Sakautoto Privacy Policy

"Personal Data" means any information that identifies or can reasonably identify a living individual, including name, identification number, email address, device identifiers and financial account details.

"Processing" means any operation performed on personal data, including collection, storage, use, disclosure and deletion.

"Platform" means the Sakautoto website, associated mobile interface, games, sportsbook and all related services.

"Player" / "You" refers to any individual who registers for or uses a Sakautoto account.

"Data Controller" means Sakautoto in its capacity as the entity determining the purposes and means of processing player personal data.

"Service Providers" means third-party processors engaged by Sakautoto to assist in delivering platform services, including payment processors handling Maybank, CIMB, FPX, Touch 'n Go eWallet, Boost, GrabPay and DuitNow transactions.

Sakautoto collects personal data through account registration, identity verification, platform use, payment transactions and communications with support. Categories of data collected include:

Where document copies are requested for identity verification — such as a Malaysian identity card (MyKad) or passport — these documents are used solely for the stated verification purpose and handled with additional security controls.

Sakautoto processes personal data on the following lawful bases:

• Contractual necessity: Processing required to open, maintain and operate your Sakautoto account and fulfil the Terms & Conditions — including identity verification, transaction processing and delivering game results.
• Legitimate interests: Security monitoring, fraud detection, responsible gambling risk assessment, platform improvement and anonymised analytics, where these interests do not override your fundamental rights.
• Legal obligation: Compliance with applicable financial crime, anti-money laundering and data protection requirements that apply to platform operations.
• Consent: Marketing communications, optional cookies beyond strictly necessary functionality and optional profiling for personalised promotions — in each case only where you have given a clear, specific and withdrawable consent.

Personal data collected by Sakautoto is used for clearly defined purposes aligned with its lawful basis. Specific uses include:

• Registering and administering your player account, including age verification to enforce the 21+ requirement.
• Processing MYR deposits and withdrawals via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay.
• Verifying your identity and ownership of payment methods during KYC reviews.
• Detecting and preventing fraudulent activity, collusion, money laundering and other prohibited conduct.
• Administering bonuses, cashback and loyalty programme rewards in accordance with applicable promotional terms.
• Monitoring gameplay patterns for responsible gambling purposes, including triggering deposit limit reviews and self-exclusion processes.
• Responding to account queries, dispute investigations and support requests submitted through live chat or email.
• Improving platform performance, game loading speeds and interface usability based on aggregated technical data.
• Sending essential service communications — such as account security alerts and policy updates — that cannot be opted out of while your account remains active.
• Sending promotional communications where you have provided consent, and subject to your marketing preferences.

Sakautoto does not sell or rent player personal data to any third party. Data may be shared with carefully selected service providers solely to enable platform operations:

• Payment processors: Entities facilitating MYR deposits and withdrawals receive only the data necessary to authorise and complete a specific transaction.
• Identity verification providers: Third-party KYC services that validate government-issued identification and address documents during account verification.
• Game software providers: Game suppliers receive session data to deliver and settle casino game results; they do not receive your full identity profile.
• Security and fraud tools: Automated risk-scoring services may process IP address and behavioural data to detect suspicious patterns.
• Legal and regulatory authorities: Where required by applicable law, court order or a legitimate formal request from a competent authority, Sakautoto may disclose personal data as necessary.

All service providers are bound by contractual obligations requiring them to process shared data only for the specified purpose and to maintain appropriate security standards.

Sakautoto uses cookies and similar tracking technologies to support essential platform functionality, security and optional analytics. Categories of cookies include:

• Strictly necessary cookies: Required for session management, login authentication, security token validation and preventing cross-site request forgery. These cannot be disabled without breaking core platform functions.
• Functional cookies: Remember your preferences such as language settings, display choices and responsible gambling limits to improve consistency across sessions.
• Analytics cookies: Collect anonymised data about how players navigate the platform to help us improve page performance and identify usability issues. These are only set with your consent.
• Marketing cookies: Used to measure the effectiveness of promotions and campaigns where you have consented to receive marketing communications. No cross-site tracking is conducted for third-party advertising purposes.

