Does suntoto sell my data to advertisers or other third parties?

No. Suntoto never sells, rents, or shares members' personal data with any third party for their own marketing purposes. Your data is only shared in very limited and necessary circumstances – such as with payment providers (Touch 'n Go eWallet, GrabPay, DuitNow, FPX) to process your transactions, or with Malaysian authorities when required by law. All third parties that receive member data are bound by strict confidentiality agreements and may only use it for the specific purpose for which it was shared.

How can I request a copy of my personal data from suntoto?

To request a copy of the personal data suntoto holds about you, contact our support team via live chat on the platform or send an email to support@suntoto.click with the subject line "Data Access Request". Please include your full name and the phone number registered to your account for identity verification. We will process your request and provide a copy of your data in a readable format within 30 business days of the request being confirmed. This service is provided free of charge.

How long does suntoto retain my data after I close my account?

Following account closure, suntoto retains your personal data for the period required under Malaysian law — specifically, financial transaction records are kept for a minimum of 7 years for compliance with the Anti-Money Laundering Act 2001 and related financial reporting requirements. Data not subject to any legal retention obligation will be deleted or anonymised within a shorter timeframe. Once all applicable retention periods have expired, your data will be securely deleted from all suntoto systems.

Does suntoto use my data to advertise to me on other websites?

Suntoto does not use member data to target you with advertising on other websites or social media platforms. Any marketing cookies suntoto uses are strictly limited to your experience within the suntoto platform itself — ensuring that the promotions and offers shown to you inside the platform are relevant to your gaming activity. If you wish to disable these marketing cookies, you can do so through the cookie settings in your web browser or mobile app without affecting the core functionality of your suntoto account.

What does suntoto do if a data breach involving my account occurs?

In the event of a security incident or data breach involving suntoto member information, we will take immediate action to contain the incident, assess the extent of the damage, and notify affected members within 72 hours — including details of the data that may have been compromised and the steps we are taking to resolve the situation. We will also report serious incidents to the relevant authorities as required under Malaysian law. Suntoto continually invests in cybersecurity to minimise the risk of such incidents occurring.

suntoto | Privacy Policy – Your Data, Protected and Respected

Contents

Data Collected
Purpose of Data Collection
Basis for Data Processing
Data Sharing
Data Security
Retention Period
Your Rights as a Member
Cookies & Tracking Technologies
Children's Data
Policy Amendments

This Privacy Policy document describes the personal data collection, use, storage, and disclosure practices of suntoto ("we", "Platform") when you ("Member") use the suntoto website, mobile app, or any suntoto services. This Policy applies to all registered members of suntoto Malaysia, including those using our football betting, lottery, jackpot slots, e-sports, badminton, and Live Casino services.

By registering as a suntoto member or continuing to use the platform after receiving notification of these policy updates, you confirm your acceptance of the practices described herein. If you disagree with any part of this policy, please contact our support team or discontinue your use of the platform.

Personal Data We Collect

Suntoto collects member personal data through two primary means — data you provide directly when interacting with our platform, and data collected automatically through your use of the platform.

Data you provide directly:

Data Type	Example	Mandatory
Identity Information	Full name, identity card number (if requested for verification)	Yes
Contact Information	Malaysian phone number, email address	Yes
Account Information	Username, password (stored in hashed form), game preferences	Yes
Financial Information	Payment methods (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, etc.), deposit and withdrawal transaction records	Yes
Optional Information	Language preference, notification settings, and self-set responsible gaming limits	Not required

Automatically collected data:

The IP address of your device when accessing the suntoto platform.
Device type, operating system, and web browser version used.
Usage log data – pages visited, time of visit, and actions taken within the platform.
General location data derived from IP address (state or city — not precise GPS location).
Cookie data and similar tracking technologies as described in Section 8.

Important Note: Suntoto does not collect biometric data, health data, religious data, or any other special-category sensitive data that is not required for platform operations. We only collect data that is strictly necessary to provide the services you request.

Purpose of Data Collection and Use

Suntoto uses the data collected for the following purposes, all of which are directly related to providing and improving the platform's services to Malaysian members:

Account Management: Creating, verifying, maintaining, and securing your suntoto account, including handling registration, identity verification, and account recovery.
Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as processing withdrawals of winnings to your bank account or e-wallet.
Service Provision: Giving you access to all suntoto games and services — Malaysian Super League and EPL football, lottery, jackpot slots, MPL e-sports, badminton, and Live Casino.
Security and Fraud Prevention: Identifying and preventing fraud, money laundering, bonus abuse, and any activity that violates suntoto's terms of use.
Service Communications: Sending you notifications related to transactions, account changes, policy updates, and important security information.
Personalised Promotions and Offers: To send you information about suntoto promotions, bonuses, and offers that may interest you – only if you have opted in to receive marketing communications.
Responsible Gaming: Monitoring usage patterns to identify members who may need support with managing their gaming habits, and to ensure responsible gaming limit tools are functioning correctly.
Legal Compliance: To comply with the legal and regulatory obligations applicable to suntoto's operations in Malaysia.

