Bayitoto Privacy Policy

This Privacy Policy applies to personal information handled through the Bayitoto website, player account area, casino lobby, sportsbook, live dealer services, payment functions and customer support. It applies when Bayitoto is accessed from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam or elsewhere.

Bayitoto seeks to handle personal information fairly, transparently and only for legitimate operational purposes. The ability to access Bayitoto does not remove a player's responsibility to comply with rules applicable in their location. Casino-style gambling is restricted to eligible players aged 21 and above.

This policy covers information that identifies a person directly, information that may identify a person when combined with other records, and technical information linked to a Bayitoto account or device.

For this Bayitoto Privacy Policy, the following expressions have the stated meanings:

• Account data means registration, profile, verification and account-status information.
• Personal data means information relating to an identified or reasonably identifiable person.
• Processing means collecting, recording, organising, using, disclosing, storing or deleting data.
• Transaction data means deposit, withdrawal, wallet, wagering and payment reconciliation records.
• Technical data means device, browser, connection, security-event and usage information.
• Player means a visitor, applicant or registered user interacting with Bayitoto.

Bayitoto may collect identification and contact information supplied during registration or verification. This may include a player's name, date of birth, residential address, mobile number, email address, nationality and copies or details of suitable identity documents.

Bayitoto also processes account credentials, language preferences, communication records, responsible gambling settings and support history. Players should never include a password, complete banking credential or one-time code in a support message.

When a player deposits, withdraws or places a wager, Bayitoto may record the MYR amount, transaction time, payment method, reference number, account holder name, wager details and resulting balance. Casino activity, live baccarat sessions, roulette wagers and sports bets involving the EPL, Liga Super Malaysia, UFC or live football may form part of account history.

Technical records may include an IP address, browser type, device type, operating system, approximate location, login time, session identifier, pages viewed and security alerts. Bayitoto uses such records to operate the service and identify unusual account access.

Most personal information is supplied directly by a player when creating or updating a Bayitoto account, communicating with support, completing verification, setting responsible gambling controls or using payment services.

Bayitoto may also receive relevant information from payment processors, e-wallet providers, Malaysian banking channels, identity-verification services, casino game systems and sports data functions. Such information may confirm whether a transaction succeeded, whether an identity check passed or whether a wager was correctly settled.

Bayitoto may generate internal records from account use, including risk indicators, support notes, security events and responsible gambling assessments. These records are limited to purposes connected with operating, safeguarding and administering Bayitoto.

Bayitoto may process personal information for the following purposes:

• creating, authenticating and administering a Bayitoto account;
• confirming identity, age, payment ownership and account eligibility;
• accepting wagers, calculating balances and settling casino or sports activity;
• processing deposits, withdrawals, refunds and payment reconciliation;
• responding to questions, complaints and account support requests;
• detecting fraud, duplicate accounts, unauthorised access and prohibited conduct;
• applying deposit limits, cooling-off periods and self-exclusion controls;
• maintaining accurate operational, financial and security records; and
• improving the performance, usability and reliability of Bayitoto services.

Bayitoto processes information where it is necessary to provide requested services, administer the player agreement, protect legitimate operational interests, respond to consent-based choices or satisfy applicable obligations. Bayitoto does not promise that every purpose relies on the same legal basis in every jurisdiction.

Bayitoto may process payment information linked to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong. The available channels may differ by account, transaction value, maintenance status and payment-provider availability.

Payment information is used to confirm ownership, process MYR transactions, investigate reversed or delayed payments, prevent fraud and reconcile a player's balance. Bayitoto may request supporting documents when the account name and payment name do not match or when a transaction requires additional review.

Bayitoto does not require players to disclose a complete online-banking password or e-wallet security code to support personnel. Authentication performed within a bank, FPX or e-wallet interface remains subject to that provider's security process.

Bayitoto may share limited personal information with service providers that support payment processing, identity verification, account security, infrastructure, game delivery, data storage and customer support. Each disclosure should be limited to information reasonably required for the relevant service.

Bayitoto may also disclose information where reasonably necessary to investigate fraud, protect players or staff, enforce the Terms & Conditions, respond to a valid legal requirement or establish and defend legal rights.

