Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by Dentoto ("we", "us", "our", "the Platform") and applies to all personal data collected, processed, and stored in connection with the operation of the online betting and casino platform accessible at dentoto.cam and any associated mobile-optimised interfaces.

Dentoto is committed to handling personal data responsibly, transparently, and in compliance with applicable international data protection standards. This Policy explains the types of personal data we collect from users ("you", "your", "the User"), the purposes for which that data is processed, the parties with whom it may be shared, the security measures in place to protect it, and the rights available to you in relation to your personal data.

By registering an account on the Dentoto platform or otherwise accessing our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, Dentoto.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller pursuant to a written agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by the User to the processing of their personal data.
• "KYC" (Know Your Customer) means the identity verification procedures required by Dentoto to confirm a User's identity and eligibility prior to permitting withdrawals or other account actions.
• "Sensitive Personal Data" means a special category of personal data warranting enhanced protection, including financial account information and identity document data.

3 Data Controller

Dentoto acts as the Data Controller in respect of all personal data collected from users of the Platform. As Data Controller, Dentoto is responsible for determining the purposes and means of processing personal data and for ensuring that such processing is conducted in accordance with applicable data protection principles.

Dentoto operates under an international gaming licence issued by an offshore regulatory jurisdiction. Our data practices are aligned with internationally recognised data protection standards, including principles equivalent to those set out in the General Data Protection Regulation (GDPR) as a benchmark framework, applied to the extent consistent with our licensing jurisdiction.

For enquiries related to data protection and privacy, please contact our designated Data Protection contact using the details provided in Section 16 of this Policy.

4 Personal Data We Collect

Dentoto collects personal data through several channels: directly from you at registration and during account use, automatically through your interaction with the Platform, and from third parties engaged to provide services on our behalf.

4.1 Data Provided Directly by You

• Full legal name and date of birth;
• Residential address, including city, state, and postcode;
• Email address and mobile telephone number;
• Login credentials (username and encrypted password);
• Government-issued identification documents submitted for KYC purposes (e.g., Malaysian MyKad, passport, driver's licence);
• Proof of address documentation (e.g., utility bills, bank statements);
• Payment method details, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account or FPX/DuitNow details, and cryptocurrency wallet addresses;
• Correspondence submitted through live chat, email, or other support channels.

4.2 Data Collected Automatically

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, browser type, and version;
• Session timestamps, pages visited, and clickstream data;
• Betting and gaming activity logs, including stakes, game types, outcomes, and session durations;
• Deposit and withdrawal transaction records, including amounts in MYR and timestamps;
• Cookie identifiers and similar tracking technologies (see Section 10).

4.3 Data Received from Third Parties

• Identity verification results from third-party KYC service providers;
• Fraud risk scores from payment processing partners;
• Sanctions and politically exposed person (PEP) screening results from compliance databases.

5 Legal Basis for Processing

Dentoto processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

6 How We Use Your Personal Data

Dentoto uses collected personal data strictly for the purposes described below. We do not process personal data in ways that are incompatible with the purposes for which it was collected without first obtaining your consent.

• Account creation and authentication: To establish your Dentoto account, verify your identity at login, and maintain account security.
• Service delivery: To process your bets and wagers across sports markets (including Liga Super Malaysia, EPL, and UFC), live casino games, slots, and number games; to credit winnings; and to manage your MYR account balance.
• Payment processing: To facilitate deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency methods, and to process withdrawal requests to your verified payment methods.
• KYC and compliance: To verify your identity and age (21+), conduct anti-money laundering checks, screen against sanctions lists, and meet the requirements of our international gaming licence.
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, account abuse, and prohibited conduct as defined in our Terms & Conditions.
• Responsible gambling: To monitor gaming activity for indicators of problem gambling, enforce deposit and wager limits, and administer self-exclusion requests.
• Customer support: To manage and resolve enquiries, disputes, and complaints submitted through live chat or email.
• Platform improvement: To analyse usage patterns, test new features, and optimise the platform experience for users across Malaysia and other markets.
• Marketing (consent-based): To send promotional offers, bonuses, and platform updates to users who have opted in to receive such communications.

7 Data Sharing & Disclosure

Dentoto does not sell, rent, or trade your personal data to any third party. Personal data may be disclosed to the following categories of recipients only where strictly necessary and under appropriate data protection safeguards:

• Payment service providers: Including e-wallet operators (Touch 'n Go, Boost, GrabPay), FPX/DuitNow processing partners, and cryptocurrency gateway providers, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify identity documents, confirm age eligibility, and perform sanctions screening.
• Fraud prevention and risk management services: To assess transaction risk and detect suspicious activity.
• Technology infrastructure providers: Including cloud hosting, cybersecurity, and platform maintenance service providers operating under data processing agreements.
• Regulatory and licensing authorities: Where disclosure is required under the terms of our international gaming licence or by applicable law.
• Law enforcement and government authorities: Where we are legally compelled to disclose information pursuant to a valid legal order or in response to a bona fide request for the purpose of preventing or investigating criminal activity.

