Encrypted Storage
mpltoto stores sensitive account and payment data using encryption protocols designed to prevent unauthorised access or disclosure.
1. Introduction
mpltoto ("mpltoto", "we", "us", "our") is committed to protecting the privacy and personal data of every individual ("User", "you", "your") who accesses, registers on, or interacts with the mpltoto platform available at https://mpltoto.cam.
This Privacy Policy explains what personal information mpltoto collects, the purposes for which that information is processed, how it is protected, and the rights available to Users in connection with their personal data. It applies to all personal data collected through the mpltoto website, account registration process, payment transactions, customer support interactions and any other service we provide.
By creating an mpltoto account or continuing to use our platform after this Policy has been made available, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling policy.
Our commitment: mpltoto will never sell your personal data to
third parties for marketing or advertising purposes. Data shared with partners
is limited strictly to what is necessary for platform operation, payment
processing, and regulatory compliance.
2. Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data"
- Any information that can be used to identify a living individual directly or in combination with other available data, including name, email address, MyKad number, IP address, and financial account details.
- "Processing"
- Any operation performed on Personal Data, including collection, storage, organisation, retrieval, use, disclosure, restriction, erasure or destruction, whether automated or manual.
- "Data Controller"
- mpltoto, which determines the purposes and means of Processing of Personal Data collected through the platform.
- "Data Processor"
- Any third-party entity that processes Personal Data on behalf of mpltoto under a contractual agreement, such as a payment gateway provider or identity verification service.
- "Cookies"
- Small text files stored on a User's device by the mpltoto platform to enable session management, analytics, security functions and user experience personalisation.
- "KYC"
- Know Your Customer — the identity and age verification process required before mpltoto activates full account functionality, processes withdrawals or confirms eligibility.
3. Data We Collect
mpltoto collects personal data only to the extent necessary to provide its services, comply with applicable legal obligations, and protect the integrity of the platform. The categories of data we may collect include:
3.1 Registration and Identity Data
When you create an mpltoto account, we collect information such as your full legal name, date of birth, email address, username, password (stored in encrypted form), country of residence and, where required for KYC verification, a copy of a government-issued identity document (e.g., Malaysian MyKad or passport) and proof of address (e.g., utility bill or bank statement).
3.2 Financial and Payment Data
To facilitate MYR deposits and withdrawals, mpltoto collects transaction details including the payment method used, transaction amounts and timestamps. Payment methods available to Malaysian users include Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected bank accounts (Maybank, CIMB, Public Bank, Hong Leong), and selected cryptocurrency wallets (BTC, ETH, USDT, LTC). Full card or banking credentials are handled by our authorised payment processors and are not stored directly on mpltoto servers.
3.3 Usage and Behavioural Data
We automatically collect information about how you interact with the mpltoto platform, including pages visited, games accessed, session duration, bet history, bonus activity, click patterns and device or browser type. This data is used to improve platform performance and for responsible gaming monitoring purposes.
3.4 Technical and Device Data
mpltoto collects technical data including your IP address, browser type and version, operating system, device identifiers and time-zone settings. This information helps us detect fraudulent access, prevent multi-accounting and ensure platform security.
3.5 Communications Data
When you contact mpltoto support, submit feedback or interact with our team by email, we retain records of that correspondence, including the content of messages, timestamps and any supporting documentation you provide.
4. Data Processing
mpltoto processes personal data for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without obtaining fresh consent or a new legal basis:
- Account creation and management: To register, verify and maintain your mpltoto account, including identity and age confirmation under KYC requirements.
- Payment processing: To facilitate MYR deposits and withdrawals via your chosen Malaysian payment method, and to maintain accurate transaction records.
- Platform delivery: To provide access to casino games, sports betting markets, bonus offers and other mpltoto services.
- Security and fraud prevention: To detect, investigate and prevent fraudulent activity, multi-accounting, money laundering and other prohibited conduct.
- Responsible gaming: To monitor player activity, apply self-imposed limits, respond to self-exclusion requests and flag patterns potentially indicative of problem gambling.