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent access to certain platform features.

Sakautoto retains personal data for as long as your account is active and for a defined period afterwards to meet legal obligations, resolve disputes and detect fraud. General retention guidelines include:

• Account registration and identity documents: retained for the duration of the account plus a minimum period required by applicable financial and data protection regulations.
• Transaction records including MYR deposit and withdrawal history: retained as required for accounting, anti-money laundering compliance and dispute resolution.
• Communications and support correspondence: retained for a reasonable period after resolution to support quality assurance and any subsequent complaints.
• Technical and usage logs: retained for a shorter operational period unless an active security investigation requires extended retention.

Once a retention period has expired and no legal obligation requires further storage, Sakautoto will securely delete or irreversibly anonymise the relevant data.

Sakautoto implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction and disclosure. Measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and Sakautoto servers.
• Access controls limiting staff access to personal data on a need-to-know basis, with access logging and regular review.
• Pseudonymisation and encryption of sensitive data fields in storage where operationally feasible.
• Regular security assessments and penetration testing of platform infrastructure.
• Procedures for detecting, investigating and reporting personal data breaches within applicable timeframes where required by law.

No online platform can guarantee absolute security. Players are also responsible for protecting their own login credentials and should contact support immediately if they suspect unauthorised access to their account.

Subject to applicable law and the platform's legal obligations, Sakautoto players may exercise the following rights in relation to their personal data:

• Right of access: Request a copy of the personal data Sakautoto holds about you and information about how it is used.
• Right to rectification: Request correction of inaccurate or incomplete personal data held in your account.
• Right to erasure: Request deletion of personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations that may require Sakautoto to retain certain records.
• Right to restriction: Request that processing of your data is limited where accuracy is disputed or a legitimate interest objection is pending review.
• Right to data portability: Where processing is based on your consent or contractual necessity, request receipt of your data in a structured, commonly used format.
• Right to object: Object to processing carried out on the basis of legitimate interests, including direct marketing and profiling based on your account activity.
• Right to withdraw consent: Where processing is based on your consent — including marketing emails — withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact Sakautoto support providing your account username and a description of your request. Identity verification may be required before Sakautoto can action a request. We aim to acknowledge and respond within a reasonable period. Exercising your rights will not result in any penalty to your account, though certain requests may affect available platform functionality.

Sakautoto is strictly for individuals aged 21 and above. The platform does not knowingly collect personal data from anyone under the age of 21. Age verification is conducted during account registration and may be repeated during subsequent identity reviews.

If Sakautoto discovers that an account belongs to a person under the age of 21, the account will be suspended, all associated data reviewed and appropriate steps taken in accordance with the Terms & Conditions and applicable law. Any parent or guardian who believes a minor has registered with Sakautoto should contact support immediately.

Some of Sakautoto's service providers — including game software suppliers, security monitoring tools and identity verification services — may process personal data on servers located outside Malaysia. Where such transfers occur, Sakautoto takes reasonable steps to ensure that appropriate contractual safeguards are in place so that your data continues to receive a standard of protection consistent with this Privacy Policy.

By creating a Sakautoto account and accepting these terms, you acknowledge that your data may be transferred and processed in other jurisdictions as described above. If you have questions about specific cross-border transfers, contact support.

Sakautoto reviews this Privacy Policy periodically and when legal, technical or operational changes require an update. The effective date at the top of this page reflects the most recent revision. Where a change materially affects how your personal data is used, Sakautoto will take reasonable steps to notify active players through available account communication channels.

Continued use of Sakautoto following a policy update constitutes acceptance of the revised terms. If you do not agree with a material change, you should stop using the platform and contact support to close your account and request data handling in line with your rights under Section 9.

For all data protection enquiries, access requests, corrections, deletion requests or privacy complaints, contact Sakautoto support. Email is displayed as plain text only and is not a clickable link. When submitting a request, include your account username and a clear description of your query to help us respond efficiently.

Live chat support is available daily from 9:00 AM to 2:00 AM Malaysia Standard Time (MYT), 365 days a year. For written enquiries, use the email address displayed in the Contact section of this page and in the footer.