Opt Out of Marketing: You can opt out of marketing communications from suntoto at any time by updating your notification preferences in your account settings or by contacting our support team. This will not affect important transactional or security communications.

Legal Basis for Data Processing

Suntoto processes member personal data on valid legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). These bases are:

Consent: You have explicitly given your consent for data processing for specific purposes — such as marketing communications — during the registration process or through updates to your account preferences.
Contractual Agreement: Data processing is required to fulfil the service contract between you and suntoto — including processing deposit and withdrawal transactions, as well as providing access to games.
Legal Obligation: Suntoto is required by Malaysian law to process and retain certain data for compliance purposes, including anti-money laundering (AML) and financial reporting.
Legitimate Interests: Suntoto processes certain data on the basis of legitimate interests that do not override your fundamental interests or rights — such as processing log data for system security and fraud prevention purposes.

For any processing based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.

Data Sharing with Third Parties

Suntoto does not sell, rent, or share members' personal data with third parties for their own marketing purposes. However, there are limited circumstances where suntoto needs to share data with certain parties for legitimate operational purposes:

Payment Service Providers: Suntoto shares the necessary transaction data with e-wallet and banking providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank FPX, CIMB FPX) solely for the purpose of processing your deposits and withdrawals. These providers only receive the data required for each specific transaction and are bound by strict confidentiality agreements.
Security Technology Providers: Suntoto uses recognised third-party services for fraud detection and cybersecurity. These providers receive only the limited data necessary for security purposes.
Game Content Providers: Third-party game providers that partner with suntoto may receive the session data required to run their games within our platform. This data is technical game data and does not constitute sensitive personal information.
Law Enforcement Agencies: Suntoto will disclose data to Malaysian authorities when required by a court order, a valid investigative request, or any other applicable legal obligation.
Business Transfers: In the event of a merger, acquisition, or asset sale involving suntoto, member data may be transferred as part of the business assets – with appropriate prior notice given to members.

The suntoto Guarantee: All third parties that receive suntoto member data are bound by strict data processing agreements and are permitted to use that data solely for the specified purposes. Suntoto is responsible for ensuring these third parties uphold data protection standards equivalent to our own.

Data Security Measures

Suntoto continually invests in its security infrastructure to ensure the personal data of Malaysian members is protected at all times. The security measures we have in place include:

256-Bit SSL Encryption: All communications between your device and suntoto's servers are encrypted using Transport Layer Security (TLS) – making it virtually impossible for unauthorised parties to intercept or read.
Secure Password Storage: suntoto account passwords are never stored in plain text — they are processed using a strong one-way hashing algorithm and cannot be recovered, even by suntoto staff.
Strict Access Controls: Access to member data within the suntoto system is strictly limited on a need-to-know basis. All access is logged and audited on a regular basis.
24/7 Security Monitoring: suntoto's automated monitoring system operates around the clock to detect intrusion attempts, suspicious activity, and anomalies that may indicate a security threat.
Two-Factor Authentication (2FA): Suntoto offers 2FA via SMS to add an extra layer of protection to member accounts. We recommend that all members enable this feature.
Regular Security Testing: The suntoto platform undergoes regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.

While suntoto takes all reasonable measures to protect your data, no system can guarantee absolute 100% security. We encourage members to play their part by using strong passwords, enabling 2FA, and staying vigilant against phishing attempts that claim to represent suntoto.

Data Retention Period

Suntoto does not retain members' personal data for longer than is necessary for the stated purposes or as required by Malaysian law. The following are the retention period guidelines for key data categories:

Data Categories	Retention Period	Reason
Active Account Data	For as long as the account is active	Required for account operations
Financial Transaction Records	7 years minimum	Malaysian legal obligations (AML)
Betting History	3 years after the session	Dispute resolution and auditing
Support Communication Data	2 years after resolution	References and quality control
Marketing Data (with consent)	Until consent is withdrawn	Based on member consent
Closed Account Data	7 years after account closure	Legal obligations and fraud prevention

Once the applicable retention period has expired, data will be securely deleted or anonymised from all suntoto systems. Anonymised data (which can no longer be linked to any specific individual) may be retained for aggregate statistical analysis purposes.

Your Rights as a Suntoto Member

As a member suntoto whose personal data we process, you have the following rights under Malaysia's Personal Data Protection Act 2010 and suntoto's privacy policy:

Right of Access

You have the right to request a copy of the personal data suntoto holds about you. We will provide this copy within 30 days of the date of your request.

Right to Rectification

If the personal data suntoto holds about you is inaccurate or incomplete, you have the right to request a correction and we will update the record promptly.

Right to Erasure

You may request the deletion of your personal data under certain circumstances — for example, when the data is no longer needed for the purpose for which it was collected and there is no legal obligation to retain it.

Right to Restriction of Processing

In certain circumstances, you may request that suntoto restrict the processing of your data while any dispute regarding its accuracy or the legitimacy of the processing is being resolved.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for transfer to another service provider of your choice.

