Privacy Policy

1Introduction

This Privacy Policy (hereinafter the "Policy") is published by Solototo (hereinafter "Solototo", "the Company", "we", "us", or "our"), operator of the online gaming platform accessible at https://solototo.cam (the "Platform").

This Policy describes how Solototo collects, uses, stores, shares, and protects personal data relating to individuals who visit, register with, or interact with the Platform (each a "User", "Player", "you", or "your"). It applies to all Solototo services available to players in Malaysia and internationally where the Platform is lawfully accessible.

By registering an Account or using the Platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must not create an Account or continue using the Platform.

2Definitions

The following terms, as used in this Policy, have the meanings stated below:

• "Personal Data" — any information that identifies or can be used to identify a natural person, whether directly or indirectly, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, transmission, alteration, restriction, erasure, or destruction.
• "Data Controller" — Solototo, as the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" — any third party engaged by Solototo to Process Personal Data on the Company's behalf and in accordance with the Company's written instructions.
• "KYC" — Know Your Customer; the mandatory identity and age verification process that all Users must complete before withdrawals are processed.
• "Cookies" — small text files placed on a User's device by the Platform's web server, used for session management, analytics, and personalisation.
• "Sensitive Personal Data" — a subset of Personal Data that warrants heightened protection, including government-issued identification numbers, biometric data, and financial account details.

3Personal Data We Collect

Solototo collects Personal Data across several categories depending on your interaction with the Platform. The table below provides a structured overview:

4How We Collect Your Data

Solototo collects Personal Data through the following channels:

• Direct submission by you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, or communicate with our support team via live chat, WhatsApp, or email;
• Automated technical collection — through the Platform's web server logs, cookies, and analytics tools when you access or browse the website or mobile interface;
• Payment processors and e-wallet providers — where data is shared with us as part of the payment verification and settlement process (e.g., Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX);
• Identity verification partners — third-party KYC and fraud-detection service providers who assist in verifying the accuracy of identity documents;
• Publicly available sources — in limited circumstances, where required for regulatory compliance or fraud prevention purposes, information may be cross-referenced with publicly available records.

5Purposes of Data Processing

Solototo processes your Personal Data for the following specific purposes:

6Legal Basis for Processing

Where applicable data protection frameworks apply, Solototo relies on the following legal bases for Processing Personal Data:

• Contractual necessity — Processing required to perform obligations under the User Agreement with you, including Account management, KYC, and payment processing;
• Legal obligation — Processing necessary to comply with applicable laws and regulatory requirements, including AML obligations and record-keeping requirements;
• Legitimate interests — Processing conducted in the Company's legitimate interest in securing the Platform, preventing fraud, and improving service quality, where such interests are not overridden by your rights and interests;
• Consent — where you have freely and clearly given consent for a specific processing purpose, such as receiving marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7Data Sharing & Disclosure

Solototo does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. Personal Data is shared only in the following strictly defined circumstances:

• Payment service providers and banks — Identity and financial data necessary to process your transactions is shared with relevant payment infrastructure partners, including those operating Malaysian banking and e-wallet networks (Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX);
• KYC and identity verification partners — Verification document data is shared with specialist KYC service providers engaged by Solototo, under binding data processing agreements;
• Technology and infrastructure providers — Operational data may be accessed by cloud hosting, platform infrastructure, and cybersecurity partners who process data on Solototo's behalf under strict confidentiality obligations;
• Regulatory and law enforcement authorities — Personal Data may be disclosed to competent authorities where required by applicable law, court order, or lawful regulatory direction;
• Professional advisers — Legal counsel, auditors, and accountants where necessary in the context of legal proceedings, regulatory audits, or corporate transactions, under appropriate confidentiality obligations;
• Business transfers — In the event of a merger, acquisition, or sale of all or part of the Company's business, Personal Data may be transferred to the acquirer, subject to the same protections described in this Policy. Affected Users will be notified of any such transfer.

All third-party Data Processors engaged by Solototo are required to Process Personal Data only on documented instructions from the Company and in accordance with applicable data protection law.

