colitoto Official Data Protection

Privacy Policy Colitoto
Protection of Your Personal Data

We understand that your privacy is not merely a formality – it is your right. This document transparently explains how colitoto collects, uses, and protects every piece of information you entrust to us.

Last updated: January 2026
256-bit SSLFull Data Encryption
PCI-DSSFinancial Security Standards
No Data SalesYour Information Is Never Sold

1Introduction

Colitoto takes the responsibility of protecting your privacy seriously. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of personal information you provide to us when using the colitoto platform at colitoto.vu.

This policy applies to all users of our platform, including visitors, registered members, and active players. By using colitoto services, you agree to the practices described in this Privacy Policy. We encourage you to read this document from start to finish so you fully understand the rights and choices available to you.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy colitoto, which forms the overall agreement framework between you and us.

2Personal Data We Collect

Colitoto collects only the information necessary for the purpose of providing you with a safe, fair, and high-quality service. The information we collect falls into several categories:

Information You Provide Directly

This is the information you provided yourself while using the colitoto platform:

Full name Email address Phone number Date of birth Residential address IC number / passport number Bank account information

Automatically Collected Information

When you browse or use the colitoto platform, our systems automatically record certain technical information:

  • IP address and estimated location information
  • Browser type and version used
  • Your device's operating system
  • Pages visited and time spent on each page
  • Referral source (how you arrived at our site)
  • Login session data and gaming activity

Financial Transaction Information

Every deposit and withdrawal transaction made through the colitoto platform is recorded, including the amount, payment method, transaction time, and verification status. This information is required for financial regulatory compliance and fraud protection.

KYC (Know Your Customer) Information

As part of the identity verification process, we may request copies of identification documents such as your national ID, passport, or other relevant supporting documents to ensure the accuracy of your account information.

3How We Use Your Data

Colitoto uses collected personal data only for legitimate purposes directly related to the provision of our services. The following are the primary purposes for which your data is used:

  • Account management: Creating, verifying, and maintaining your account so you can securely access all platform features.
  • Transaction processing: Processing your deposits and withdrawals quickly and accurately through your chosen payment method.
  • Identity verification: Carrying out KYC processes as required by regulatory authorities to prevent fraud and money laundering.
  • Customer support: Enabling our support team to assist you in resolving any issues or inquiries more effectively.
  • Platform security: Detecting and preventing fraudulent activity, unauthorized access, and other security threats.
  • Legal compliance: Fulfilling legal obligations including reporting to authorities when required.
  • Service improvements: Analyzing usage patterns to improve your gaming experience and platform functionality.
  • Marketing communications: Sending you promotional information and exclusive offers – only if you have agreed to receive them.
Colitoto will not use your data for any purpose not stated above without obtaining your consent first. You may withdraw consent for marketing communications at any time through your account settings.

4Sharing Information with Third Parties

Colitoto does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Your information is shared only in the following limited circumstances:

Trusted Service Providers

We work with carefully selected third-party companies to help us operate the platform, including payment gateway providers, gaming software providers, and cloud service providers. All these third parties are bound by strict confidentiality agreements and are only permitted to use your data for purposes specified by colitoto.

Legal Requirements

Colitoto will disclose required information to authorities, regulatory bodies, or courts when mandated by applicable law, including for the purposes of financial crime prevention and law enforcement.

Business Transfers

In the event of a merger, acquisition, or sale of colitoto's assets, user data may be transferred as part of that transaction. You will be notified in advance if your data becomes subject to a different privacy policy.

Colitoto never shares your identity document details (IC, passport) or account password with any third party under any circumstances, except where required for legally mandated KYC verification.

5Your Data Security

Colitoto invests seriously in security infrastructure to ensure your personal data and financial information are always protected. The security measures we implement include:

  • 256-bit SSL Encryption: All communications between your browser and colitoto's servers are encrypted using the latest TLS protocol, rendering your data unreadable to unauthorised parties.
  • PCI-DSS Standard: Our financial data processing complies with the Payment Card Industry Data Security Standard (PCI-DSS), the highest security standard in the financial industry.
  • Two-factor authentication (2FA): 2FA is available for all accounts to add an extra layer of protection during login.
  • 24/7 Monitoring: Our threat detection system operates around the clock to identify and block any suspicious activity in real time.
  • Internal access control: Only colitoto staff with special authorisation and a legitimate work requirement may access users' personal data.
  • Regular security audits: Our security systems are regularly assessed by independent auditors to ensure ongoing compliance with the latest standards.
While we take all reasonable steps to protect your data, no online security system can be guaranteed 100% safe. We encourage you to play your part by using a strong password and never sharing your login credentials with anyone.

