Birutoto is committed to protecting the privacy and personal data of all our members. This document transparently explains how we collect, use, store, and safeguard your information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
Important Note: This Privacy Policy applies to all birutoto services including the birutoto.vin website, mobile app, and all related platforms. By using our services, you agree to the collection and use of your information as described in this policy.
Birutoto ("we", "Platform" or "birutoto") values the privacy of every individual who interacts with our platform. This Privacy Policy ("Policy") has been formulated in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and is intended to explain transparently and clearly how we handle your personal data.
This policy applies to all individuals who access or use the birutoto platform, including website visitors, registered members, mobile app users, and those who communicate with our support team through any channel. Whether you are a long-standing loyal member or visiting our website for the first time, your privacy rights matter equally to us.
Birutoto operates as a trusted online entertainment platform in Malaysia. In the course of providing high-quality services, we require certain information from you. We are committed to ensuring that all information we collect is used responsibly, stored securely, and never misused or sold to third parties for marketing purposes without your consent.
Birutoto fully complies with Malaysia's PDPA 2010. We appoint an internal Personal Data Protection Officer who is responsible for ensuring that all our data handling practices comply with applicable laws at all times.
We collect your personal data in several ways — directly when you register or interact with our platform, automatically through tracking technologies, and in certain cases, from trusted third-party sources. The following are the categories of data we collect:
| Data Category | Example Information | Collection Method |
|---|---|---|
| Personal Identity | Full name, date of birth, MyKad/passport number, KYC selfie photo | Registration & KYC Verification |
| Contact Information | Phone number, email address, residential address | Registration form |
| Financial Data | Bank account number, e-wallet details, deposit & withdrawal transaction records | Payment transactions |
| Technical Data | IP address, browser type, operating system, device, approximate location | Automatically during use |
| Game Data | Wagering history, games played, wins & losses | Platform system |
| Communication Data | Support chat records, emails, and feedback submitted | Customer support interactions |
We do not collect sensitive data such as health information, religious beliefs, or political views unless specifically required to fulfil legal obligations, such as in the context of responsible gambling programs. In such cases, your explicit consent will be sought before any data collection takes place.
Birutoto uses your personal data solely for lawful and stated purposes. We will not use your data for any other purpose without first obtaining fresh consent from you. The primary purposes for which your personal data is used are as follows:
You may opt out of receiving marketing communications at any time by contacting our support team or using the unsubscribe link included in every promotional email. Opting out of marketing communications will not affect your core account services.
Birutoto does not sell, rent, or disclose your personal data to third parties for their own independent marketing purposes. We only share your data in the following limited and specific circumstances:
In every instance of data sharing, we ensure that recipients are bound by data protection obligations equivalent to or stricter than our own standards. birutoto remains accountable for how your data is handled by third parties acting on our behalf.
Birutoto will never sell your personal data to advertisers, data brokers, or any commercial party for their own purposes. Any offer or communication claiming to be from birutoto for such purposes is fraudulent and should be reported to us immediately.
The security of your personal data is birutoto's top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against unauthorized access, disclosure, alteration, or destruction.
The technical and organisational measures we implement include:
Your personal data will be retained for as long as necessary to fulfil the purposes stated in this Policy, or as required by law. Generally, active account records are retained throughout your relationship with birutoto, while closed account records are retained for seven (7) years after account closure to fulfil AML and tax legal requirements.
In the event of a data security incident affecting your information, birutoto will notify you within 72 hours of becoming aware of the incident, in line with international data protection best practices. We will provide details of the incident and the remediation steps taken.
Birutoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website. They help us recognise you, remember your preferences, and deliver a more personalised experience.
The types of cookies we use are as follows:
You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect your ability to use certain features of our platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.
Under Malaysia's PDPA 2010 and international data protection best practices, you have several important rights regarding the personal data we hold about you. birutoto fully respects and facilitates the exercise of these rights:
In the context of global online platform operations, some of your personal data may be processed or stored on servers located outside Malaysia. This may occur when we use international technology service providers for infrastructure, analytics, or payment processing.
Birutoto ensures that any cross-border data transfers are carried out with adequate safeguards, including:
Your financial data and KYC information are prioritized for storage in regions that comply with the highest security standards. birutoto does not transfer sensitive personal data to jurisdictions lacking adequate data protection laws.
Birutoto is an online gambling platform that strictly for individuals aged 18 years and above only. We do not intentionally collect, process, or store personal data from individuals under the age of 18 under any circumstances.
Steps we take to prevent access to and collection of data from minors include:
If we discover that a child's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account. Parents or guardians with concerns about this matter are encouraged to contact our support team immediately.
If you are a parent or guardian and discover that your underage child has registered on birutoto, please contact our support team via Live Chat or email with appropriate proof. We will address the matter promptly and in strict confidence.
Birutoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service improvements. Any significant amendments will be communicated to you via a notice displayed on the platform's homepage or through your registered email.
The latest version of this Privacy Policy is always accessible on the birutoto.vin/privacy-policy. The date of the last update will always be displayed at the top of this document. We encourage you to review this page periodically to ensure you are always informed of how we protect your data.
Your continued use of the birutoto platform following the publication of any amendments to the Privacy Policy constitutes your acceptance of those changes. If you do not agree with the amendments made, you have the right to close your account and discontinue use of our services.
If you have any questions, concerns, or wish to exercise your rights in relation to this Privacy Policy, please contact birutoto's Personal Data Protection Officer through the following channels:
We are committed to handling every privacy inquiry seriously and professionally. All privacy-related communications are handled confidentially and only by authorized personnel.
Under the PDPA 2010, you have full rights over the personal data we hold about you.
You have the right to request a copy of the personal data we hold about you at any time. We will provide this information within 21 business days.
If your personal data is inaccurate or outdated, you have the right to request a correction and we will update it promptly.
You may request the deletion of your personal data, subject to legal data retention obligations that require us to keep certain records.
You may object to the processing of your personal data for direct marketing purposes or in situations where processing is based on our legitimate interests.
You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider of your choice.
Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.
We invest in the best technology and procedures to ensure your privacy is fully protected.
All data in transit is protected by 256-bit SSL/TLS. Sensitive data at rest is encrypted using AES-256, the same standard used by leading financial institutions.
Birutoto operates in full compliance with Malaysia's Personal Data Protection Act 2010. Our Personal Data Protection Officer ensures ongoing compliance at every level.
The principle of least privilege is enforced — only staff who require access for their specific duties are permitted to view certain user data.
Independent cybersecurity firms conduct penetration testing and security audits every quarter. Audit results are used for the continuous improvement of our systems.
Our threat detection system operates 24/7 to identify and respond to any suspicious activity before it affects your data or account.
Your data is regularly backed up to secure, geographically separate locations. Disaster recovery procedures are routinely tested to ensure service continuity.
Now that you fully understand how birutoto protects your personal data, register an account today and enjoy a safe, fair, and exciting gaming experience with our growing Malaysian player community.