Official Platform Documents

Privacy Policy KaosTogel – Malaysian Player Data Protection

KaosTogel takes the privacy of every Malaysian player seriously. This document clearly explains what information we collect, how it is used, who can access it, and your rights as the owner of that data — all in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: January 2026 Bahasa Melayu (ms-MY) Applicable in Malaysia PDPA 2010 Compliant

KaosTogel's Six Data Protection Principles

Before reading the full policy, here are the core principles that shape how KaosTogel handles the personal data of every Malaysian player.

256-bit SSL Encryption
All data transmitted between your device and KaosTogel's servers is protected by 256-bit SSL encryption — the same level of encryption used by leading Malaysian financial institutions. No third party can intercept or read your data in transit.
Full PDPA 2010 Compliance
KaosTogel is in full compliance with Malaysia's Personal Data Protection Act 2010. All collection, processing, and storage of player personal data is carried out in accordance with the principles set out in the Act — including the principles of consent, purpose, and data security.
Your Data, Your Rights
You have the right to access, correct, and request deletion of your personal data at any time. KaosTogel provides a straightforward, responsive process for all data-related requests — no red tape standing between you and information about your own data.
No Sale of Data to Third Parties
KaosTogel has never sold, rented, or commercialised players' personal data to any third party for marketing purposes, and never will. Your data is used solely to provide and improve KaosTogel's services to you.
Secure Data Storage
Player personal data is stored on servers protected by strict access controls, intrusion detection systems, and regular backups. Only KaosTogel staff who require access for legitimate operational purposes are granted permission to view player data.
Marketing Communications Preferences
You have full control over marketing communications from KaosTogel. Opt in or out of promotional notifications, campaign emails, and special offer messages at any time through your account settings — no questions asked, no need to contact support.
Quick Summary

This Privacy Policy explains how KaosTogel collects and uses your personal data when you register, log in, make a deposit, play, or contact our support team. We do not sell your data. We protect your data. And you have the right to full control over it.

1 Scope and Application of This Policy

This Privacy Policy ("Policy") is published by KaosTogel ("we", "KaosTogel") and applies to all users of the kaostogel.my platform, including website visitors, prospective members, registered members, and former members whose data remains stored in our systems.

This Policy describes:

  • The types of personal data we collect and how that data is managed;
  • The purposes and legal basis for processing your data;
  • Parties who may receive or access your data;
  • Data retention periods and deletion policy;
  • Your rights as a data subject under Malaysia's PDPA 2010;
  • How to reach us regarding privacy concerns.

By using the KaosTogel platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.


2 Personal Data We Collect

KaosTogel collects personal data through three main channels: information you provide directly, data generated automatically through your use of the platform, and in limited cases, data received from legitimate third parties.

Data You Provide Directly:

  • Full name as stated on your Malaysian identity card;
  • An active Malaysian phone number;
  • Email address;
  • Date of birth (for age verification);
  • Payment method details: eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, or bank details for FPX (Maybank2u, CIMB Clicks, and others) — stored in encrypted format;
  • Identity documents (a copy of your MyKad or passport) where required for KYC verification;
  • Any information you share when contacting our support team.

Automatically Generated Data:

  • IP address and detected country/state location;
  • Device type, operating system, and web browser version;
  • Platform usage data including pages visited, session duration, and navigation patterns;
  • Records of all deposit and withdrawal transactions;
  • Betting history including games played, wager amounts, and outcomes;
  • Technical logs maintained for troubleshooting and security purposes.
Note on Payment Data

KaosTogel does not store full credit or debit card numbers. For payments made via Malaysian eWallets (Touch 'n Go, GrabPay, Boost, ShopeePay) and DuitNow, we only retain the account identifier required for payment processing and withdrawals — not your eWallet login credentials or password.


