits and withdrawals, and enable you to access all games and features on the mawartoto platform.
- Identity verification: Ensure you meet the minimum age requirement and verify your identity before processing fund withdrawals.
- Fraud prevention & security: Monitor account activity to detect suspicious behaviour, unauthorised access attempts, or activities related to money laundering.
- Customer support: Enable our support team to assist you more effectively when you contact us with any enquiry or issue.
- Legal compliance: Meet applicable legal obligations, including reporting requirements under anti-money laundering laws (AMLA).
- Platform improvement: Analyse aggregated usage patterns to improve platform design, technical performance, and the overall user experience.
- Marketing communications: Send information about the latest promotions, special offers, and platform news — only to users who have agreed to receive such communications.
Mawartoto does not process your personal data for purposes not stated in this policy without first obtaining your explicit consent. You may withdraw consent for optional purposes such as marketing at any time.
4 Third-Party Data Sharing
Mawartoto does not sell your personal data. We may share your data only in the following limited circumstances:
Trusted Service Providers
We use services from third-party companies acting as data processors on our behalf — including cloud infrastructure providers, payment processing providers, identity verification services, and analytics platforms. All such providers are bound by strict data protection agreements and are only permitted to use your data for purposes we specify.
Legal & Regulatory Requirements
Mawartoto will disclose your personal data to government authorities or law enforcement agencies where we are legally required to do so, or where we receive a valid court order or official directive. In such circumstances, we have no discretion to refuse.
Business Transfer
Should mawartoto undergo any merger, acquisition, or business asset transfer, user data may form part of the transferred assets. Users will be notified in advance of any change in the control or management of their personal data.
Mawartoto does not share your personal data with third-party advertisers for ad targeting purposes. We do not permit third parties to use mawartoto user data for their own commercial interests.
5 Data Retention & Security Measures
Your data security is mawartoto's highest priority. We implement robust technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure.
Technical Security Measures
- 256-bit SSL/TLS encryption for all data communications between users and servers
- Password storage using strong cryptographic hashing (bcrypt)
- Two-factor authentication (2FA) is available for all accounts
- Real-time system monitoring to detect anomalies and intrusion attempts
- Regular data backups to secure data centres located at separate sites
- Regular penetration testing by independent security experts
Data Retention Period
Mawartoto retains your personal data for as long as necessary to fulfil the original purpose of collection and applicable legal requirements. Generally:
- Active account data is retained for the duration your account is active, plus 7 years after account closure
- Financial transaction records are retained for a minimum of 7 years in accordance with compliance requirements
- Access logs and security activity records are retained for 2 years
- Cookie and website analytics data is retained for 13 months
While we take all reasonable steps to protect your data, no security system can guarantee 100% protection at all times. In the event of any data security breach that affects your rights and freedoms, we will notify you within the timeframe required by applicable law.
6 Cookies & Tracking Technologies
The mawartoto platform uses cookies and similar tracking technologies to enhance user experience, ensure the platform's technical functions operate correctly, and analyse usage patterns for continuous improvement.
Types of Cookies We Use
- Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as the platform will not function properly without them.
- Performance Cookies: Collect information on how users interact with the platform to help us identify and resolve technical performance issues.
- Functional Cookies: Allow the platform to remember your preferences, such as language and account settings, to improve ease of use.
- Analytics Cookies: Collect aggregated, anonymised data on platform usage patterns to help us understand which areas are most popular and which require improvement.
You can manage your cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the mawartoto platform.
7 Your Rights Over Your Personal Data
As a mawartoto user, you have the following rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights.
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 30 business days.
Right to Rectification
If you find that any personal data we hold is inaccurate or outdated, you have the right to request that we correct it without undue delay.
Right to Erasure ("Right to Be Forgotten")
Under certain circumstances, you have the right to request that we delete your personal data. This right is subject to our legal obligations to retain certain data for specified periods.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you are disputing the accuracy of the data in question.
Right to Data Portability
You have the right to receive the personal data you provided to us in a structured, machine-readable format, and to transfer it to another service provider of your choice.
Right to Object to Marketing
You may object to the processing of your data for direct marketing purposes at any time. Once you do so, we will immediately stop processing your data for that purpose.
To exercise any of the above rights, contact the mawartoto customer support team via live chat within your account. We will process your request within 30 business days. In some cases involving complex requests, this period may be extended with prior notice to you.
8 Children's Data Protection
The mawartoto platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.
If we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete the relevant data and close the account involved. Parents or guardians who become aware that a child in their care has registered on the mawartoto platform are requested to contact us immediately.
If you suspect that any child under the age of 18 has accessed the mawartoto platform, please contact our support team immediately via live chat. We take this matter very seriously.
9 Links to Third-Party Sites
The mawartoto platform may contain links to third-party websites or services not operated by us. This Privacy Policy does not apply to those websites or services. We are not responsible for the privacy practices of any third party, and we encourage you to read the privacy policy of every website you visit.
Third-party game providers partnering with mawartoto may collect certain technical data for game delivery purposes. All such providers are bound by data protection agreements ensuring your data is handled to a standard equivalent to mawartoto's policy.
10 Amendments to This Privacy Policy
Mawartoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Display a prominent notice on the platform's home page for at least 14 days
- Send email notifications to all registered users for significant changes
It is your responsibility to review this page periodically. Continued use of the mawartoto platform after any amendments are published constitutes your acceptance of the latest version of this Privacy Policy.
11 How to Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact the mawartoto Data Protection Officer through the following methods:
- Live Chat: Via the live chat function within your account — the fastest method, with response times typically under 5 minutes
- Email: [email protected] (response time: 1–2 business days)
- Within your account: The "Customer Support" section in your account dashboard
We are committed to responding to all privacy-related enquiries seriously and within a reasonable timeframe. Your satisfaction and trust are our top priorities at mawartoto.
For general enquiries about the platform, you may also visit our FAQ page, which contains answers to the most frequently asked questions by Malaysian players.