Introduction
This Privacy Policy ("Policy") describes how jeparatoto ("we", "us", "our", "the Platform"), operating through the website jeparatoto.cam, collects, processes, stores, shares, and protects personal data provided by or collected from users ("you", "User", "Player") in connection with your access to and use of the jeparatoto online casino and sports betting platform.
Jeparatoto is committed to handling your personal information with the highest standards of data protection and privacy. We collect only the data that is strictly necessary to operate the Platform, process transactions, comply with legal obligations, and deliver a safe and personalised gaming experience.
Important Notice: By registering an account on jeparatoto, accessing the Platform, or making any deposit or withdrawal transaction, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to these practices, you must cease using the Platform and contact our support team to initiate account closure.
This Policy applies to all Users of the jeparatoto Platform regardless of location, including players registered from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other parts of Malaysia. This Policy should be read in conjunction with our Terms & Conditions.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:
"Personal Data"
Any information that identifies or could reasonably be used to identify a natural person, whether directly or indirectly. This includes, but is not limited to, full name, date of birth, identification document number, email address, phone number, residential address, payment account details, and IP address.
"Processing"
Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction, whether or not by automated means.
"Data Controller"
Jeparatoto, as the entity that determines the purposes and means of processing personal data collected through the jeparatoto.cam Platform.
"Data Processor"
Any third-party service provider engaged by jeparatoto to process personal data on its behalf, including KYC verification providers, payment processors, fraud detection services, and analytics platforms.
"KYC" (Know Your Customer)
The identity and age verification process required before withdrawals are processed, involving submission of government-issued identification documents such as a Malaysian MyKad or international passport.
"Cookies"
Small text files placed on your device by the jeparatoto Platform to store session information, user preferences, and analytical data that improve the functionality and performance of the website.
Data We Collect
Jeparatoto collects personal data through multiple channels, including direct submission by the User during registration and account use, automated technical collection during Platform interaction, and third-party sources such as payment processors and KYC verification services. The categories of data we collect are as follows:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, MyKad / passport number, nationality | Registration form & KYC submission |
| Contact Data | Email address, phone number, residential address (including city and postcode) | Registration form |
| Financial Data | Bank account details, e-wallet account references (Touch 'n Go, Boost, GrabPay, Maybank, CIMB, DuitNow), cryptocurrency wallet addresses | Deposit / withdrawal submission |
| Transaction Data | Deposit amounts, withdrawal amounts, bet history, game activity, promotion usage, transaction timestamps | Automated Platform recording |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration, referring URL | Automated collection via server logs and cookies |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, feedback submissions | User-initiated contact with support team |
| Responsible Gambling Data | Deposit limit settings, self-exclusion requests, cooling-off period applications, session time alerts configured | Account settings interactions |
Minimum Data Principle: Jeparatoto adheres to the principle of data minimisation. We do not collect personal data beyond what is necessary to fulfil the specific purposes outlined in this Policy. We do not purchase third-party marketing data lists or create speculative profiles on non-users.
How We Process Your Data
Jeparatoto processes your personal data for the following specific and documented purposes:
- Account Creation and Management: To register your account, verify your identity and age (21+ requirement), manage your account preferences, and maintain accurate records of your registered profile.
- Transaction Processing: To process deposits made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, and supported cryptocurrency networks (BTC, ETH, USDT, LTC), and to facilitate withdrawal requests to your verified payment method.
- Regulatory Compliance and KYC: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and applicable gaming regulatory standards, including verifying that all Users are aged 21 or above.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
- Customer Support: To respond to support enquiries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
- Platform Improvement: To analyse aggregated and anonymised usage patterns, identify technical issues, and improve the functionality, performance, and user experience of the Platform.
- Responsible Gambling: To implement and monitor responsible gambling tools at your request, including deposit limits, self-exclusion orders, and session time controls.
- Marketing Communications: Where you have provided explicit consent, to send promotional offers, bonus notifications, and relevant Platform updates to your registered email address. You may withdraw consent at any time by contacting our support team.
Legal Basis for Processing
Jeparatoto processes your personal data under one or more of the following legal bases, depending on the specific processing activity:
Contractual Necessity
Processing is necessary to fulfil our contractual obligations to you as a registered Platform User — including processing your deposits, executing your bets, and paying your winnings. Without this processing, we cannot provide the core services of the Platform.
Legal Obligation
Processing is required to comply with applicable legal obligations, including AML regulations, KYC requirements, age verification obligations, financial reporting requirements, and gaming regulatory compliance. We are required to retain certain transaction records for defined statutory periods.
Legitimate Interests
Processing is conducted in pursuit of jeparatoto's legitimate business interests — including fraud detection, platform security, abuse prevention, and business analytics — provided that such interests are not overridden by your fundamental rights and privacy interests.
