OFFICIAL PIKTOTO DOCUMENT

Piktoto Privacy Policy — Data Protection Malaysia Users

Your privacy is our priority. This document transparently explains how piktoto collects, uses, stores, and protects your personal information — so you can play with complete peace of mind.

Updated: 1 January 2026
🔒
OUR PRIVACY COMMITMENT
256-bit SSL Encryption
No sale of data to third parties
Complete account control in your hands
Secure KYC processing
Data protection law compliance
How Piktoto Protects Your Privacy

Six layers of data protection keeping your personal information safe with us at all times.

Military-Grade Encryption

All data transmitted between your device and piktoto's servers is protected with 256-bit SSL encryption — the same level of encryption used by leading banking institutions. Your data cannot be intercepted while in transit.

Secure & Transparent KYC

Our identity verification (KYC) process is conducted through a strictly controlled system. Your documents are stored in an encrypted environment and are only accessible by authorized personnel for verification purposes.

No Sale of Data to Third Parties

Piktoto has never and will never sell, rent, or share your personal data with third parties for marketing purposes. Your data belongs to you — we only use it to deliver the best possible service to you.

Secure Data Storage

Your data is stored in high-grade data centres equipped with physical access controls, 24/7 continuous monitoring, automatic backup systems, and protection against cyber threats such as DDoS attacks and intrusion attempts.

Full Control in Your Hands

You have full control over your personal data. Through your Piktoto account settings, you can update your personal information, request a copy of the data we hold, or apply for account deletion at any time.

Full Legal Compliance

Piktoto fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. All data processing is carried out on a lawful and transparent legal basis.

Quick Summary: piktoto collects your personal data solely to provide better services, ensure platform security, and comply with legal requirements. We do not sell your data. You may request access, correction, or deletion of your data at any time.

1 Introduction and Scope of This Policy

This Privacy Policy ("Policy") describes how Piktoto ("we", "Platform") collects, uses, discloses, and protects your personal information when you use the website piktoto.bio or our official mobile app. This Policy applies to all piktoto platform users, including unregistered visitors, registered members, and former members whose accounts have been closed.

By accessing or using the Piktoto platform, you agree to the data collection and usage practices described in this Policy. If you disagree with any part of this Policy, please cease using our platform immediately.

Piktoto is committed to protecting your privacy at every stage of your interaction with our platform. We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. Every decision we make regarding your data is handled with care and responsibility.

2 Types of Personal Data We Collect

The type of information we collect depends on how you interact with the Piktoto platform. In general, we collect the following categories of data:

Data Category Example Information Requirements
Identity Information Full name, date of birth, ID card / passport number Mandatory (KYC)
Contact Information Email address, phone number, residential address Mandatory
Financial Information Bank name, account number, e-wallet name Mandatory (Transaction)
Verification Information MyKad / passport scan, verification selfie, utility bill Mandatory (KYC)
Usage Data Game history, wagering records, login timestamps Automatic
Technical Data IP address, device type, operating system, web browser Automatic
Communication Data Customer support chat records, help tickets During interaction

We only collect data that is strictly necessary to provide our services. You are not required to provide information beyond what is needed, but declining to provide certain information may limit your ability to use some platform features.

3 How We Collect Your Data

Piktoto collects personal information through several primary channels:

  • Account Registration: When you complete the registration form, you provide basic information such as your name, email, phone number, and password.
  • KYC Process: During identity verification, you are required to upload a government-issued ID and proof of address to meet legal compliance requirements.
  • Financial Transactions: Payment method details are collected when you make a deposit or submit a withdrawal request.
  • Platform Usage: Usage data is collected automatically when you play games, place bets, or navigate our platform.
  • Contact Us: When you contact our customer support team via live chat or email, the information you share will be stored for reference and service improvement purposes.
  • Cookies and Similar Technologies: Your web browser automatically sends certain technical information to our servers, including your IP address and browser type.

piktoto never collects your data through unlawful means, deception, or without your knowledge. All data collection is carried out transparently and with your consent.

4 Purposes of Processing Your Personal Data

Piktoto processes your personal data only for legitimate and necessary purposes. The following are the primary purposes for which your data is processed:

  • Account Management: To create, maintain, and manage your account on the piktoto platform, including processing logins, updating your profile, and managing your password.
  • Transaction Processing: To process deposits, conduct transaction security checks, and process fund withdrawals to your bank account or e-wallet.
  • Identity Verification (KYC): To verify your identity in compliance with anti-money laundering and counter-terrorism financing legal requirements.
  • Service Provision: To enable you to access all games and features on the piktoto platform, and to ensure a smooth, high-quality user experience.
  • Platform Security: To detect and prevent fraud, unauthorized access, account misuse, and other suspicious activities.
  • Customer Support: To assist you in resolving any technical issues or account-related inquiries through our support channels.
  • Legal Compliance: To comply with legal obligations applicable to our platform operations, including record-keeping as required by relevant authorities.
  • Service Improvement: To analyze aggregated usage patterns in order to improve platform features, enhance performance, and design a better user experience.

piktoto no using your personal data for third-party advertising purposes or selling it to external advertisers. Any marketing communications you receive from us are directly related to the piktoto platform and its services only.

5 Data Sharing and Disclosure

Piktoto limits the sharing of your personal data to situations where it is strictly necessary. We may share your personal data with the following parties and only under the circumstances specified:

  • Payment Service Providers: Service providers such as DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay receive the transaction information necessary to process your payments. They are bound by their own privacy policies and confidentiality agreements with piktoto.
  • KYC Service Providers: Third-party providers that assist us with identity and document verification. They receive only the data required for verification purposes.
  • Statutory Authorities: In situations where we are required by law, court order, or a directive from a competent authority to disclose certain information. In such cases, we will only disclose what is necessary and will endeavour to notify you in advance where permitted by law.
  • Technical Infrastructure Providers: Companies providing cloud computing, server hosting, and cybersecurity services used by piktoto to operate the platform. All such providers are bound by strict data processing agreements.