6Cookies & Tracking Technologies

Colitoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymous information about how users interact with the platform to help us improve functionality and user experience.
  • Functional Cookies: Saving your preferences such as language and display settings so you don't need to reconfigure them on every visit.
  • Marketing Cookies: Used to display ads or promotions more relevant to your interests – only activated with your consent.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some colitoto platform features.

7Your Rights Regarding Personal Data

As a colitoto user, you have the following rights regarding the personal data we hold about you. You may submit a request to exercise any of these rights by contacting our privacy team:

Your Rights Description Response Time
Right of Access Requesting a copy of the personal data we hold about you 14 working days
Right to Rectification Requesting the correction of inaccurate or incomplete data 7 working days
Right to Erasure Requesting the deletion of your personal data under certain circumstances 30 working days
Right to Object Objecting to the processing of your data for direct marketing purposes Immediately
Right to Restriction Requesting the restriction of your data processing under certain circumstances 14 working days
Right to Portability Receiving your data in a machine-readable format 21 working days

Please note that some of these rights may be limited under certain circumstances, such as when data processing is mandatory for legal compliance or contractual requirements.

8Data Retention Period

Colitoto retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. General data retention guidelines are as follows:

  • Active account data: Retained for the duration your account is active and for a defined period after account closure.
  • Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with financial and tax legal requirements.
  • KYC Records: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering regulations.
  • Support communication logs: Retained for 2 years for reference and service improvement purposes.
  • Cookie data: Expires according to cookie type, ranging from the current session up to a maximum of 12 months.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised in accordance with our internal procedures.

9Cross-Border Data Transfers

Colitoto operates as a global online platform and your data may be stored or processed on servers located outside Malaysia. In all cases of cross-border data transfers, colitoto ensures protection equivalent to the standards applied in Malaysia through:

  • Data processing agreements compliant with international standards with all third-party service providers
  • Security risk assessment prior to any data transfer to a new region
  • Use of standard contractual clauses recognised for cross-border data transfers
Regardless of where your data is processed, the level of protection you receive as a colitoto user remains consistent and undiminished.

10Children & Privacy

The colitoto platform is strictly for users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18. If we discover that information belonging to someone under 18 has been collected without our knowledge, the account in question will be closed immediately and all related data will be deleted.

Parents or guardians who have reason to believe their children have registered or used the colitoto platform are requested to contact us immediately so that appropriate action can be taken.

11Amendments to the Privacy Policy

Colitoto reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Whenever a significant change occurs, we will:

  • Updating the "Last Updated" date at the top of this document
  • Sending notifications to registered members via email or in-platform notifications
  • In cases of highly material changes, seeking your renewed consent before the changes take effect

Continued use of the colitoto platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy.

12Contact Our Privacy Officer

If you have any questions or concerns, or wish to exercise your privacy rights, please contact colitoto's Data Privacy Officer through the following channels:

  • Privacy Email: [email protected] (please type this address manually – no clickable link)
  • Live Chat 24/7: Directly through the colitoto platform for an immediate response
  • FAQ: Visit FAQ page for answers to frequently asked privacy questions

We aim to respond to all privacy-related inquiries within 5 business days. For more complex data rights requests, response times are as stated in the Section 7 schedule above.

Your privacy is our priority. Every complaint or concern you raise will be taken seriously and addressed professionally by colitoto's dedicated privacy team.

We don't just make promises – every layer of protection is actively implemented within our platform infrastructure every day.

End-to-End Encryption

All data moving between your device and colitoto's servers is encrypted with 256-bit SSL/TLS protocol. No one can intercept or read your information in transit.

Strict Access Control

Your personal data may only be accessed by colitoto staff with specific authorisation and a legitimate work requirement. All access is logged and monitored on a regular basis.

Regular Security Audits

Colitoto's systems and security practices are regularly assessed by independent third-party auditors to ensure ongoing compliance with the latest industry standards.

No Data Sales

Colitoto has never and will never sell, rent, or trade your personal data to advertisers or any third party for their commercial gain.

Two-Factor Authentication

Enable 2FA on your colitoto account for an extra layer of security. Even if your password is compromised, your account stays protected through a second verification step on your phone.

Clear Data Rights

You have the full right to access, correct, or request deletion of your data. Clear processes and defined response times ensure your rights are fully respected.

🔒

Your Data Is Safe – Now It's Time to Play

Colitoto safeguards your information with industry-leading security technology. Register today and enjoy a safe, fair, and exciting online gaming experience alongside thousands of active Malaysian members.

256-bit SSL Encrypted Data No Data Sales PCI-DSS Compliance 24/7 Support
Bahasa Melayu