Consent
Where processing is based on your consent (for example, marketing email communications), we will obtain your explicit agreement before processing. You retain the right to withdraw consent at any time without affecting the lawfulness of processing undertaken prior to withdrawal.
Data Sharing & Third Parties
Jeparatoto does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Your data may be shared with carefully selected third-party service providers solely to the extent necessary to operate the Platform and deliver services to you. All third-party processors are bound by contractual data protection obligations consistent with applicable privacy standards.
Categories of third parties with whom your data may be shared include:
- Payment Processors: Financial institutions and e-wallet operators facilitating your transactions — including Touch 'n Go, Boost, GrabPay, DuitNow network participants, FPX banking partners, and cryptocurrency network validators. These parties receive only the transaction-specific data required to complete the payment.
- KYC and Identity Verification Providers: Licensed identity verification services that process your government-issued ID documents and confirm your age (21+) and identity on behalf of jeparatoto. These services operate under strict data security and confidentiality obligations.
- Fraud Detection and Security Services: Specialist providers that analyse transaction patterns, device fingerprints, and behavioural signals to identify and prevent fraudulent activity on the Platform.
- Gaming Content Providers: Licensed game studios that power the casino, live dealer, sports betting, and instant game products on jeparatoto may receive anonymised session and gameplay data for technical integration and RNG audit purposes.
- Legal and Regulatory Authorities: Jeparatoto may be required to disclose personal data to law enforcement agencies, gaming regulators, financial intelligence units, or courts of competent jurisdiction where mandated by applicable law or a valid legal order.
No Sale of Personal Data: Jeparatoto will never sell, license, or rent your personal data to advertisers, data brokers, or other commercial third parties for their independent marketing purposes. Any data sharing is strictly limited to what is necessary to operate the Platform and protect its integrity.
Data Retention
Jeparatoto retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:
- Active Account Data: Personal data associated with an active account is retained for the duration of the account's active status.
- Transaction and Financial Records: Transaction history, deposit records, withdrawal records, and associated financial data are retained for a minimum of five (5) years following the relevant transaction date, in compliance with applicable AML and financial record-keeping obligations.
- KYC Documentation: Identity verification documents (copies of MyKad, passport, or equivalent) are retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
- Support Communications: Live chat transcripts and email correspondence are retained for a period of up to three (3) years for dispute resolution, quality assurance, and legal defence purposes.
- Marketing Consent Records: Records of your marketing consent or opt-out are retained indefinitely to demonstrate compliance with your expressed preferences.
- Closed Account Data: Following voluntary account closure, personal data not subject to mandatory retention obligations will be securely deleted or anonymised within a reasonable period, not exceeding twelve (12) months from the closure date.
Cookies & Tracking Technologies
Jeparatoto uses cookies and similar tracking technologies on the Platform for the purposes of session management, security, user preference storage, and aggregated analytics. The following categories of cookies are used:
Strictly Necessary Cookies
Essential to the operation of the Platform. These cookies enable core functionality such as maintaining your login session, storing your account preferences, and ensuring secure authenticated access to your account. These cannot be disabled without preventing the Platform from functioning correctly.
Functional Cookies
Used to remember your language preferences, display settings, and other personalisation choices so that you do not need to reconfigure the Platform on each visit. These cookies improve your experience but are not essential to Platform operation.
Analytical Cookies
Used to collect aggregated, anonymised data about how Users interact with the Platform — including pages visited, time spent, navigation paths, and error encounters. This data is used exclusively to improve Platform performance and user experience. No individual User is identified through analytical cookies.
Security Cookies
Deployed to detect and prevent fraudulent activity, unauthorised access attempts, and suspicious behavioural patterns. These cookies are critical to Platform security and cannot be disabled.
You may manage cookie preferences through your browser settings. Disabling non-essential cookies may affect certain Platform features and personalisation options. Jeparatoto does not use third-party advertising cookies or behavioural tracking cookies for external advertising networks.
Data Security
Jeparatoto implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the jeparatoto Platform is encrypted using industry-standard TLS 1.3 protocols, ensuring that your personal and financial data cannot be intercepted in transit.
- Two-Factor Authentication (2FA): Available to all registered Users, 2FA provides an additional layer of account access security beyond your password credentials.
- Access Controls: Strict role-based access controls ensure that only authorised jeparatoto personnel with a documented business need can access personal data, and only to the extent required for their specific role.
- Encrypted Data Storage: Sensitive data fields — including financial account references and identity document copies — are stored using encryption at rest. Passwords are stored exclusively as salted cryptographic hashes; plain-text passwords are never stored by jeparatoto.
- Regular Security Audits: The Platform undergoes periodic penetration testing and security assessments by independent third-party security professionals to identify and remediate potential vulnerabilities.
