Mesirtoto Privacy Policy for Malaysian Players

1. Introduction and Scope

This Privacy Policy applies to personal information processed by mesirtoto through the website, player accounts, casino and sportsbook services, payment facilities and customer support. It covers visitors and registered players in Malaysia, including users accessing mesirtoto from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other Malaysian locations.

By using mesirtoto, you acknowledge that personal data may be processed as described here. Certain processing is necessary to provide requested services or comply with security and legal obligations. Where consent is the appropriate basis, mesirtoto will seek it through a clear notice or account setting.

2. Data Controller and Privacy Responsibilities

Mesirtoto determines why and how personal data is processed for account administration, gameplay, payments, security and support. Internal access is limited according to job responsibilities. Employees and approved contractors who handle player information are expected to follow confidentiality and security requirements.

This Privacy Policy is guided by recognised privacy principles, including transparency, proportionality, data accuracy, secure handling and limited retention. Mesirtoto reviews its processing arrangements as services, payment methods and security risks change.

3. Personal Information We Collect

Depending on how you use mesirtoto, the following categories may be collected:

• Identity data: full name, date of birth, nationality and information shown on a MyKad, passport or other approved identity document.
• Contact data: email address, mobile number, residential address and communication preferences.
• Account data: username, encrypted password records, account status, verification level, login history and security settings.
• Financial data: deposit and withdrawal records, masked bank or e-wallet details, transaction references and payment ownership evidence.
• Gameplay data: casino rounds, live dealer participation, sports bets, EPL or Liga Super Malaysia market selections, wins, losses and bonus use.
• Technical data: internet protocol address, browser type, device identifiers, operating system, approximate location, language and diagnostic logs.
• Support data: live-chat transcripts, complaint details, uploaded evidence and notes required to resolve an enquiry.
• Responsible gambling data: limits, cooling-off requests, self-exclusion status and risk-related interactions.

4. Sources of Personal Data

Most information is supplied directly when a player registers, completes KYC, deposits funds, requests a withdrawal or contacts mesirtoto. Other data is created automatically as the player uses the website, such as login logs, device records, game history and transaction timestamps.

Mesirtoto may also receive limited information from payment providers, identity-verification services, game suppliers, fraud-prevention tools and banks. For example, a Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost or GrabPay transaction may provide a status, reference number and account-holder confirmation. Mesirtoto does not require a provider to disclose more information than is reasonably necessary for the relevant transaction.

5. Purposes of Data Processing

Mesirtoto processes personal data for the following purposes:

• Creating, administering and securing a player account;
• Confirming that a player is aged 21 or above;
• Performing KYC, payment ownership and source-of-funds checks;
• Processing deposits, withdrawals, refunds and payment investigations;
• Recording casino rounds, sports bets, bonuses and settlement results;
• Detecting fraud, collusion, duplicate accounts, chargeback abuse and technical misuse;
• Providing account support and resolving complaints;
• Operating responsible gambling controls, including deposit limits and self-exclusion;
• Improving website stability, mobile performance and service design; and
• Meeting applicable record-keeping, security and lawful disclosure obligations.

Mesirtoto seeks to use only information proportionate to each purpose. Data gathered for account security will not be repurposed incompatibly without a suitable basis or further notice.

6. Payment and Withdrawal Information

Mesirtoto supports payment methods commonly used by Malaysian players. When you deposit or withdraw in MYR through DuitNow, FPX, a Malaysian bank or an approved e-wallet, information is exchanged to authenticate the transaction, confirm ownership, prevent fraud and reconcile the account balance.

Mesirtoto generally records transaction references, amounts, dates, status and masked destination details rather than complete payment credentials. Payment providers process certain data under their own operational responsibilities. A withdrawal may require further verification where the recipient name differs from the mesirtoto account name, activity appears unusual or enhanced checks are necessary.

7. Cookies, Devices and Analytics

Cookies and similar technologies may be used to maintain login sessions, remember preferences, protect accounts, detect suspicious behaviour and understand website performance. Essential cookies support functions such as authentication and transaction security. Without them, parts of mesirtoto may not operate correctly.

Performance information may show how pages load across Malaysian mobile networks, which browser versions experience errors and how navigation can be improved. Mesirtoto seeks to use aggregated or pseudonymised information where individual identification is unnecessary. Browser controls may allow you to remove or block cookies, although doing so can affect account access and gameplay.

