Privacy Policy

This Privacy Policy ("Policy") describes how Cancertoto ("we", "us", "our", "the Platform") collects, processes, stores, shares, and protects personal information relating to individuals ("User", "you", "your") who access or use the services available at cancertoto.cam and all associated features, tools, and communications channels (collectively, the "Services").

Cancertoto is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws and internationally recognised privacy standards. This Policy forms part of our broader Terms and Conditions and should be read in conjunction with that document.

By registering an Account, accessing the website, or otherwise using any part of the Cancertoto platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Services and should contact us to close your Account if one has been created.

For the purposes of this Policy, the following terms shall have the meanings set out below:

We collect the following categories of personal data in connection with your use of the Cancertoto platform:

3.1 Account Registration Data

• Full legal name
• Date of birth (for age verification)
• Email address
• Username and encrypted password
• Residential address (including city, state, and postcode)
• Mobile phone number (where provided for two-factor authentication)

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (Malaysian IC, Passport, or Driver's Licence)
• Proof of address documents (utility bills, bank statements — dated within 3 months)
• Selfie photographs taken for liveness verification

3.3 Financial & Transaction Data

• Payment method details (e-wallet account references, bank account numbers, FPX transaction references)
• Deposit and withdrawal transaction history
• Cryptocurrency wallet addresses (where applicable)
• Transaction timestamps and amounts in Malaysian Ringgit (MYR / RM) or crypto equivalent

3.4 Usage & Technical Data

• IP address, browser type, and operating system
• Device identifiers and screen resolution
• Pages visited, time on page, and clickstream data
• Geolocation data (country/region level, derived from IP address)
• Session start and end times

3.5 Communications Data

• Live chat transcripts with our support team
• Email correspondence sent to or received from [email protected]
• Feedback, complaint, and dispute records

3.6 Responsible Gambling Data

• Self-exclusion requests and status
• Deposit and loss limit settings
• Session time limit preferences and alerts
• Problem gambling risk assessment responses (where voluntarily submitted)

Cancertoto collects personal data through the following means:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or submit any form on the platform.
• Automatically: When you interact with the Cancertoto website, our systems automatically collect technical and usage data via cookies, log files, and similar tracking technologies (see Section 7).
• From payment processors: Our Malaysian payment partners (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong) may share transaction confirmation data with us to credit your Account and verify payment method ownership.
• From identity verification providers: Where we engage third-party KYC service providers to assist with document verification, those providers may share verification outcomes and fraud risk scores with us.
• From publicly available sources: In limited circumstances, we may verify information you have provided against publicly available records for fraud prevention or regulatory compliance purposes.

We process your personal data only where we have a valid legal basis to do so. The following table sets out the primary legal bases we rely upon:

Cancertoto uses the personal data we collect for the following purposes:

1. Account Administration: To create, maintain, and manage your Cancertoto Account, including processing logins, updating profile information, and communicating account-related notices.
2. Transaction Processing: To facilitate deposits and withdrawals via Malaysian payment channels (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong) and cryptocurrency networks, and to maintain accurate transaction records.
3. Identity Verification (KYC): To verify your identity and age (21+) in compliance with applicable anti-money laundering (AML) and Know Your Customer (KYC) regulations, and to prevent fraudulent account activity.
4. Security and Fraud Prevention: To monitor for suspicious activity, detect and investigate potential fraud, enforce our Terms and Conditions, and protect the security of all users on the platform.
5. Customer Support: To respond to your queries, complaints, and requests via live chat, email, and other communication channels in English, Bahasa Melayu, and Mandarin Chinese.
6. Personalisation: To tailor content, promotions, and game recommendations to your preferences and betting history, where you have not opted out of such personalisation.
7. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or in-platform messaging, subject to your communication preferences. You may opt out at any time.
8. Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, and requests from competent regulatory authorities.
9. Responsible Gambling: To monitor betting patterns for indicators of problem gambling, administer self-exclusion and limit-setting tools, and refer users to support resources where appropriate.
10. Platform Improvement: To analyse usage data and user feedback to improve the functionality, performance, and user experience of the Cancertoto platform.

Cancertoto uses cookies and similar technologies (including local storage, session tokens, and device fingerprinting) to operate and improve the platform. The following categories of cookies are used:

You may control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies will prevent the Cancertoto platform from functioning correctly and you will be unable to log in or place bets.

