Privacy Policy

Patihtoto ("we", "us", "our", "the Platform") is the operator of the online sports betting and casino services accessible at patihtoto.cam. We recognise that your personal data is important and that you have a right to understand how it is collected, processed, stored, and protected when you use our services.

This Privacy Policy ("Policy") describes our data handling practices and applies to all personal information collected through the Patihtoto website, mobile interface, customer support channels, and any other touchpoint through which you interact with us. By registering an account, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy.

Patihtoto operates under an international online gaming licence and is subject to data protection obligations imposed by that licensing framework. We handle all personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

The following terms, as used in this Privacy Policy, shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, payment information, identity documents, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or erasure.
• "Data Controller" means Patihtoto, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of Patihtoto under a data processing agreement.
• "KYC Data" means identity documents and verification information collected as part of the Know Your Customer process, including identity cards, passports, utility bills, and selfie photographs.
• "Transaction Data" means records of deposits, withdrawals, bonus credits, bet placements, and game sessions associated with a User's Account.
• "Technical Data" means information collected automatically about a User's device and browser environment, including IP address, device identifiers, operating system, and browser type.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their Personal Data for a specified purpose.
• "Retention Period" means the duration for which Patihtoto stores Personal Data before securely deleting or anonymising it.

Patihtoto collects several categories of personal data in the course of providing our services. We collect only the data necessary for the purposes described in this Policy and do not engage in unnecessary data collection.

3.1 Registration and Account Data

When you create a Patihtoto account, we collect:

• Full legal name;
• Date of birth (for age verification — 21+ requirement);
• Email address;
• Mobile phone number;
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam);
• Username and encrypted password;
• Security questions and answers (where set).

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and prevent underage gambling, we collect:

• Copy of valid Malaysian IC (MyKad), Passport, or Driver's Licence;
• Proof of address document (utility bill or bank statement dated within 3 months);
• Selfie photograph holding identity document;
• Payment method verification documents where required.

3.3 Financial and Transaction Data

• Deposit amounts, dates, and payment method references (e.g., DuitNow, FPX, Touch 'n Go eWallet, Maybank, CIMB);
• Withdrawal requests, amounts, and destination account references;
• Betting history, game session records, and bonus credit/debit records;
• Cryptocurrency wallet addresses (where applicable — BTC, USDT, ETH).

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Login timestamps and session activity logs;
• Pages viewed, features accessed, and time spent on platform;
• Referral source (where applicable).

3.5 Communications Data

• Records of customer support interactions (live chat, email);
• Feedback, dispute submissions, and complaint records;
• Responses to surveys or promotional communications (where you opt in).

Patihtoto collects personal data through the following means:

• Direct collection: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, or contact customer support;
• Automated collection: Through cookies, server logs, and analytics tools when you browse or interact with the Platform;
• Third-party sources: From identity verification providers and payment processors in connection with KYC and transaction processing;
• Device and browser signals: Automatically captured when you connect to the Platform from any device.

Patihtoto processes your personal data on one or more of the following legal grounds, depending on the nature and purpose of the processing activity:

Patihtoto uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your Patihtoto account;
• Identity verification: Conducting mandatory KYC and age verification (21+ enforcement) to satisfy licensing requirements;
• Transaction processing: Handling deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency channels;
• Service delivery: Enabling sports betting (including Liga Super Malaysia and EPL markets), live casino, slots, and other gaming services;
• Fraud prevention and security: Detecting and investigating suspicious activity, protecting against unauthorised account access, and preventing bonus abuse;
• Regulatory compliance: Meeting AML (anti-money laundering), KYC, and responsible gambling obligations imposed by our licensing authority;
• Customer support: Responding to your queries, disputes, and support requests;
• Platform improvement: Analysing usage patterns to improve the Platform's performance, interface, and game offering;
• Responsible gambling: Monitoring gaming patterns to identify signs of problem gambling and facilitating access to self-management tools;
• Marketing: Sending promotional communications about bonuses, new games, and offers — only where you have opted in and subject to your right to opt out at any time.

Patihtoto shares your personal data with third parties only where strictly necessary and only under the following circumstances:

7.1 Service Providers (Data Processors)

We engage third-party service providers who process data on our behalf under data processing agreements that bind them to confidentiality and security obligations. These providers include:

• Identity verification and KYC providers;
• Payment processors and e-wallet operators (DuitNow, FPX, Touch 'n Go, Maybank, CIMB, etc.);
• Cryptocurrency transaction processors;
• Cloud hosting and infrastructure providers;
• Fraud detection and cybersecurity service providers;
• Customer support platform operators.

