Your privacy is a priority at uustoto, not an afterthought. This policy explains precisely what personal data we collect from Malaysian users, why we collect it, how we protect it, and the rights you have over your own information.
Before diving into the full policy, here are the six most important data-protection commitments uustoto makes to every registered user on the platform.
All data transmitted between your device and uustoto is encrypted using industry-standard TLS/SSL protocols. Your credentials and financial details are never sent in plain text.
uustoto does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data is used solely to operate and improve the Platform.
We collect only the data that is genuinely necessary to provide a safe and functional service — registration details, transaction records, and session activity. Nothing more.
If any personal data we hold about you is inaccurate or out of date, you have the right to request correction at any time through your account settings or by contacting support.
Subject to legal retention obligations, you may request the deletion of your personal data from uustoto's systems by submitting a written request to our support team.
We use cookies only for session management, analytics, and platform performance. We do not deploy third-party tracking or advertising cookies without your knowledge.
As a user of the uustoto Platform, you have specific rights regarding your personal data. These rights can be exercised by contacting our support team.
Request a copy of all personal data we hold about you.
Correct any inaccurate or incomplete personal information.
Request deletion of your data where no legal retention applies.
Limit how we process your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to data processing based on legitimate interests.
This Privacy Policy ("Policy") describes how uustoto ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "User") who access or use the uustoto website at https://uustoto.cam and all associated services.
uustoto is an online gaming and sports betting platform primarily serving Malaysian users. We operate in English and conduct all financial transactions in Malaysian Ringgit (MYR). Our Platform accepts deposits and withdrawals through locally recognised payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), and USDT TRC20.
We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy applies to all Users of the Platform regardless of location, though it is specifically designed with Malaysian users and the Personal Data Protection Act 2010 (PDPA) framework in mind.
For the purposes of this Privacy Policy, the following definitions apply:
uustoto collects personal data across several categories, as outlined in the table below. We collect only the data that is reasonably necessary to deliver, secure, and improve our services.
| Data Category | Specific Data Points | Collection Stage |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, MyKad or passport number | Registration & KYC verification |
| Contact Data | Email address, phone number, residential address | Registration |
| Financial Data | Deposit and withdrawal transaction records, payment method details (masked), account balances | Payment processing |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Automatic — on every visit |
| Usage Data | Pages visited, games played, bet history, session duration, click patterns | Automatic — during Platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When you contact support |
| Responsible Gambling Data | Self-exclusion requests, deposit or loss limit settings, session time-out activity | When you use RG tools |
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health records unless specifically required for regulatory compliance or responsible gambling purposes and with your explicit consent.
uustoto collects personal data through the following channels:
Data you provide directly when you register an account, complete identity verification, contact our support team, submit a withdrawal request, or respond to promotional communications. This includes registration forms, KYC document submissions, live chat conversations, and email correspondence.
Technical and usage data collected automatically through cookies, server logs, and analytics tools each time you visit or interact with the Platform. This includes your IP address, browser fingerprint, device characteristics, and session activity patterns.
Data received from payment service providers (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX partner banks including Maybank, CIMB, Public Bank, and Hong Leong Bank) in connection with processing your financial transactions. We may also receive identity verification data from regulated KYC service providers where we engage such services.
uustoto processes your personal data for the following specific purposes:
uustoto relies on the following legal bases for processing your personal data:
uustoto does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the following limited circumstances:
We share transaction-relevant data with payment processors — including Touch 'n Go, Boost, GrabPay, DuitNow, FPX partner banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and USDT/blockchain networks — to the extent necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and is contractually obligated to handle your data securely.
Where uustoto engages a third-party KYC service provider, your identity documents and verification data may be shared with that provider for the purpose of completing identity checks. All KYC partners are bound by strict data protection agreements.
We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive — including for the purposes of investigating fraud, money laundering, or other criminal activity.
Where uustoto operates as part of a group of related entities, data may be shared internally for the purposes of group-wide compliance, fraud monitoring, and consolidated reporting, subject to appropriate data protection agreements.
uustoto retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any overriding legal retention obligations.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.
uustoto employs a multi-layered approach to data security, incorporating both technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.
uustoto uses cookies and similar tracking technologies to support the operation and improvement of the Platform. The following categories of cookies are used:
uustoto does not deploy third-party advertising or behavioural tracking cookies. We do not permit external advertising networks to place cookies on your device through the Platform.
You may control cookie behaviour through your browser settings. However, disabling strictly necessary cookies may affect your ability to access certain features of the Platform, including account login and secure payment processing.
The uustoto Platform integrates with a number of third-party service providers to deliver core Platform functionality. These include payment gateways, identity verification services, and game content providers. All third-party service providers engaged by uustoto are required to:
uustoto does not include links to external third-party websites within the Platform. However, if you navigate to any external site independently, please note that uustoto has no control over and accepts no responsibility for the privacy practices of those sites. Their own privacy policies will apply.
The uustoto Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Access to the Platform by minors is expressly prohibited under our Terms & Conditions and is actively prevented through our registration and KYC processes.
If you have reason to believe that a person under the age of 21 has registered an account or submitted personal data to uustoto, please contact our support team immediately so that appropriate action can be taken.
As a User of the uustoto Platform, you have the following rights with respect to your personal data. These rights may be exercised by submitting a written request to our support team via live chat or the support email address listed in Section 16.
uustoto will respond to all verifiable data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, with notice provided to the requestor. uustoto will not charge a fee for responding to data rights requests unless requests are manifestly unfounded or excessive.
uustoto may transfer personal data to jurisdictions outside Malaysia in connection with the provision of services — for example, where game content providers, cloud infrastructure providers, or payment processors are located in other countries.
Where such transfers occur, uustoto ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that required under Malaysian data protection law. Safeguards may include standard contractual clauses, data processing agreements, or adequacy determinations where applicable.
By using the uustoto Platform, you consent to such international transfers of your personal data, subject to the protections described in this Policy.
uustoto reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. Material changes will be communicated to registered Users via a notice on the Platform homepage and/or by email to the registered account address, with a minimum of 7 days' advance notice before the revised Policy takes effect.
The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We recommend reviewing this page periodically. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by uustoto, please contact our Data Protection team through the following channels:
We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve substantive requests within 30 calendar days. For formal data rights requests (access, erasure, portability, etc.), we may require identity verification before processing the request to protect against unauthorised disclosure.
If you have questions about how uustoto handles your personal data, or if you'd like to exercise any of your data rights, our support team is ready to help — no ticket queues, no automated runarounds.
For players aged 21 and above only. Please gamble responsibly.