Sesetoto is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use and safeguard it, and what rights you have as a registered Player or site visitor. Please read this document carefully alongside our Terms & Conditions.
This Privacy Policy ("Policy") is issued by sesetoto ("sesetoto", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at sesetoto.cam (the "Platform"). This Policy governs the collection, use, storage, disclosure, and protection of personal data that sesetoto processes in connection with your use of the Platform and any associated services.
Sesetoto is committed to safeguarding the privacy of all individuals who interact with our Platform, whether as registered Players, prospective users browsing the site, or visitors accessing publicly available content. We take data protection seriously — not as a regulatory obligation alone, but as a core component of the trust we have built with our Malaysian player community.
By accessing the Platform, registering an account, or providing us with any personal information, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to this Policy, please do not access or use the Platform.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
Sesetoto collects Personal Data from and about you through the following categories and means:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Name, date of birth, MyKad number | Account registration, KYC compliance |
| Contact Data | Email, phone number, home address | Communication, account recovery |
| Financial Data | Bank account, e-wallet ID, crypto wallet address | Deposit and withdrawal processing |
| KYC Documents | MyKad scan, utility bill, selfie | Regulatory identity verification |
| Technical Data | IP address, device ID, browser | Security, fraud detection, analytics |
| Usage Data | Game history, betting records, session logs | Service delivery, responsible gambling monitoring |
| Cookie Data | Session tokens, preference cookies | Platform functionality, analytics |
Sesetoto uses the Personal Data we collect for the following specific purposes:
Sesetoto processes your Personal Data on the following legal bases:
Sesetoto does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We share Personal Data only in the following limited circumstances:
We engage third-party service providers who process Personal Data on our behalf and under our instructions. These include:
All Data Processors are bound by written agreements requiring them to process Personal Data only in accordance with sesetoto's instructions and to maintain appropriate security measures.
Sesetoto may disclose Personal Data to competent authorities, regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. Sesetoto will notify affected Players of such disclosure to the extent permitted by law.
In the event of a merger, acquisition, restructuring, or sale of all or a portion of sesetoto's business assets, Personal Data held by sesetoto may be transferred to the acquiring entity as part of that transaction. Affected Players will be notified of any such transfer and any change in the applicable privacy policy in advance of the transfer taking effect.
Sesetoto uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly and provide us with usage information.
You may control the use of non-essential cookies through your Account settings or by adjusting your browser preferences. Most modern browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies may impair your ability to log in to and use the Platform. Functional and analytics cookies may be disabled without affecting your ability to place bets or access games.
Sesetoto retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements.
As a general guide, the following retention periods apply:
Where Personal Data is no longer required for any lawful purpose, sesetoto will securely delete or anonymise that data in accordance with our internal data retention and destruction procedures.
Sesetoto implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include but are not limited to:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, sesetoto will notify affected individuals without undue delay and in accordance with applicable notification requirements.
Whilst sesetoto takes all reasonable precautions, no method of electronic transmission or storage is 100% secure. You are also responsible for maintaining the security of your own Account credentials.
Subject to applicable law and certain exceptions, you have the following rights in respect of your Personal Data held by sesetoto:
To exercise any of the above rights, please contact our support team via the channels listed in Section 15. We will respond to all verifiable data subject requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by an additional thirty (30) days with notification.
The Platform is strictly restricted to persons aged 21 years and above. Sesetoto does not knowingly collect Personal Data from any individual under the age of 21. Our registration process requires users to declare their date of birth, and our KYC process verifies age through government-issued identity documents.
If sesetoto becomes aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the relevant Account, delete the associated Personal Data to the extent permitted by applicable law, and report the matter to relevant authorities where required.
Parents or guardians who believe that a minor may have accessed the Platform or submitted Personal Data are encouraged to contact our support team immediately.
The Platform may integrate with or reference third-party services, including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. When you interact with these payment gateways to process deposits or withdrawals, you are subject to the privacy policies of those respective third-party providers.
