Privacy Policy

This Privacy Policy ("Policy") describes how Rudaltoto ("we", "us", "our", or the "Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or the "Player") who access or use any service available at rudaltoto.cam and its associated subdomains.

Rudaltoto is committed to processing personal data in a manner that is transparent, lawful, and respectful of individual privacy rights. This Policy is intended to give you a clear understanding of how your information is handled and the choices available to you.

By creating an account on the Rudaltoto platform or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform.

The following terms carry specific meanings throughout this Policy:

Rudaltoto collects personal data that falls into the following categories, depending on how you use the Platform:

3.1 Registration Data

When you create a Rudaltoto account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth (for age verification — 21+ only)
• Email address
• Mobile phone number
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Preferred username

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and anti-money laundering requirements, we collect the following identity documents when processing your KYC verification:

• Government-issued photo identification (Malaysian National Identification Card — MyKad, or Passport)
• Proof of address (utility bill, bank statement, or equivalent document)
• Proof of payment method ownership where required
• Selfie or facial verification photograph in certain circumstances

3.3 Financial & Transaction Data

We collect and record details of all financial transactions conducted on the Platform, including:

• Deposit and withdrawal transaction records (amounts, timestamps, payment methods)
• Payment method identifiers (e-wallet account numbers, partial bank account numbers, cryptocurrency wallet addresses)
• Currency (Malaysian Ringgit / MYR and cryptocurrency equivalents where applicable)
• Bonus credits, wagering activity, and win/loss records

3.4 Betting & Gameplay Data

Records of your betting and gaming activity on the Platform, including sports bets placed (including Liga Super Malaysia, EPL, and other markets), casino game sessions, bet stakes, outcomes, and session durations.

3.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical information, including:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and duration
• Pages visited, links clicked, and navigation patterns
• Error logs and performance data

3.6 Customer Support Communications

Records of communications between you and our support team, including live chat transcripts, email correspondence, and any information you provide in the course of raising a query or complaint.

Rudaltoto collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotional offer.
• Automatically — through cookies, web beacons, log files, and similar technologies when you access the Platform via browser or mobile device.
• From third-party verification providers — identity and age verification services used in the KYC process may provide enriched data to confirm the information you submit.
• From payment processors — transaction confirmation data provided by Malaysian payment rails including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency processing services.
• From fraud prevention and analytics partners — data from fraud detection systems used to protect the Platform and its players.

Rudaltoto processes your personal data for the following specific purposes:

Rudaltoto processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and Rudaltoto — including account management, payment processing, and provision of betting and casino services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations under our international licensing framework.
• Legitimate interests: Processing carried out for the legitimate interests of Rudaltoto that do not override your privacy rights, including fraud prevention, security monitoring, and Platform analytics.
• Consent: Processing for purposes where you have given explicit, informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time by contacting support or using available opt-out mechanisms.

Rudaltoto does not sell or trade your personal data. We share personal data only in the following limited and controlled circumstances:

7.1 Service Providers (Data Processors)

We share personal data with carefully selected third-party service providers who process data on our behalf under contractual data processing agreements. These include identity verification providers, payment processors (including those operating the Malaysian DuitNow, FPX, and e-wallet rails), cloud hosting providers, fraud detection services, and customer support platform operators. These parties are contractually prohibited from using your data for any purpose other than the specific service they provide to Rudaltoto.

7.2 Regulatory and Legal Authorities

We may disclose personal data to our licensing authority, law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required or permitted to do so — for example, in connection with a lawful request, court order, or our obligations under anti-money laundering regulations.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving Rudaltoto, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and ensure that equivalent data protection standards are maintained.

7.4 Safety and Fraud Prevention

We may share data with other licensed gambling operators or industry fraud prevention networks where necessary to detect and prevent fraudulent activity, bonus abuse, or money laundering across the industry. Such sharing is subject to strict data minimisation principles.

As an internationally licensed platform, Rudaltoto's operations and those of our service providers may involve the transfer of personal data outside of Malaysia and the Asia-Pacific region. Where such transfers occur, Rudaltoto ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards for international transfers may include: standard contractual clauses approved by relevant regulatory authorities; adequacy decisions recognising the recipient country's data protection standards; or binding corporate rules where applicable within a corporate group.

If you would like further information about the international transfer safeguards applicable to your personal data, please contact us at [email protected].

Rudaltoto retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account and KYC records: Retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering regulations applicable to our licensing framework.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, or longer where an ongoing dispute or legal matter requires retention.
• Marketing preferences and communications: Retained until you opt out of marketing communications, at which point marketing data is suppressed but not necessarily deleted to maintain opt-out records.
• Technical and device data (logs): Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual.

Rudaltoto uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your login session, and gather usage analytics to improve the player experience.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings, game display preferences, and notification opt-outs.
• Analytics Cookies: Used to collect aggregated and anonymised data about how players use the Platform, enabling us to identify areas for improvement. These do not identify you personally.
• Marketing Cookies: Where you have provided consent, used to deliver personalised promotional content and measure the effectiveness of marketing campaigns. These can be disabled through your browser settings or by contacting our support team.

10.2 Managing Cookies

You may control non-essential cookie categories through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform — in particular, disabling session cookies will prevent you from remaining logged in. Most modern browsers allow you to block or delete cookies through the browser's privacy settings menu.

Subject to applicable data protection law and certain regulatory exceptions (such as our obligation to retain AML/KYC records), you have the following rights with respect to your personal data held by Rudaltoto:

• Right of Access: You have the right to request a copy of the personal data we hold about you, free of charge in most circumstances.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you have the right to request that we delete your personal data. This right does not apply where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while an accuracy dispute is resolved.
• Right to Data Portability: Where processing is based on your consent or performed by automated means, you have the right to receive a structured, machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our ability to demonstrate compelling grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days. We may need to verify your identity before processing your request.

The Rudaltoto Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21.

If Rudaltoto becomes aware that personal data has been collected from a person under 21 years of age, that account will be suspended immediately, the data will be securely deleted, and any funds held in that account will be handled in accordance with our minor account procedure.

Rudaltoto implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security framework includes:

• Encryption: All data transmitted to and from the Platform is encrypted using TLS 1.3. Personal data stored on our servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to authorised employees and contractors on a need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Penetration Testing: The Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response procedure, enabling rapid containment, investigation, and notification in the event of a security incident.
• Employee Training: All Rudaltoto employees with access to personal data receive regular data protection and security awareness training.

While Rudaltoto implements robust security measures, no internet-connected system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your login credentials and for ensuring your device and internet connection are adequately protected.

Rudaltoto reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform functionality. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Post a prominent notice on the Platform informing players of the change; and
• Where the changes significantly affect your rights, send a notification to the email address registered on your account.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to remain informed of how we handle your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Rudaltoto, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line for faster routing.
• Live Chat: Available 24/7 through the live chat widget on the Platform — average response under 2 minutes.

Our Data Protection team will acknowledge your enquiry within one (1) business day and provide a substantive response within thirty (30) calendar days, or sooner where required by applicable law.