Privacy Policy

Livitoto (hereinafter referred to as "the Platform", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who access, register with, or otherwise interact with the Livitoto online casino and sports betting service, accessible at https://livitoto.cam (the "Service").

This Privacy Policy (the "Policy") sets out the basis upon which any personal data we collect from you, or that you provide to us, will be processed. It applies to all users of the Service, including registered account holders and unregistered visitors, and covers all data processing activities carried out in connection with the provision of the Service to players based in Malaysia and other jurisdictions from which the Service is lawfully accessible.

Livitoto processes personal data in accordance with applicable international data protection principles, including the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. Where the Personal Data Protection Act 2010 (PDPA) of Malaysia is applicable to a particular processing activity involving data subjects in Malaysia, we also take into account its requirements.

By registering an Account, making a deposit, or otherwise using the Service, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Service.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

Livitoto collects personal data that is necessary for the lawful operation of the Service, including account management, identity verification, payment processing, regulatory compliance, and the delivery of a safe and personalised user experience. The categories of personal data we collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where a player voluntarily discloses such information in the context of a responsible gambling self-assessment or support request.

Personal data is collected through the following channels and mechanisms:

• Account Registration: Information you provide when creating an Account, including your chosen username, email address, mobile number, date of birth, and residential address.
• KYC Verification: Identity documents and supporting materials (MyKad, passport, driver's licence, utility bills, and selfie photographs) submitted to fulfil our verification obligations.
• Payment Transactions: Financial data transmitted through deposit and withdrawal operations via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and cryptocurrency wallets.
• Customer Support Interactions: Communications made through our live chat facility, email, or other support channels, including any personal information you voluntarily disclose.
• Cookies & Tracking Technologies: Automatically collected technical and behavioural data gathered via cookies, web beacons, and similar technologies as described in Section 8.
• Third-Party Verification Providers: Identity and anti-fraud verification data received from licensed KYC and anti-money laundering service providers engaged by the Platform.

Livitoto processes personal data only where a valid legal basis exists for doing so. The primary legal bases upon which we rely are:

• Contractual Necessity: Processing required for the performance of the contract between you and the Platform, including account creation, processing deposits and withdrawals, game operation, and bonus administration.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory obligations, including identity verification (KYC), anti-money laundering (AML) screening, and fraud prevention measures required by our operating licence conditions.
• Legitimate Interests: Processing carried out in pursuit of Livitoto's legitimate business interests, including platform security, fraud detection, responsible gambling monitoring, and improvement of the Service, provided such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent, including optional marketing communications and certain cookie-based tracking activities. Consent may be withdrawn at any time.

Personal data collected by the Platform is used strictly for the purposes identified at the time of collection and for compatible secondary purposes where applicable. The principal uses are as follows:

1. Account Management: Creating, maintaining, and administering your Account, including authentication, access control, and Account security;
2. Service Delivery: Processing bets, game sessions, deposits, withdrawals, and bonus credits in MYR via Malaysian payment networks including DuitNow and FPX;
3. Identity Verification: Verifying your identity and age (21+) in accordance with our KYC obligations and operating licence conditions;
4. Regulatory Compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and fraud prevention obligations, including suspicious activity monitoring and reporting where legally required;
5. Customer Support: Responding to your queries, complaints, and requests through our live chat and email support channels;
6. Responsible Gambling: Monitoring gaming behaviour to identify potential problem gambling patterns and implementing protective measures including deposit limits, cooling-off periods, and self-exclusion management;
7. Platform Improvement: Analysing aggregated usage data and player feedback to improve the Service, fix technical issues, and develop new features;
8. Marketing Communications: Sending promotional offers, newsletters, and updates where you have provided consent, and in compliance with applicable marketing regulations. You may opt out of marketing communications at any time.

Livitoto does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may, however, share personal data with carefully selected third parties in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: Financial data is shared with licensed payment processing partners (including FPX, DuitNow, and e-wallet operators) to facilitate deposit and withdrawal transactions in MYR. These entities process data only as necessary to complete the transaction.
• KYC & AML Verification Providers: Identity documents and verification data are shared with licensed third-party KYC and AML screening providers engaged to fulfil our regulatory compliance obligations.
• Technology & Infrastructure Providers: Technical data is processed by cloud hosting and infrastructure providers that support the operation of the Platform, subject to appropriate data processing agreements.
• Fraud Prevention & Security Services: Technical and behavioural data may be shared with fraud prevention and cybersecurity service providers to protect the Platform and its users from fraudulent activity.
• Regulatory & Law Enforcement Authorities: Personal data may be disclosed to competent regulatory or law enforcement authorities where required by applicable law, court order, or in connection with legal proceedings.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the Platform's business, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

All third parties with whom personal data is shared are required to maintain appropriate technical and organisational security measures and to process data only in accordance with our written instructions and applicable data protection law.