- Legal and regulatory compliance: To meet obligations under applicable Malaysian and international law, including anti-money-laundering (AML) and counter-terrorism financing (CTF) requirements.
- Customer support: To respond to account queries, technical issues and complaints in English, aligned with Malaysia Standard Time service hours.
- Platform improvement: To analyse usage patterns and optimise the mpltoto user experience, including layout, performance and feature development.
No Data Sales
mpltoto does not sell, rent or trade your personal data to any third party for commercial or marketing purposes.
Transparent Use
Every processing purpose for your mpltoto data is clearly stated in this Policy — nothing is done with your information without a documented reason.
Legal Basis Only
mpltoto processes personal data only where a valid legal basis exists — including contractual necessity, legitimate interests or your consent.
Defined Retention
Data is retained only for as long as it is required for its stated purpose or by applicable law. Requests for erasure are handled promptly where permitted.
Your Rights Respected
Verified mpltoto account holders can request access to, correction of, or erasure of their personal data, subject to applicable legal obligations.
5. Legal Basis for Processing
mpltoto relies on one or more of the following legal bases when processing your personal data:
5.1 Contractual Necessity
Processing your registration, identity verification, payment transactions and account management data is necessary to fulfil the contract between you and mpltoto as defined in our Terms & Conditions.
5.2 Legitimate Interests
mpltoto may process certain technical, behavioural and security-related data where it is in our legitimate interests to do so — for example, to protect the platform against fraud, to improve service quality or to perform internal analytics — provided those interests are not overridden by your own rights and interests.
5.3 Legal Obligation
Certain data Processing activities, particularly those related to KYC identity verification, anti-money-laundering checks and transaction recordkeeping, are required by applicable law and cannot be waived regardless of consent.
5.4 Consent
Where mpltoto processes data on the basis of consent — for example, for certain promotional communications — you retain the right to withdraw that consent at any time by contacting mpltoto support. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
6. Data Sharing and Disclosure
mpltoto does not sell or rent your personal data. We may share data with third parties only in the following defined circumstances:
6.1 Payment Processors
To facilitate MYR transactions through approved Malaysian payment methods — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and major banks — mpltoto shares the minimum necessary transaction and identity data with authorised payment service providers. These processors are bound by their own data protection obligations.
6.2 Identity Verification Providers
Where KYC verification is required, mpltoto may share registration and identity document data with contracted verification service providers operating under strict confidentiality agreements.
6.3 Regulatory and Law Enforcement Authorities
mpltoto may be required by law to disclose User data to regulatory bodies, law enforcement agencies or courts of competent jurisdiction. Such disclosure is made only to the extent required by applicable legal or regulatory obligation and, where possible, only after appropriate legal review.
6.4 Technology and Infrastructure Partners
mpltoto uses third-party service providers for hosting, platform infrastructure, analytics and security services. Access to personal data by these providers is limited to what is technically necessary, and all such providers are bound by appropriate contractual data protection terms.
Note: mpltoto does not transfer your personal data to
jurisdictions without adequate data protection frameworks without implementing
appropriate contractual safeguards.
7. Data Retention
mpltoto retains personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following general retention principles apply:
- Account data: Retained for the duration of your active mpltoto account, plus a defined period following account closure to meet regulatory and audit requirements.
- Transaction and financial records: Retained for a minimum period as required under applicable financial record-keeping and AML regulations.
- KYC and identity documents: Retained in accordance with identity verification regulatory requirements, which may specify minimum retention periods.
- Customer support communications: Retained for a reasonable period following resolution of a query to enable quality review and dispute management.
- Technical and log data: Retained for a shorter operational period sufficient for security monitoring and fraud detection purposes.
Where data is no longer required and no legal obligation mandates its retention, mpltoto will securely delete or anonymise it in accordance with our internal data management procedures.
