Privacy Policy
At Sabatoto, protecting the personal data of our Malaysian members is a responsibility we take seriously. This Privacy Policy explains what information we collect, how we use it, who we may share it with, and what rights you hold over your own data.
How We Protect Your Data
256-Bit SSL Encryption
All data transmitted between your device and Sabatoto's servers is encrypted using industry-standard 256-bit SSL technology. Your personal and financial information is protected in transit at all times.
No Third-Party Marketing Sharing
Sabatoto does not sell, rent, or share your personal data with third parties for marketing purposes. Your information is used solely to provide and improve the services you have requested from us.
KYC Data Handled Securely
Identity documents submitted during KYC verification (MyKad, Passport, proof of address) are stored in encrypted secure environments with strict access controls and are used solely for verification purposes.
Your Rights, Your Control
You have the right to access, correct, and request deletion of your personal data held by Sabatoto. We provide clear processes for exercising these rights, outlined in full in this Privacy Policy.
Secure Data Storage
Member data is stored on secure, access-controlled servers. We conduct regular security audits and restrict internal data access to personnel who require it to perform their roles.
Marketing Opt-Out
You may opt out of promotional communications from Sabatoto at any time by updating your communication preferences in your Account settings or by contacting our support team directly.
Introduction
This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") describes how Sabatoto (hereinafter referred to as "Sabatoto", "we", "us", or "our"), the operator of the online sports betting and live casino platform accessible at https://sabatoto.cam (hereinafter referred to as "the Platform" or "the Site"), collects, processes, stores, and protects the personal data of users (hereinafter referred to as "Members", "Users", "you", or "your") in connection with the use of our Services.
Sabatoto is committed to handling personal data responsibly and in compliance with applicable data protection and privacy laws. This Policy has been prepared to provide full transparency about our data practices and to inform you of your rights with respect to your personal information.
This Policy should be read alongside our Terms and Conditions and Responsible Gambling Policy, both of which are incorporated by reference and form part of the overall agreement governing your use of the Sabatoto Platform.
By registering an account on Sabatoto, using any of our Services, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your data as described herein.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, and online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | Sabatoto, as the entity that determines the purposes and means of Processing Personal Data collected through the Platform. |
| "Data Processor" | Any third party engaged by Sabatoto to process Personal Data on its behalf, in accordance with Sabatoto's instructions. |
| "KYC Documents" | Identity verification documents submitted by Members, including Malaysian MyKad, Driver's License, Passport, and proof-of-address documentation. |
| "Cookies" | Small text files placed on your device by the Platform to enable functionality, remember preferences, and support analytics. |
| "Services" | All products, features, and services made available through the Sabatoto Platform, including sports betting, live casino, slots, payment processing, and customer support. |
Categories of Personal Data We Collect
Sabatoto collects Personal Data from Members in the following categories, depending on the nature of your interaction with the Platform and the Services you use:
Identity Data
Full legal name, date of birth, gender, nationality, and MyKad / Passport number provided during registration or KYC.
Contact Data
Email address, Malaysian mobile number, and residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).
Account Data
Username, encrypted password, account settings, communication preferences, and VIP tier status.
Financial Data
Payment method details, transaction records (deposits and withdrawals in MYR), and e-wallet / bank account references used for payouts.
KYC Documents
Scanned or photographed copies of Malaysian identity documents and proof-of-address documents submitted for verification.
Activity Data
Betting history, game participation records, login timestamps, session duration, and responsible gambling tool usage.
Technical Data
IP address, device type, browser type and version, operating system, and unique device identifiers.
Communications Data
Records of your interactions with Sabatoto's customer support team, including live chat transcripts and email correspondence.
Minimum Necessary Principle: Sabatoto collects only the Personal Data that is reasonably necessary for the purposes described in this Policy. We do not collect data that is excessive or irrelevant to the legitimate operation of our Services.
How We Collect Your Personal Data
Sabatoto collects Personal Data through the following means:
- Direct Provision: Information you provide voluntarily during account registration, KYC submission, deposit and withdrawal requests, support interactions, and promotional participation.
- Automated Collection: Technical and activity data collected automatically when you access and use the Platform, including via Cookies, log files, and usage analytics tools.
- Third-Party Payment Providers: Transaction confirmation data received from integrated Malaysian payment channels, including Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.
