cahayatoto Privacy Policy

01Introduction

This Privacy Policy ("Policy") is issued by cahayatoto ("we", "us", "our") and applies to all personal data collected from individuals ("you", "User", "Player") who access or register on the cahayatoto platform, accessible at https://cahayatoto.lat.

cahayatoto is committed to handling personal data responsibly and transparently. This Policy sets out what data we collect, how we use it, with whom we may share it, and how long we retain it. It also explains the rights available to you and how to exercise them. By using cahayatoto, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside our Terms & Conditions, which govern your use of the platform, and our Responsible Gambling page, which describes how data may be used to support responsible-play tools. Where there is any conflict between this Policy and those documents, this Policy prevails in relation to data-processing matters.

02Definitions

03Data We Collect

cahayatoto collects personal data in several ways: directly from you at registration or during KYC, automatically through your use of the platform, and from approved third-party verification partners.

Information you provide directly:

• Full legal name, date of birth and national identity or passport number (KYC).
• Email address, phone number and correspondence address.
• Payment account details, including bank account names and eWallet identifiers associated with DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong.
• Username, password hash and security responses.
• Support correspondence, including messages sent to the cahayatoto support team.

Information collected automatically:

• IP address, device type, operating system and browser version.
• Session timestamps, page navigation sequences and in-platform activity logs.
• Cookie identifiers and local storage data for session management.
• Geolocation data at region or city level, used to assess access eligibility.

Information from third parties:

• Identity verification results from contracted KYC service providers.
• Transaction status and fraud screening flags from payment processors.
• Regulatory information from applicable compliance databases where required.

04Purpose of Processing

cahayatoto processes your personal data for the following specific purposes. Data is not used for purposes incompatible with those listed below without your prior knowledge:

• Account registration and management — creating and maintaining your cahayatoto account, processing login, managing account settings and administering account closure.
• Identity and age verification — confirming that you are at least 21 years old and that your identity matches your registered details before any withdrawal is processed.
• Payment processing — facilitating MYR deposits and withdrawals through your nominated payment channel, reconciling transactions and maintaining accurate financial records.
• Fraud detection and security — monitoring activity for indicators of unauthorised access, money laundering, bonus abuse or any other breach of the cahayatoto Terms and Conditions.
• Legal and regulatory compliance — meeting obligations under applicable anti-money-laundering, know-your-customer and record-keeping requirements.
• Responsible gambling — applying deposit or session limits, managing self-exclusion requests and identifying usage patterns that may indicate problem-gambling behaviour.
• Customer support — handling queries, complaints and escalation requests submitted to the cahayatoto support team.
• Platform improvement — analysing aggregated usage data to improve navigation, game availability, load performance and the overall cahayatoto experience.
• Communications — sending transactional messages, security alerts and, where you have opted in, promotional updates about cahayatoto offers relevant to your account.

05Legal Basis for Processing

cahayatoto processes personal data on the following legal grounds, depending on the activity involved:

• Contractual necessity — processing required to perform the agreement between you and cahayatoto, including account management, payment handling and KYC verification.
• Legal obligation — processing necessary to comply with anti-money-laundering, counter-terrorism-financing and other applicable regulatory requirements.
• Legitimate interests — processing carried out for fraud detection, platform security and responsible-gambling monitoring, where these interests are not overridden by your data-protection rights.
• Consent — where cahayatoto relies on your consent, such as for optional promotional communications, you may withdraw that consent at any time by contacting our support team or updating your account preferences.

06Data Sharing

cahayatoto does not sell, rent or trade your personal data. We may share your data with the following categories of recipients, and only to the extent necessary:

• Payment service providers — banks and eWallet operators including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay, to process your transactions.
• KYC and identity verification partners — third-party services contracted by cahayatoto to confirm your identity, age and payment-method ownership.
• Game content providers — licensed technology suppliers whose games are made available through the cahayatoto platform, where session data is shared to support game integrity.
• Regulatory authorities — where disclosure is required by law, court order or lawful regulatory request.
• Professional advisers — legal, audit or compliance consultants engaged by cahayatoto under appropriate confidentiality obligations.