3 How Your Personal Data Is Used

KaosTogel uses your personal data solely for legitimate purposes directly related to the provision of platform services. The table below summarises the primary purposes:

Purpose Data Used Requirements
Account registration & verification Name, phone number, email, date of birth Mandatory
Deposit & withdrawal processing Payment information, name Mandatory
Identity verification (KYC) Name, IC/passport, date of birth Required for large withdrawals
Fraud prevention & security IP address, device data, transaction records Mandatory
Customer support All account-related data Required when applicable
VIP programme & rewards Gaming activity history Consent-based
Marketing communications Email address, phone number Withdrawable
Legal compliance Transaction records, identity data Legally required
Platform improvement Anonymised usage data Legitimate interests

We do not use your data to make fully automated decisions that materially affect you without meaningful human involvement, except in the case of automated fraud detection designed to protect the security of your account.


4 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), KaosTogel processes your personal data on the following legal bases:

  • Consent: For marketing communications, non-essential cookie usage, and optional data sharing. You may withdraw this consent at any time;
  • Contract Performance: For all processing required to deliver KaosTogel platform services to you, including transaction processing and account management;
  • Legal Obligation: To comply with Malaysian legal requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and financial record retention;
  • Legitimate Interests: For fraud prevention, network security, and platform analytics that do not directly identify individuals.

5 Data Sharing with Third Parties

KaosTogel does not sell, rent, or commercialise your personal data to any third party. Data sharing occurs only in the following limited circumstances:

  • Payment Service Providers: Information required to process your deposits and withdrawals is shared with the relevant Malaysian payment service providers, including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX. These providers are bound by confidentiality agreements and comply with strict security standards;
  • Game Software Providers: Technical data required to operate gaming sessions is shared with game software providers (such as Pragmatic Play, PG Soft) in a limited form that cannot directly identify you to third parties;
  • Competent Authorities: KaosTogel will disclose data when required by Malaysian law, a court order, or a directive from a legitimate law enforcement agency;
  • Fraud Prevention Partners: In certain circumstances, limited identifying information may be shared with recognised identity verification or fraud prevention services to protect the platform and all its users.

Important: KaosTogel does not share your data with third-party marketing companies, advertisers, or data brokers. If you receive marketing communications claiming to be from KaosTogel through channels you did not register with us, please report it immediately as it may be a fraudulent attempt by an unknown party.


6 Cookies and Tracking Technologies

KaosTogel uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The types of cookies used include:

  • Essential Cookies: Required for core platform functions such as maintaining login sessions and security preferences. These cookies cannot be disabled without affecting platform functionality;
  • Performance Cookies: Collects data on how users interact with the platform to help us identify and address performance issues. This data is gathered in aggregate form and does not identify you individually;
  • Functional Cookies: Remembering your preferences such as language, display settings, and gaming preferences to deliver a more personalised experience;
  • Analytics Cookies: Helps us understand overall platform usage patterns to guide product improvement decisions.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect your ability to log in or use certain features of the KaosTogel platform properly.


7 Data Security Measures

KaosTogel implements a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

  • Transmission Encryption: All communications between your device and KaosTogel servers are protected by TLS 1.3 protocol and 256-bit SSL encryption;
  • Storage Encryption: Sensitive data stored in our databases — including payment information and identity verification documents — is encrypted using the latest encryption standards;
  • Internal Access Controls: A least-privilege access principle is enforced — only staff who require access to perform their specific duties are granted permission, and all access is logged and monitored;
  • Regular Security Testing: The KaosTogel platform undergoes regular penetration testing and security reviews conducted by independent cybersecurity specialists;
  • Intrusion Detection System: A real-time monitoring system actively detects and alerts on suspicious activity within the platform's infrastructure;
  • Data Backup: Player data is regularly backed up to a secure, separate location to ensure data recovery in the event of an unexpected technical incident.

While we take all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. In the event of a material data breach affecting your rights, KaosTogel will notify you within the timeframe prescribed by applicable Malaysian law.


8 Data Retention Period

KaosTogel retains your personal data only for as long as necessary for the purpose it was collected, or as required under Malaysian law:

  • Active Account Data: Retained for the duration of your active membership plus the required period after account closure;
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian legal requirements for financial records;
  • Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes;
  • Identity Verification (KYC) Data: Retained for 5 years after account closure in accordance with anti-money laundering requirements;
  • Anonymised Analytics Data: May be retained indefinitely as it can no longer be linked back to any specific individual.

Once the relevant retention period expires, your data will be securely deleted or anonymised using procedures that ensure it cannot be recovered or traced back to you.


