YesToto is committed to protecting your personal information to the highest security standards. This document clearly explains what data we collect, how it is used, and your rights as a user.
More than just a legal document — this is yestoto's genuine commitment to managing the personal data of Malaysian users.
All data transmitted between your device and yestoto's servers is protected by 256-bit SSL encryption — the same technology used by leading banking institutions in Malaysia.
YesToto has never and will never sell users' personal data to third parties for marketing or any other commercial purpose.
We only collect data that is strictly necessary to operate and comply with legal requirements. No excess data is collected just to "play it safe".
You can always find out what data we hold about you. This Privacy Policy is written in plain language, not confusing legal jargon.
You have the right to access, correct, or request deletion of your personal data at any time through yestoto customer support — no unnecessary questions asked.
Yestoto's data management practices comply with Malaysia's Personal Data Protection Act (PDPA) requirements and internationally recognised privacy standards.
Quick Summary: YesToto collects only the data necessary to operate the platform, protects it with best-in-class encryption, never sells it to anyone, and gives you full control to access or delete it whenever you choose.
YesToto collects several categories of information to enable the platform to operate securely and deliver the best experience to users. The following are the types of data collected:
| Data Category | Example | Required? |
|---|---|---|
| Identity | Name, IC, Date of Birth | Required |
| Contact | Email, Phone | Required |
| Financial | Bank Account, Digital Wallet | Required (Withdrawal) |
| Technical | IP, Device, Session | Auto-collected |
| Activity | Game Logs, Transactions | Auto-collected |
Every piece of data collected by yestoto has a clear and specific purpose. We do not use your data for any purpose not stated here:
If you gave consent during registration, we may also use your email or phone number to send you promotional information and yestoto offers that may be relevant to you. You can opt out of these marketing communications at any time.
YesToto does not sell, rent, or trade users' personal data to any third party. However, in certain limited situations, data may be shared with the following parties:
Technical service providers that support platform operations — such as server hosting providers, payment processors, and identity verification service providers — may have limited access to user data solely to perform their functions. All such service providers are bound by strict confidentiality agreements.
YesToto will disclose user data to the relevant authorities where required by law, court order, or official request from a relevant government agency. This includes investigations into financial crime, money laundering, or public security threats.
Third-party game providers operating within the yestoto platform may receive limited session data to ensure games function correctly. This data does not include users' full personal information.
In all data sharing situations, yestoto ensures that receiving parties maintain data protection standards equal to or higher than our own.
User data security is an investment we take very seriously. Here are the security layers protecting your data at yestoto:
In the event of any security breach involving user data, yestoto is committed to notifying affected users within 72 hours of detection, in line with industry best practices.
YesToto uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. Cookies are small text files stored on your device while you browse the platform.
You can manage cookie settings through your browser. However, disabling essential cookies may affect platform functionality. We do not use cookies to track your activity on other websites.
As an online platform, yestoto's infrastructure may involve servers located across multiple geographical regions. Where data needs to be transferred across national borders, yestoto ensures the following protections are in place:
YesToto retains users' personal data only for as long as it is needed for the stated purposes or as required by law:
You can request deletion of your data by contacting yestoto customer support. Requests will be processed within 30 days, subject to applicable legal retention requirements.
Under Malaysia's PDPA and yestoto's privacy policy, you have the following rights regarding your personal data:
To exercise any of the above rights, contact the yestoto customer support team through the available channels within the platform. All requests will be processed within 30 business days of receipt.
The yestoto platform is strictly for users aged 18 and above. We do not knowingly collect, store, or process any personal data belonging to individuals under the age of 18.
If we determine that a child's personal data has been collected without proper age verification, we will take immediate action to delete that data and close the associated account. Parents or guardians who suspect their child has registered an account on the yestoto platform are encouraged to contact our customer support team immediately.
YesToto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features.
When there are material changes to this policy, we will:
Continued use of the yestoto platform after changes take effect is considered acceptance of the updated policy. We encourage you to review this page periodically to stay informed.
For any enquiries regarding this Privacy Policy or to exercise your privacy rights, please contact the yestoto support team via the live support channels within the platform. We will always respond to privacy enquiries within 2 business days.
We believe users should understand their rights. Here are the 6 rights you have under yestoto's privacy policy.
You can request a complete copy of all personal data yestoto holds about you at any time. Requests are processed within 30 business days.
If any information in your account is inaccurate, you have the right to request an immediate correction. Contact support with the required proof.
You can request deletion of your personal data upon account closure, subject to applicable legal retention requirements.
You can opt out of marketing emails or notifications from yestoto at any time without affecting your account access.
In certain situations, you can request a restriction on how yestoto processes your data while your inquiry or objection is being resolved.
In the event of a data breach involving your information, yestoto is committed to notifying you within 72 hours of detection.
Register a yestoto account with confidence — your privacy is protected with bank-grade encryption and a fully transparent policy.