At Gajitoto, protecting your personal data is not a legal checkbox — it is a core operating standard. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold as Gajitoto member.
This Privacy Policy ("Policy") describes the data practices of Gajitoto ("we", "us", "our", "the Company"), the operator of the online gaming platform accessible at gajitoto.cam and all associated digital services. This Policy applies to all personal data collected through your use of the Gajitoto Platform, including account registration, gaming activity, financial transactions, and communications with our support team.
Gajitoto is committed to processing personal data responsibly, transparently, and in compliance with applicable data protection legislation. We recognise that our members — across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia — entrust us with sensitive personal and financial information, and we take that responsibility seriously.
By registering an account or accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.
Your data belongs to you. Gajitoto does not sell, rent, or trade your personal information to third-party marketing organisations. Data sharing occurs only where strictly necessary to operate the Platform, comply with legal obligations, or where you have provided explicit consent.
The following terms carry specific meanings throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a living individual, including name, email address, financial account details, device identifiers, and IP address. |
| "Processing" | Any operation performed on Personal Data — including collection, storage, use, disclosure, modification, and deletion. |
| "Data Controller" | Gajitoto, as the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of Gajitoto under a contractual data processing agreement. |
| "KYC Data" | Identity verification documents and information submitted for Know Your Customer compliance, including government-issued ID and proof of address. |
| "Cookies" | Small text files placed on your device by the Platform to store session preferences, analytics identifiers, and user behaviour signals. |
Gajitoto collects personal data across several categories depending on your interaction with the Platform. The categories are as follows:
3.1 Identity & Contact Data
3.2 KYC Verification Data
3.3 Financial & Transaction Data
3.4 Gaming & Behavioural Data
3.5 Technical & Device Data
3.6 Communication Data
Gajitoto collects personal data through the following primary channels:
Gajitoto processes your personal data only for clearly defined and legitimate operational purposes. The table below sets out the primary data processing activities and their purposes:
| Processing Activity | Purpose |
|---|---|
| Account registration & management | To create and maintain your Gajitoto account, verify your identity, and provide access to Platform services |
| KYC compliance | To fulfil mandatory Know Your Customer obligations, prevent underage gambling, and comply with anti-money laundering requirements |
| Payment processing | To process MYR deposits and withdrawals via supported payment channels including DuitNow, FPX, and Malaysian bank transfers |
| Gaming & service delivery | To provide game access, settle bets and wagers, maintain account balances, and deliver the full suite of Platform services |
| Fraud & security monitoring | To detect, investigate, and prevent fraudulent activity, account abuse, multi-accounting, and financial crime |
| Responsible gambling management | To monitor at-risk gambling behaviour, enforce player-set limits, and support self-exclusion requests |
| Customer support | To respond to enquiries, resolve complaints, and provide multilingual assistance in English, Bahasa Melayu, and 中文 |
| Marketing communications | To send promotional offers, bonus notifications, and VIP programme updates — only where you have opted in to receive such communications |
| Platform improvement | To analyse usage patterns, test new features, and improve the overall Platform experience based on aggregated behavioural data |
Gajitoto processes personal data one or more of the following legal bases:
Gajitoto does not sell or rent personal data to third parties. We may share personal data with the following categories of recipients only where strictly necessary and subject to appropriate data processing agreements or legal obligations:
All third parties receiving personal data from Gajitoto are required to maintain appropriate technical and organisational security measures and are prohibited from using the data for any purpose beyond the specific contracted purpose.
Gajitoto retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations.
| Data Category | Retention Period |
|---|---|
| Account registration & identity data | Duration of active account plus 5 years post-closure, or as required by AML regulations |
| KYC verification documents | Minimum 5 years from date of submission or account closure, whichever is later |
| Financial transaction records | Minimum 7 years from transaction date in compliance with financial record-keeping requirements |
| Gaming session and bet history | Duration of active account plus 3 years post-closure |
| Support communication records | 3 years from the date of the final communication in each thread |
| Marketing preference records | Until opt-out is received or account closure, whichever is earlier |
| Technical & device log data | 13 months from collection, unless flaged for fraud investigation purposes |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with Gajitoto's internal data disposal procedures.
Gajitoto implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction.
While we implement robust security measures, no electronic system is completely immune to attack. You also play a role in keeping your Account secure — use a strong, unique password and notify us immediately at [email protected] if you suspect any compromise of your account credentials.
