Dumaitoto respects the privacy of every player. This Privacy Policy forms part of the rules governing use of the platform and should be read together with the Terms & Conditions. By using dumaitoto, you acknowledge that personal information may be processed as described below.
Dumaitoto applies reasonable privacy and security practices within its international operating framework. Where Malaysian privacy requirements, including applicable principles under the Personal Data Protection Act 2010, are relevant to processing, dumaitoto will consider those obligations alongside other mandatory legal and compliance duties.
Section 01
Introduction
This Privacy Policy applies to the dumaitoto website, player accounts, games, sports betting services, transaction functions, support channels, promotions, and related features. It describes the categories of personal information dumaitoto may receive and the circumstances in which that information may be used.
Dumaitoto acts as the organisation responsible for determining why and how account information is processed, except where an independent payment provider, bank, game supplier, or verification service processes information under its own legal responsibilities. This policy does not create a guarantee that every requested service or payment method will remain available.
Section 02
Scope and Definitions
For this policy, "personal information" means information relating to an identified or reasonably identifiable individual. "Processing" includes collecting, recording, organising, storing, reviewing, using, disclosing, restricting, deleting, or otherwise handling that information.
"Player" refers to an individual who visits dumaitoto, creates an account, contacts support, or uses a platform service. "Service provider" means an organisation engaged to support functions such as payment processing, identity verification, fraud detection, platform hosting, technical maintenance, communications, or game delivery.
Section 03
Information Dumaitoto Collects
Dumaitoto may collect identification and contact information, including your legal name, date of birth, residential address, email address, mobile number, nationality, account username, and preferred communication settings. Verification records may include identity documents, address evidence, photographs, and the results of age or identity checks.
Dumaitoto may also process transaction information relating to MYR deposits and withdrawals made through services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, cards, or supported digital assets. Dumaitoto does not need to retain complete card security codes and will not ask you to send a password or one-time verification code through ordinary support correspondence.
Platform activity may include login history, device information, approximate location derived from an internet address, browser type, game activity, wagering records, responsible gambling limits, bonus use, support conversations, and sports selections involving events such as EPL football, Liga Super Malaysia, or UFC.
Section 04
How Information Is Collected
Dumaitoto receives information directly when you register, complete verification, make a transaction, set an account limit, claim an offer, place a wager, or contact support. Information may also be generated automatically when you use the website, including security logs, session identifiers, device characteristics, and interaction records.
Dumaitoto may receive information from payment providers, identity verification services, fraud prevention databases, game suppliers, sports data providers, and compliance partners. Such information may be compared with details supplied by you to confirm identity, protect an account, investigate unusual activity, or meet legal requirements.
Section 05
Purposes of Data Processing
Dumaitoto processes personal information where necessary to create and administer an account, deliver requested services, settle wagers, process transactions, provide support, maintain platform security, and enforce the Terms & Conditions. Processing may also be necessary to verify that players are aged 21 or above.
Dumaitoto may use information to identify fraud, account misuse, duplicate registrations, payment disputes, bonus abuse, money laundering indicators, or attempts to bypass responsible gambling restrictions. Where required, dumaitoto may preserve records or disclose information to an authorised body in accordance with applicable law.
Dumaitoto may analyse aggregated or appropriately de-identified information to understand website performance, improve navigation, resolve technical errors, assess payment reliability, and develop safer player experiences. Such analysis is not intended to identify an individual unnecessarily.
Section 06
Payments, Identity Checks and Compliance
Dumaitoto may require Know Your Customer checks before permitting certain deposits, withdrawals, account changes, or continued access. Requested evidence can include a government-issued identity document, proof of address, proof that a payment method belongs to you, or information concerning the source of funds.
Payment details may be shared with the bank, eWallet, card processor, digital asset provider, or other service responsible for the transaction. Dumaitoto limits disclosure to information reasonably required to authenticate, process, reconcile, review, or reverse the transaction. A verification delay does not necessarily indicate wrongdoing.
Dumaitoto will never ask you to disclose your account password, full card security code, or banking one-time password through ordinary email or live chat. Keep these credentials private.
Section 07
Cookies and Device Information
Dumaitoto may use cookies and comparable browser storage to maintain sessions, remember preferences, support account authentication, protect against misuse, and measure website performance. Essential technologies may be required for secure login and cannot always be disabled without affecting core functions.
Players may adjust browser controls to remove or restrict cookies. Doing so may cause certain dumaitoto features to operate incorrectly, including saved preferences, security checks, or account sessions. Dumaitoto does not use a browser setting to override an active self-exclusion or responsible gambling limit.