Sesetoto is not responsible for the privacy practices, data processing activities, or content of any third-party services. We encourage you to review the privacy policies of all third-party services you access in connection with your use of the Platform.
The inclusion of references to third-party payment brands (Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay) in this Policy and on the Platform constitutes factual description of supported payment methods and does not imply any endorsement of or partnership with those entities beyond the provision of payment processing services.
Sesetoto's primary data infrastructure is designed to serve the Malaysian market. However, some of our Data Processors — including cloud hosting providers, KYC verification services, and fraud prevention platforms — may process data in server locations outside of Malaysia.
Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, sesetoto ensures that appropriate safeguards are in place to protect that data, including but not limited to: contractual clauses requiring the recipient to protect data to the standard required by applicable law, technical security measures ensuring encryption of transferred data, and ongoing assessment of the data protection standards applicable in the recipient jurisdiction.
By using the Platform, you acknowledge and consent to the transfer of your Personal Data outside of Malaysia where necessary for the purposes described in this Policy, subject to the safeguards described above.
Sesetoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where amendments are material, we will provide advance notice to registered Players via email or a prominent in-platform notification, with a reasonable period before the changes take effect.
Continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. The current version of this Policy is always available on this page, with the "Last Updated" date displayed prominently at the top of the document.
If you object to any amendment to this Policy, you should cease using the Platform and request closure of your Account prior to the amended Policy's effective date. Any Personal Data collected prior to the amendment will be processed in accordance with the Policy in effect at the time of collection.
If you have any questions, concerns, or formal requests regarding this Privacy Policy or sesetoto's processing of your Personal Data, please contact us through the following channels:
When submitting a data subject request, please include your registered email address, Account username, and a clear description of your request. We may ask you to verify your identity before processing your request in order to protect your Personal Data from unauthorised access.
Plain-English summary of the key data protection principles we apply every day on the Platform.
Your Personal Data is not a product we trade. It is used solely to operate your Account and comply with legal obligations — never sold to advertisers, data brokers, or third parties for their own benefit.
All data transmitted to and from the Platform is encrypted using TLS. Sensitive stored data — including KYC documents — is protected with AES-256 encryption at rest on secured servers.
Marketing communications are opt-in only. You can update your data preferences, manage cookie settings, or submit a data access or deletion request through your Account settings at any time.
We keep your data only as long as legally required. Account data is retained for five years post-closure for AML compliance, then securely deleted. Analytics data is anonymised within 24 months.
We only collect what we genuinely need. sesetoto does not collect data speculatively. Every data point we hold has a defined purpose, a legal basis, and a defined retention period.
All formal data access, correction, or deletion requests are acknowledged within five business days and resolved within 30 calendar days — in line with best-practice data subject request standards.
As a sesetoto Player, you have seven distinct rights over your personal data. Here's what each one means in practice.
Request a full copy of the Personal Data sesetoto holds about you, together with information on how and why it is processed.
Request that any inaccurate or incomplete Personal Data we hold about you be corrected or updated without delay.
Ask us to delete your Personal Data where it is no longer needed — subject to overriding legal retention requirements such as AML record-keeping obligations.
Request that we pause or limit our processing of your Personal Data in specific circumstances, such as when you contest the accuracy of the data we hold.
Receive your Personal Data in a structured, machine-readable format and transmit it to another service provider, where technically feasible.
Object to our processing of your Personal Data for direct marketing purposes or where processing is based on our legitimate interests.
Withdraw consent for processing activities based on your consent (e.g., marketing emails, optional analytics) at any time through your Account settings.
Sesetoto treats your personal data with the same care we apply to every aspect of the Platform. If you have questions about this Policy or want to exercise your data rights, our support team is available 24/7. Ready to experience sesetoto?
For players aged 21 and above only. Play responsibly. sesetoto operates as an entertainment platform.