- Incident Response: In the event of a confirmed personal data breach that poses a risk to Users, jeparatoto will notify affected Users and relevant regulatory authorities within a reasonable timeframe in accordance with applicable notification obligations.
Notwithstanding these measures, no online platform can guarantee absolute security of data transmission over the internet. You are responsible for maintaining the confidentiality of your account credentials and should notify jeparatoto support immediately if you suspect any unauthorised access to your account.
Your Data Rights
Subject to applicable law and any overriding legal obligations that prevent compliance (such as AML record-keeping mandates), you have the following rights with respect to your personal data held by jeparatoto:
Right of Access
You may request a copy of the personal data that jeparatoto holds about you, along with information about how it is being processed.
Right of Rectification
You may request correction of any inaccurate or incomplete personal data held about you. Certain corrections may require re-verification of your identity.
Right of Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose collected, subject to our legal retention obligations for financial and AML records.
Right to Restrict Processing
You may request that jeparatoto limit how your personal data is used in certain circumstances, for example while the accuracy of the data is being contested.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.
To exercise any of these rights, please contact the jeparatoto support team via 24/7 live chat or email at [email protected] (plain text — not a clickable link). We will respond to all legitimate requests within a reasonable timeframe, typically within 30 calendar days. Identity verification may be required before we process a data rights request.
Minors & Age Policy
The jeparatoto Platform is strictly restricted to individuals aged 21 years and above. Jeparatoto does not knowingly collect, store, or process personal data from any individual who is under 21 years of age. The registration process includes a date of birth declaration, and the KYC verification process requires submission of valid government-issued identification confirming the User's age.
If jeparatoto becomes aware that personal data has been collected from a User who is under 21 years of age, the account will be immediately suspended, all data associated with the account will be securely deleted in accordance with our retention obligations, and any funds present in the account will be returned to the originating payment method.
Parents and guardians who believe that a minor under their care may have accessed jeparatoto are encouraged to contact our support team immediately via live chat so that prompt action can be taken.
International Data Transfers
As an online gaming platform serving Malaysian players through an internationally operated infrastructure, jeparatoto may transfer your personal data to servers or service providers located outside of Malaysia. Where such transfers occur, jeparatoto ensures that appropriate safeguards are in place to protect your data to a standard consistent with the protections afforded under this Policy.
Safeguards governing international transfers include contractual data processing agreements with all third-party processors incorporating data protection obligations equivalent to those applicable to jeparatoto, and selection of processors operating in jurisdictions with recognised adequate data protection frameworks.
Jeparatoto does not transfer personal data to jurisdictions or entities that cannot demonstrate an adequate level of data protection. If you require further information about the specific safeguards applicable to a particular transfer, please contact our support team.
Changes to This Privacy Policy
Jeparatoto reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. When material changes are made, the "Last Updated" date displayed at the top of this Policy will be revised accordingly. Where changes are significant, jeparatoto will provide notice to registered Users via email or in-platform notification where reasonably practicable.
Your continued use of the jeparatoto Platform following the effective date of any revised Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed about how your personal data is being managed. If you disagree with any revision to this Policy, you should cease using the Platform and contact our support team to close your account.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by jeparatoto, please contact us through the following channels:
24/7 Live Chat Support
The fastest and most direct way to reach our team with privacy-related enquiries. Available at all times through the jeparatoto.cam Platform. Average response time is under 2 minutes. Live chat is suitable for general privacy questions, account data enquiries, and urgent requests such as suspected data breaches affecting your account.
Email — Data Protection Enquiries
For formal written privacy requests, including data access requests, erasure requests, and objection notices, please write to: [email protected] (plain text — not a clickable link). Please include your registered username, the nature of your request, and your preferred contact method for our response. We aim to acknowledge all email submissions within 24 hours and provide a substantive response within 30 calendar days.
Jeparatoto is committed to resolving all privacy-related enquiries in a transparent, professional, and timely manner. Your trust in how we handle your personal data is a responsibility we take seriously.
What This Policy Protects
No Data Selling
Your personal data is never sold, rented, or licensed to advertisers, data brokers, or commercial third parties for their independent marketing purposes.
256-bit Encryption
All data in transit is protected by TLS 1.3 encryption. Sensitive stored data — including financial references — is encrypted at rest using industry-standard algorithms.
Minimum Data Collection
We collect only what is strictly necessary to operate the Platform, process your transactions, verify your identity, and comply with applicable regulations.
Full User Rights
Access, rectify, erase, restrict, or port your data at any time. All rights requests are handled within 30 calendar days by our dedicated support team.
Defined Retention Limits
Data is retained only as long as necessary — typically 5 years for financial records per AML obligations. Non-mandatory data is deleted within 12 months of account closure.
Strict 21+ Enforcement
No data is collected from individuals under 21. Age verification is mandatory before any withdrawal is processed. Underage accounts are closed immediately.