Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by Jeeptoto ("we", "us", "our", "the Platform") and applies to all individuals ("User", "you", "your") who access, browse, register with, or otherwise use the services available atjeeptoto.cam (the "Website").

Jeeptoto operates as an online casino and sports betting platform serving Malaysian users across the country — including major urban centres such as Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and Bangsar. Given the nature of our services, we necessarily process certain categories of personal data in order to operate our platform securely, verify user identities, process financial transactions in Malaysian Ringgit (MYR), and comply with applicable legal and regulatory obligations.

This Policy sets out, in clear and accessible terms, what personal data Jeeptoto collects, the legal basis upon which it is processed, how it is used, with whom it may be shared, how long it is retained, and the rights you hold as a data subject. By registering an account or using the Jeeptoto platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including, but not limited to, name, identity card number, date of birth, contact details, financial account information, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction — whether automated or manual.
• "Data Controller" means Jeeptoto, in its capacity as the entity that determines the purposes and means by which Personal Data is processed.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in the context of this Policy, this is you, the User.
• "Sensitive Personal Data" means a subset of Personal Data that warants heightened protection due to its particular sensitivity — including financial account data, identity document details, and KYC verification records.
• "KYC" means Know Your Customer, the identity and age verification process required of all Users prior to processing withdrawal requests on the Jeeptoto platform.
• "Cookies" means small data files stored on your device by the Jeeptoto Website for purposes including session management, security, performance analytics, and user preference storage.

Data We Collect

Jeeptoto collects only the data that is necessary for the purposes described in this Policy. The categories of Personal Data we may collect include:

3.1 Identity & Registration Data

• Full legal name as it appears on your Malaysian National Identity Card (MyKad)
• Date of birth (for age verification — all users must be aged 21 or above)
• National identification number (MyKad number)
• Nationality and country of residence
• Username and encrypted account password

3.2 Contact Data

• Email address
• Malaysian mobile phone number
• Residential address within Malaysia

3.3 Financial & Transaction Data

• Malaysian bank account details (account name, bank name, account number) for withdrawal purposes — Maybank, CIMB, Public Bank, Hong Leong Connect, and others
• E-wallet identifiers (Touch 'n Go eWallet phone number, Boost ID, GrabPay account details)
• DuitNow transfer reference details
• Cryptocurrency wallet addresses (for BTC and USDT transactions)
• Transaction history, deposit amounts, withdrawal requests, and account balance records

3.4 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration, pages visited, features used, and click-stream data
• Login timestamps and access logs

3.5 KYC Verification Data

• Scanned or photographed copy of your MyKad (front and back)
• Selfie photograph for liveness verification
• Proof of payment method documentation
• Any supplementary identification documents requested during enhanced due diligence reviews

How We Collect Data

Jeeptoto collects Personal Data through the following means:

Data Processing & Legal Basis

Jeeptoto processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the agreement between you and Jeeptoto — including account creation, transaction processing, withdrawal fulfilment, and customer support provision.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, fraud prevention, and applicable financial regulations.
• Legitimate Interests: Processing is necessary for Jeeptoto's legitimate business interests, including platform security, fraud detection, responsible gambling monitoring, and service improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where Jeeptoto sends you optional promotional communications — such as bonus notifications, game release announcements, or personalised offers — this is done on the basis of your express consent, which you may withdraw at any time.

How We Use Your Data

Jeeptoto uses the Personal Data we collect for the following specific purposes:

• To create and maintain your registered Jeeptoto account and provide access to all platform features.
• To verify your identity and age (21+ requirement) through our KYC process prior to processing any withdrawal request.
• To process deposits and withdrawals in Malaysian Ringgit (MYR) via your preferred payment method — whether Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, or other supported channels.
• To administer bonuses, promotions, cashback offers, and loyalty programme rewards you have opted into.
• To monitor account activity for signs of fraud, money laundering, underage gambling, multi-accounting, or other prohibited conduct as defined in ourTerms & Conditions.
• To provide customer support, respond to enquiries, and resolve disputes in a timely and fair manner.
• To send you service-related communications — such as transaction confirmations, security alerts, and account notifications. These communications are necessary and cannot be opted out of while your account remains active.
• To send you optional marketing communications about new games, promotions, and platform updates — only where you have provided consent to receive such messages.
• To fulfil our responsible gambling obligations, including monitoring for patterns of problematic gambling behaviour and activating appropriate safeguards when warranted.
• To improve the Jeeptoto platform through the analysis of anonymised, aggregated usage data.

Data Sharing & Disclosure

Jeeptoto does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We may, however, share your data with specific categories of third parties in the following circumstances:

• Payment Service Providers: Your financial data is shared with payment processors (including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow / FPX network operators, and cryptocurrency exchange partners) solely to facilitate your requested deposit or withdrawal transactions.
• Identity Verification Partners: KYC documentation may be processed by third-party identity verification service providers engaged by Jeeptoto. These providers operate under strict data processing agreements and may only use your data for the specific purpose of identity verification.
• Fraud Prevention & Security Partners: We work with specialised fraud prevention services to identify and prevent money laundering, account takeover, and other malicious activities. These partners process certain technical data (such as IP addresses and device fingerprints) on our behalf.
• Legal and Regulatory Authorities: Jeeptoto may disclose your Personal Data to competent legal, regulatory, tax, or law enforcement authorities where we are required to do so under applicable law, court order, or regulatory direction — without prior notice to you where legally prohibited from doing so.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of Jeeptoto's business or assets, your Personal Data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

In all cases where third parties are engaged to process data on Jeeptoto's behalf, they are required to handle your data securely, use it only for the specific purpose authorised by Jeeptoto, and comply with applicable data protection requirements.

