Ulartoto takes the privacy of every member seriously. This policy explains transparently how we collect, use, store and protect your personal information – all in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
All data transmitted between your device and ulartoto's servers is protected with 256-bit SSL encryption — the same security standard used by Malaysian banking institutions.
Ulartoto operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data owner are respected and upheld.
Your personal data is never sold, rented or shared with third-party advertisers. Your information belongs to you – ulartoto uses it only for the purposes you have agreed to.
You may access, update, request a copy of, or request deletion of your personal data at any time through your account settings or by contacting our team.
Ulartoto uses cookies solely to improve the user experience and session security. You can manage your cookie settings through your web browser at any time.
In the event of any security incident involving your data, ulartoto is committed to notifying you within 72 hours in line with international best practices.
Quick Summary: Ulartoto collects your data solely to operate our services, ensure account security, and comply with the law. We do not sell your data to anyone. You have the full right to access, correct, or request deletion of your data at any time.
Who we are and what this policy covers
This Privacy Policy is published by ulartoto ("we", "the platform") and applies to all users and members of the ulartoto platform who access our website at ulartoto.ws. This Policy sets out transparently how we handle your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Ulartoto understands that the trust of our members is our most valuable asset. That is why we are committed to handling your personal data responsibly – not merely because the law requires it, but because it is the right thing to do for our community of over 500,000 loyal members across Malaysia.
This policy applies to all ulartoto services, including slots, Live Casino, poker, table games, jackpots, Sports Betting and all other platform features we offer. By using any of our services, you agree to the terms of this Privacy Policy.
Categories and details of data collected by ulartoto
Ulartoto only collects data that is genuinely necessary to provide our services safely and effectively. The following are the categories of data we collect:
| Category | Example Data | Requirement |
|---|---|---|
| 🪪 Identity | Full name, date of birth, MyKad number, gender | Mandatory – identity verification & member eligibility |
| 📞 Contact | Email address, Malaysia phone number, postal address | Mandatory – account communications & recovery |
| 💳 Financial | E-wallet account details (TnG, GrabPay, Boost, ShopeePay), bank account details (Maybank, CIMB, etc.), and transaction history | Mandatory – deposit & withdrawal processing |
| 💻 Technical | IP address, device type, operating system, web browser, screen resolution | Automatic – security & platform optimisation |
| 🎮 Usage | Game history, favourite games, betting records, session duration | Automatic – personalise experience & responsible gaming |
| 📍 Location | Approximate location based on IP address (country/state) | Automatic – geo-compliance |
Ulartoto never collect credit or debit card numbers directly. All payments are processed through secure third-party payment gateways such as FPX, Touch 'n Go, GrabPay and DuitNow, each with their own security certifications.
Data collection methods used by ulartoto
Ulartoto collects your personal data through the following methods:
How and why your data is used by ulartoto
Ulartoto uses your personal data only for legitimate, disclosed purposes. The following are the primary purposes for which your data is used:
You may withdraw consent to receive marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by updating your notification settings in your ulartoto account.
Who may receive your data and under what circumstances
Ulartoto never sells, rents or transfers your personal data to third parties for marketing or commercial purposes. However, in certain limited situations, your data may be shared with the following parties:
Every third party that receives your data is bound by a data protection agreement requiring them to handle that information at a level of security equal to or higher than ulartoto's standards.
The security systems and procedures ulartoto employs
Ulartoto invests seriously in data security infrastructure to ensure your personal and financial information remains protected at all times. Key security measures we employ include:
While we take all reasonable precautions, no security system in the world is 100% immune to every threat. We encourage you to play your part in protecting your account by using a strong password and never sharing your login credentials with anyone.
How long ulartoto retains your personal data
Ulartoto retains your personal data only for as long as necessary for the purpose it was collected, or as required under Malaysian law:
| Data Type | Retention Period | Reason |
|---|---|---|
| Identity data (MyKad, name) | Duration of active account + 7 years | Malaysia AML & financial law requirements |
| Financial transaction records | 7 years | Compliance with the Anti-Money Laundering Act 2001 |
| Game logs & activity | 2 years | Dispute resolution & responsible gaming monitoring |
| Support communication logs | 3 years | Historical reference & service improvement |
| Technical logs (IP, session) | 90 days | Security & Fraud Detection |
| Marketing data (with consent) | Until consent is withdrawn | Promotional communications related to ulartoto |
Upon expiry of the retention period, your data will be securely deleted or fully anonymised so that it can no longer be linked to you.
Your guaranteed rights as a data owner under PDPA 2010
As an ulartoto member, you have the following rights regarding your personal data under Malaysia's PDPA 2010:
You have the right to request a copy of all personal data we hold about you.
You may request corrections to any inaccurate or incomplete data at any time.
You may request the deletion of your data, subject to applicable legal obligations.
You may object to the processing of your data for marketing purposes at any time.
You may request a copy of your data in a machine-readable format.
You may request to restrict the processing of your data in certain circumstances.
To exercise any of the rights above, please contact our Data Protection Officer at privacy@ulartoto.ws. We will process your request within 30 business days.
How ulartoto uses cookies to enhance your experience
Ulartoto uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage. The types of cookies we use are as follows:
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Maintaining login sessions, account security, language preferences | Session / 30 days | No – required for the platform to function | |
| Understanding how members use the platform to drive improvements | 2 years | Yes – via browser settings | |
| Displaying relevant ulartoto promotions based on your interests | 90 days | Yes – via browser or account settings |
You can manage or delete cookies at any time through your web browser settings. Please note that disabling essential cookies may affect the functionality of the ulartoto platform.
Ulartoto's commitment to underage user safety
Ulartoto strictly does not collect or process personal data of individuals under the age of 18. Our platform is designed exclusively for adults, and we have age verification measures in place to prevent registration by minors.
Warning: If we discover that personal data belonging to an individual under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on ulartoto are advised to contact us at privacy@ulartoto.ws without delay.
How we update this policy from time to time
Ulartoto may update this Privacy Policy from time to time to reflect changes in our practices, new technologies, or updated legal requirements. When material changes are made, we will notify you via an in-platform notification and/or an email to the address you have registered.
How to contact ulartoto for privacy-related enquiries
If you have any questions, concerns, or wish to exercise your rights in relation to this Privacy Policy, please contact ulartoto's Data Protection Officer (DPO) through the following channels:
We are committed to responding to all privacy-related enquiries within a reasonable timeframe. For more complex requests such as data access rights or deletion requests, please allow up to 30 working days for us to process and fulfil your request.
Ulartoto is committed to protecting your privacy to the highest security standards in line with Malaysia's PDPA. Join over 500,000 members who trust ulartoto as their online betting platform of choice.
For members aged 18 and above only | Your data is protected under Malaysia's PDPA 2010