9 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by KaosTogel:

Right of Access
Request a copy of the personal data we hold about you. We will provide a response within 21 business days.
Right to Rectification
Request correction of inaccurate or incomplete personal data. Basic information updates can be made directly through your account settings.
Right to Erasure
Request deletion of your data in certain circumstances, subject to applicable legal retention requirements.
Right to Object
Object to the processing of your data for marketing purposes or where processing is based on legitimate interests.
Data Portability
Request your data in a machine-readable format for transfer to another service where applicable.
Right to Restrict Processing
Request a restriction on data processing during a dispute about data accuracy or while your objection is being considered.

To exercise any of the rights above, submit a written request to privacy@kaostogel.my with the subject line "Personal Data Rights Request", along with your account number and a description of your request. We aim to acknowledge requests within 3 business days and resolve them within 21 business days.


10 Children's Data Protection

The KaosTogel platform is strictly for adult users aged 18 and above. KaosTogel does not knowingly collect personal data from individuals under the age of 18.

If we determine that we have collected data from an underage individual, we will take immediate steps to:

  • Immediate closure of the account in question;
  • Processing the return of any eligible remaining funds;
  • Delete all personal data belonging to that individual from our systems within a reasonable timeframe, subject to any applicable legal retention obligations.

To parents and guardians: If you suspect that your underage child has registered an account on KaosTogel, please contact us immediately via support@kaostogel.my. We will respond within 24 hours and handle your case with the highest priority.


11 Amendments to This Privacy Policy

KaosTogel reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or the services we offer.

When material changes are made to this policy, we will:

  • Updating the "Last Updated" date at the top of this page;
  • Sending a notification to your registered email address at least 14 days before any material amendments take effect;
  • Providing a summary of the key changes within that notification so you do not need to re-read the entire document to understand what has changed.

Continued use of the KaosTogel platform after the effective date of any amendment will be deemed acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account by contacting our support team before the effective date.


12 Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by KaosTogel, you may contact us through the following channels:

  • Privacy Email: privacy@kaostogel.my (dedicated to privacy matters and data requests)
  • General Support Email: support@kaostogel.my
  • Live Chat: Available 24/7 on the KaosTogel platform (click the chat icon at the bottom right corner)
  • WhatsApp: The number displayed on the platform after logging in

We aim to acknowledge all privacy-related enquiries within 3 business days. For formal privacy complaints that cannot be resolved through our support channels, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia in accordance with the PDPA 2010.

KaosTogel's Commitment

Your privacy is more than a legal obligation to us — it is part of the trust you place in KaosTogel every time you play. We are committed to handling your data with full responsibility, transparency, and respect.

Privacy Is Not a Formality — It Is Part of Our Trust

When you sign up on any online platform — whether to play slots, bet on Malaysian Super League football, or play live baccarat — you are effectively entrusting a portion of your personal information to that platform. Your phone number, your eWallet account details, your activity records. This is not trivial information. And how a platform handles it reflects just how much they respect you as a user.

At KaosTogel, we understand the weight of this responsibility. That is why our Privacy Policy is not simply a compliance document written to satisfy legal requirements and then forgotten — it is a practical roadmap of how we actually handle your data in the platform's day-to-day operations. Every system, every process, and every technical decision involving user data is made with reference to the principles set out in this document.

Malaysia's PDPA 2010 — The Legal Framework We Follow

Malaysia's Personal Data Protection Act 2010 (PDPA) is the primary legislation governing how organisations in Malaysia collect and use personal data. KaosTogel fully complies with all seven principles enshrined in this Act: the General Principle, the Notice and Choice Principle, the Disclosure Principle, the Security Principle, the Retention Principle, the Data Integrity Principle, and the Access Principle under the oversight of the Personal Data Protection Commissioner. This compliance is not merely a paper exercise — it means that as a Malaysian player, you have legally protected rights when it comes to your data on our platform.

How Your Payment Data Is Protected

Payment information is among the most sensitive data for Malaysian online casino players. When you deposit using Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow — or when you use FPX through Maybank2u or CIMB Clicks — you want to know that your information is secure. At KaosTogel, we use a tokenisation architecture for payment data, meaning we only store a token that represents your payment method — not your actual credentials or full account number. These tokens are useless to any unauthorised party even in the event of a security breach, as they cannot independently be used to access your eWallet or bank account.

