How natunatoto Protects Your Personal Information

2 Information We Collect

The categories collected by natunatoto depend on how you use the platform. Account information may include your full name, date of birth, residential address, nationality, email address, mobile number, username and account security settings. Players must ensure that submitted details are accurate and kept current.

Identity and verification information may include an image of your MyKad or another accepted identity document, proof of address, a verification photograph and information needed to confirm that you are aged 21 or above. natunatoto may also record the status and outcome of KYC, anti-fraud and account-security reviews.

Financial information may include deposit and withdrawal amounts, transaction dates, masked payment identifiers, bank or e-wallet provider details and the payment channel selected. This may involve Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay or another available method. natunatoto does not require players to publish sensitive payment information on public areas of the platform.

Gaming records may include wagers, wins, losses, bonus activity, game preferences, sports selections, live football activity and account balance history in MYR. Technical information may include IP address, browser type, device details, operating system, language settings, login timestamps and security events.

3 How Information Is Collected

natunatoto receives information directly when you register, verify your identity, deposit or withdraw funds, claim a promotion, set responsible gambling limits, communicate with support or update your account. Communications may be retained when necessary to resolve enquiries, document player instructions or protect both the player and natunatoto.

Some information is collected automatically when you use the platform. Server logs and similar technologies may record page activity, session duration, device configuration and security indicators. natunatoto may also receive limited information from payment processors, identity-verification services, game suppliers and fraud-prevention providers where required to deliver or secure the service.

4 How We Use Personal Information

natunatoto may process personal information for the following purposes:

• Creating, authenticating and maintaining your player account;
• Confirming identity, age, payment ownership and account eligibility;
• Processing MYR deposits, withdrawals, refunds and account adjustments;
• Providing slots, live casino, lottery, arcade, live football and sports betting services;
• Administering bonuses, cashback, VIP tiers and other promotions;
• Detecting duplicate accounts, payment abuse, collusion, fraud and suspicious activity;
• Applying deposit limits, self-exclusion instructions and other responsible gambling controls;
• Answering questions, investigating complaints and resolving transaction disputes;
• Maintaining platform performance, security and service availability;
• Meeting record-keeping, legal and regulatory obligations that apply to natunatoto.

natunatoto does not sell personal information. We do not use KYC documents for unrelated advertising. Where data is used to personalise a promotion, the activity is based on account history, eligible preferences and the need to avoid sending unsuitable promotions to self-excluded players.

5 KYC, Payments and Security Reviews

Identity checks help natunatoto prevent underage access, protect withdrawals and reduce fraudulent use of Malaysian banking and e-wallet channels. A withdrawal may be paused while natunatoto verifies identity, confirms the source or ownership of a payment method, or reviews unusual transaction patterns.

KYC documents are handled as restricted information. They may be reviewed by authorised natunatoto personnel or an approved verification provider acting for a defined purpose. A verification request does not mean that wrongdoing has occurred; checks may be routine or triggered by transaction value, account changes or security risk.

6 Cookies and Device Information

Cookies are small files stored on a browser or device. natunatoto may use essential cookies to maintain login sessions, remember security choices, support navigation and prevent unauthorised account access. These cookies are required for core platform functions.

Functional and performance technologies may help natunatoto understand page reliability, loading speed, device compatibility and general platform usage. Information may be aggregated so that trends can be reviewed without focusing on a specific player. You may adjust browser controls to restrict optional cookies, although blocking essential cookies can affect login, account security and game availability.

7 When Information May Be Shared

natunatoto may share limited personal information with carefully selected service providers when this is necessary to operate the platform. Categories may include payment processors, banks, e-wallet providers, identity-verification services, hosting and security providers, customer-support systems, game technology providers and professional advisers.

Each recipient should receive only the information reasonably needed for its assigned function. natunatoto may also disclose information when required by a valid legal request, to investigate suspected fraud, to protect players, to enforce the Terms & Conditions, or to defend legitimate legal interests.

