Privacy Policy
At Rumahtoto, your privacy is not an afterthought. This Policy explains in plain, structured terms exactly what personal data we collect, how we use it, who we share it with, and the rights you hold over your own information as a player based in Malaysia.
Six Privacy Commitments We Make to You
These cards summarise our key data-protection commitments. Please read the complete Policy below for the full legal detail.
Secure Data Storage
All personal data held by Rumahtoto is stored on encrypted servers with access controls restricted to authorised personnel only. We apply 256-bit SSL encryption across all data transmissions between your device and our platform.
No Marketing Resale
Rumahtoto does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Your information is used solely for the purposes described in this Policy and never monetised as a data product.
Your Data Rights
You have the right to access, correct, download, or request deletion of your personal data at any time. Submit a request through live chat or by emailing our support team and we will respond within fourteen (14) business days.
Minimal Data Collection
We collect only the data that is strictly necessary for account registration, identity verification, transaction processing, and the delivery of our services. We do not collect data that has no operational or legal basis.
Transparent Cookie Use
Rumahtoto uses essential, functional, and analytics cookies to operate the platform and improve the player experience. This Policy explains each category in full. You may manage non-essential cookie preferences through your browser settings.
Direct Contact Available
For any privacy-related query, data access request, or complaint, our support team is reachable 24/7 via live chat and by email. We take data protection queries seriously and respond to all requests within our stated timeframes.
Introduction
This Privacy Policy ("Policy") is issued by Rumahtoto ("we", "us", "our", "the Operator"), the operator of the online casino and sports betting platform accessible at rumahtoto.cam ("the Platform", "the Website"). This Policy describes how Rumahtoto collects, processes, stores, uses, and protects the personal data of individuals who register accounts on, access, or interact with our Platform ("you", "your", "the User", "the Player").
Rumahtoto is committed to handling personal data responsibly and in accordance with applicable data protection legislation and best-practice standards. This Policy is designed to provide you with clear and transparent information about our data-processing activities so that you can exercise informed control over your personal information.
This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy. By registering an Account on the Platform or by continuing to use the Platform after having been notified of this Policy, you acknowledge that you have read and understood its contents.
Policy Scope: This Policy applies to personal data collected through the Rumahtoto platform, including data collected during registration, KYC verification, financial transactions, customer support interactions, and general platform usage. It does not apply to third-party websites or services that may be linked to from our Platform.
Definitions
The following definitions apply throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion. |
| "Data Subject" | The identified or identifiable natural person to whom personal data relates — in the context of this Policy, principally registered users of the Rumahtoto platform. |
| "Data Processor" | A third-party entity that processes personal data on behalf of Rumahtoto pursuant to a contractual arrangement and in accordance with our instructions. |
| "Consent" | A freely given, specific, informed, and unambiguous indication by the Data Subject that they agree to the processing of their personal data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and document verification process required by Rumahtoto prior to processing withdrawals, complying with anti-money laundering obligations, and confirming player eligibility. |
Data We Collect
Rumahtoto collects the following categories of personal data from users of the Platform:
3.1 Identity and Registration Data
- Full legal name as it appears on your government-issued identification document
- Date of birth (for age verification purposes — all players must be 21 years of age or older)
- Malaysian MyKad number, passport number, or equivalent national identification
- Residential address, including postcode and state within Malaysia (Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other Malaysian states)
- Username and encrypted account credentials
3.2 Contact Data
- Email address used for Account communications and notifications
- Mobile telephone number for account verification, security alerts, and optional promotional communications
- Preferred language of communication (English, Bahasa Melayu, or Mandarin Chinese)
3.3 Financial and Transaction Data
- Deposit and withdrawal transaction records, including method, amount (in MYR), and timestamp
- Payment method details sufficient for transaction processing and anti-fraud purposes (we do not store full payment card numbers)
- Cryptocurrency wallet addresses used for approved crypto transactions (Bitcoin, Ethereum, USDT, Litecoin)
- Bank account details provided for withdrawal processing via Maybank, CIMB, Public Bank, Hong Leong, and other FPX-linked institutions
- e-Wallet identifiers used for transactions via Touch 'n Go eWallet, GrabPay, Boost, or DuitNow
3.4 KYC Verification Documents
- Scanned copies or photographs of government-issued identity documents (MyKad, passport, or driving licence)
- Proof of address documentation (utility bills, bank statements, or official correspondence)
- Source of funds documentation where required by our risk and compliance team
3.5 Usage and Technical Data
- IP address and geolocation data at the time of login and account activity
- Device type, operating system, and browser information
- Session duration, page views, and feature interaction logs
- Betting and gaming history, including game types, wager amounts, wins, and losses
- Customer support interaction records, including live chat transcripts and email correspondence
How We Collect Personal Data
Rumahtoto collects personal data through the following channels and mechanisms:
- Account Registration: Data you provide directly when completing the sign-up form on the Platform.