8. Data Sharing and Disclosure

Mesirtoto does not sell player personal data. Information may be disclosed to carefully selected recipients where necessary to deliver or protect the service. These recipients may include payment processors, Malaysian banking channels, identity-verification providers, hosting and security suppliers, casino game providers, sportsbook data services and professional advisers.

Mesirtoto may also disclose information where reasonably required to investigate fraud, enforce the Terms & Conditions, protect a player or another person, respond to a binding legal request, or establish and defend legal rights. Providers are expected to use information only for authorised purposes and apply suitable confidentiality and security controls.

9. International Data Processing

Some technical, payment or game-service providers may process data outside Malaysia. Where this occurs, mesirtoto takes reasonable steps to assess the provider, limit the transferred information and apply contractual or organisational safeguards appropriate to the nature of the data.

Different countries may have different privacy rules. International processing does not remove the internal obligations described in this Privacy Policy. Mesirtoto remains focused on maintaining appropriate protection when information is handled by an approved overseas service provider.

10. Data Retention

Mesirtoto retains personal data only for as long as reasonably necessary for the purpose for which it was collected, including account operation, transaction reconciliation, security reviews, dispute handling and applicable record-keeping. Retention periods vary by category and risk.

Account and financial records may need to remain available after closure to address chargebacks, fraud investigations or unresolved complaints. Self-exclusion information may also be retained so that mesirtoto can recognise and enforce a restriction. When information is no longer required, it may be securely deleted, anonymised or isolated from routine use.

11. Information Security

Mesirtoto uses layered safeguards designed to protect personal information. Measures may include encryption in transit, access restrictions, authentication controls, system monitoring, backups, vulnerability management and staff confidentiality procedures. Payment and identity records receive controls appropriate to their sensitivity.

No internet service can guarantee absolute security. Players also have an important role: use a unique password, enable available account protections, secure the mobile device used for Touch 'n Go eWallet or banking, and sign out after using a shared device. Suspected unauthorised access should be reported to mesirtoto immediately through on-site support.

12. Your Privacy Rights

Subject to identity verification, applicable rules and legitimate retention requirements, you may contact mesirtoto to exercise relevant privacy rights. A request should clearly explain what you need so the support team can locate the appropriate records.

Mesirtoto may request proof of identity before acting on a privacy request. This protects account records from unauthorised disclosure. A request may be limited where compliance would reveal another person's data, undermine fraud prevention or conflict with a lawful retention obligation.

13. Marketing and Communication Preferences

Where permitted, mesirtoto may send information about account features, bonuses, live casino events or sports markets that may interest eligible players. Marketing preferences can be changed by contacting support. Withdrawing a marketing preference does not prevent essential messages concerning KYC, login security, deposits, withdrawals or changes to this Privacy Policy.

Mesirtoto does not intentionally direct gambling promotions to minors or self-excluded players. Account status and responsible gambling controls may therefore be used to suppress unsuitable communications.

14. Age Restriction and Vulnerable Persons

Mesirtoto services are for persons aged 21 and above only. The platform does not knowingly create accounts for children or intentionally collect their information for gambling purposes. Age verification may involve checking identity documents and account details.

If mesirtoto learns that a person below the required age has supplied personal data, the account may be restricted while the matter is investigated. Information may be retained where required to prevent repeat registration, protect funds or address legal and security obligations.

15. Changes to This Privacy Policy

Mesirtoto may update this Privacy Policy when services, payment methods, technology, security practices or legal requirements change. Material revisions may be highlighted on the website or communicated through an account notice.

The effective date at the top of this page identifies the current version. Players should review the mesirtoto Privacy Policy periodically. Continued platform use after an update means the revised notice will govern subsequent processing, subject to any consent requirement that may apply.

16. Contact Us

Privacy questions, correction requests and concerns about personal data may be submitted through mesirtoto on-site support. To help the team respond efficiently, provide your username, a clear description of the request and enough information to verify that you control the relevant account.

The support email is displayed as plain text: [email protected]. Do not send passwords, one-time codes, complete banking credentials or unnecessary identity documents by email. For sensitive matters, use the secure on-site support process.

Mesirtoto will review each request in light of account security, applicable privacy principles and operational obligations. This Privacy Policy should be read together with the Terms & Conditions and Responsible Gambling information.