07Data Retention

cahayatoto retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and financial record-keeping requirements. In practice, this means:

• Account and identity data is retained for a minimum period after account closure to satisfy anti-money-laundering obligations.
• Transaction records are maintained for the period required under applicable financial regulations.
• Support correspondence is retained for a reasonable period to allow resolution of any related disputes.
• Anonymised or aggregated analytics data, which cannot be used to identify individuals, may be retained indefinitely for platform improvement purposes.

Where data is no longer required, cahayatoto will take reasonable steps to delete or anonymise it securely. You may submit a deletion request as described in the User Rights section below, subject to any overriding legal obligation to retain the data.

08Security

cahayatoto implements technical and organisational measures appropriate to the nature of the personal data processed. These include:

• Transport-layer encryption for all data transmitted between your device and the cahayatoto platform.
• Role-based access controls limiting staff access to personal data to those with a demonstrated operational need.
• Monitoring for unusual login patterns, IP anomalies and payment irregularities that may indicate a security incident.
• Regular review of data-handling procedures and third-party data-processor agreements.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and should notify cahayatoto immediately at the support email below if you suspect any unauthorised access to your account.

09Cookies and Tracking Technologies

cahayatoto uses cookies and similar browser storage mechanisms to operate the platform. The principal categories of cookies in use are:

• Essential cookies — necessary for secure login, session continuity and basic platform functionality. These cannot be disabled without affecting your ability to use cahayatoto.
• Functional cookies — used to remember your account preferences, language settings and responsible-gambling limit configurations between sessions.
• Analytics cookies — used to collect aggregated data about how users navigate cahayatoto so that we can improve page structure and game discovery. This data is processed in a form that does not identify individual users.

cahayatoto does not use third-party advertising cookies or sell cookie data to any external party. You may manage cookie preferences through your browser settings, though disabling essential cookies may limit your access to core platform features.

10Minors

cahayatoto is strictly for eligible adults aged 21 and above. We do not knowingly collect personal data from individuals below this age. If cahayatoto becomes aware that personal data has been submitted by or on behalf of a person under 21, that data will be deleted and the associated account will be closed immediately.

If you believe that cahayatoto has inadvertently collected personal data from an underage individual, please contact us using the details in the Contact section below and we will investigate and take appropriate action promptly.

11User Rights

Subject to applicable law and any overriding legal obligations, you may exercise the following rights in relation to your personal data held by cahayatoto:

• Right of access — request a copy of the personal data cahayatoto holds about you.
• Right to rectification — request correction of inaccurate or incomplete personal data.
• Right to erasure — request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to restrict processing — request that cahayatoto limits the use of your data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to data portability — request a structured, machine-readable copy of data you have provided to cahayatoto where processing is based on consent or contractual performance.
• Right to object — object to processing carried out on the basis of legitimate interests where your specific situation warrants it.
• Right to withdraw consent — where processing relies on your consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the cahayatoto support team at the email address shown in the Contact section. cahayatoto will respond within a reasonable timeframe and may request identity verification before actioning a request.

12International Data Transfers

cahayatoto may transfer personal data to service providers or infrastructure located outside of Malaysia. Where such transfers occur, cahayatoto takes reasonable steps to ensure that appropriate safeguards are in place, including contractual obligations on the receiving party to protect personal data to a standard consistent with this Policy.

By using cahayatoto, you acknowledge that your personal data may be transferred, stored or processed in jurisdictions outside Malaysia, including jurisdictions whose data-protection laws may differ from those of Malaysia.

13Changes to This Policy

cahayatoto may update this Privacy Policy from time to time to reflect changes in regulatory requirements, platform functionality or data-processing practices. Material updates will be signalled by a change to the effective date displayed at the top of this page.

We encourage you to review this Policy periodically. Continued use of cahayatoto following the posting of a revised Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, please discontinue use of the platform and contact us to close your account.

14Contact Us

If you have questions about this Privacy Policy, wish to exercise a data subject right, or need to raise a privacy concern related to your cahayatoto account, please contact us using the details below. All correspondence should be in English.

For questions about bonus rules or account access, please review our FAQ or Terms & Conditions pages as a first step.