If the ownership or operation of natunatoto changes through a restructuring, merger or transfer, relevant records may be transferred as part of that process, subject to appropriate confidentiality and security arrangements.

8 International Data Processing

The online gaming services used by natunatoto may involve infrastructure or service providers located outside Malaysia. As a result, personal information may be processed in another jurisdiction where data protection rules differ from those in Malaysia.

When international processing is necessary, natunatoto takes reasonable steps to use providers with appropriate confidentiality, security and data-handling commitments. Cross-border access is limited to legitimate operational, payment, support, security or compliance purposes.

9 Information Security

natunatoto applies technical and organisational safeguards designed to protect information against accidental loss, unauthorised disclosure, misuse, alteration and destruction. Measures may include encrypted transmission, access controls, credential protection, activity monitoring, restricted document access and staff confidentiality requirements.

No online system can guarantee absolute security. Players also play an important role by using a unique password, protecting their registered mobile device, signing out on shared devices and reporting suspicious activity promptly. natunatoto may temporarily restrict an account where access appears unusual or compromised.

10 Data Retention

natunatoto retains personal information for the period reasonably required to operate an active account and to fulfil the purposes explained in this policy. Certain records may be kept after closure to handle disputes, enforce self-exclusion, prevent duplicate or fraudulent registrations, maintain transaction evidence and meet applicable record-keeping obligations.

Retention periods vary according to data type, risk and purpose. When information is no longer required, natunatoto may securely delete it, anonymise it or isolate it from routine operational access. A deletion request may therefore be limited where keeping specific records is necessary for security, responsible gambling, legal claims or compliance.

11 Your Privacy Rights

Subject to identity verification and applicable limitations, players may ask natunatoto to explain whether personal information is being processed, provide access to certain records, correct inaccurate details, restrict selected processing or delete information that is no longer required.

To protect the account, natunatoto may ask for information confirming the identity of the person making a request. We will not disclose private account information to an unverified third party. If a request is unusually broad, repetitive or conflicts with a legitimate retention obligation, natunatoto may limit or decline it and explain the relevant reason where appropriate.

12 Marketing and Promotional Preferences

natunatoto may use registered contact details to provide information about eligible bonuses, game updates, sports events such as the EPL or Liga Super Malaysia, VIP rewards and account offers. Promotional communication may reflect account activity and stated preferences.

Players may request that optional promotional communication stop. This choice does not prevent natunatoto from sending essential messages about security, verification, transactions, policy updates, responsible gambling controls or service interruptions. Marketing preferences do not override a self-exclusion instruction; promotional contact should be restricted during an active exclusion period.

13 Age Restriction and Vulnerable Players

natunatoto is strictly intended for persons aged 21 and above. We do not knowingly permit minors to register, deposit, wager or claim promotions. Age and identity checks may be completed before withdrawals and may be repeated where account information changes or a risk indicator appears.

If natunatoto identifies an account operated by a person under 21, access may be suspended while the matter is investigated. Parents and guardians should use device controls, keep payment credentials secure and avoid sharing account passwords. Responsible play guidance and self-exclusion information are available on the Responsible Gambling page.

14 Changes to This Privacy Policy

natunatoto may revise this Privacy Policy to reflect platform changes, new security measures, updated processing practices or applicable legal requirements. The latest version will be published on this page with an updated review date.

Where a change materially affects how personal information is used, natunatoto may provide an additional account notice or other appropriate communication. Continued use of the platform after an update means the revised policy will apply to subsequent processing, subject to any consent that must be obtained separately.

15 Contact Us

Questions about this Privacy Policy, account information or a privacy request may be directed to the natunatoto support team. Please provide enough detail for us to identify the issue, but do not include your password or one-time banking security code.

• Email: [email protected]
• Support availability: 24 hours a day, 7 days a week
• Service coverage: Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other Malaysian locations

The email address above is displayed as plain text for your security. natunatoto may need to verify your identity before discussing account-specific information or completing a request involving access, correction or deletion.