Privacy & Data Protection

Privacy Policy Wolototo – Your Information Is Safe With Us

Wolototo takes every aspect of our members' personal data protection seriously. This page clearly outlines the types of information we collect, the purposes for its use, how we protect it, and your rights as a data subject. Nothing is hidden — transparency is the foundation of our trust.

Updated: January 2026
Commitment Privacy Wolototo

Six core principles that guide how we manage your personal data

🔒
Advanced-Level Encryption

All members' personal data and financial information are protected using 256-bit SSL encryption — the same standard used by Malaysia's major banks. Your information cannot be read by unauthorised parties while in transit across the network.

🚫
No Sale of Data to Third Parties

Wolototo has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes. Your data is used solely for legitimate platform operational purposes as stated in this policy.

📋
Minimum Data Collection

We only collect data that is genuinely necessary to operate the platform safely and efficiently. No excessive information is requested — every piece of data collected has a clear and legitimate purpose.

✅
Full Member Control

You have the full right to access, correct, or request deletion of your personal data. This process can be initiated at any time through your account settings or by contacting our support team directly.

🏛️
Malaysia PDPA Compliance

The wolototo privacy policy is built in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all legal provisions relating to personal data processing in Malaysia.

🔔
Immediate Breach Notification

In the event of any security incident involving member data, wolototo is committed to notifying affected members within the timeframe set out in our established incident response procedures.

1

Introduction

Wolototo ("we", "Platform", "Company") takes the privacy of all registered members and platform users seriously. This Privacy Policy explains in detail how we collect, use, store, protect, and in certain circumstances, share the personal information you provide to us when using the wolototo platform, whether through the wolototo.com website or our official mobile app.

This policy is built in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and covers all data processed by wolototo in connection with providing online gaming platform services to members in Malaysia. By continuing to use our platform after reading this policy, you consent to the practices described herein.

If you do not agree with any part of this privacy policy, please stop using the wolototo platform and contact us to discuss the options available to you.

2

Types of Personal Data We Collect

Wolototo collects various types of personal data from members depending on the stage of platform use and relevant operational requirements. Below are the main categories of data we collect and process:

Data Category Example Information How Collected
Identification Data Full name, IC number, date of birth Registration & KYC
Contact Data Phone number, email address Registration form
Financial Data Bank account number, transaction records Deposit & Withdrawal
Usage Data Game logs, betting history, active time Automatically during play
Technical Data IP address, device type, web browser Automatically upon access
KYC Data Copies of identity documents, verification selfie KYC verification process

All data collected is for legitimate purposes explicitly stated in the following sections. wolototo does not collect sensitive data such as medical information, religious beliefs, or political views under any circumstances.

3

Purpose of Data Collection and Processing

Wolototo uses members' personal data for purposes that are limited, lawful, and directly related to the delivery of platform services. We do not process your data for purposes not stated here without first obtaining your additional consent.

  • Account Management: Creating, verifying, and maintaining your member account, including the KYC identity verification process required for platform security.
  • Transaction Processing: Processing all deposits, withdrawal of wins, and other financial transactions accurately and securely.
  • Security and Fraud Prevention: Detecting, investigating, and preventing fraud, money laundering, platform abuse, and other security threats.
  • Legal Compliance: Meeting the legal and regulatory obligations applicable to our platform's operations.
  • Service Communications: Sending important information related to your account, transactions, policy changes, and system updates.
  • Platform Improvement: Analysing usage patterns in aggregate and anonymised form to improve the performance, features, and user experience of the wolototo platform.
  • Customer Support: Resolving complaints, responding to enquiries, and providing technical assistance to members.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.

Optional marketing communications (promotions and bonus offers) are only sent to members who have given explicit consent. You may withdraw this consent at any time through your account settings.

4

Data Sharing with Third Parties

Wolototo does not sell or trade members' personal data to any party. However, in the course of platform operations, there are situations where we need to share certain data with selected and trusted third parties. All such data sharing is conducted on a strict need-to-know basis under binding confidentiality agreements.

  • Payment Processors: Required financial data is shared with licensed payment processors such as DuitNow, FPX, and e-wallet providers to facilitate deposit and withdrawal transactions.
  • Game Providers: Minimal technical data is shared with game providers such as Pragmatic Play and Evolution to ensure smooth game functionality.
  • Identity Verification Services: KYC data is shared with licensed third-party identity verification service providers for the member verification process.
  • Regulatory Authorities: Data is shared with relevant authorities where required by law, court order, or directive from a competent regulatory body.
  • Analytics Services: Anonymised and aggregated usage data is shared with analytics platforms solely for the purpose of monitoring platform performance.

