1. Home
  2. Privacy Policy
Official Gadaitoto Document

Gadaitoto Privacy Policy – Our Data Protection Commitment Malaysian Users

Your privacy is our priority. This document clearly explains how gadaitoto collects, uses, stores and protects your personal information — in plain language, not confusing legal jargon.

Our Privacy Commitment
SSL 256-bit Encryption No Data Sales Data Processed on a Limited Basis Right to Erasure PDPA Malaysia Compliant Updated 2026
Data Protection Principles

The Six Pillars of Gadaitoto's Privacy Policy

Every decision relating to user data at gadaitoto is guided by these six core principles, which we never compromise on.

Data Minimisation

Gadaitoto collects only the data genuinely necessary to deliver our services to you. We do not collect excessive or irrelevant information. Every data field requested during registration has a clear and specific purpose.

Industry-Standard Security

All your personal data and financial transactions are protected with 256-bit SSL encryption — the same standard used by Malaysia's major banks. Internal access to user data is restricted strictly to staff who require it, with detailed audit logs maintained at all times.

Data Is Never Sold or Shared

Gadaitoto has never sold and will never sell users' personal information to third parties for marketing or commercial purposes. Limited data sharing only occurs in situations clearly set out in this policy and with your consent.

You Are in Control

You have the full right to access, update, transfer, or request deletion of your personal data at any time. Data rights requests will be processed within 14 business days by gadaitoto's privacy team.

Reasonable Data Retention

Your personal data is only retained for as long as necessary to fulfil the original purpose of collection or as required under Malaysian law. Once that period has passed, data is systematically deleted or anonymised.

Data Breach Notification

In the unlikely event that user data may be exposed, gadaitoto is committed to notifying affected users within 72 hours of detecting the incident and taking immediate remedial action to minimise impact.

Your Rights

Your Privacy Rights as a Gadaitoto User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and gadaitoto's policies, you have the following rights.

📋
Right to Access

Request a copy of all personal data gadaitoto holds about you, in a format that is easy to read.

✏️
Right to Rectification

Update or correct any personal information in your account that is inaccurate or incomplete.

🗑️
Right to Erasure

Request deletion of your personal data when it is no longer needed or when you withdraw your consent.

🚫
Right to Object

Object to the processing of your data for direct marketing purposes at any time without penalty.

📦
Right to Portability

Request your data in a structured, portable format that can be transferred to another party if needed.

⏸️
Right to Restriction

Request a restriction on data processing during a review or dispute period without full deletion.

↩️
Right to Withdraw Consent

Withdraw any previously given consent for data processing at any time through your account settings.

📣
Right to Complain

Submit a complaint to gadaitoto or to the Malaysian Personal Data Protection Commissioner if your rights have been violated.

Document Contents
Updated: January 2026
Update Notice: This Privacy Policy was reviewed and updated in January 2026. Key changes include more detailed clarification on the use of analytics data and user rights under Malaysia's PDPA. Your continued use of gadaitoto after this date constitutes your acceptance of the updated policy.
1

Introduction & Scope of This Policy

Gadaitoto is fully committed to protecting the privacy of every user on our platform. This Privacy Policy was created to explain clearly and transparently how gadaitoto handles your personal information — from the moment you first visit our website to after you close your account.

This document applies to all gadaitoto users, including unregistered visitors, registered members, active members and former members whose accounts have been closed. It covers all gadaitoto platform channels, including the website, mobile app, customer support Live Chat and any written communications via email or WhatsApp.

Legal Basis: The gadaitoto Privacy Policy is established in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles. Gadaitoto operates in full compliance with the data protection legislation applicable within its operating jurisdiction.
2

Types of Personal Data Collected

Gadaitoto collects your personal data through two main methods — information you provide directly and data collected automatically during your use of the platform. The following are the categories of data we collect:

Data Category Examples of Information How It Is Collected
Identity Data Full name, IC number (MyKad), date of birth, gender Account registration, KYC verification
Contact Data Malaysian phone number, email address Account registration
Financial Data Bank account number, digital wallet owner name Deposit & withdrawal process
Transaction Data Deposit, withdrawal, betting, and winnings history Automated platform activity
Technical Data IP address, device type, browser, session time Automated system log
Behavioural Data Games played, sports followed, play session times Automated platform analytics
Communication Data Live Chat conversation records, support emails Customer support interactions
Sensitive Data: Gadaitoto does not collect sensitive data categories such as health information, religious beliefs, political views, or biometric data without your explicit consent and a clear legal basis for doing so.
3

