litetoto Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to personal information processed through the litetoto website, player accounts, payment functions, live chat, email support, promotions, casino games, and sports betting features. It covers visitors, registered players, former players, and individuals who contact litetoto support.

For this policy, “personal information” means information that identifies an individual or can reasonably be linked with an identifiable individual. “Processing” includes collecting, recording, organising, storing, reviewing, using, sharing, restricting, and deleting such information.

This policy does not replace a player’s responsibility to keep account credentials private. Players should use a strong password, secure their registered phone and email accounts, and contact litetoto immediately if unauthorised account activity is suspected.

2. Information We Collect

2.1 Registration and profile information

When you create a litetoto account, we may collect your full name, date of birth, residential address, nationality, email address, mobile number, username, communication preferences, and account security details. We use this information to establish your account and confirm that you meet the 21+ eligibility requirement.

2.2 Identity and KYC information

For identity, age, payment, and fraud checks, litetoto may request a Malaysian MyKad, driving licence, passport, proof of address, payment ownership evidence, or a selfie used for identity matching. KYC records can contain document images, issue and expiry dates, partial identification numbers, verification outcomes, and screening results.

2.3 Payment and transaction information

When you deposit or withdraw through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, payment cards, or supported digital assets, litetoto may process transaction references, payment method, amount, currency, status, timestamps, and limited account identifiers. Complete payment credentials may be processed by the relevant payment provider rather than stored directly by litetoto.

2.4 Gaming and responsible gambling information

litetoto records deposits, withdrawals, account balances, bets, wins, losses, bonuses, wagering progress, game sessions, sports selections, odds, device activity, deposit limits, cooling-off requests, and self-exclusion status. These records support settlement, customer service, security, and responsible gambling controls.

2.5 Technical and communication information

We may collect IP address, approximate location, browser type, operating system, device identifiers, language preference, access times, referring page, error logs, and cookie identifiers. When you contact litetoto, we retain the content of live chats and emails, together with relevant timestamps and support outcomes.

3. How and Why We Use Information

litetoto processes personal information only where there is an appropriate purpose and lawful basis. Depending on the circumstances, processing may be necessary to perform our agreement with you, meet legal or compliance duties, pursue legitimate operational interests, protect vital interests, establish legal claims, or act with your consent.

We may use personal information to:

• create, authenticate, maintain, and secure your litetoto account;
• verify identity, age, address, and ownership of a payment method;
• accept MYR deposits and process legitimate withdrawal requests;
• settle live baccarat, slots, poker, football, and other betting activity;
• calculate bonuses, wagering requirements, loyalty status, and player rewards;
• detect account takeovers, collusion, bonus abuse, money laundering, payment fraud, and prohibited conduct;
• operate deposit limits, session reminders, cooling-off periods, and self-exclusion controls;
• respond to questions, investigate complaints, and improve litetoto support;
• maintain platform stability, diagnose errors, and analyse service performance;
• send service notices and, where permitted, promotional communications; and
• establish, exercise, or defend legal rights and resolve disputes.

litetoto does not sell personal information. We do not use KYC documents for unrelated advertising, and we do not request passwords, banking PINs, or one-time security codes through unsolicited chat messages.

4. Cookies and Similar Technologies

litetoto may use essential cookies to keep players signed in, preserve security settings, balance website traffic, and remember basic preferences. Without essential cookies, important account and cashier functions may not work correctly.

Analytics cookies may help litetoto understand page performance, navigation patterns, device compatibility, and technical errors. Preference cookies may remember language or display choices. Where required, optional cookies will be used only after an appropriate choice has been recorded.

You can control cookies through your browser settings. Blocking all cookies may prevent login, interfere with live games, or stop MYR payment screens from operating as expected. Clearing cookies will normally remove saved preferences and may require you to sign in again.

5. Disclosure and Service Providers

litetoto may disclose the minimum necessary information to carefully selected service providers that support account verification, fraud prevention, secure hosting, payment processing, game delivery, analytics, communications, and customer support. These providers are expected to process information only for authorised purposes and apply suitable confidentiality and security measures.