7.2 Legal and Regulatory Disclosure

Patihtoto may disclose personal data where required to do so by law, court order, or regulatory direction — including to our licensing authority, law enforcement agencies, or financial intelligence units in connection with AML obligations.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, personal data held by Patihtoto may be transferred to the acquiring entity. Users will be notified of any such transfer and their rights in respect of the transferred data.

As an internationally licensed platform, Patihtoto may process and store personal data on servers located outside of Malaysia. Where personal data is transferred to a jurisdiction outside of the country in which it was collected, Patihtoto ensures that appropriate safeguards are in place to protect such data, including:

• Contractual obligations with data processors that require them to maintain equivalent data protection standards;
• Transfer to jurisdictions recognised as providing an adequate level of data protection;
• Implementation of technical and organisational security measures consistent with international best practice.

By using the Patihtoto platform, you acknowledge that your personal data may be transferred to and stored in jurisdictions outside of Malaysia.

Patihtoto retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or permanently anonymised such that it can no longer be linked to any identifiable individual.

Patihtoto implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption;
• Encryption at rest: Sensitive personal data stored in our databases, including KYC documents and payment references, is encrypted at rest;
• Access controls: Access to personal data is restricted to authorised Patihtoto personnel on a strict need-to-know basis, enforced through role-based access controls;
• Audit logging: All access to and modification of personal data is logged and monitored for security purposes;
• Intrusion detection: Our infrastructure is monitored around the clock for unusual activity, attempted breaches, and security anomalies;
• Third-party security assessments: We conduct regular reviews of our data security practices and those of our key service providers;
• Data breach response: Patihtoto maintains an incident response procedure for data security events, including notification protocols where legally required.

11.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your preferences, maintain your session, and collect information about how you use the site.

11.2 Types of Cookies We Use

11.3 Managing Cookies

You can manage non-essential cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Patihtoto platform. Essential and security-related cookies cannot be disabled without preventing access to the Platform.

Subject to applicable law and our legitimate processing grounds, you have the following rights in respect of your personal data held by Patihtoto:

To exercise any of these rights, please contact our Data Protection team using the details in Section 17. We will respond to all valid requests within thirty (30) days. In some circumstances, we may need to verify your identity before actioning a request. We reserve the right to decline requests that are manifestly unfounded or excessive, or where fulfilling the request would conflict with our legal obligations.

The Patihtoto platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Our mandatory KYC process is specifically designed to verify that all registered users meet this age requirement.

If we become aware that we have collected personal data from a person under the age of 21 without appropriate parental consent, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the Patihtoto platform, please contact us immediately at the details provided in Section 17.

Patihtoto may send you promotional communications about new games, bonuses, VIP offers, and platform features where you have provided your consent to receive such communications during account registration or through your account settings.

You have the right to withdraw your consent to marketing communications at any time. You may do so by:

• Updating your communication preferences in your Account settings;
• Clicking the "Unsubscribe" link in any marketing email we send you;
• Contacting our customer support team at the email address in Section 17.

Withdrawal of consent to marketing does not affect the lawfulness of any processing conducted prior to the withdrawal. You will continue to receive essential transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts) regardless of your marketing preferences.

The Patihtoto Platform may contain links to third-party websites or services, including payment processors and game providers. This Privacy Policy applies solely to data collected and processed by Patihtoto and does not extend to third-party websites or services accessed via our Platform.

Patihtoto is not responsible for the privacy practices, data handling, or content of third-party websites. We strongly recommend that you review the privacy policy of any third-party service before providing them with your personal information.

Patihtoto reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or service offering. Where material changes are made, we will notify registered users via email or by posting a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Patihtoto Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The date at the top of this Policy indicates when it was most recently updated. We encourage you to review this page periodically to stay informed of how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy, your personal data, or the exercise of your data rights, please contact the Patihtoto Data Protection team using the details below. Our customer support team is available 24 hours a day, 7 days a week.

Email: [email protected]
For privacy or data rights enquiries, please use the subject line: "Privacy Policy Enquiry" or "Data Subject Request".

We are committed to responding to all privacy-related enquiries within thirty (30) calendar days of receipt. For complex requests, we will acknowledge receipt within five (5) working days and provide a substantive response within the thirty-day window.

For enquiries relating to responsible gambling tools or account self-exclusion, please visit our Responsible Gambling page. For general Terms and Conditions queries, please refer to our Terms & Conditions page.