Livitoto uses cookies and similar tracking technologies to operate the Platform effectively, enhance user experience, and gather analytical data. A "cookie" is a small text file placed on your device by a website server and retrieved on subsequent visits to enable certain functionality.

The Platform uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the basic operation of the Platform, including authentication session management, security token maintenance, and load balancing. These cookies cannot be disabled without affecting core Platform functionality.
• Analytical / Performance Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and error rates — to help us improve the Service over time.
• Functionality Cookies: Enable the Platform to remember your preferences, such as language settings, display preferences, and previously entered search parameters, to provide a more personalised experience.
• Marketing Cookies (Consent-Based): Used to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. These cookies are only placed with your explicit consent and may be withdrawn at any time through your browser settings.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality or performance of the Platform. Instructions for managing cookies in major browsers are available through the respective browser's help documentation.

Livitoto retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. Our general retention practices are as follows:

• Account Data: Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, to meet AML, fraud prevention, and licensing audit requirements.
• KYC Documents: Identity and verification documents are retained for a minimum of five (5) years from the date of verification, in accordance with standard AML compliance retention periods.
• Transaction Records: Financial transaction records including deposits, withdrawals, and bet history are retained for a minimum of five (5) years for regulatory and audit purposes.
• Support Communications: Customer support correspondence is retained for up to three (3) years to facilitate dispute resolution and service quality monitoring.
• Marketing Data: Marketing consent records and associated contact data are retained until consent is withdrawn, plus any additional period required to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its reconstitution. Where retention is required by legal obligation, data is archived with restricted access pending the end of the mandatory retention period.

Livitoto implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• Transport Encryption: All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS protocols. The Platform enforces HTTPS on all pages and connections.
• Data at Rest: Personal data stored in Platform databases is encrypted at rest using industry-standard encryption protocols. KYC documents are stored in access-controlled secure vaults.
• Access Controls: Access to personal data by Platform staff is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular data protection training.
• Two-Factor Authentication: Account Holders are encouraged to enable 2FA on their Accounts. Platform administrative systems require 2FA for all personnel with data access.
• Regular Security Audits: The Platform undergoes periodic security assessments, penetration testing, and vulnerability scanning conducted by independent security professionals.

Subject to applicable data protection law and the limitations inherent in our regulatory obligations (including KYC and AML requirements that may restrict certain deletion requests), you have the following rights in relation to your personal data held by Livitoto:

To exercise any of the above rights, please contact us through our live chat support or via our support email. We will respond to all verified requests within thirty (30) calendar days. We may require identity verification before processing certain requests to protect against unauthorised data access.

The Platform integrates with third-party services including payment processors (Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, DuitNow, FPX), identity verification providers, game content studios, and analytics tools. Each of these third parties operates under its own privacy policies and data processing terms, over which Livitoto has no direct control once data is transmitted to them for processing.

We enter into Data Processing Agreements (DPAs) with all third-party processors to ensure that they implement appropriate safeguards and process personal data solely in accordance with our instructions and applicable data protection obligations. However, we encourage you to review the privacy policies of any third-party payment services you use in connection with your Livitoto Account.

The Platform may contain links to external informational resources. Livitoto is not responsible for the data practices of any third-party websites accessed via such links and recommends that you review their privacy notices before submitting personal data.

The Livitoto Service is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data of persons under the age of 21. The Platform enforces a mandatory KYC age verification process, and any Account identified as belonging to an underage user will be closed immediately, with all associated data quarantined and processed only as required by our legal obligations.

As an internationally operating online platform, Livitoto may process and store personal data in countries outside of Malaysia, including in jurisdictions where the Platform's servers, data processors, or game studio partners are located. Such transfers are carried out in accordance with our data protection obligations and are governed by appropriate safeguards including:

• Data Processing Agreements incorporating standard contractual clauses or equivalent transfer mechanisms with all data processors operating outside Malaysia;
• Transfer only to jurisdictions that maintain an adequate level of personal data protection as assessed by the Platform;
• Implementation of additional technical safeguards, including encryption and access controls, for cross-border data flows.

By using the Service, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards outlined above.

Livitoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered Account Holders via the email address on file, or by prominent notice on the Platform, prior to the changes taking effect.

The "Last Updated" date displayed at the top of this page indicates when the Policy was most recently revised. Your continued use of the Service following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to remain informed about how your personal data is being handled.

If you have any concerns about a change to this Policy, please contact our Data Protection team before the effective date of the change. If you do not accept the revised Policy, you should cease using the Service and may request Account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Livitoto, please contact us through the following channels. All data protection enquiries are handled by our support team with appropriate confidentiality and care.