Importantly, KaosTogel does not store your eWallet or online banking password in any form. When you make a payment via FPX or eWallet, the authentication process takes place directly between you and the respective payment provider — KaosTogel only receives a confirmation of whether the payment was successful or not, and never sees or stores your authentication credentials.

Gaming Activity Data and the VIP Programme

KaosTogel uses data from your gaming activity history — slots played, Sports Betting wagers placed, Live Casino games joined — for purposes that directly benefit you: calculating eligibility for the VIP Rewards programme, daily cashback, and game recommendations tailored to your preferences. This data is never shared with game providers in a form that could individually identify you to them. From the game provider's perspective, they see session data representing a platform account, not your personal identity.

With regard to the VIP Rewards programme in particular, this activity data is used automatically by the system to calculate tier eligibility and benefits. This means no individual staff member needs to manually review your activity to determine your VIP benefits — the system does so based on pre-set parameters, reducing the risk of unnecessary human access to your activity data.

Your Right to Control Marketing Communications

Many Malaysian players prefer not to receive constant promotional messages from online platforms. KaosTogel fully respects this preference. All marketing communications from KaosTogel — promotional emails, bonus notifications, special offers via WhatsApp — are consent-based. You may opt out of any or all types of these communications through the notification settings in your account, or by contacting our support team to update your preferences. Unsubscribe requests will be processed within 5 business days.

If you have any questions about how KaosTogel handles your personal data that are not addressed in this Privacy Policy, do not hesitate to contact us at privacy@kaostogel.my. We take every privacy enquiry seriously and are committed to providing a clear and satisfactory response within the stated timeframe. For information on the platform's overall usage rules, please read Terms & Conditions us. For guidance on responsible gaming, visit our Responsible Gaming us.

Frequently Asked Questions About Privacy at KaosTogel

No. KaosTogel has never sold, rented, or shared your personal data with any other company for marketing purposes. Your data is used solely by KaosTogel to provide and improve the platform's services to you. If you receive marketing communications claiming to be from KaosTogel via a number or email address you do not recognise, it may be a fraud attempt — please report it to us immediately.

Yes, you have the right to request deletion of your personal data. However, certain limitations apply based on legal requirements — financial transaction records, for example, must be retained for 7 years under Malaysian laws governing financial records and anti-money laundering, even after your account is closed. Other data such as your account profile, communication history, and preference data may be deleted or anonymised once your account is closed and the minimum retention period has passed. To submit a deletion request, email privacy@kaostogel.my with your account details.

When you close your KaosTogel account, active access to the platform is terminated immediately. Your data is then retained in accordance with the retention periods prescribed by Malaysian law — typically 7 years for financial transaction records and 5 years for KYC documents. After these periods, data will be securely deleted or anonymised. For data not subject to legal retention requirements, we aim to delete it within 90 days of account closure. You may request confirmation of your data status at any time after your account is closed.

KaosTogel uses a tokenisation system for payment information. This means we only store a reference token representing your payment method — not your full account number or eWallet login credentials (Touch 'n Go, GrabPay, Boost, ShopeePay). When you make a deposit or withdrawal, the authentication process takes place directly between you and the relevant eWallet provider. KaosTogel never sees or stores your eWallet password or PIN. All data we do retain is encrypted using current encryption standards.

Please reach out to us first at privacy@kaostogel.my — we aim to resolve all privacy complaints within 21 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, the authority responsible for enforcing the PDPA 2010. Contact details for the Commissioner are available on the official website of the Department of Personal Data Protection Malaysia.
Related Documents — Terms & Conditions and Responsible Gaming

This Privacy Policy forms part of KaosTogel's suite of policy documents. To fully understand your rights and responsibilities as a member, we encourage you to also read our Terms & Conditions. For guidance on healthy play habits, visit our Responsible Gaming page.

A Platform That Protects Your Data — Register with Confidence

KaosTogel is built on trust. Your privacy is protected, your data is secure, and your rights are respected. Join over 800,000 Malaysian players who have placed their trust in KaosTogel.

Bahasa Melayu