Cancertoto does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share transaction-related data with Malaysian payment service providers (including those operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian banks) to facilitate deposits and withdrawals.
• KYC & Identity Verification Providers: We may engage third-party identity verification services to assist with document authentication and fraud screening as part of our KYC process.
• Game Content Providers: To enable game play and resolve game disputes, limited session and transaction data may be shared with our licensed game studio partners. These studios are contractually prohibited from using this data for independent marketing purposes.
• Fraud Prevention and Security Services: We may share IP addresses, device identifiers, and transaction patterns with specialist anti-fraud and cybersecurity service providers to protect the integrity of the platform.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts of law where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.
• Group Companies: Where Cancertoto operates as part of a corporate group, we may share data with affiliated entities for internal administrative purposes, subject to equivalent data protection standards.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.

All third-party Data Processors engaged by Cancertoto are bound by written data processing agreements that prohibit them from using your personal data for any purpose other than the specific service they provide to us.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy our legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your Account plus a minimum of five (5) years after Account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the business relationship, as required by applicable AML regulations.
• Transaction Records: Retained for a minimum of seven (7) years in accordance with financial record-keeping obligations.
• Support Communications: Retained for up to three (3) years after the resolution of the relevant matter, unless required for longer in connection with an active dispute.
• Marketing Preferences: Retained until you withdraw consent or update your preferences, plus a reasonable period to process the opt-out request.
• Technical and Usage Logs: Retained for up to twenty-four (24) months for security and analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction standards.

Cancertoto implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security: All data transmitted between your device and Cancertoto servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Password Security: Passwords are stored using industry-standard one-way hashing algorithms. Cancertoto staff cannot view your password in plain text under any circumstances.
• Payment Data Tokenisation: Payment card and account details are handled by PCI-DSS-compliant payment processors. Cancertoto does not store full payment instrument numbers on its own servers.
• Access Controls: Access to personal data within Cancertoto's systems is strictly limited to personnel who require it in order to perform their job functions, and is governed by role-based access controls and audit logging.
• Two-Factor Authentication (2FA): Optional 2FA is available to all users and is strongly encouraged for enhanced Account security.
• Security Monitoring: Our infrastructure is monitored continuously for intrusion attempts, anomalous access patterns, and other security threats.

Subject to applicable data protection law, you have the following rights in relation to the personal data Cancertoto holds about you:

To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond to all verified requests within thirty (30) days. We may request proof of identity before processing a data rights request to protect against fraudulent submissions.

The Cancertoto platform is strictly intended for persons aged 21 (twenty-one) years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Access to gambling services by minors is strictly prohibited.

If we discover or are notified that we have inadvertently collected personal data from a person under the age of 21, we will take prompt steps to delete that data, suspend the associated Account, and notify the relevant authorities where legally required.

If you are a parent or guardian and believe your child has registered on or interacted with the Cancertoto platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

The Cancertoto platform may, from time to time, contain references or links to payment processor portals, identity verification services, or other third-party platforms that are necessary for the operation of our Services. This Privacy Policy applies only to the Cancertoto platform and does not govern the data practices of any third-party website or service.

We are not responsible for the privacy practices, security measures, or content of any third-party platforms you may access in connection with your use of our Services. We encourage you to review the privacy policies of any third-party services you interact with.

Cancertoto operates on an international basis and your personal data may be transferred to and processed in countries other than Malaysia. In particular, our servers, payment processing partners, and KYC verification services may be located in jurisdictions outside Malaysia.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data, including contractual protections equivalent to those required by applicable data protection law. Where a transfer destination does not have an adequate level of data protection as determined by relevant authorities, we implement standard contractual clauses or other approved transfer mechanisms.

By using the Cancertoto Services, you acknowledge and consent to the transfer of your personal data to international locations in accordance with the terms of this Policy.

Cancertoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material, we will endeavour to provide advance notice by posting a prominent notification on the platform or by sending an email to your registered address.

The "Last Updated" date at the top of this Policy reflects the date on which the most recent changes were published. We encourage you to review this Policy periodically. Your continued use of the Cancertoto Services following the publication of a revised Policy constitutes your acceptance of the updated terms.

If you object to any changes to this Policy, you must stop using the Services and may contact us to request Account closure and data deletion in accordance with your rights under Section 11.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data Cancertoto holds about you, please contact us through the following channels. We aim to respond to all privacy-related enquiries within 30 days:

• Email: [email protected] — for formal written privacy requests and data rights enquiries.
• Live Chat: Available 24/7 directly on the Cancertoto platform — recommended for general questions and urgent matters.
• Languages Supported: English, Bahasa Melayu, and Mandarin Chinese.

When submitting a data rights request by email, please include your registered Account username and a description of your request to allow us to locate your data efficiently. We may request proof of identity before processing your request.