Gadaitoto takes the privacy of every player seriously. This Privacy Policy explains in plain, precise terms exactly what personal data we collect, why we collect it, how it is used and protected, and what rights you hold as a user of our platform. We encourage you to read it carefully.
Privacy is not a checkbox exercise at Gadaitoto — it is an operational standard. The six principles below summarise our approach before you read the full legal text.
We only collect personal information that is genuinely necessary for the operation of your account, the processing of transactions, and our compliance obligations. We do not collect data speculatively.
All personal data is stored in encrypted form using industry-standard protocols. Data at rest and in transit is protected using 256-bit SSL encryption and access-controlled infrastructure.
Gadaitoto does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes under any circumstances.
You have the right to access, correct, restrict processing of, and request deletion of your personal data. These are genuine exercisable rights — not just listed for compliance cosmetics.
This policy explains every category of data we collect and every purpose for which it is used. We do not engage in undisclosed data processing activities.
Personal data is retained only for as long as necessary for the stated purpose or as required by applicable law. Data that is no longer needed is securely deleted or anonymised.
This Privacy Policy ("Policy") describes how Gadaitoto ("we", "us", "our", "the Operator", "the Platform") collects, uses, stores, discloses, and protects personal information relating to users ("you", "User", "Player") of the website at gadaitoto.cam and all associated services.
Gadaitoto operates as an online casino and sports betting platform serving players across Malaysia, including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other regions. This Policy applies to all personal data processed in connection with our Service, regardless of the device or method of access.
By registering an account, accessing the Service, or continuing to use the Platform after any update to this Policy, you acknowledge that you have read and understood this Privacy Policy in full. If you do not agree with any part of this Policy, you should cease use of the Service immediately.
Gadaitoto collects the following categories of personal data in the course of providing the Service:
| Category | Examples | Collected When |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, MyKad/IC number, passport number | Account registration & KYC verification |
| Contact Data | Email address, phone number, residential address | Account registration & KYC verification |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), FPX/DuitNow transaction references, deposit and withdrawal history | Deposit and withdrawal processing |
| Account Data | Username, account balance, betting history, game session logs, bonus activity | Ongoing account use |
| Technical Data | IP address, device type, browser type and version, operating system, time zone, session data | Platform access (automatic) |
| Usage Data | Pages visited, features used, game preferences, click behaviour, session duration | Platform interaction (automatic) |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer support interactions |
| Document Data | Copies of identity documents, utility bills, selfie photographs submitted for KYC | KYC verification |
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health data unless specifically required for responsible gambling compliance purposes (e.g., self-exclusion records) and with your explicit consent.
Gadaitoto collects personal data through the following means:
Gadaitoto processes your personal data for the following purposes:
Gadaitoto processes personal data on the following legal bases:
Gadaitoto does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. We may share your data in the following limited circumstances:
We engage third-party service providers who process personal data on our behalf as Data Processors under binding data processing agreements. These include payment processors, KYC and identity verification providers, cloud infrastructure providers, anti-fraud and AML screening services, and customer support platform providers. All such providers are contractually required to process data only on our instructions and to maintain appropriate security standards.
We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, or where such disclosure is necessary to protect the rights, property, or safety of the Operator, its users, or the public.
In the event of a merger, acquisition, sale of assets, or restructuring of the Operator's business, personal data held by the Operator may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Policy that result from it.
When you deposit or withdraw funds via Malaysian payment methods — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online Banking, and Hong Leong Connect — financial transaction data is processed by the relevant payment service provider acting as a regulated Data Processor.
Gadaitoto does not store full bank account numbers or payment card details on its own servers. Financial identifiers (such as partial account references or e-wallet IDs) are retained only for the purposes of transaction reconciliation, fraud prevention, and withdrawal routing.
All financial data associated with your Gadaitoto account is denominated in Malaysian Ringgit (MYR). Transaction records are retained for the period required by applicable financial regulation.
Gadaitoto uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website.
You may manage or disable cookies through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. Where required by law, your consent is obtained before non-essential cookies are set.
Gadaitoto retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Legal obligation / AML compliance |
| KYC Documents | Duration of account + 5 years post-closure | Legal obligation |
| Financial & Transaction Data | 7 years from date of transaction | Financial regulatory requirement |
| Support Communications | 3 years from last interaction | Legitimate interests |
| Technical & Usage Data | 13 months from collection | Legitimate interests |
| Marketing Consent Records | Until consent withdrawn + 1 year | Proof of consent |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.
Gadaitoto implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
As a data subject, you hold the following rights with respect to the personal data Gadaitoto processes about you. These rights are genuine and exercisable — click each to expand details.
Gadaitoto is strictly an adult platform. The minimum age to register and use the Service is 21 years old. The Platform does not knowingly collect personal data from individuals under the age of 21.
If we become aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has provided us with personal data, please contact us immediately.
Age verification is conducted as part of the standard KYC process for all accounts. Any account that cannot satisfy the 21+ age requirement will not be permitted to deposit, wager, or withdraw funds.
In the course of providing the Service, personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, the Operator ensures that appropriate safeguards are in place to protect personal data to a standard equivalent to that provided under applicable Malaysian data protection legislation, including:
By using the Gadaitoto Service, you acknowledge that your data may be processed outside of Malaysia subject to the safeguards described in this section.
Gadaitoto reserves the right to update or revise this Privacy Policy at any time. Where a change is material, the Operator will notify users by publishing the updated Policy on this page with a revised "Last Updated" date. For significant changes, we may also provide additional notice through in-platform notifications or email where appropriate.
Your continued use of the Service following the publication of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed of how we protect your data.
For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact the Gadaitoto Data Privacy team through the following channels:
We aim to respond to all privacy-related enquiries within 5 business days, and to formal data rights requests within the applicable statutory period of 30 days.
Gadaitoto is built on trust — secure payments in MYR, transparent data practices, and a platform that puts Malaysian players first. Come see what over 850,000 players already know.