In all data sharing arrangements, Piktoto ensures that receiving parties are bound by data protection obligations equivalent to or higher than our own. We do not permit third parties to use your personal data for their own purposes.

6 Data Storage and Security Measures

Piktoto takes the security of your personal data extremely seriously. The technical and organizational security measures we employ include:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
  • Data encryption at rest using AES-256 algorithm.
  • Role-based access control (RBAC) ensuring only authorised staff can access sensitive data.
  • 24/7 continuous security monitoring by our cybersecurity team.
  • Penetration testing conducted periodically by independent security experts.
  • Automated data backup system with tested disaster recovery.
  • Comprehensive audit logs for all access to sensitive data.

Your personal data will be retained for as long as your account is active or as long as it is needed to provide services to you. Following account closure, we will retain certain data for the period required by law — typically between 5 and 7 years for financial records — before it is permanently deleted or anonymised.

Important: While we take all reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role by keeping your account password confidential and not sharing your login credentials with anyone.

7 Cookies and Tracking Technologies

Piktoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognize your browser and save your preference settings.

We use the following types of cookies:

  • Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects information on how users interact with the platform — such as most visited pages and page load times — to help us improve performance.
  • Functional Cookies: Saves your preferences such as preferred language, region, and display settings to deliver a more personalised experience.
  • Analytics Cookies: Helps us understand aggregated platform usage patterns for product improvement purposes. This data is processed anonymously and cannot be re-linked to any individual identity.

You can manage or block cookies through your web browser settings at any time. However, blocking essential cookies may affect your ability to log in or use certain features of the Piktoto platform properly.

8 Your Rights Regarding Personal Data

As a piktoto platform user, you have the following rights regarding the personal data we hold:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide it in a readable format within 14 business days.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request a correction or update promptly.

Right to Erasure

You may request the deletion of your personal data under certain circumstances, subject to our legal obligations to retain specific records.

Right to Object

You have the right to object to the processing of your data for certain purposes, including marketing communications you did not consent to.

Right to Data Portability

You may request your personal data in a structured, machine-readable format for the purpose of transferring it to another platform.

Right to Restriction of Processing

Under certain circumstances, you may request that we restrict the processing of your data while a dispute or review is being resolved.

To exercise any of the rights stated above, please contact our customer support team via live chat on the platform or by email at [email protected]. We will handle your request within a reasonable timeframe and notify you of the outcome.

9 Children's Data Protection

The piktoto platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from children under the age of 18.

If we discover or are made aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the relevant account without any payment.

Parents or guardians who believe a child under their care has registered or used the Piktoto platform are encouraged to contact us immediately so we can take appropriate steps to protect that child's privacy.

10 Amendments to This Privacy Policy

Piktoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or platform improvements. Any material amendments will be communicated to you via in-app notification or your registered email at least 7 days before the changes take effect.

The "Updated" date shown at the top of this document indicates when this Policy was last reviewed. We encourage you to review this Policy periodically to stay informed about how we protect your information.

Your continued use of the piktoto platform following the publication of any amendments to this Policy constitutes your acceptance of and agreement to the updated Policy.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we are always ready to help. Please contact our team through the following channels:

  • Privacy Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon at the bottom corner of the piktoto platform.

Our data protection team will address your enquiry within 5 business days. For more complex matters such as data access requests or formal complaints, response times may be longer but will not exceed 30 business days.

Our Commitment: piktoto takes every privacy complaint and inquiry seriously. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection or the relevant data protection authority in your jurisdiction.

FAQ — Privacy Policy

The most frequently asked questions by piktoto users regarding privacy and data protection.

Absolutely not. piktoto does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is only shared with service providers directly involved in platform operations — such as payment providers and KYC providers — and strictly for related purposes only.

The KYC (Know Your Customer) process is a mandatory legal requirement that all online financial and gaming platforms must comply with, including piktoto. It is designed to prevent money laundering, identity fraud, and ensure our platform is not misused by irresponsible parties. Documents you submit are stored securely with full encryption and used solely for identity verification purposes.

Yes, you may request deletion of your personal data by contacting our support team. However, please be aware that certain data — particularly financial and transaction records — is required by law to be retained for a specified period even after account closure. Such data will be automatically deleted once the mandatory retention period expires.

When your account is closed, we will immediately deactivate your access to the platform. Your personal data and account records will be retained for the period required by Malaysian law — typically 5 to 7 years for financial records. After that period, all data will be permanently deleted or anonymised so it can no longer be linked to your identity.

In the event of any security incident affecting user data, Piktoto is committed to notifying affected users within 72 hours via their registered email and in-platform notifications. We will also provide guidance on steps you can take to protect your account, as well as details of the actions we are taking to address the incident.

No. Cookies used by piktoto operate exclusively within the piktoto.bio domain and are not used to track your activity on other websites. We do not use cross-site tracking or share cookie data with third-party advertisers. You may also block or delete cookies through your browser settings at any time.
PRIVACY GUARANTEED, SAFER GAMING

Ready to Play with Full Confidence?

Your data is protected, your identity is secure. Register a Piktoto account today and enjoy the best online gaming experience in Malaysia with complete peace of mind.

PDPA Compliant
SSL 256-bit
No Data Sales
24/7 Support
Bahasa Melayu