- KYC Verification: Documents you submit in response to a formal identity verification request from our compliance team.
- Financial Transactions: Data generated automatically when you make deposits or withdrawals via any supported payment channel.
- Platform Interaction: Behavioural and technical data collected automatically by our platform systems as you navigate and use the Website.
- Customer Support: Information you provide voluntarily when you contact our live chat or email support team.
- Cookies and Tracking Technologies: Data collected via cookies, pixels, and session trackers as described in Section 9 of this Policy.
- Third-Party Verification Providers: Identity and fraud-screening data received from authorised KYC and anti-money laundering service providers engaged by Rumahtoto as Data Processors.
Purposes & Legal Basis for Processing
Rumahtoto processes your personal data for the following purposes, each of which is supported by an identified legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract — necessary to create and maintain your Account on the Platform. |
| Age and identity verification (KYC) | Legal obligation — required to comply with applicable anti-money laundering and player protection obligations. |
| Processing deposits and withdrawals | Performance of contract — necessary to fulfil payment instructions initiated by you. |
| Fraud prevention and security monitoring | Legitimate interests — protecting the Platform and its users from fraudulent activity and account compromise. |
| Responsible gambling monitoring | Legal obligation and legitimate interests — identifying problem gambling indicators and enabling player-protection tools. |
| Customer support delivery | Performance of contract — providing assistance in connection with your Account and use of the Platform. |
| Marketing communications (opted-in only) | Consent — only where you have explicitly opted in to receive promotional emails or SMS notifications. |
| Platform analytics and improvement | Legitimate interests — improving Platform functionality, user experience, and service reliability. |
| Regulatory reporting and compliance | Legal obligation — meeting mandatory reporting requirements imposed by applicable law or regulatory authority. |
Data Sharing & Disclosure
Rumahtoto does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. Personal data may be disclosed to the following categories of recipients solely for the purposes described in this Policy:
- Payment Service Providers: Financial institutions, e-wallet operators (Touch 'n Go, GrabPay, Boost, DuitNow), and bank-transfer processors engaged to facilitate your deposit and withdrawal transactions.
- KYC and Anti-Fraud Providers: Authorised third-party identity verification and fraud screening services engaged by Rumahtoto as Data Processors operating under contractual data protection obligations.
- Game and Technology Providers: Platform technology partners and game studio operators who provide integrated services to the Platform, where data sharing is strictly limited to what is necessary for service delivery.
- Professional Advisers: Legal, accounting, and compliance advisers engaged by Rumahtoto where professional services require access to relevant account or transaction data.
- Regulatory and Law Enforcement Authorities: Competent authorities, regulators, or law enforcement agencies where Rumahtoto is required by applicable law, court order, or regulatory direction to make such disclosure.
All third-party Data Processors engaged by Rumahtoto are required to process personal data solely in accordance with our instructions and to maintain appropriate security and confidentiality standards commensurate with those applied by Rumahtoto itself.
Data Retention
Rumahtoto retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:
- Account and identity data: Retained for the duration of your active Account relationship with Rumahtoto, plus a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping obligations.
- Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
- KYC verification documents: Retained for a minimum of five (5) years following Account closure or the completion of the most recent KYC verification process, whichever is later.
- Customer support records: Retained for a period of three (3) years from the date of the most recent interaction, unless a longer period is required due to an unresolved dispute or regulatory matter.
- Marketing preferences and communications: Retained only for as long as you remain opted-in to receive marketing communications. Withdrawn consent is processed within ten (10) business days.
- Technical and usage logs: Retained for a maximum of twelve (12) months for operational and security analysis purposes.
On expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where anonymisation is applied, the resulting aggregated data may be retained indefinitely for statistical and analytical purposes.
Data Security
Rumahtoto implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
- Encryption at rest for all sensitive personal and financial data stored on our infrastructure
- Role-based access controls ensuring that personal data is accessible only to personnel with a documented operational need
- Multi-factor authentication required for all administrative access to systems holding personal data
- Continuous monitoring and intrusion detection systems covering our network and application layers
- Regular third-party penetration testing and security audits
- Staff training on data protection obligations and information security practices
Data Breach Response: In the event of a personal data breach that poses a risk to affected individuals, Rumahtoto will take immediate remedial action and notify affected Data Subjects in accordance with applicable notification obligations. Players are encouraged to contact support immediately if they suspect unauthorised access to their Account.
