Privacy Policy

This Privacy Policy ("Policy") describes how Markastoto ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("User", "Player", "you") who access or use the online gaming platform operated at markastoto.cam (the "Website") and related services.

Markastoto is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection legislation and regulatory standards. This Policy is an integral part of our relationship with you as a player and should be read alongside our Terms & Conditions.

By registering an account with Markastoto, depositing funds via any supported Malaysian payment method (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong), or otherwise using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

The following terms carry the meanings assigned to them throughout this Policy:

Markastoto collects personal data through multiple touchpoints: at account registration, during the KYC verification process, through payment transactions, via in-platform activity, and through automated technical means such as cookies and server logs. The categories of data we may collect include the following:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (to verify the 21+ age eligibility requirement)
• MyKad number (for Malaysian citizens) or passport number (for foreign nationals)
• Residential address, including postcode, state, and country
• Email address and mobile phone number
• Profile username chosen at registration

3.2 Financial & Payment Data

• Details of payment methods used for deposits and withdrawals, including e-wallet phone numbers (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong), and registered DuitNow or FPX identifiers
• Transaction history: dates, amounts, methods, and outcomes
• Cryptocurrency wallet addresses used for BTC, ETH, USDT, or BNB transactions
• Deposit and withdrawal limits and balances

3.3 Gaming & Behavioural Data

• Session durations, login timestamps, and frequency of platform use
• Games played, bets placed, stakes wagered, and outcomes received
• Sports events bet on (Liga Super Malaysia, EPL, international fixtures, UFC, and others)
• Bonus offers claimed, wagering progress, and VIP tier status
• Responsible gambling settings: deposit limits, session limits, and self-exclusion records

3.4 Technical & Device Data

• IP address, geographic location data (city-level, e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya)
• Device type, operating system, browser type and version
• Cookie identifiers, session tokens, and analytics identifiers
• Page interaction data and navigation patterns within the platform

3.5 Communications Data

• Records of your interactions with Markastoto's customer support team, including live chat transcripts and email correspondence
• Survey responses and feedback submitted voluntarily
• Marketing preferences and opt-in records

Markastoto processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

Markastoto uses the personal data described in Section 3 for the following purposes:

• Account Management: Creating and maintaining your player account, authenticating logins, and managing account security settings including two-factor authentication.
• KYC & Age Verification: Confirming that you are at least 21 years of age and that your identity and payment methods are authentic before processing any withdrawal.
• Transaction Processing: Executing deposit and withdrawal transactions via your selected Malaysian payment method, maintaining accurate transaction records, and managing currency conversions for cryptocurrency deposits.
• Platform Delivery: Providing access to sports betting markets, live casino tables, slots, and instant games; delivering real-time odds updates; and personalising the in-platform experience based on your gaming preferences.
• Fraud Prevention & Security: Monitoring transactions and account behaviour to detect and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited activities.
• Responsible Gambling: Monitoring gameplay patterns for indicators of problem gambling behaviour and applying responsible gambling tools (deposit limits, self-exclusion) in accordance with your instructions or where required by our duty of care obligations.
• Customer Support: Responding to your queries, resolving disputes, and managing complaints through our live chat and email support channels.
• Legal Compliance: Retaining records as required by applicable anti-money laundering regulations and other statutory obligations.
• Marketing (Consent-Based): Sending promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time.
• Product Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience.

Markastoto does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients under strictly controlled conditions:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers to assist with specific platform functions. These include KYC and identity verification providers, payment processing gateways (supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and other payment rails), cloud hosting and infrastructure providers, fraud detection and AML screening services, and customer support platform operators. All processors are contractually bound to use your data only as directed by Markastoto and to maintain appropriate data security standards.

6.2 Game Studio Partners

Where technically necessary for game delivery and RNG fairness verification, limited technical data (such as session tokens and player identifiers) may be shared with licensed game studio partners. These parties do not receive personally identifiable information beyond what is required for game operation.

6.3 Regulatory & Law Enforcement Authorities

Markastoto may be required by law, court order, or regulatory directive to disclose personal data to government authorities, law enforcement agencies, or financial regulators. We will comply with such requirements and will notify you of any disclosure to the extent permitted by applicable law.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of Markastoto's business assets, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any resulting change to this Policy.

Markastoto uses cookies and similar tracking technologies to operate and improve the Platform, authenticate users, prevent fraud, and (where consent has been given) deliver personalised content and measure marketing effectiveness.

