Jogjatoto is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and the rights you hold as a data subject under applicable law.
These six principles summarise how Jogjatoto approaches your personal information. Full detail is provided in the sections below.
We collect only the personal information that is strictly necessary to provide our services, fulfil regulatory obligations, and maintain the security of your account. We do not collect data speculatively or for resale.
All personal data is stored on secure, encrypted servers. Access to player data within the Company is restricted on a strict need-to-know basis. We employ SSL/TLS encryption for all data in transit between your browser and our platform.
Jogjatoto does not sell, rent, or trade your personal information to any third party for their independent marketing purposes. Data is only shared with processors and partners where necessary to deliver our services.
You have the right to access, correct, export, and request deletion of your personal data at any time. Requests are processed within 30 days. See Section 9 for the full list of your data subject rights.
We retain your personal data only for as long as required to fulfil the purpose for which it was collected or as mandated by applicable law. Account data is held for a minimum of 5 years following account closure to meet AML compliance requirements.
All marketing communications from Jogjatoto include a clear unsubscribe mechanism. You may opt out of promotional emails, SMS, and push notifications at any time via your account settings or by contacting our support team.
Jogjatoto ("the Company", "we", "us", or "our") operates the online gaming and sports betting platform accessible atjogjatoto.cam (the "Platform"). In the course of providing our services — which include online casino games, live dealer products, sports betting, loyalty programmes, and customer support — we necessarily process personal data relating to registered players, prospective players, and other visitors to the Platform.
This Privacy Policy sets out, in clear and accessible terms, the categories of personal data we collect, the purposes for which that data is processed, the legal bases upon which we rely, the parties with whom data may be shared, the safeguards we employ to protect your information, and the rights you hold as a data subject.
Jogjatoto is a platform primarily serving users in Malaysia and takes its obligations with respect to Malaysian players' personal data seriously. All personal data collected is processed in accordance with applicable international data protection principles and the requirements of the Company's operating licence.
This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly, and our Responsible Gambling page, which outlines our player protection commitments.
The following definitions apply throughout this Privacy Policy:
Jogjatoto collects personal data through several mechanisms: directly from you when you register or interact with the Platform; automatically through your use of the Platform; and from authorised third-party sources where necessary for verification or fraud prevention purposes.
3.1 Data You Provide Directly
3.2 Data Collected Automatically
3.3 Data from Third Parties
Jogjatoto processes personal data only where a valid legal basis exists. The bases we rely on are as follows:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and provision of gaming services | Performance of a contract with you |
| KYC identity and age verification | Legal obligation (AML/gaming licence compliance) |
| Processing deposits and withdrawals | Performance of a contract with you |
| Fraud detection and security monitoring | Legitimate interests of the Company and players |
| Sending transactional communications (e.g., withdrawal confirmations) | Performance of a contract with you |
| Sending promotional and marketing communications | Consent (opt-in) / Legitimate interests where applicable |
| Responsible gambling monitoring and intervention | Legitimate interests and legal obligation |
| Analytics and platform improvement | Legitimate interests of the Company |
| Compliance with regulatory requests or court orders | Legal obligation |
Jogjatoto uses personal data for the following specific purposes:
Jogjatoto does not sell your personal data. We share personal data only in the limited circumstances set out below, and only to the extent necessary for the stated purpose:
Jogjatoto uses cookies and similar tracking technologies on the Platform. A cookie is a small data file stored on your device when you visit a website. We use the following categories of cookies:
| Cookie Type | Purpose | Basis |
|---|---|---|
| Essential / Strictly Necessary | Required for the Platform to function — session management, login state, security tokens, and fraud prevention. | Legitimate interests / contractual necessity |
| Functional / Preference | Remember your language preference, display settings, and region to personalise your experience. | Consent |
| Analytics | Aggregate data on Platform usage patterns to help us improve performance and content. No individual player is identified in analytics reports. | Consent / legitimate interests |
| Marketing / Retargeting | Used to deliver relevant promotional content to players who have visited the Platform. May involve the use of third-party advertising networks. | Consent |
You can manage your cookie preferences at any time through your browser settings. Note that disabling essential cookies may impair your ability to use key Platform features including login and account management. The Platform does not respond to "Do Not Track" browser signals at this time.
