Ajototo takes your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you hold over your information as a player on our platform.
All personal data stored on Ajototo's systems — including identity documents, payment details, and account credentials — is protected with AES-256 encryption at rest and TLS in transit.
We do not sell, rent, or trade your personal information to third-party marketers. Your data is used exclusively for operating your account and meeting our legal obligations.
You have the right to access, correct, port, and request deletion of your personal data. Submit a request through our support team and we will respond within the applicable statutory timeframe.
We use strictly necessary cookies to operate the Platform and optional analytics cookies to improve user experience. You can manage cookie preferences at any time via your browser settings.
Where personal data is transferred to third-party service providers outside Malaysia, we ensure appropriate safeguards are in place, including contractual data processing agreements.
In the unlikely event of a data breach affecting your personal information, Ajototo will notify affected players and relevant authorities in accordance with applicable data protection requirements.
This Privacy Policy ("Policy") is issued by Ajototo ("Ajototo", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at ajototo.cam ("Platform", "Website"). This Policy describes how we collect, use, disclose, store, and protect the personal data of all individuals who access or use our Platform ("you", "Player", "User").
Ajototo is committed to protecting the privacy and security of your personal information. We process personal data in accordance with applicable international data protection frameworks and the principles of our international gaming licence, which require us to maintain rigorous standards of data governance as part of ongoing regulatory compliance.
By registering an account on, or continuing to access and use, the Ajototo Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.
For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:
Ajototo operates as the Data Controller for personal data collected through the Platform. As Data Controller, we are responsible for determining the purposes for which your personal data is collected and the manner in which it is processed.
Ajototo is an internationally licensed online gaming operator. For privacy-related enquiries, including requests to exercise data rights, please contact our Data Protection team as described in Section 17 of this Policy.
We collect personal data across three broad categories, as set out in the table below:
| Category | Examples of Data Collected | Purpose |
|---|---|---|
| Account & Identity Data | Full legal name, date of birth, email address, contact number, username, encrypted password, residential address (including Malaysian city/postcode) | Account registration, identity verification, fraud prevention |
| KYC Verification Data | NRIC (MyKad) number and image, Driver's Licence or Passport scan, proof of address documents (utility bills, bank statements), selfie photographs | Regulatory compliance, age verification, anti-money laundering |
| Financial & Payment Data | Payment method details (e-wallet account identifiers, bank account references for FPX/DuitNow), cryptocurrency wallet addresses, transaction history, deposit/withdrawal amounts in MYR or crypto equivalent | Payment processing, fraud detection, regulatory reporting |
| Usage & Behavioural Data | Game session history, bet placement records, login timestamps, pages visited, features accessed, device type and operating system | Service delivery, responsible gambling monitoring, platform improvement |
| Technical Data | IP address, browser type and version, screen resolution, cookie identifiers, session tokens, geolocation data (country/region level) | Security monitoring, fraud prevention, platform optimisation |
| Communications Data | Live chat transcripts, email correspondence with support, feedback or complaint records | Customer service delivery, dispute resolution, quality assurance |
| Responsible Gambling Data | Deposit limit settings, self-exclusion requests, session time preferences, player-set cooling-off periods | Responsible gaming compliance, player protection obligations |
We collect your personal data through the following means:
Ajototo processes your personal data only where a valid legal basis exists. Depending on the specific processing activity, we rely on one or more of the following legal grounds:
We use the personal data we collect for the following purposes:
Ajototo does not sell, rent, or otherwise transfer your personal data to third parties for marketing purposes. We share personal data only in the following limited circumstances:
We engage third-party service providers who process personal data on our behalf under formal data processing agreements. These include: payment processing infrastructure providers; KYC and identity verification platforms; fraud detection and anti-money laundering screening services; cloud hosting and data storage providers; customer support platform operators; and gaming content delivery partners.
We may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or the requirements of our international gaming licence. We will notify you of such disclosures where legally permissible to do so.
In the event of a merger, acquisition, or sale of all or substantially all of the assets of Ajototo, personal data held by Ajototo may form part of the transferred assets. You will be notified of any such transfer and any material change to the applicable privacy terms that may result.
As an internationally operating gaming platform, some of the personal data we process may be transferred to, stored in, or accessed from countries outside Malaysia. Where such transfers occur, Ajototo ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.
Appropriate safeguards may include: contractual data processing agreements incorporating standard data protection clauses; transfers to service providers operating in jurisdictions with recognised data protection frameworks; and internal policies governing access to personal data by staff and contractors outside Malaysia.
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, regulatory, or reporting requirements. The following retention periods apply as a general guide:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data destruction procedures.
Ajototo uses cookies and similar tracking technologies (such as local storage and session tokens) on the Platform. Cookies are small text files stored on your browser or device that help us operate the Platform, remember your preferences, and improve your experience.
You may control cookie settings through your browser's privacy settings. Please note that disabling certain cookies — particularly strictly necessary cookies — may impair the functionality of the Platform, including your ability to log in or maintain an active gaming session. We do not use third-party advertising or retargeting cookies on the Platform.
Subject to applicable data protection law and our legal obligations, you have the following rights with respect to your personal data held by Ajototo. To exercise any of these rights, please contact our support team via live chat or email as described in Section 17.
Request a copy of the personal data we hold about you, along with information about how it is being processed.
Request correction of inaccurate or incomplete personal data held in your Account.
Request deletion of your personal data where we no longer have a lawful basis to retain it, subject to legal retention obligations.
Request that we limit how we use your data in certain circumstances — for example, while a rectification request is under review.
Receive a structured, machine-readable copy of the personal data you have provided to us, for transfer to another service.
Object to processing based on our legitimate interests, including automated profiling, where your rights override those interests.
We will respond to verified data rights requests within thirty (30) calendar days. Where a request is complex or where we receive a high volume of requests, we may extend this period by a further two months and will notify you accordingly.
The Ajototo Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated Account, delete or quarantine all associated personal data, and — where applicable — report the matter to our licensing authority as required.
If you believe that a minor has registered an Account on the Platform using false age information, please contact our support team immediately via live chat so that we can investigate and take appropriate action without delay.
Ajototo implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security programme includes:
Notwithstanding the above, no internet-based transmission or electronic storage system is entirely immune to risk. While we take every reasonable precaution to safeguard your data, we cannot provide an absolute guarantee of security. You are encouraged to use a strong, unique password for your Ajototo Account and to enable 2FA.
The Ajototo Platform does not contain links to third-party websites as part of its standard navigation. To the extent that any third-party content is accessible via our Platform (for example, game content delivered by licensed studio partners), those studios operate under their own privacy frameworks pursuant to their agreements with Ajototo.
Ajototo is not responsible for the privacy practices of any third-party service accessed outside of the Platform. We encourage you to read the privacy policies of any website or service you visit independently.
Ajototo reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will provide reasonable advance notice by posting a prominent notification on the Platform and, where we hold your email address, by sending you a notification to your registered email.
The date at the top of this Policy ("Last Updated") reflects the most recent revision. We recommend reviewing this Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact Ajototo's Data Protection team using the following channels:
When contacting us regarding a data rights request, please be prepared to verify your identity by providing information consistent with your Account registration details or KYC documentation, as applicable.
We are committed to transparency and data security. If you have questions about how your information is handled, our support team is available 24/7.
For players aged 21 and above only. Gambling involves financial risk. Please play responsibly.