All third parties that receive wolototo member personal data are required to comply with the same data protection standards we uphold internally. Legally binding data processing agreements are signed with all partners who receive member data.

5

Data Storage and Security Measures

Wolototo member personal data is stored on secure servers with strict access controls. We use a combination of technical and organisational security measures to protect your data from unauthorised access, disclosure, alteration, or destruction.

On the technical security front, the wolototo platform implements 256-bit SSL encryption for all data transmissions, encryption of stored data for sensitive information, strict role-based access controls, continuous system monitoring, and regular security testing by independent experts.

  • Active Data Retention Period: Account data is retained for as long as your account is active and for a period of 7 years after account closure to meet legal and regulatory requirements.
  • Transaction Records: All financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
  • Data Deletion: When data is no longer needed and there is no legal obligation to retain it, it will be securely deleted using irreversible methods.

While we implement comprehensive security measures, no digital system can guarantee absolute 100% security. We recommend using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

6

Cookies and Tracking Technologies

Wolototo uses cookies and similar tracking technologies to enhance the user experience, analyze platform traffic, and ensure security functions operate correctly. Below are the types of cookies we use and their purposes:

  • Essential Session Cookies: Required to maintain your login session and ensure the platform functions correctly. These cookies cannot be disabled as they are essential to platform functionality.
  • Preference Cookies: Saving your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
  • Analytics Cookies: Collecting anonymised usage data to help us understand how users interact with the platform and identify areas for improvement.
  • Security Cookies: Helping detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser or mobile app. Please note that disabling certain cookies may affect the functionality and user experience of the wolototo platform.

7

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data processed by wolototo. We are committed to facilitating the exercise of these rights within a reasonable timeframe.

Right of Access

Requesting a copy of the personal data we hold about you in a readable format.

Right to Rectification

Requesting correction of inaccurate or incomplete data without unreasonable delay.

Right to Erasure

Requesting the deletion of your personal data in certain situations permitted by law.

Right to Object

Objecting to the processing of your data for specific purposes, including direct marketing.

Right to Data Portability

Receiving your data in a structured, machine-readable format for transfer to another platform.

Right to Restrict Processing

Requesting restriction of your data processing in certain situations while a dispute is being resolved.

To exercise any of the above rights, submit a written request to our privacy team via support email or live chat. We will respond to your request within 30 days of receipt. For complex cases, this period may be extended up to 60 days with prior notice to you.

8

Children's Data

Wolototo is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18. Our platform implements technical and procedural measures to prevent registration by individuals below the stipulated age limit.

If we find that we have collected a child's personal data without their knowledge, the account in question will be closed immediately, all related data will be securely deleted, and any funds in that account will be returned. If you believe wolototo has collected a child's personal data, please contact us immediately for corrective action.

9

Links to Other Sites

The wolototo platform may contain links to third-party websites or services in certain contexts, such as links to game providers or responsible gaming support agencies. When you click those links and leave the wolototo platform, our privacy policy no longer applies to your activity on those sites.

Wolototo is not responsible for the privacy practices or content of third-party websites. We recommend reading the privacy policy of every website you visit to understand how your information is managed on those sites.

10

Changes to the Privacy Policy

Wolototo reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or relevant industry developments. The "Updated" date at the top of this page reflects the effective date of the current version.

For significant changes that may materially affect your privacy rights, we will provide clear notice via your registered email or in-app notification at least 14 days before the changes take effect. We encourage you to review this page periodically to stay informed of the latest version of our Privacy Policy.

Continued use of the wolototo platform after a policy change takes effect indicates your acceptance of the updated version. If you do not agree, please stop using the platform and contact us to discuss the available options.

11

Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding how we handle your personal data, or if you wish to exercise any of the rights set out in this policy, please contact the wolototo privacy team through the following channels:

  • Live Chat 24/7: The fastest method — access via the chat icon at the bottom right corner of the wolototo app or website. Average response time is under 2 minutes.
  • Privacy Email: [email protected] — for privacy-related inquiries that require written documentation.
  • FAQ Page: Browse FAQ page us for quick answers to the most frequently asked privacy questions.

We are committed to addressing every privacy enquiry seriously and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant authority.

Your Data is Safe. Join wolototo Today.

Enjoy a safe and transparent online entertainment experience alongside more than 500,000 wolototo members across Malaysia. Your privacy is fully protected.

PDPA Compliance 256-bit SSL Encryption No data sales Full member control
Bahasa Melayu