Jogjatoto retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML compliance, dispute resolution |
| KYC identity documents | 5 years following account closure | AML/gaming licence regulatory obligation |
| Transaction records (deposits/withdrawals) | 5 years minimum | Financial crime prevention, audit trail |
| Game activity logs | 3 years following account closure | Dispute resolution, responsible gambling monitoring |
| Support correspondence | 3 years from interaction date | Dispute resolution, service quality |
| Marketing consent records | Until consent is withdrawn + 3 years | Proof of lawful marketing communications |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gambling compliance |
Once data is no longer required, it is securely deleted or anonymised in manner that prevents re-identification. Anonymised aggregate data (e.g., statistical platform usage reports) may be retained indefinitely as it no longer constitutes personal data.
Subject to applicable data protection law, you hold the following rights with respect to your personal data held by Jogjatoto. Requests should be submitted in writing to our support team (see Section 14). We aim to respond within30 calendar days.
You may request a copy of all personal data we hold about you, together with information about how and why it is processed — commonly known as a Subject Access Request (SAR).
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note: AML retention obligations may override erasure requests for certain data categories.
You may request that we restrict processing of your personal data in certain circumstances — for example, while you contest its accuracy, or where you object to processing based on legitimate interests.
Where processing is based on consent or contract and carried out by automated means, you may request your personal data in a structured, machine-readable format suitable for transfer to another service provider.
You have the right to object at any time to processing based on legitimate interests or for direct marketing purposes. Objection to marketing will be actioned immediately; other objections will be assessed on a case-by-case basis.
Withdrawal of Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting our support team or updating your account communication preferences. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Jogjatoto implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
Whilst we take all reasonable steps to protect your data, no internet transmission or electronic storage system is entirely secure. You also play a role in protecting your account by using a strong, unique password and not sharing your login credentials with any third party.
As a platform operating under international licensing, Jogjatoto may transfer personal data to countries or territories outside of Malaysia in connection with the operation of the Platform — for example, to cloud hosting providers, KYC verification vendors, or game content partners located in other jurisdictions.
Where personal data is transferred internationally, Jogjatoto ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which it receives within Malaysia. Safeguards may include:
You may request further information about the specific safeguards applied to international transfers of your personal data by contacting us at the details provided in Section 14.
The Jogjatoto Platform is strictly intended for persons aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. All account registrations are subject to mandatory age and identity verification.
If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account in accordance with our Terms & Conditions. Any funds deposited by an underage user will be returned in accordance with our underage gambling policy.
If you have reason to believe that a minor has registered an account with Jogjatoto, please contact our support team immediately [email protected].
Jogjatoto reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory requirements. The "Effective Date" and "Last Reviewed" notices at the top of this page will be updated to reflect any material revision.
For significant changes that materially affect how we process your personal data or your rights as a data subject, Jogjatoto will provide advance notice via registered email or a prominent notice on the Platform no less than 14 days before the changes take effect.
Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any revision, you are entitled to close your account in accordance with the process described in our Terms & Conditions.
We encourage you to review this Privacy Policy periodically to stay informed about how your data is protected. Previous versions of this Policy are available upon request from our support team.
If you wish to exercise any of your data subject rights, make a privacy complaint, ask a question about this Policy, or request further information about our data processing activities, please contact us through the following channels:
For further context on your rights and our broader platform obligations, please review our Terms & Conditions, Responsible Gambling page, and FAQ.
Your data is protected, your rights are clear, and your gaming experience is backed by a platform built for Malaysian players. For adults aged 21 and above only.
For players aged 21 and above only. Gamble responsibly. Visit our Responsible Gambling page for player protection tools.