8 International Data Transfers

As an internationally operated platform serving users including those based in Malaysia, personal data processed by Dentoto may be transferred to, stored in, or processed in countries outside Malaysia. This includes our operational infrastructure, certain KYC providers, and payment processing partners which may be based in jurisdictions including but not limited to the European Economic Area, Singapore, and the licensing jurisdiction in which Dentoto operates.

Where personal data is transferred internationally, Dentoto ensures that appropriate safeguards are in place to protect the data at a standard equivalent to that provided within the country of origin. Such safeguards may include contractual data protection clauses, the adoption of standard contractual clauses as a transfer mechanism, or reliance on a recipient jurisdiction's adequacy status.

By using the Dentoto platform, you acknowledge and consent to the international transfer of your personal data in accordance with the safeguards described in this section.

9 Data Retention

Dentoto retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification. Anonymised or aggregated data that cannot be linked to an individual may be retained indefinitely for statistical or analytical purposes.

10 Cookies & Tracking Technologies

Dentoto uses cookies and similar tracking technologies on the Platform to ensure its proper operation, improve user experience, and gather analytical data. The following categories of cookies may be set:

• Strictly necessary cookies: Required for the Platform to function. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Enable personalised features such as language preferences, saved settings, and session continuity across devices. Disabling these may reduce the quality of your experience.
• Analytics cookies: Used to collect aggregated, anonymised data on how users interact with the Platform — pages visited, session durations, and feature usage — to help us improve the service. No personally identifiable information is associated with analytics cookies.
• Preference cookies: Remember choices you have made (such as responsible gambling settings) to provide a consistent experience across sessions.

You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from using the Platform. For detailed cookie management instructions, refer to your browser's help documentation.

11 Security Measures

Dentoto implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the Dentoto Platform is encrypted using TLS/SSL protocols with a minimum 256-bit encryption standard.
• Encryption at rest: Sensitive personal data stored on our servers — including identity documents and payment details — is encrypted using industry-standard encryption algorithms.
• Access controls: Internal access to personal data is restricted on a role-based, need-to-know basis. Administrative access to systems containing personal data requires multi-factor authentication.
• Security auditing: Our systems are subject to regular penetration testing and security audits by qualified third-party security professionals.
• Incident response: Dentoto maintains a documented data breach incident response plan. In the event of a breach that affects your personal data in a material way, we will notify you and relevant authorities as required by applicable regulations.
• Vendor security assessments: All third-party Data Processors are assessed for their security posture before engagement and are contractually required to maintain appropriate security standards.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying Dentoto immediately if you suspect any unauthorised access to your account.

12 Your Data Protection Rights

As a user of the Dentoto platform, you hold the following rights in respect of your personal data. These rights are subject to certain limitations and exceptions under applicable law, particularly where data must be retained for legal, compliance, or fraud prevention purposes.

To exercise any of these rights, please contact us using the details in Section 16. We will respond to all valid requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days, with notification to you of the extension and its reason.

13 Children & Minors

The Dentoto platform is strictly intended for adults aged 21 years and above. Dentoto does not knowingly collect personal data from individuals under the age of 21. Account registration requires confirmation of date of birth, and all accounts are subject to KYC age verification.

If Dentoto becomes aware that personal data has been collected from an individual under the age of 21 — whether through false registration, error, or any other means — the account will be immediately suspended, the personal data will be deleted, and any funds held in the account will be handled in accordance with our regulatory obligations.

If you believe that a person under 21 has registered an account on the Platform, please notify us immediately via live chat or email support. We take the protection of minors extremely seriously and will act promptly upon receiving any such report.

14 Third-Party Links & Services

The Dentoto platform may contain references to or integrations with third-party payment services (such as Touch 'n Go eWallet, Boost, GrabPay, and bank FPX portals) for the purpose of processing transactions. When you interact with these third-party services — for example, by completing a deposit through a bank's online portal — you are subject to that third party's own privacy policy and data practices.

Dentoto is not responsible for the privacy practices, data security, or content of third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with your Dentoto account, particularly your payment provider's privacy terms.

15 Amendments to This Policy

Dentoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. In the event of material changes, we will notify active users through one or more of the following means:

• A prominent notice displayed on the Platform upon your next login;
• An email notification sent to your registered email address;
• An update to the "Last Updated" date displayed at the top of this Policy.

We encourage you to review this Policy periodically to remain informed of how your personal data is handled. Your continued use of the Platform following notification of any amendment constitutes your acceptance of the updated Policy. If you do not accept the amended Policy, you should cease using the Platform and may request account closure.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Dentoto, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly on the Dentoto platform. Average first response time is under 90 seconds. Please include "Privacy Query" or "Data Request" in your initial message for routing purposes.
• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Subject Request" as appropriate.

For formal data subject access requests or erasure requests, please submit your request in writing by email and include your registered account username, the nature of your request, and sufficient information to verify your identity. We aim to acknowledge all formal requests within 5 business days and to provide a substantive response within 30 days of receipt.

For concerns that cannot be resolved through our internal process, you may also contact the relevant data protection authority in your jurisdiction or the supervisory authority of the jurisdiction in which we operate.