Pulitoto Privacy Policy updated — effective January 2026! Your personal data is protected with 256-bit SSL — no compromise! We do not sell your data to any third party! Secure deposits via Touch 'n Go, DuitNow, GrabPay — 100% safe! Your privacy rights are guaranteed — access, update or delete your data at any time! 24/7 privacy support in Bahasa Malaysia — contact us now! Pulitoto Privacy Policy updated — effective January 2026! Your personal data is protected with 256-bit SSL — no compromise! We do not sell your data to any third party! Secure deposits via Touch 'n Go, DuitNow, GrabPay — 100% safe! Your privacy rights are guaranteed — access, update or delete your data at any time! 24/7 privacy support in Bahasa Malaysia — contact us now!
 UPDATED JANUARY 2026

Pulitoto Privacy Policy — Our Commitment to Protecting the Personal Data of Malaysian Members

Pulitoto takes data privacy very seriously. This Privacy Policy clearly explains what information we collect, how we use it, how we protect it, and what your rights are as a member. We've written it in plain language — not confusing legal jargon.

PRIVACY POLICY SUMMARY
Data protected by 256-bit SSL
No sale of data to third parties
Right to access & correct your data
Two-factor authentication (2FA)
Transaction data retained for 6 months
Account can be deleted at any time
By using pulitoto, you agree to this Privacy Policy.

Pulitoto's Six Core Privacy Protection Principles

This is the foundation of how pulitoto handles the personal data of every Malaysian member responsibly.

Bank-Grade Encryption

All data transmitted between your device and pulitoto's servers is encrypted using 256-bit SSL — the same security technology used by Maybank, CIMB, and other leading Malaysian financial institutions. None of your information travels in plain text that could be intercepted by any third party.

No Data Selling

Pulitoto has never and will never sell, rent, or trade your personal data to any third party for marketing purposes. The information you provide to us is used solely for the purposes stated in this Privacy Policy — nothing more.

Full Control Over Your Data

As a pulitoto member, you have the full right to access, amend and delete your personal data at any time. These rights can be exercised by contacting our support team, and we are committed to processing every request within 14 working days.

24/7 Security Monitoring

Pulitoto's security monitoring system operates around the clock to detect and prevent unauthorised access attempts, cyberattacks and suspicious activity. Any threats are identified and addressed automatically before they can impact your data.

Two-Factor Authentication

Every login and key transaction requires OTP verification sent to your registered Malaysian mobile number. This additional layer of protection ensures no one can access your account even if they know your password.

Responsible Data Retention

Your personal data is kept only for as long as necessary for the stated purpose or as required by law. Transaction records are retained for a minimum of 6 months for audit purposes and your own protection. Data that is no longer needed is securely deleted.

Why Data Privacy Matters to Pulitoto

When you register with pulitoto, you are trusting us with your personal information — your name, phone number, transaction records and activity history on the platform. That trust is not something we take lightly. It is a responsibility we hold seriously, and it sits at the core of how we run our operations every day.

Many Malaysian players who have used other betting platforms may have experienced receiving unsolicited sales calls or promotional emails from unknown parties — a clear sign that their data was shared or sold without consent. Experiences like this erode trust, and they happen because some platforms simply do not respect their members' privacy.

Pulitoto takes an entirely different approach. We believe your data belongs to you — not to us as a business asset to be traded. This Privacy Policy is more than a legal compliance document. It is a trust agreement between pulitoto and every member who chooses to join our community.

This document explains exactly what we collect, why we need it, who can see it, how long we retain it, and what you can do if you wish to control or delete your data. Please read it carefully — and if any section is unclear, our support team is ready to help explain.

PULITOTO'S PRIVACY COMMITMENT
Full Compliance
We comply with all applicable data protection requirements in our operations.
Minimum Collection
We only collect data that is strictly necessary to provide services to you.
Breach Notification
You will be notified within 72 hours should any data breach occur that affects you.
Periodic Review
This Privacy Policy is reviewed and updated periodically to ensure it remains relevant and comprehensive.