How We Use Your Data

Every use of your personal data by gadaitoto has a lawful basis and a clearly defined purpose. We do not process your data for purposes other than those stated below without notifying you in advance:

  • Identity verification and KYC — to comply with legal requirements and ensure the security of your account
  • Processing of deposits and withdrawals — via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX
  • Game service delivery — slots, live casino, badminton Sports Betting, football and more
  • Customer support — resolving enquiries, complaints and technical issues
  • Fraud prevention and security — detect and prevent unauthorised account activity
  • Experience personalisation — displaying relevant games and promotions based on your preferences
  • Service communications — important notifications regarding your account, transactions and policy updates
  • Analytics and improvement — understanding how the platform is used in order to continuously improve it
  • Legal compliance — fulfil reporting obligations to the relevant authorities where required by law
You registered Data collected Processed & securely stored Used for services Deleted when no longer needed

Gadaitoto conducts Data Protection Impact Assessments (DPIAs) for any new high-risk data processing activities. This ensures that every decision involving user data is systematically evaluated from a privacy standpoint before implementation.

4

Data Sharing with Third Parties

Gadaitoto does not sell, rent or trade users' personal data. However, in the course of operating the platform, there are limited situations where data must be shared with trusted third parties:

  • Malaysian payment providers — eWallet providers such as Touch 'n Go, GrabPay, and Boost, as well as banks for FPX and DuitNow processing, receive only the data necessary to complete the transaction
  • Game providers — companies such as Pragmatic Play, PG Soft, and Evolution Gaming may receive the minimum technical data required to deliver their games within the gadaitoto platform
  • Identity verification services — a third-party KYC provider that assists in verifying user identity prior to the first withdrawal
  • Cloud services and infrastructure — technical infrastructure providers that store and process data under strict data protection agreements
  • Legal authorities — gadaitoto may be required to disclose user data to Malaysian authorities if mandated by a court order or applicable law

All third parties that receive gadaitoto user data are bound by strict data processing agreements and are not permitted to use that data for any purpose beyond what is specified in their service contract with gadaitoto.

International Data Transfers: Should user data need to be transferred to servers outside Malaysia for storage or technical processing purposes, gadaitoto ensures that protection equivalent to Malaysia's PDPA standards is upheld at those locations through appropriate contractual safeguards.
5

Data Security & Protection Measures

Gadaitoto takes data security seriously. The following technical and organisational measures are in place to protect your personal information from unauthorised access, use, disclosure, alteration or destruction:

  • SSL/TLS 256-bit Encryption for all data transferred between your browser and gadaitoto's servers
  • Encryption of data at rest for all user records stored in the database
  • Role-based access control (RBAC) — gadaitoto staff may only access data that is relevant to their specific role
  • Two-factor authentication (2FA) for all internal administrative access to systems that store user data
  • Periodic vulnerability scanning and penetration testing by independent security experts
  • Complete audit logs for all access to and modifications of user data
  • Real-time threat detection via 24/7 security monitoring systems
  • Privacy and security training for all gadaitoto staff who handle user data
Your Responsibilities: While gadaitoto takes all reasonable steps to protect your data, account security also depends on your own actions. Always use a strong, unique password, never share it with anyone, and contact gadaitoto support immediately if you suspect unauthorised access to your account.
6

Cookies & Tracking Technologies

Gadaitoto uses cookies and similar tracking technologies to enhance your experience on the platform, ensure proper functionality, and gather analytical data that helps us understand how the platform is used.

  • Session Cookies — required for core functions such as maintaining your login status. Automatically deleted when you close your browser
  • Preference Cookies — stores your preferences such as language and display settings. Can be declined without affecting core functionality
  • Analytics Cookies — collecting anonymous usage data to help us identify areas of the platform that need improvement
  • Security Cookies — help detect and prevent fraudulent activity and unauthorised access

You can manage cookie usage through your browser settings. However, blocking session and security cookies may affect the functionality of the gadaitoto platform. Analytics and preference cookies can be blocked without impacting core functionality.