You may adjust your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the Platform's ability to function correctly and may prevent you from logging in or completing transactions.

Markastoto retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable law, whichever is longer.

• Active Account Data: Retained for the duration of your Account's active status and for a minimum of five (5) years following account closure, as required by anti-money laundering regulations.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, as mandated by applicable regulatory requirements.
• Transaction Records: All deposit and withdrawal records are retained for at least five (5) years following the transaction date.
• Communications Data: Live chat transcripts and email records are retained for up to three (3) years from the date of the communication for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent for marketing communications, after which it is deleted or anonymised.
• Responsible Gambling Records: Self-exclusion and deposit limit records are retained for the full duration of any applicable restriction period and for an additional period thereafter to prevent re-registration during an exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised unless retention is required to defend legal claims, respond to regulatory inquiries, or comply with a lawful court order.

Markastoto implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• Transport Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard 256-bit TLS (Transport Layer Security).
• At-Rest Encryption: Sensitive personal data stored in Markastoto's databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within Markastoto's internal systems is restricted on a strict need-to-know basis. All staff with data access undergo background screening and receive regular data protection training.
• Two-Factor Authentication: Markastoto provides and recommends two-factor authentication (2FA) for all player accounts and mandates it for all internal staff accounts with access to player data.
• Penetration Testing: The Platform undergoes regular independent security testing and vulnerability assessments to identify and address potential weaknesses.
• Incident Response: Markastoto maintains a documented data breach response procedure. In the event of a significant data breach affecting your personal data, you will be notified in accordance with applicable regulatory requirements.

Subject to applicable data protection law and certain conditions, you have the following rights in relation to your personal data held by Markastoto:

To exercise any of the above rights, please contact Markastoto's support team with appropriate proof of identity. We will respond to verified requests within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by a further thirty (30) days with prior notification.

The Markastoto platform integrates with a number of third-party service providers to deliver its full functionality. These include payment gateway operators (supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks), identity verification (KYC) providers, fraud detection services, game content delivery networks, and cloud infrastructure providers.

Each third-party provider engaged by Markastoto operates under a data processing agreement that defines the scope of data access, the purposes for which it may be used, and the security standards that must be maintained. Markastoto does not permit third-party processors to use player data for their own independent commercial purposes.

The Platform does not contain direct links to external websites. Where third-party services are embedded within the Platform (such as payment interfaces), those services are governed by both this Privacy Policy and the relevant provider's own privacy terms where applicable. Players are encouraged to review the privacy policies of payment providers they use, including Touch 'n Go eWallet, Boost, GrabPay, and their banking institutions.

The Markastoto platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process prior to any withdrawal being processed.

Where Markastoto becomes aware that personal data has been collected from an individual below the minimum age of 21, the relevant account will be immediately suspended, all funds will be handled in accordance with regulatory requirements, and all personal data associated with the account will be deleted as soon as practicably possible in compliance with applicable law.

If you believe that a minor may have registered an account on the Platform, please contact our support team immediately at the address listed in Section 15.

In the course of providing our services, your personal data may be transferred to and processed in countries other than Malaysia — for example, where our cloud infrastructure, KYC provider, or game studio partners are located. Such transfers may include countries with differing data protection frameworks.

Where personal data is transferred internationally, Markastoto ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to that required under applicable Malaysian data protection requirements. These safeguards include contractual clauses (data processing agreements), technical security standards, and, where applicable, adequacy assessments of the destination jurisdiction's data protection framework.

By using the Markastoto platform, you acknowledge and consent to the transfer of your personal data to third-party service providers in accordance with this Section and the safeguards described herein.

Markastoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. All amendments will be published on this page with a revised "Last Updated" date.

Where an amendment is material — for example, a significant change to the categories of data collected, how it is used, or the recipients to whom it is disclosed — Markastoto will provide advance notice via in-platform notification or email to the address registered on your account.

Continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. Where you do not agree to an amendment, you may close your account by contacting our support team and requesting account closure prior to the amendment taking effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which Markastoto processes your personal data, please contact us using the details below. All data-related requests will be acknowledged within five (5) working days and resolved within thirty (30) calendar days of receipt.

If you are unsatisfied with Markastoto's response to your data privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. Markastoto will cooperate fully with any such regulatory inquiry.