1 Information We Collect

Pulitoto collects various types of personal information when you interact with our platform. We only collect data that is genuinely necessary to provide the services you request. The categories of information we collect are as follows:

Data Type Example Primary Purpose
Identity Data Full name, date of birth, IC number Identity verification & age eligibility
Contact Information Malaysian phone number, email address Account communications & security OTP
Financial Data Deposit & withdrawal records, payment methods Transaction processing & AML compliance
Activity Data Game history, betting records, login sessions Account security & responsible gaming
Technical Data IP address, device type, browser version Platform security & fraud detection
Preference Data Notification settings, language preferences Personalising the user experience

Technical data such as IP addresses and device information is collected automatically when you access pulitoto. This information is used solely for security purposes — to identify suspicious login activity and protect your account from unauthorised access.

Minimum Collection Principle: Pulitoto only collects data that is necessary for the stated purposes. We do not collect sensitive information such as your biometric data, medical records, or religious information.

2 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. Pulitoto uses your information for the following purposes:

  • Account management: Processing registrations, verifying identity, managing logins and enabling you to use all features on the pulitoto platform including baccarat, roulette, Sports Betting, lottery and virtual sports.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks) and ensuring withdrawals are credited to the correct account.
  • Platform security: Detecting and preventing fraud, money laundering, bonus abuse and other suspicious activities that could compromise the integrity of the pulitoto platform.
  • Responsible gaming: Monitoring play patterns to identify early signs of problem gambling and providing appropriate intervention where needed.
  • Customer support: Enables the pulitoto support team to assist you in resolving issues, answering enquiries, and processing complaints effectively.
  • Service improvement: Analysing usage patterns in aggregate (not individually) to improve the interface, add new games and enhance the overall platform experience.
  • Service communications: Sending important account-related notifications such as deposit confirmations, security alerts and material updates to our terms.
  • Legal compliance: Comply with applicable legal obligations, including anti-money laundering (AML) and know-your-customer (KYC) procedures.

Pulitoto not use your data to build psychological profiles, target third-party advertisements, or make automated decisions that affect your rights without human review. Any data analysis we conduct is aimed at improving platform security and user experience — not exploiting your playing patterns.

3 Data Sharing with Third Parties

Pulitoto does not sell, rent or disclose your personal data to third parties except in the limited circumstances set out below. Any data sharing is based on legitimate necessity and subject to strict contractual protections:

 Malaysian Payment Providers

Transaction information is shared with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX banking institutions (Maybank, CIMB) solely for the purpose of processing your deposits and withdrawals. This sharing is technically necessary and limited strictly to the data required to complete the transaction.

 Security Service Providers

Pulitoto works with cybersecurity service providers that help us detect fraud and protect the platform. Data shared with these parties is limited to technical data such as IP addresses and login patterns — not your personal identifying information.

 Legal Authorities

Pulitoto may disclose your data to relevant authorities if required by law or a valid court order — for example, in investigations involving money laundering or fraud. In such cases, we disclose only the minimum data required by the relevant request.

 With Your Consent

In any other case where we wish to use your data for purposes not stated here, we will request your explicit consent beforehand. You have the right to decline, and doing so will not affect your access to pulitoto's services.

All third parties that receive your data from pulitoto are bound by strict confidentiality and data protection agreements. They are not permitted to use your data for any purpose other than what is specified in those agreements.

4 Data Security

Pulitoto implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, loss, destruction, or disclosure:

  • 256-bit SSL Encryption for all data communications between the platform and your device — the same standard used by Malaysian online banking.
  • Two-factor authentication (2FA) for all logins and important transactions — requiring OTP verification to your registered Malaysian phone number.
  • Multi-layer firewall that protects pulitoto's servers from external attacks and unauthorised access attempts.
  • Intrusion Detection System (IDS) that monitors network traffic 24/7 to detect suspicious attack patterns.
  • Internal access controls that ensures pulitoto staff can only access the data they need to carry out their duties — the "least privilege" principle.
  • Regular security audits by an independent party to assess and strengthen the security posture of the pulitoto platform.
  • Encrypted data backups across multiple secure locations to ensure service continuity and data recovery in the event of an unexpected incident.

While we take every reasonable precaution, no security system can guarantee 100% protection against all threats. If you suspect your account has been accessed without authorisation, contact the pulitoto support team immediately and change your password.

5 Data Retention Period

Pulitoto does not retain your personal data longer than necessary. Retention periods vary according to the type of data and its purpose:

  • Active account data: Retained for as long as your account remains active with pulitoto. This information is necessary to provide you with ongoing services.
  • Financial transaction records: Retained for a minimum of 6 months after a transaction for audit purposes and your own protection should any dispute arise. Records may be kept longer if required by legal compliance obligations.
  • Security and activity logs: Retained for 90 days to facilitate security incident investigations if required.
  • Data after account closure: When you close your account, your personal data will be deleted or anonymised within 30 days unless we are required by law to retain it longer — for example, financial records for a minimum of 7 years.
  • Complaint and support data: Customer support interaction records are retained for 2 years to ensure service consistency and allow for future reference if needed.