Third-Party Cookies: Game providers such as Pragmatic Play and Evolution Gaming may place their own cookies within the gadaitoto platform for technical game delivery purposes. These cookies are governed by each provider's respective privacy policy.
7

Financial Data & Payment Security

As gadaitoto processes users' financial transactions, the protection of financial data is given the highest priority in our privacy policy. Here is how we handle your financial information:

  • Gadaitoto does not store full credit or debit card numbers in our systems — card processing is handled through PCI-DSS certified third-party payment gateways
  • For Malaysian eWallets (Touch 'n Go, GrabPay, Boost, ShopeePay), only transaction tokens are shared — not your eWallet account credentials
  • For DuitNow and FPX (Maybank2u, CIMB Clicks), you authenticate directly with your bank — gadaitoto never has visibility into your online banking password
  • Bank account numbers for withdrawals are stored in encrypted format and accessed only for the purpose of processing withdrawals you have requested
  • Complete transaction history is retained for the period required under Malaysian financial legislation for audit and compliance purposes

All financial transactions on gadaitoto are conducted entirely in Malaysian Ringgit (RM). No currency conversion takes place, and none of your financial data is transmitted to entities outside Malaysia except in circumstances specifically stated with your consent.

8

Data Retention Period

Gadaitoto does not retain your personal data for longer than necessary. Retention periods depend on the type of data and the underlying requirement:

  • Active account data — retained for the duration of the active account and up to 7 years after closure for legal compliance requirements
  • Financial transaction records — retained for 7 years in accordance with Malaysia's Income Tax Act and financial legislation requirements
  • Customer support communication logs — retained for 3 years for dispute resolution purposes
  • Technical and security logs — retained for 90 days for security and incident investigation purposes
  • Anonymous analytics data — may be retained indefinitely as it contains no personally identifiable information

Once the retention period expires, data is securely deleted or anonymised using procedures that ensure it cannot be recovered or linked back to any specific individual. Early deletion requests submitted by users will be processed within the limits permitted by law.

9

How to Exercise Your Privacy Rights

Gadaitoto makes it straightforward for users to exercise their privacy rights. Here is how to submit a request regarding your personal data:

  • Via Live Chat — contact gadaitoto customer support 24/7 and state the type of privacy request you are making
  • Via email — send a written request to support@gadaitoto.best with the subject line "Data Privacy Request"
  • Through account settings — some options, such as updating personal information and deposit limits, can be managed directly in your account settings

Gadaitoto will process your data rights request within 14 working days from the date a complete request is received. We may require additional identity verification before processing sensitive requests such as data access or deletion, to protect your account from unauthorised third-party requests.

No Charges: Gadaitoto does not charge any fee for processing your personal data rights requests under normal circumstances. A fee may be levied for requests that are repetitive, unreasonable, or excessive, at gadaitoto's discretion and as permitted under Malaysia's PDPA.
10

Child Protection

Gadaitoto is a platform designed exclusively for individuals aged 18 years and above. We do not knowingly collect personal data from individuals below this age limit. This is not merely a policy — it is a commitment strictly enforced through our age verification process at registration.

  • The registration process requires date of birth verification
  • KYC verification via MyKad confirms a user's age before their first withdrawal
  • Should gadaitoto discover that data has been inadvertently collected from a minor, that data will be deleted immediately and the account in question will be closed

If you are a parent or guardian and discover that your underage child has registered on gadaitoto, please contact us immediately at support@gadaitoto.best and we will take prompt action to close the account and delete all related data.

Shared Responsibility: While gadaitoto takes all reasonable steps to ensure platform safety, parents and guardians also play an important role in monitoring their children's online activity and ensuring they do not access platforms that are not age-appropriate.
11

Privacy Policy Amendments

Gadaitoto reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new service requirements or updates to applicable laws. We are committed to informing users of any material changes.

  • Material changes will be communicated via email to your registered address and through in-platform notifications at least 30 days before taking effect
  • Minor changes that do not affect your rights may take effect earlier with appropriate notice
  • The "Updated" date at the top of this document will always reflect the date of the most recent revision
  • Previous versions of the Privacy Policy are retained and available upon request through customer support for historical reference

Continued use of the gadaitoto platform after any changes take effect will be considered your acceptance of the revised policy. If you do not agree with the changes, you have the right to request account closure before the effective date.

12

Contact Us About Privacy

If you have any questions, concerns or complaints regarding gadaitoto's Privacy Policy or how we handle your personal data, our privacy team is here to help:

  • Live Chat: The fastest option — response within two minutes, available 24 hours a day in Bahasa Melayu
  • Privacy Email: support@gadaitoto.best — please use the subject line "Privacy Policy Enquiry" for faster handling
  • WhatsApp: Number available within the platform after login for informal enquiries

We will acknowledge receipt of your enquiry within 24 hours and provide a full response within 14 business days. For more complex complaints requiring thorough investigation, we will keep you informed of the expected timeframe.

If you are not satisfied with gadaitoto's response to your privacy complaint, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia (PDPC) through their official channels.