- Identity Verification Services: Data received from third-party KYC and anti-fraud service providers engaged to assist in verifying Member identities.
- Public Sources: In limited circumstances, information may be sourced from publicly available records for fraud prevention or regulatory compliance purposes.
Purposes of Data Processing
Sabatoto processes your Personal Data for the following purposes. Where a legal basis applies to each purpose, this is described in Section 6 below.
5.1 Account Management and Service Delivery
To register and maintain your Sabatoto account, process deposits and withdrawals in MYR, deliver betting and gaming Services, administer VIP tier benefits, and provide customer support.
5.2 Identity Verification and KYC Compliance
To verify your identity and age (minimum 21 years) in compliance with anti-money laundering (AML) and Know Your Customer (KYC) obligations, using the identity documents you provide.
5.3 Security and Fraud Prevention
To monitor platform activity for signs of fraudulent behaviour, unauthorised account access, duplicate account creation, promotion abuse, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
5.4 Responsible Gambling
To apply and monitor responsible gambling tools you have activated, including deposit limits, session time limits, cooling-off periods, and self-exclusion arrangements, and to identify and contact Members who may be exhibiting problem gambling behaviour.
5.5 Communications and Marketing
To send you transactional communications (account notifications, deposit confirmations, withdrawal receipts), and, where you have opted in, promotional communications regarding Sabatoto offers, bonuses, and events. You may withdraw marketing consent at any time.
5.6 Platform Improvement and Analytics
To analyse usage patterns, measure platform performance, and improve the user experience for Malaysian players across all device types.
5.7 Legal and Regulatory Compliance
To comply with applicable legal, regulatory, and contractual obligations, including responding to lawful requests from competent Malaysian or international authorities.
Legal Basis for Processing
Sabatoto processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:
- Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you accepted at registration, including account management, transaction processing, and KYC verification.
- Legal Obligation: Processing required for compliance with applicable anti-money laundering (AML), counter-terrorism financing (CTF), identity verification, and other regulatory obligations.
- Legitimate Interests: Processing carried out in Sabatoto's legitimate interests, including fraud prevention, platform security, and service analytics, where such interests are not overridden by your fundamental rights.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
Data Sharing & Disclosure
Sabatoto does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may, however, disclose your data to the following categories of recipients in the circumstances described below:
- Payment Service Providers: Malaysian payment channel operators (including Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processors) solely for the purpose of processing your transactions.
- KYC and Identity Verification Providers: Third-party verification services engaged to assist in confirming the identity and age of Members, acting as Data Processors under Sabatoto's instructions.
- Technology and Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers engaged to support Platform operations, subject to contractual data protection obligations.
- Customer Support Tools: Live chat and email support software providers, where necessary to deliver support Services to Members.
- Regulatory and Law Enforcement Authorities: Where Sabatoto is required or permitted by law to disclose Personal Data to competent authorities in connection with legal proceedings, investigations, or regulatory compliance.
- Professional Advisers: Legal, financial, and audit advisers acting in connection with their professional services, subject to applicable confidentiality obligations.
Important: All third parties with whom Sabatoto shares your Personal Data are required to handle it in accordance with this Policy and applicable data protection law. Sabatoto does not authorise any third party to use your data for their own marketing purposes.
Data Retention
Sabatoto retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:
- Active Accounts: Personal Data is retained for the duration of your active membership on the Sabatoto Platform.
- Closed or Terminated Accounts: Following Account closure, Sabatoto retains Personal Data for a minimum period of five (5) years to satisfy anti-money laundering recordkeeping obligations and to resolve any outstanding disputes.
- KYC Documentation: Identity and address verification documents are retained for a minimum period of five (5) years following account closure, in line with regulatory requirements.
- Transaction Records: Financial transaction records, including all MYR deposits and withdrawals, are retained for a minimum of five (5) years for audit and compliance purposes.
- Support Correspondence: Live chat and email support records are retained for a period of three (3) years from the date of the interaction.
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents identification of the individual.
Cookies & Tracking Technologies
Sabatoto uses Cookies and similar tracking technologies (including web beacons and local storage objects) to operate the Platform, remember your preferences, and analyse how Members interact with our Services. The following categories of Cookies are used:
- Strictly Necessary Cookies: Essential for the basic functioning of the Platform, including session management and account authentication. These cannot be disabled without impairing core functionality.