Once the retention period expires, data is securely deleted using industry-standard data deletion procedures that ensure the data cannot be recovered.

6 Your Rights as a Member

As a pulitoto member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to know what data we hold about you and what it is used for. Request a copy of your data through our support team.

Right to Rectification

If your data is inaccurate or outdated, you can ask us to correct it. Update your phone number or other basic details directly from your account settings.

Right to Erasure

You may request deletion of your data upon account closure, subject to applicable legal record-keeping obligations.

Right to Object

You may object to the processing of your data for specific purposes, including marketing communications. Objections will be processed within 30 business days.

Right to Data Portability

You have the right to receive a copy of your data in a machine-readable format to transfer to another platform should you wish to do so.

Right to Restriction

You may request that we restrict the processing of your data during a dispute over data accuracy or while a complaint investigation is in progress.

To exercise any of the rights above, contact the pulitoto support team via Live Chat or email at support@pulitoto.bid. State the right you wish to exercise and provide sufficient account information for us to verify your identity. We will process your request within 14 business days.

7 Cookies & Tracking Technologies

Pulitoto uses cookies and similar tracking technologies to enhance the user experience and maintain platform security. Cookies are small text files stored on your device when you visit pulitoto.

  • Essential Cookies: Required for core platform functions — including maintaining your login session and remembering your language preference. Without these cookies, the pulitoto platform cannot function properly. This type of cookie cannot be disabled.
  • Security Cookies: Helps us identify suspicious sessions, prevent CSRF attacks and ensure every gaming session is legitimate and secure. These cookies are required to protect your account.
  • Analytics Cookies: Helps us understand how players use the platform — which pages are visited most, time spent and any technical issues that may arise. This data is analysed in aggregate and is not linked to your individual identity.
  • Preference Cookies: Remembering your preferences such as display settings, game choices and notification preferences to provide a more personalised experience when you return to pulitoto.

Cookie Controls: You can manage cookie settings through your browser. However, disabling essential or security cookies may affect the functionality of the pulitoto platform. For instructions on managing cookies in your browser, refer to your browser's documentation.

8 Children's Data

Pulitoto is an online betting platform designed exclusively for adult users aged 21 years and above. We do not knowingly collect any personal information from individuals under the age of 21.

Should we discover that we have collected personal data from someone under the age of 21 without proper verification, we will take immediate steps to delete that data and close the associated account. The age verification process is applied at registration and may be enforced through identity document checks at any stage.

If you believe that someone under the age of 21 has registered an account on pulitoto, please report it to us immediately at support@pulitoto.bid. We will investigate and take appropriate action within 24 hours.

9 Payment & Financial Data

As pulitoto handles financial transactions involving deposits and withdrawals in Malaysian Ringgit (RM), the security of your financial data is our highest priority. Supported payment methods include Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX via Maybank2u and CIMB Clicks.

  • Pulitoto not store your credit or debit card details directly on our servers. All card processing is handled through third-party payment providers that comply with PCI DSS security standards.
  • Your eWallet account details (such as the phone number linked to Touch 'n Go or GrabPay) are stored in encrypted form and used solely to process transactions you have authorised.
  • Every transaction requires OTP verification — an added layer of security ensuring no one can make deposits or withdrawals from your account without access to your phone.
  • Your full transaction history — including amounts, timestamps, payment methods and status — is available for your review in the pulitoto account transaction history at any time.
  • In the event of a disputed or unrecognised transaction, contact pulitoto support immediately. We maintain detailed transaction logs that can be used to resolve any dispute promptly.

Pulitoto complies with strict anti-money laundering (AML) procedures. This means we may request additional documentation for large transactions or unusual transaction patterns. Your cooperation in this process helps maintain platform integrity for all members.

10 Changes to the Privacy Policy

Pulitoto reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, service updates or new legal compliance requirements. When we make material changes, we will notify you via:

  • In-platform notifications on pulitoto upon your next login.
  • Updates to this Privacy Policy page with a clear effective date shown at the top of the document.