Bayitoto does not treat personal information as a casino prize or tradable player asset. Where operational restructuring affects data control, appropriate confidentiality and continuity safeguards will be considered before records are transferred.

Bayitoto applies access controls, account authentication, monitoring procedures and internal handling rules intended to protect personal data. Access should be limited to personnel and service providers with an operational reason to use the information.

No online service can guarantee absolute security. Players contribute to Bayitoto security by using a unique password, protecting registered devices, signing out from shared computers and refusing to disclose one-time codes. Suspicious login activity should be reported promptly.

If Bayitoto identifies a personal data incident, it may investigate the event, restrict affected access, preserve relevant records and provide notices where required or reasonably appropriate. A security notice may include practical steps a player should take to protect the account.

Bayitoto retains personal information for as long as reasonably necessary to operate an active account, complete pending transactions, respond to disputes, maintain security and satisfy applicable record-keeping needs. Different record categories may have different retention periods.

Closing a Bayitoto account does not always result in immediate deletion. Transaction history, verification records, self-exclusion instructions, complaints and fraud-prevention information may need to be retained after closure. This helps Bayitoto resolve later disputes and prevent a restricted account from being reopened improperly.

When information is no longer required, Bayitoto may delete it, anonymise it or place it beyond ordinary operational use. Anonymised statistical information that no longer identifies a player may be retained for service analysis.

Bayitoto may use cookies and similar storage functions to maintain login sessions, remember preferences, support navigation, measure performance and protect account access. Some functions are necessary for the website and player account to operate correctly.

Browser controls may permit a player to remove or block certain cookies. Doing so can affect sign-in, saved preferences, payment flow or the display of casino and sportsbook features. Bayitoto may also use device information to recognise unusual access and reduce duplicate or fraudulent account activity.

Technical data is assessed in context. A shared household connection or mobile network address does not automatically establish wrongdoing, but Bayitoto may request clarification where combined account indicators create a genuine security concern.

Subject to applicable requirements and identity verification, a Bayitoto player may request information about personal data, ask for inaccurate details to be corrected or raise an objection or concern regarding particular processing.

A request should identify the Bayitoto account and describe the information or issue clearly. Bayitoto may ask for reasonable proof of identity before releasing or changing personal data. This protects players from unauthorised requests made by another person.

Some requests may be limited where records must be retained for transaction integrity, responsible gambling controls, fraud prevention, dispute resolution or another applicable requirement. Bayitoto will explain a material limitation where appropriate.

Players may also update certain account details through available profile functions or ask Bayitoto support for assistance. General account information is available on the FAQ page.

Bayitoto may process wagering patterns, deposit activity, session information, limit settings, cooling-off requests and self-exclusion instructions to support responsible gambling measures. This information may be reviewed where activity reasonably suggests an elevated risk of harm.

Responsible gambling information is handled with care, but Bayitoto may need to share limited details internally so that account restrictions are applied consistently. A self-excluded player must not attempt to bypass controls by registering another Bayitoto account.

Players aged 21 and above can review available controls on the Responsible Gambling page. Gambling should remain entertainment, and players should never use MYR funds required for rent, food, education, transport or other daily commitments.

Bayitoto may update this Privacy Policy to reflect changes to account services, security procedures, payment channels, technology or applicable obligations. The revised version will be published on this page with an updated effective date.

Where a change materially affects the way Bayitoto handles player information, reasonable notice may be provided through the website or account interface where practicable. Players should review this page periodically to understand the current Bayitoto privacy practices.

Privacy questions, correction requests and data concerns may be directed to Bayitoto at [email protected]. This address is displayed as plain text and is not a clickable link. Include a clear explanation and the relevant account reference, but never send a password or one-time security code.

Bayitoto may need to verify the requester's identity before discussing account-specific information. Requests will be assessed within a reasonable period according to their complexity, security implications and applicable requirements.

For information about account rules, payments and player obligations, read the Terms & Conditions. For practical explanations of common issues, visit the FAQ. These pages should be read together with this Bayitoto Privacy Policy.