Payment information may be shared with banks, e-wallet operators, card processors, or transfer networks when required to complete a transaction or investigate a disputed payment. For example, a Touch 'n Go eWallet withdrawal or FPX deposit may require relevant transaction details to be exchanged with the payment channel.

litetoto may also disclose information where reasonably necessary to comply with a valid legal request, investigate suspected crime, enforce the Terms & Conditions, protect players, preserve platform integrity, or defend legal rights. We do not disclose personal information merely because an informal or unverified request has been received.

6. International Data Processing

Some service providers or technical systems used by litetoto may process information outside Malaysia. Privacy laws in another location may differ from Malaysian requirements. Where cross-border processing occurs, litetoto takes reasonable steps to use contractual, technical, and organisational safeguards appropriate to the information and processing risk.

Such safeguards may include data-processing agreements, confidentiality duties, access controls, encryption, transfer assessments, and limits on further disclosure. Players may contact litetoto for general information about the safeguards relevant to their information, subject to security and confidentiality restrictions.

7. Information Security

litetoto uses layered technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, improper alteration, disclosure, or destruction. Measures may include encrypted transmission, protected storage, role-based access, multi-factor controls for sensitive systems, event logging, vulnerability management, backups, and staff training.

No internet service can guarantee absolute security. Players also have an important role: never disclose a litetoto password or verification code, avoid signing in through unsecured public Wi-Fi, confirm that the browser displays HTTPS, and keep devices updated. If you believe your account or personal information has been compromised, contact support promptly.

Where a personal data incident creates a material risk, litetoto will investigate, contain the issue, preserve relevant evidence, and provide notifications where required by applicable obligations.

8. Retention and Account Closure

litetoto retains personal information for the period needed to provide services and satisfy legitimate operational, security, dispute, tax, fraud-prevention, responsible gambling, and compliance purposes. Retention periods vary according to record type, sensitivity, legal requirements, and whether an unresolved claim or investigation exists.

Closing your litetoto account does not always result in immediate deletion. Transaction, KYC, self-exclusion, dispute, and security records may need to be retained after closure. When continued identification is no longer required, litetoto will delete, securely destroy, or anonymise information in accordance with applicable retention procedures.

Self-exclusion records may be retained to ensure that an excluded player cannot simply open another account and bypass the requested protection. This use supports the player’s responsible gambling choice.

9. Marketing Preferences

With an appropriate basis, litetoto may send information about bonuses, live casino events, slots, poker, Liga Super Malaysia markets, EPL fixtures, or account rewards. Promotional communication is separate from essential service messages concerning security, payments, updated terms, KYC, or responsible gambling controls.

You may ask litetoto to stop optional marketing at any time. The request may take a short period to apply across active communication systems. Even after opting out, you may continue to receive operational notices required to manage your account or protect its security.

Players subject to self-exclusion should not receive promotional gambling messages while the exclusion remains active. If such a message is received in error, notify support so litetoto can investigate and correct the relevant preference.

10. Children and Age Restrictions

litetoto is not intended for children or anyone under 21. We do not knowingly permit an individual below the required age to register, deposit, or gamble. Age checks may be completed during registration, KYC review, payment assessment, or before a withdrawal is approved.

If litetoto identifies an underage account, access may be suspended while the matter is investigated. Information may be retained where necessary to prevent repeat registration, resolve financial matters, and support player protection obligations. A parent or guardian who believes an underage individual has provided information to litetoto should contact support with sufficient details for a secure investigation.

11. Changes to This Privacy Policy

litetoto may revise this Privacy Policy when services, technology, payment methods, legal obligations, or information-handling practices change. The effective date displayed above will be updated when a revision is published.

Where a change materially affects player rights or the way personal information is used, litetoto may provide additional notice through the platform or registered contact details. Continued use of the service after an updated policy takes effect will be handled in accordance with applicable requirements; material consent-based changes will not rely solely on continued use where fresh consent is required.