At gototo, we take the privacy of our players seriously. This Privacy Policy explains what personal data we collect from you, how we use and protect it, and what rights you have over your information as a player on our platform. We operate in accordance with applicable data protection legislation and are committed to transparent data practices across everything we do.
These are the core data protection principles that govern how gototo collects, stores, and uses your personal information.
gototo does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Your data is yours. We use it only to operate your account and fulfil our regulatory obligations.
All data transmitted between your device and the gototo platform is protected by industry-standard 256-bit SSL encryption. Sensitive data at rest is also encrypted using AES-256 standards across our infrastructure.
We collect only the personal data necessary for account registration, identity verification, transaction processing, and regulatory compliance. We do not collect data that has no clear operational or legal purpose.
You have the right to access, correct, restrict, and in certain circumstances delete your personal data held by gototo. Submit a data subject request to our support team and we will respond within 30 days.
Where data must be shared with third parties — such as payment processors (FPX, DuitNow, Maybank) or identity verification providers — we share only the minimum data required and require those parties to meet equivalent data protection standards.
If you have opted in to marketing communications and wish to stop receiving them, you may unsubscribe at any time by contacting our support team or using the unsubscribe link in any marketing email. Opting out does not affect transactional notifications.
This Privacy Policy ("Policy") is issued by gototo ("we", "us", "our", or the "Company"), the operator of the online casino and sports betting platform accessible at gototo.asia (the "Platform"). This Policy describes how we collect, use, store, share, and protect personal data relating to individuals ("you", "your", or "Data Subject") who access or use the Platform, including registered players, prospective players, and visitors.
gototo is committed to protecting the privacy of all individuals whose data we process. We handle all personal data in accordance with applicable data protection laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and other relevant legislation applicable to our operations. Where we process data of individuals in other jurisdictions, we additionally comply with the applicable laws of those jurisdictions.
By registering an account on the Platform, depositing funds, placing bets, or otherwise using any feature of the gototo service, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, you should not use the Platform.
In this Privacy Policy, the following definitions apply:
gototo collects personal data across several categories, depending on how you interact with the Platform. The data we collect includes, but is not limited to:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport number, nationality | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile phone number, residential address | Account communications, transactional notifications, support |
| Financial Data | Bank account details, e-wallet identifiers (Maybank, CIMB, TNG), transaction history | Processing deposits and withdrawals, AML compliance |
| KYC Documents | Scanned MyKad, passport, utility bill, bank statement | Identity verification, regulatory compliance |
| Usage Data | Login times, games played, bets placed, session duration, betting history | Platform operation, responsible gambling monitoring, fraud detection |
| Technical Data | IP address, device type, browser type, operating system, cookies | Security, fraud prevention, platform optimisation |
| Communications Data | Live chat transcripts, WhatsApp messages, support emails | Customer support, quality assurance, dispute resolution |
| Marketing Preferences | Opt-in/opt-out status, communication channel preferences | Sending promotional communications (only where opted in) |
We do not intentionally collect special category data (such as health or biometric data). However, if you contact our responsible gambling support team and voluntarily disclose information relating to your health or personal circumstances, we may process such information to the extent necessary to assist you appropriately and fulfil our duty of care obligations.
gototo collects personal data through the following channels and mechanisms:
gototo processes personal data on the following legal bases under applicable data protection law, including the Malaysian Personal Data Protection Act 2010:
We use your personal data for the following operational, legal, and security-related purposes:
gototo does not sell, rent, or otherwise commercialise your personal data. We share personal data with third parties only in the following circumstances and only to the minimum extent necessary:
We require all third parties with whom we share data to implement appropriate technical and organisational security measures. We do not permit third parties to use your data for their own marketing or commercial purposes.
The gototo Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to improve user experience, and to support security and analytics functions. The cookies we use fall into the following categories:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Required for secure login, session management, and core Platform functionality. Cannot be disabled without impairing Platform use. | No — Platform requires these to function | |
| Remember your preferences such as language, display settings, and responsible gambling tool configurations. | Yes — disabling may affect personalisation | |
| Collect anonymised usage data to help us understand how the Platform is used and improve our service. No personally identifiable data is included. | Yes — opt out available via cookie settings |
You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the Platform. We do not use cookies to track your activity across third-party websites or to build advertising profiles.
gototo retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard data retention periods are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.
gototo implements robust technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes the following:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players and relevant authorities in accordance with our legal obligations and within the timeframes required by applicable data protection legislation.
Subject to applicable law and certain limitations, you have the following rights in relation to the personal data gototo holds about you:
Request a copy of the personal data we hold about you and information on how it is processed.
Request correction of inaccurate or incomplete personal data held about you.
Request deletion of your personal data where there is no longer a lawful basis for its retention, subject to legal and regulatory retention obligations.
Request that we limit the processing of your data in certain circumstances, such as while a dispute is being resolved.
Request a copy of your data in a structured, machine-readable format where technically feasible and legally applicable.
Object to the processing of your data where we rely on legitimate interests as the legal basis, including for direct marketing purposes.
To exercise any of these rights, please submit a written request to our support team at the contact details set out in Section 15 of this Policy. We will respond to all verifiable requests within thirty (30) days. Where the exercise of a right is subject to legal limitations — for example, where retention is mandated by anti-money laundering law — we will explain those limitations in our response.
In the course of providing services, gototo may transfer personal data to countries outside Malaysia, including to our technology infrastructure providers, cloud hosting partners, and certain payment processing networks. Such transfers are conducted in accordance with applicable data protection legislation and are subject to appropriate safeguards.
Where data is transferred to countries that have not been assessed as providing an equivalent level of data protection to Malaysia, we implement appropriate contractual safeguards — such as standard contractual clauses — to ensure that the data receives adequate protection. All third-party recipients of data are subject to binding data processing agreements.
Players based in Malaysia whose data is transferred internationally can request further information about the specific safeguards in place by contacting our data protection team as set out in Section 15.
The gototo Platform is strictly for adults aged 21 years and above. We do not knowingly collect or process personal data belonging to individuals under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated account.
Age verification is conducted as part of our standard KYC process. All players must confirm their date of birth at registration and provide documentary proof of age — typically a copy of their Malaysian identity card (MyKad) or passport — before their first withdrawal is processed.
If you have reason to believe that a minor has registered an account on gototo, please contact our support team immediately so that we may investigate and take appropriate action.
gototo reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy — for example, changes to how we use your data, new categories of data we collect, or new third-party sharing arrangements — will be communicated to you by email to your registered address and/or by prominent notice on the Platform, at least seven (7) days before the change takes effect where practicable.
The "Last Updated" date at the top of this Policy reflects the date on which the most recent revision was made. We recommend that you review this Policy periodically to stay informed of how we handle your personal data. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the changes.
If any change to this Policy materially reduces your rights or increases our use of your data in a way that requires your consent, we will request fresh consent before the change takes effect.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way gototo handles your personal data, please contact our support team. All data protection enquiries are handled by our support staff and are treated with strict confidentiality.
You also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you are not satisfied with our response to a data protection enquiry. In Malaysia, the relevant authority is the Personal Data Protection Commissioner (PDPC) under the Ministry of Communications and Multimedia.
For questions about our Terms & Conditions, please visit our Terms & Conditions page. For responsible gambling support, please visit our Responsible Gambling page.
Our support team handles all data protection enquiries in English, Bahasa Melayu, and Mandarin — 24 hours a day, 7 days a week. For players aged 21 and above only.
Play responsibly — 21+ only | gototo supports responsible gambling