- Functional Cookies: Used to remember your preferences, such as language settings, and to provide enhanced, personalised features.
- Analytics Cookies: Used to collect anonymised data about how Members use the Platform, enabling Sabatoto to improve performance and user experience. Data collected is aggregated and does not personally identify individual Members.
- Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access, and other security threats.
You may manage or disable non-essential Cookies through your browser settings. Please note that disabling certain Cookies may affect your ability to use some features of the Sabatoto Platform.
Please Note: Sabatoto does not use third-party advertising Cookies or track your activity across other websites for targeted advertising purposes.
Your Data Rights
As a Member of Sabatoto, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team using the details in Section 15. Sabatoto will respond to all verified requests within a reasonable timeframe in accordance with applicable law.
Right of Access
You may request a copy of the Personal Data Sabatoto holds about you, together with information about how it is used and with whom it is shared.
Right to Rectification
You may request correction of any inaccurate or incomplete Personal Data held about you. Some corrections can be made directly through your Account settings.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to Sabatoto's legal retention obligations.
Right to Restrict Processing
You may request that Sabatoto restricts the processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested.
Right to Data Portability
Where processing is carried out by automated means on the basis of consent or contract, you may request a copy of your data in a structured, machine-readable format.
Right to Object
You may object to processing carried out on the basis of Sabatoto's legitimate interests. You also have an unconditional right to object to direct marketing communications at any time.
Please note that certain rights are subject to exemptions under applicable law. In particular, Sabatoto may be unable to delete data that it is required to retain for regulatory or legal compliance purposes. We will always explain clearly if a limitation applies to your request.
Children's Privacy
The Sabatoto Platform is strictly intended for individuals aged 21 years and above. Sabatoto does not knowingly collect or process Personal Data belonging to persons under the age of 21. All registration attempts are subject to age verification through our KYC process.
If Sabatoto becomes aware that Personal Data has been collected from a person under the age of 21, such data will be deleted immediately, the associated Account will be closed, and any funds held in the Account will be returned via the original payment method following appropriate review.
Age Restriction Notice: Gambling is strictly for adults aged 21 and above. If you are aware of an underage person who has registered an account on Sabatoto, please contact our support team immediately at [email protected] so that we may take prompt action.
Data Security Measures
Sabatoto implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
- Encrypted storage of all sensitive Personal Data and KYC documentation at rest;
- Role-based access controls limiting internal data access to authorised personnel only;
- Regular security audits, vulnerability assessments, and penetration testing;
- Multi-factor authentication options for Member account access;
- Continuous monitoring for unauthorised access attempts and suspicious activity;
- Staff training on data protection obligations and secure data handling practices.
Notwithstanding the above, no method of electronic transmission or storage is completely secure. While Sabatoto takes all reasonable steps to protect your data, we cannot guarantee absolute security. You also play an important role in keeping your account secure — please ensure your login credentials are kept confidential and are not shared with any third party.
Third-Party Links and Services
The Sabatoto Platform may contain references to or integrations with third-party services, including payment channel providers such as Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and others. When you interact with these third-party services, you are subject to the privacy policies of those respective providers.
Sabatoto has no control over the data practices of third-party service providers beyond our contractual Data Processor arrangements, and we accept no responsibility for the privacy policies or practices of any third party. We encourage you to review the privacy policies of any third-party service you use in connection with your Sabatoto account.
Amendments to This Policy
Sabatoto reserves the right to amend, update, or revise this Privacy Policy at any time to reflect changes in applicable law, our data practices, or the Services we offer. Any material changes to this Policy will be communicated to Members via email notification to the registered email address and/or via a prominent notice on the Platform.
We encourage all Members to review this Policy periodically to remain informed about how we handle your Personal Data. The date at the top of this page indicates when this Policy was last updated. Your continued use of the Sabatoto Platform following the publication of any amendment constitutes your acknowledgement of the revised Policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 10, please contact Sabatoto's support team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them as promptly as practicable.
When submitting a data rights request, please include your registered email address, Account username, and a clear description of your request to allow our team to process your enquiry efficiently.
Your Data. Your Rights. Your Control.
Questions about how Sabatoto handles your personal data? Our support team is here around the clock to assist every Malaysian member.
21+ Only. Please gamble responsibly. See our Responsible Gambling page for support tools and resources.