Non-material changes — such as language improvements or clarifications that do not alter the substance of this policy — may be implemented without specific notification. We encourage you to review this page periodically to stay informed about how we protect your data.

Your continued use of the pulitoto platform after any policy changes take effect will be considered your acceptance of the latest version of this Privacy Policy. If you do not agree with any changes, you have the right to close your account before the effective date of those changes.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how pulitoto handles your personal data, we encourage you to reach out to us directly. We are committed to treating every privacy enquiry seriously and responding within a reasonable timeframe.

  • Email: support@pulitoto.bid — include "Privacy Enquiry" in the email subject line.
  • Live Chat: Available on the pulitoto platform 24/7 — the fastest option for issues that need immediate attention.
  • Response time: We are committed to responding to all privacy enquiries within 14 business days of receipt.

For formal requests such as data access, data deletion or data processing complaints, please submit a written request via email clearly stating the type of request, your pulitoto account number and sufficient details for us to verify your identity before processing.

 Effective Date of This Privacy Policy
This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions.

Frequently Asked Questions — Pulitoto Privacy Policy

pulitoto only discloses information to authorities when required by law or a valid court order — for example, in financial crime or money laundering investigations. We do not voluntarily share your data with any government body without a clear legal basis. Every data disclosure request from authorities is reviewed by our legal team before we comply.

Yes, this is your right. Send a written request to support@pulitoto.bid with the subject line "Data Access Request" and include your account number. We will verify your identity and provide a full report of the data we hold about you within 14 business days. The report will include all identity data, transaction records, gaming history, and relevant communication records.

When you close your account, your personal data will be anonymised or deleted within 30 days. However, financial records may be retained longer based on legal financial record-keeping requirements — typically up to 7 years. This data is stored in encrypted form and cannot be re-linked to your personal identity for marketing or profiling purposes.

All your eWallet transaction information is encrypted using 256-bit SSL during transmission. Your eWallet account details — such as the mobile number linked to your Touch 'n Go or DuitNow account — are stored in encrypted form on pulitoto's servers and are never displayed in plain text. In addition, every transaction requires OTP verification, which prevents any unauthorised transaction even if someone has your login credentials.

pulitoto may send communications related to our own services, such as new bonus information, terms updates or account notifications. We do not, however, sell or use your data for third-party advertising. If you no longer wish to receive promotional communications from pulitoto, you can unsubscribe via your account notification settings or by contacting our support team — this will not affect important security notifications related to your account.

Contact pulitoto's support team immediately via Live Chat or email at support@pulitoto.bid. We will temporarily suspend your account to prevent any unauthorised activity, review access logs to identify suspicious behaviour, and help you securely recover your account. Change your password right away and enable 2FA if you haven't done so already. pulitoto is not liable for any losses resulting from sharing your login credentials with others.

Your Privacy Rights at a Glance

As a pulitoto member, you have full control over your personal data. Here is how to exercise each right with ease.

 Request Data Access

Send an email to support@pulitoto.bid with the subject line "Data Access Request". We will deliver a full report within 14 business days, covering all your identity data, transactions, and activity history.

 Correct Inaccurate Data

Log in to your pulitoto account and go to your profile settings to update your phone number or basic information. For more complex data amendments, contact our support team with appropriate proof of identity.

 Delete Account & Data

Contact pulitoto support to begin the account closure process. Your data will be anonymised within 30 days. Please ensure all real money balances have been withdrawn before requesting closure.

 Unsubscribe from Promotional Communications

Go to Settings → Notifications in your pulitoto account to manage your communication preferences. Alternatively, contact our support team and we will update your preferences within 24 hours. Critical security notifications cannot be disabled, as they are essential for protecting your account.

Privacy Policy & Terms & Conditions — The Relationship Between Both Documents

This Privacy Policy should be read together with Terms & Conditions pulitoto and forms the entire agreement between you and our platform regarding data protection. By registering and using pulitoto, you agree to both documents simultaneously. For any enquiries, email us at support@pulitoto.bid.

JOIN PULITOTO WITH CONFIDENCE

Your Data Is Safe at Pulitoto — Register Today

Over 120,000 Malaysian players have trusted pulitoto with their personal data. Register for free, enjoy a Welcome Bonus of up to RM800, and start your gaming experience in a safe and secure environment.

256-bit SSL
No data selling
2FA for all accounts
24/7 Malay Support
Bahasa Melayu