Our Bottom Line: For gadaitoto, privacy goes beyond legal compliance — it is a core value we uphold. Every Malaysian user who entrusts us with their personal data deserves genuine protection and responsible stewardship. That is our commitment.

Gadaitoto and Your Privacy – Why It Matters Beyond Just a Document

Most people skip the Privacy Policy page when signing up on any online platform. That is understandable — these documents are typically filled with lengthy, dry legal jargon. But for users of gadaitoto, understanding the basics of how your data is handled is genuinely worthwhile — because it involves real money, sensitive personal information, and financial transactions you carry out using your everyday payment methods.

When you make a deposit via Touch 'n Go eWallet or GrabPay, your transaction data passes through several systems — your browser, the internet network, the payment gateway and finally gadaitoto's system. Every step of that journey needs to be protected. And when you play slots, place a bet on a Lee Zii Jia badminton match or join a live casino table, the system records that activity. All of these records form your digital profile on gadaitoto.

Why gadaitoto Does Not Sell User Data

It is a fair question to ask. Some online platforms do build their business model around selling user data to advertisers or data brokers. Gadaitoto firmly rejects that model. The reason is straightforward — users who trust that their data is safe are users who are more comfortable engaging with the platform actively. That trust is worth far more than any amount that could be earned from selling data.

Gadaitoto uses user data solely to deliver a better experience to those users themselves. If you regularly play slots from Pragmatic Play, our system may suggest new titles from the same provider. If you actively bet on BWF badminton, you may receive notifications about upcoming matches. This is data use that benefits you directly — not unrelated third parties.

Malaysia's PDPA and What It Means for You

The Personal Data Protection Act 2010 (PDPA) is the Malaysian law that governs how organisations may collect and use the personal data of Malaysian citizens. Gadaitoto complies with PDPA requirements, which means you have the legal right to know what data is held about you, to request corrections if anything is inaccurate, and in certain circumstances to request that the data be deleted.

In practical terms, this means that if you registered on gadaitoto with a misspelled name, you can request a correction and it will be made. If you close your account, your data will not be used for marketing purposes thereafter. And should any security incident occur that affects your data, gadaitoto is obligated to notify you accordingly.

Malaysian Digital Payment Security

One of the most common questions from new Malaysian users is about the security of eWallet deposits. It is a very reasonable concern — Touch 'n Go eWallet, GrabPay, Boost and ShopeePay are apps used not only to play on gadaitoto, but also as everyday digital wallets for buying coffee, paying tolls and shopping at the supermarket.

Gadaitoto has never stored, and will never store, your eWallet password or PIN. When you make a deposit via Touch 'n Go, for example, you are redirected directly to the Touch 'n Go interface to authorise the payment — gadaitoto only receives confirmation that the payment was successful, not your account login credentials. This is the correct security model, and gadaitoto adheres to it fully.

Whether You Play Badminton, Football or Slots on Gadaitoto

Every click, every bet and every match you follow on gadaitoto generates data. This data is used to ensure the platform functions correctly, to detect potential technical issues and to understand which features users engage with most. This behavioural data is anonymised at the aggregate analytics level — gadaitoto does not build individual psychological profiles of its users.

For Sports Betting in particular, your betting records form part of your account information and are kept strictly protected. If you have ever disputed a betting outcome or encountered an issue with winnings not being credited, these records serve as evidence that safeguards your interests. Gadaitoto maintains complete transaction records precisely to protect users in situations like these — not as a tool to be used against you.

Ultimately, this Privacy Policy is more than a compliance document. It is an agreement between gadaitoto and every Malaysian user who trusts this platform. If at any point you have questions, concerns or are dissatisfied with how your data is handled, the gadaitoto support team is ready to listen and respond. Your privacy is our responsibility — and we take it seriously.

Join gadaitoto – A Platform That Respects Your Privacy

Over 500,000 Malaysian users trust gadaitoto with their data and money. Register for free today and enjoy more than 500 games with the peace of mind that your privacy is always protected.

Register a Free Account Log In
Data protected with SSL 256-bit encryption No sale of personal data Compliant with Malaysia's PDPA Aged 18 and above only

Gadaitoto Privacy Policy: This document is the current version of the gadaitoto Privacy Policy, updated January 2026. Your personal data is processed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). For enquiries, email us at support@gadaitoto.best. For information on the platform's terms of use, please read gadaitoto Terms & Conditions. For information on responsible gaming, please refer to our Responsible Gaming page.

Bahasa Melayu