Data Retention

Jeeptoto retains your Personal Data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

Where you close your Jeeptoto account voluntarily, your account data will be archived and held for the applicable retention period before being securely deleted. You may request early deletion of non-legallyrequired data via our support team — see Section 12 (User Rights) for details.

Data Security

Jeeptoto employs a multi-layered approach to protecting your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Jeeptoto servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms this protection is active.
• Encrypted Data Storage: Sensitive data, including KYC documents, financial account details, and password hashes, is stored in encrypted databases with access restricted to authorised Jeeptoto personnel only.
• Two-Factor Authentication (2FA): Registered users are offered optional two-factor authentication via SMS or authenticator app to add an additional layer of security to their account logins.
• Access Controls: Internal access to personal data is governed by role-based access controls. Jeptoto employees are granted access only to the data categories required for their specific job function.
• Regular Security Audits: Our platform infrastructure is subject to regular security testing, vulnerability assessments, and penetration testing conducted by qualified security professionals.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Jeeptoto will notify affected users and relevant authorities within the timeframes required by applicable law.

Cookies & Tracking Technologies

The Jeeptoto website uses cookies and similar tracking technologies to operate certain platform features, improve user experience, and gather anonymised performance data. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Website to function correctly. They enable core features such as user session management, login authentication, and security token validation. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as your chosen language, saved payment method display, and notification settings — to provide a personalised and consistent experience across sessions.
• Analytics Cookies: We use anonymised analytics cookies to understand how users navigate the Jeeptoto platform — which pages are most visited, where users encounter friction, and how platform performance can be improved. No personally identifiable data is collected through analytics cookies.

Jeeptoto does not use advertising cookies or behavioural tracking technologies that follow your activity outside of the jeptoto.cam domain. You can manage your cookie preferences through your browser settings, though disabling strictly necessary cookies may impair your ability to use certain platform features, including logging in.

International Data Transfers

Where Jeeptoto engages service providers — such as identity verification partners, fraud prevention specialists, or technology infrastructure providers — located outside Malaysia, your Personal Data may be transferred to and processed in those jurisdictions.

Jeeptoto takes appropriate safeguards to ensure that any international data transfers are conducted in compliance with applicable data protection requirements. This includes entering into data processing agreements with all overseas service providers that contain appropriate contractual protections for your data, equivalent to those applicable within Malaysia.

For specific information about the countries to which your data may be transferred, please contact our support team using the details in Section 15.

User Rights

As a data subject whose Personal Data is processed by Jeeptoto, you hold a number of rights in respect of your data. These rights may be exercised by contacting our support team at any time using the details provided in Section 15.

To exercise any of the above rights, please contact Jeeptoto's support team as set out in Section 15. We aim to respond to all data rights requests within 14 working days. We may request proof of identity before processing your request to ensure the security of your data.

Please note that some rights may be subject to limitations where Jeeptoto is required to retain data for legal, regulatory, or fraud prevention purposes — such as KYC records and financial transaction logs which are subject to mandatory minimum retention periods.

Protection of Minors

The Jeeptoto platform is strictly intended for users aged21 years and above. Jeeptoto does not knowingly collect or process Personal Data from individuals under the age of 21. Our KYC verification process is specifically designed to confirm the age of every user who attempts to register an account or process a withdrawal.

If Jeeptoto becomes aware that Personal Data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data, close the associated account, and where applicable, return any deposited funds to the original payment method following verification of the refund recipient's identity.

If you have reason to believe that a minor has accessed or registered with the Jeeptoto platform, please contact our support team immediately using the details in Section 15 so that we can investigate and take appropriate action.

Changes to This Privacy Policy

Jeeptoto reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, platform functionality, business practices, or data processing arrangements. The "Last Updated" date at the top of this page will be revised accordingly whenever material changes are made.

Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — Jeeptoto will notify registered users via email and/or a prominent on-site notice at least 14 days prior to the changes taking effect. Continued use of the Jeeptoto platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how Jeeptoto protects your data. Archived versions of prior Policies are available upon request by contacting our support team.

Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way in which Jeeptoto processes your Personal Data, please contact us through the following channel:

When submitting a data rights request, please include your registered email address, a brief description of your request, and — where applicable — proof of identity so that we can verify your account and process your request securely.

For matters related to account terms, please refer to our Terms & Conditions. For information about our responsible gambling tools, including self-exclusion and deposit limit settings, please visit our Responsible Gambling page.

This Privacy Policy was last reviewed and updated on 1 January 2026. Jeeptoto is committed to maintaining transparent and accountable data practices for all Malaysian users of our platform.