Cookies & Tracking Technologies
Rumahtoto uses cookies and similar tracking technologies to operate the Platform, maintain session continuity, analyse usage patterns, and deliver a personalised experience. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in or using the Platform. For information on managing cookies in common browsers, refer to your browser's Help documentation.
International Data Transfers
In certain circumstances, personal data processed by Rumahtoto may be transferred to, stored on, or accessed from servers or service providers located outside Malaysia. Such transfers may occur in connection with the provision of game technology, KYC verification services, or cloud infrastructure services.
Where personal data is transferred internationally, Rumahtoto ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within Malaysia. Safeguards include contractual data protection clauses incorporated into agreements with overseas Data Processors, and assessments of the data protection adequacy of the recipient jurisdiction or entity.
You may request information about the specific safeguards applied to international transfers affecting your personal data by contacting our support team via the channels set out in Section 15.
Your Data Rights
As a Data Subject, you hold specific rights in relation to your personal data held by Rumahtoto. These rights are set out below. To exercise any of these rights, please submit a request through our live chat support or by email to the address in Section 15. We will acknowledge your request within two (2) business days and respond substantively within fourteen (14) business days.
You may request a copy of all personal data we hold about you, together with information about how it is processed and the purposes for which it is used.
You may request correction of any inaccurate or incomplete personal data we hold. Please also update your Account profile directly for basic contact information changes.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You may request that we restrict processing of your data in certain circumstances, for example where you contest its accuracy or object to a specific processing activity.
Where processing is based on consent or contractual necessity, you may request a machine-readable copy of your personal data to transfer to another service provider.
You may object to processing based on our legitimate interests, including profiling activities. You may also withdraw marketing consent at any time without affecting other processing.
Identity Verification for Rights Requests: To protect your data against fraudulent access requests, we are required to verify your identity before processing any data rights request. Verification is typically performed by confirming your registered Account details. Processing timelines commence from the date we receive satisfactory identity confirmation.
Minors & Age Restriction
The Rumahtoto platform is strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect personal data from persons under the age of 21. Age verification is applied at the point of registration and again during KYC verification prior to first withdrawal processing.
If Rumahtoto discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant Account, delete all associated personal data in accordance with our data retention procedures, and reverse any financial transactions associated with that Account to the extent technically and legally practicable.
If you believe that a minor may have registered an Account on the Platform, please contact our support team immediately via live chat or by email. Protecting minors from access to gambling platforms is a responsibility we take very seriously.
Third-Party Links
The Rumahtoto platform may contain links to third-party websites or services, including payment provider portals and information resources. This Privacy Policy applies exclusively to data collected and processed by Rumahtoto in connection with the Platform. It does not govern the data practices of any third-party website or service to which a link may be provided.
Rumahtoto is not responsible for the privacy practices, content, or security of any third-party website. We recommend that you review the privacy policy of any external site before providing personal data to it.
Policy Amendments
Rumahtoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. The "Last Reviewed" date displayed at the top of this page indicates when the most recent revision was made.
Where changes are material — for example, where we introduce a new category of data processing or alter a key aspect of how your data is used — we will provide notice to registered Account holders via an in-Platform notification or by email to your registered address, with a minimum of fourteen (14) days' notice before the revised Policy takes effect.
Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may close your Account and request deletion of your personal data as described in Section 11.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Rumahtoto data protection team through the following channels:
- Live Chat: Available 24/7 via the on-platform live chat function. Our support agents cover English, Bahasa Melayu, and Mandarin Chinese. Average response time: 3–5 minutes.
- Email: support@rumahtoto.cam — Please include "Privacy Request" in the subject line for data rights enquiries.
- Response Timeframe: All privacy-related requests will be acknowledged within two (2) business days. Substantive responses will be provided within fourteen (14) business days of receipt of satisfactory identity verification.
If you are not satisfied with our response to a privacy-related complaint, you may escalate your concern to the relevant data protection authority or regulator in your jurisdiction.
Your Data Is in Safe Hands
Rumahtoto is committed to earning and maintaining your trust through transparent, responsible data handling. If you have questions or want to explore the platform, we are here for you — 24/7, in your language.
For players 21+ only | Play responsibly | Rumahtoto © 2026