Right to Object to Processing

You have the right to object to the processing of your data for direct marketing purposes at any time, without providing any justification. We will cease processing for that purpose immediately.

How to Exercise Your Rights: To exercise any of the rights listed above, contact the suntoto support team via live chat on the platform or email support@suntoto.click. We will respond to your request within 30 business days. For complex requests or those involving a large volume of data, we will notify you if additional time is required.

Cookies and Tracking Technologies

Platform suntoto uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

Essential Cookies (Required): These cookies are essential for the basic functioning of the suntoto platform – including maintaining your login session, saving your language preferences, and ensuring session security. Without them, the platform will not work properly. These cookies cannot be disabled.
Performance Cookies: These cookies collect information about how you use the suntoto platform — the pages you visit most often, the time spent in each section, and any errors encountered. This data is used to improve the overall performance and user experience of our platform.
Functionality Cookies: These cookies remember your preferences on the suntoto platform — such as your favourite football markets (Liga Super Malaysia, EPL), display settings, and game preferences — so you don't have to reconfigure them every time you use the platform.
Marketing Cookies: These cookies are used to ensure that the suntoto promotions and offers you see are relevant to your interests and gaming activity. We only use these cookies if you have given your consent during registration or through your cookie settings.

You can manage and delete cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality and user experience of the suntoto platform. For more information on how to manage cookies in your web browser, refer to your browser's help documentation.

Child Data Protection

Platform suntoto is strictly limited to individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under the age of 18.

The suntoto registration process requires age verification — you must confirm that you are at least 18 years old to complete registration.
If suntoto discovers that personal data of anyone under the age of 18 has been collected inadvertently, we will promptly delete that data and close the account in question.
Parents or guardians who discover that their underage child has registered on suntoto are urged to contact our customer support immediately at support@suntoto.click so that prompt action can be taken.

To Parents and Guardians: We encourage you to use parental control software to restrict children's access to online betting sites, including suntoto. If you have any concerns about underage access, please contact our support team and we will assist you promptly.

Policy Amendments & How to Contact Us

Suntoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, service updates, or changes in Malaysian legal requirements. When we make material changes, we will:

Updating the "Last updated" date shown at the top of this page.
Sending notifications to members via their registered email or in-platform notifications at least 14 days before changes take effect, for changes that materially affect member rights.
Displaying a clear notice on the suntoto homepage when a significant policy amendment occurs.

Your continued use of the suntoto platform after any amendments take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before they come into effect.

For any enquiries, complaints, or requests relating to this Privacy Policy or suntoto's use of your personal data, please reach out to us through the following channels:

Privacy Email: support@suntoto.click – please include "Privacy Inquiry" in the subject line of your email for faster handling.
Live Chat: Available 24/7 on the suntoto platform or mobile app for instant responses.
WhatsApp: The number is available under the "Contact Us" section after logging in to your account.

Our team operates 24 hours a day, 7 days a week, and will respond to privacy-related inquiries within 72 hours. For data rights enforcement requests, we are committed to providing a full response within 30 days.

What You Need to Know About Privacy at Suntoto

When we talk about privacy in the context of online betting platforms, one concern is almost universal among Malaysian players: "Is my information safe? Will my data be sold?" At suntoto, the answer to both questions is clear — yes, your information is secure, and no, your data is not sold or shared for any third-party marketing purposes.

Running an online platform inherently requires data collection. To process your deposits via Touch 'n Go eWallet or DuitNow, we need to store transaction information. To keep your account safe from unauthorised access, we need to log login activity. To ensure you receive the correct weekly cashback or relevant EPL promotions, we need to understand your usage patterns. These are all reasonable uses of data, and suntoto handles them transparently — you can see exactly what we collect and why in this document.

What sets suntoto from other platforms is our commitment to giving members control over their own data. You can request a copy of all the data we hold about you. You can request a correction if anything is inaccurate. You can request deletion when you close your account and there is no longer any legal obligation to retain it. These rights are not merely statements in a policy document — they are practically enforceable through our 24/7 support team, who communicate in Bahasa Melayu.

Technical security is equally a priority at suntoto. 256-bit SSL encryption ensures that every transaction between your smartphone and our servers is secure. Your password is stored in an unreadable format — even our own IT team cannot retrieve it. Two-factor authentication is available to add an extra layer of protection to your account. Our security monitoring system operates around the clock to detect any threats before they can cause harm.

Cookie usage on suntoto is limited strictly to purposes directly relevant to your experience — maintaining your login session, remembering your game preferences, and ensuring the promotions you see are relevant to you. We do not use cookies to track your activity on other websites or for any purpose outside the scope of your suntoto experience.

Finally, suntoto complies with Malaysia's Personal Data Protection Act 2010 — a local law that protects Malaysians against the misuse of personal data. This means that as a suntoto member, you are protected not only by our privacy policy, but also by Malaysia's legally enforceable framework in the event of a breach. Suntoto takes these obligations seriously and conducts regular compliance audits to ensure we remain aligned with applicable legal requirements.

Privacy Policy Suntoto – Malaysian Member Data Protection Commitment

Suntoto's Data Protection Principles