Section 08
Disclosure of Personal Information
Dumaitoto does not sell personal information as an independent commercial product. Information may be disclosed to carefully selected providers supporting hosting, cybersecurity, payments, identity checks, fraud prevention, customer service, game operation, analytics, and regulatory compliance.
Dumaitoto may also disclose information where reasonably necessary to comply with a lawful request, protect the rights or safety of players, investigate suspected crime, respond to a payment dispute, enforce contractual rights, or support a corporate reorganisation. Providers are expected to use information only for authorised purposes and apply appropriate safeguards.
Section 09
International Processing
Because dumaitoto operates within an international gaming environment, information may be processed in countries outside Malaysia. Privacy laws in another jurisdiction may differ from Malaysian requirements. Dumaitoto therefore seeks contractual, organisational, and technical protections appropriate to the information and processing risk.
International processing may be necessary to provide games, complete identity checks, settle transactions, maintain hosting infrastructure, or obtain specialist security support. Dumaitoto will not transfer information merely for convenience where no legitimate operational, contractual, compliance, or security purpose exists.
Section 10
Data Security
Dumaitoto uses layered safeguards intended to protect personal information against unauthorised access, accidental loss, alteration, disclosure, or destruction. Measures may include encryption in transit, controlled administrative access, authentication controls, monitoring, backup procedures, staff confidentiality obligations, and incident response processes.
No internet service can promise absolute security. Players also have an important role: use a unique password, secure the registered device, avoid sharing verification codes, sign out on shared equipment, and notify dumaitoto promptly if unauthorised access is suspected.
Section 11
Data Retention
Dumaitoto retains information for as long as reasonably necessary to operate an account, complete transactions, meet compliance duties, investigate disputes, enforce platform rules, and protect legal rights. Different categories may have different retention periods depending on purpose, sensitivity, transaction history, and applicable requirements.
Closing an account does not always permit immediate deletion. Dumaitoto may need to retain identity checks, payment records, responsible gambling restrictions, complaints, or security logs to prevent fraud, honour self-exclusion, resolve a dispute, or meet mandatory record-keeping duties. Information no longer required will be securely deleted, anonymised, or isolated from ordinary use.
Section 12
Your Privacy Rights
Subject to applicable law and valid exceptions, you may ask dumaitoto to confirm whether information is held, provide access to relevant records, correct inaccurate details, or explain a processing purpose. You may also request restriction, deletion, withdrawal of a consent-based permission, or review of particular marketing choices.
Dumaitoto may require identity verification before responding to a privacy request. This protects records from disclosure to an unauthorised person. A request may be limited where compliance would conflict with legal retention duties, fraud prevention, another person's rights, an active investigation, or the establishment and defence of legal claims.
Dumaitoto aims to address valid requests within a reasonable period. Complex or repeated requests may require additional time, and dumaitoto may ask for clarification where the scope is uncertain.
Section 13
Marketing and Communication Choices
Dumaitoto may send operational messages concerning account security, transactions, rule changes, verification, responsible gambling, or service interruptions. These messages are necessary to administer the account and are different from optional promotional communications.
Where permitted, dumaitoto may send information about games, sports markets, bonuses, or platform features based on your communication settings. You may request that optional marketing stop. Such a request will not prevent essential security, transaction, legal, or responsible gambling notices.
Section 14
Age Restrictions and Responsible Gambling
Dumaitoto is intended only for adults aged 21 and above. Dumaitoto does not knowingly permit minors to register or gamble. If information indicates that a user may be under 21, the account may be restricted while age verification is completed.
Information relating to deposit limits, cooling-off periods, session controls, or self-exclusion may be retained even after an account is closed. Dumaitoto uses these records to apply responsible gambling protections and prevent an excluded player from bypassing restrictions. Further information appears on the Responsible Gambling page.
Section 15
Changes to This Privacy Policy
Dumaitoto may revise this policy to reflect changes in law, technology, platform services, payment arrangements, security practices, or operational requirements. The updated version will be published on this page with a revised date.
Where a change materially affects how dumaitoto processes existing account information, an additional account notice may be provided where appropriate. Continued use after a revised policy becomes effective indicates acknowledgement of the updated information, but it does not remove any mandatory privacy right.
Section 16
Contact Us
Questions about this policy or requests concerning personal information may be directed to dumaitoto Player Support. Include your registered username, a clear description of the request, and sufficient information to identify the relevant account. Do not include a password, one-time code, or full payment credentials.
Privacy contact: [email protected]
The address above is displayed as plain text. Dumaitoto may request additional verification before releasing, correcting, restricting, or deleting account information.