8. Cookies and Tracking Technologies
The mpltoto platform uses cookies and similar tracking technologies to enable core functionality, maintain session security and analyse platform usage. The following categories of cookies may be active on mpltoto:
| Category | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, fraud detection | Not required — essential for platform operation |
| Functional | Remembering language preference, display settings and responsible gaming self-limit configurations | May be required depending on jurisdiction |
| Analytical | Aggregated usage statistics, page performance, feature engagement tracking to improve mpltoto services | Yes — consent requested on first visit |
| Security | Detecting unusual login patterns, preventing automated access and monitoring for prohibited account activity | Not required — essential security function |
Most browsers provide settings to manage or restrict cookies. Blocking strictly necessary cookies may impair the mpltoto login process and core platform functions. For more information on cookie management, please refer to your browser's help documentation.
9. Data Security
mpltoto implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction or disclosure. These measures include, but are not limited to:
- Encryption of passwords and sensitive account credentials at rest.
- Secure transmission protocols for data exchanged between your device and the mpltoto platform.
- Access controls ensuring that staff can access personal data only where necessary for their defined role.
- Session monitoring and automated anomaly detection to identify and respond to suspicious account activity.
- Regular internal review of data handling practices and security configurations.
Your responsibility: You play an important role in keeping your
mpltoto account secure. Use a strong, unique password, do not share your login
credentials with anyone, and contact mpltoto support immediately if you suspect
your account has been accessed without your authorisation.
While mpltoto takes data security seriously, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a significant risk to affected Users, mpltoto will notify impacted individuals in a timely manner consistent with applicable legal obligations.
10. User Rights
Verified mpltoto account holders have the following rights in relation to their personal data. Requests are subject to identity verification and may be subject to applicable legal limitations:
Right of Access
Request a copy of the personal data mpltoto holds about you.
Right of Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data where no legal obligation requires its retention.
Right to Restriction
Request that mpltoto restricts processing of your data while a dispute is resolved.
Data Portability
Receive your personal data in a structured, commonly used format where technically feasible.
Right to Object
Object to processing of your data based on legitimate interests where your rights override those interests.
To exercise any of these rights, please contact mpltoto using the details provided in Section 14 of this Policy. We will acknowledge your request promptly and respond within a reasonable timeframe. Some requests may require identity verification before action can be taken.
11. Protection of Minors
The mpltoto platform is strictly for adults aged 21 years and above. mpltoto does not knowingly collect personal data from individuals under the age of 21. Our KYC verification process is designed to confirm that all registered Users meet this age requirement before full account access is granted.
If mpltoto becomes aware that personal data has been collected from a User who is under the age of 21, we will take immediate steps to close the associated Account and delete the data in question. Any balances held on such an Account may be subject to forfeiture in accordance with our Terms & Conditions.
⚠️ For players aged 21 and above only. If you are a parent
or guardian and believe a minor has registered on mpltoto, please contact
us immediately at the email address listed in Section 14.
12. Third-Party Links and Services
The mpltoto platform may reference third-party services — such as payment providers, banking institutions or e-wallet platforms — in an informational context. mpltoto does not control the privacy practices of any third-party website or service and is not responsible for the content or data handling of external platforms.
Where a User navigates away from the mpltoto platform to a third-party website, that User's data interactions with those external services are governed solely by the third party's own privacy policy. mpltoto encourages Users to review the privacy notices of any external service they access in connection with payment or account activity.
13. Policy Amendments
mpltoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, applicable law or platform features. Where amendments are material, we will endeavour to notify registered Users through the platform — for example, by updating the "Last updated" date displayed at the top of this page or through an on-screen notification at next login.
Continued use of the mpltoto platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may request Account closure by contacting mpltoto support.
14. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by mpltoto, please contact our support team using the details below. The email address is provided as plain text only and is not a clickable link.
mpltoto Data and Privacy Enquiries
Website email: [email protected]
Language of correspondence: English
Response hours: Malaysia Standard Time (MYT, UTC+8)
Subject line recommended: "Privacy Request – [Your Account Username]"
Website email: [email protected]
Language of correspondence: English
Response hours: Malaysia Standard Time (MYT, UTC+8)
Subject line recommended: "Privacy Request – [Your Account Username]"
You may also find additional guidance in our Terms & Conditions, Responsible Gambling page and FAQ.