8International Data Transfers

As an online platform serving Malaysian players with infrastructure supported by global technology partners, some Personal Data may be transferred to or stored in servers located outside Malaysia. Where such transfers occur, Solototo takes steps to ensure that appropriate safeguards are in place, including contractual protections with recipient entities and the application of technical security controls commensurate with those applied within Malaysia.

We do not transfer Personal Data to jurisdictions that do not offer an adequate standard of data protection without first implementing appropriate contractual or technical safeguards. If you have questions about the specific countries to which your data may be transferred, please contact our data protection team using the details in Section 15.

9Data Retention

Solototo retains Personal Data for no longer than is necessary for the purpose for which it was collected, subject to any statutory or regulatory minimum retention obligations. Our primary retention guidelines are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

10Your Data Rights

Subject to applicable law and any overriding legitimate interests of the Company (including compliance with regulatory obligations), you have the following rights in relation to your Personal Data:

To exercise any of the above rights, please contact our support team via live chat or the email address listed in Section 15. We will respond to all legitimate requests within thirty (30) calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

11Cookies & Tracking Technologies

The Solototo Platform uses cookies and similar tracking technologies to ensure correct Platform functionality, maintain your session state, analyse anonymous usage patterns, and — where you have given consent — deliver relevant promotional content.

The main categories of cookies used on the Platform are as follows:

• Strictly Necessary Cookies — essential for the Platform to operate correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing Platform functionality.
• Analytical / Performance Cookies — collect anonymous, aggregated data about how Users interact with the Platform (e.g., pages visited, session duration, error events). This data is used solely to improve Platform performance.
• Functional Cookies — remember your preferences such as preferred language (English, Bahasa Melayu, or Mandarin), display settings, and last-used payment method to provide a more personalised experience.
• Marketing Cookies — used only with your explicit consent to track response to promotional campaigns and measure marketing effectiveness. Solototo does not share marketing cookie data with external advertising networks.

You may manage or withdraw consent for non-essential cookies at any time through your browser settings or our in-Platform cookie preference centre. Disabling certain cookies may affect the availability or performance of specific Platform features.

12Children & Minors

The Solototo Platform is strictly for individuals aged 21 years and above. Solototo does not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory step in the Account registration process.

If Solototo becomes aware or has reasonable grounds to believe that Personal Data from an individual under the age of 21 has been collected, the relevant Account will be immediately suspended, all data will be reviewed, and the Account will be permanently closed. Any funds deposited by or winnings credited to a minor's Account will be handled in accordance with applicable law and the Company's Terms & Conditions.

If you believe a minor may have registered on the Platform, please contact Solototo's support team immediately via live chat or the email address in Section 15.

13Security Measures

Solototo implements a layered information security framework to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive Personal Data at rest using industry-standard algorithms;
• Role-based access controls limiting data access to authorised personnel on a need-to-know basis;
• Continuous server-side monitoring for intrusion, suspicious activity, and anomalous transaction patterns;
• Regular security assessments and penetration testing by independent third parties;
• Incident response procedures ensuring timely detection, containment, and notification in the event of a data breach.

While Solototo employs robust technical and organisational measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying Solototo immediately if you suspect unauthorised access to your Account.

14Amendments to This Policy

Solototo reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business practices, or Platform functionality. The revised Policy will be published on the Platform with an updated effective date.

Where amendments are material — for example, where the purposes of Processing are significantly expanded or where new categories of third-party recipients are introduced — Solototo will provide reasonable advance notice to registered Users via their registered email address and/or an in-Platform notification, with a minimum notice period of fourteen (14) calendar days before the amended Policy takes effect.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically. The current version is always available at https://solototo.cam/privacy-policy.

15Contact Us

For any queries, requests, or concerns relating to this Privacy Policy or Solototo's handling of your Personal Data, please contact our dedicated data protection team through the following channels:

When submitting a data rights request, please provide sufficient information to verify your identity so we can locate the correct records and respond accurately. For further information on your Account, payments, or responsible gambling tools, please also refer to our Terms & Conditions and Responsible Gambling pages.

This Privacy Policy was last reviewed and updated on 1 January 2026. Solototo reserves all rights not expressly granted herein.