The Gajitoto Platform uses cookies and similar tracking technologies to support core Platform functionality, maintain your session, and provide us with aggregated usage analytics. The following cookie categories are in use:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security validation — required for the Platform to function | Session /24 hours |
| Strictly Necessary | Session management, authentication tokens, security validation — required for the Platform to function | Session /24 hours |
| Analytics | Aggregated, anonymised usage analytics to help us understand how members interact with the Platform and identify improvement areas | Up to 13 months |
| Fraud Prevention | Device fingerprinting signals used by our security systems to detect anomalous activity and multi-account behaviour | Up to 12 months |
Strictly necessary cookies do not require your consent as they are essential for Platform operation. All other cookie categories are only placed with your consent, which you may manage through the cookie preference panel accessible on the Platform. You may also clear cookies at any time through your browser settings, though this may affect Platform functionality.
As a Gajitoto member, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a request through our live chat or by email to [email protected]. We will respond within 30 days of receiving a valid, verified request.
Request a copy of the personal data we hold about you, including the purposes for which it is processed.
Request correction of inaccurate or incomplete personal data held on your account.
Request deletion of your personal data where retention is no longer legally required or justified.
Request that we restrict processing of your data in certain circumstances — e.g., while a correction request is being resolved.
Request your personal data in a structured, machine-readable format where technically feasible.
Object to processing of your data for direct marketing purposes at any time, with immediate effect.
Where processing is based on your consent, you may withdraw that consent at any time without affecting prior lawful processing.
Unsubscribe from promotional communications at any time via the unsubscribe link in any marketing email or by contacting support.
Please note that certain rights — particularly the right to erasure — may be limited where we are required to retain data for legal, regulatory, or fraud prevention purposes. Where we are unable to fulfil a request in full, we will provide a clear explanation of the reason.
The Gajitoto Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21, and registration on the Platform by minors is expressly prohibited.
Mandatory age verification is conducted on all new account registrations. We reserve the right to request additional proof of age documentation at any point during a member's lifetime on the Platform. Any account found to be registered by a person under the age of 21 will be immediately closed and all associated funds will be dealt with in accordance with our responsible gambling obligations, including notification to relevant authorities where appropriate.
If you become aware that a minor has provided us with personal data or has registered an account without authorisation, please contact us immediately at [email protected] so that we can take the necessary action.
This Platform is for players aged 21 and above only. Gajitoto takes underage gambling prevention extremely seriously and invests in ongoing age verification infrastructure to uphold this standard.
In the course of operating the Platform, your personal data may be transferred to and processed in jurisdictions outside Malaysia — for example, where our technology infrastructure providers, cloud hosting services, or KYC verification partners operate servers or processing facilities in other countries.
Where such international transfers occur, Gajitoto ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection legislation. These safeguards may include standard contractual data transfer clauses, data processing agreements with binding obligations on the recipient, or transfers to jurisdictions that have been assessed as providing adequate data protection standards.
By using the Gajitoto Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this section, subject to the safeguards outlined above.
Gajitoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. When material changes are made, we will notify registered members by posting a prominent notice on the Platform and, where appropriate, by sending an email notification to the address registered on your account.
The effective date displayed at the top of this page indicates the date of the most recent update. We encourage you to review this Privacy Policy periodically to remain informed of how we collect, use, and protect your personal data. Your continued use of the Platform following notification of any update constitutes your acceptance of the revised Policy.
The current version of this Privacy Policy is always available at gajitoto.cam/privacy-policy.
For any questions, concerns, or formal requests relating to this Privacy Policy or the exercise of your data rights, please contact the Gajitoto data team through any of the following channels:
To protect your privacy, all data rights requests require identity verification before we can action them. We may ask you to confirm certain account details before disclosing, modifying, or deleting any personal data associated with your account.
For concerns related to our data processing practices that we have not addressed to your satisfaction, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Six core privacy commitments we uphold for every Gajitoto member — from Kuala Lumpur to Johor Bahru and across Malaysia.
Gajitoto does not sell, rent, or trade your personal information to any third-party marketing organisation data broker — ever. Your data is used solely to operate the Platform and comply with legal obligations.
Every interaction on the Gajitoto Platform — from login to deposit to live chat — is protected by bank-grade TLS/SSL encryption. Your payment details and account data are encrypted both in transit and at rest.
Access, rectify, or request deletion of your personal data at any time. Opt out of marketing communications instantly. We honour all data rights requests within 30 days of receipt and identity verification.
We do not keep your data indefinitely. Retention periods are defined per data category and based on legal and operational necessity. Data is securely deleted or anonymised once retention periods expire.
Raw payment account details — including bank account numbers associated with Maybank, CIMB, Public Bank, and DuitNow transactions — are stored in tokenised form where supported, reducing exposure risk significantly.
Our support team handles all privacy and data rights enquiries in English, Bahasa Melayu, and 中文 — 24 hours a day, seven days a week. Reach us via live chat or at [email protected].
Have a question about how we handle your data? Our multilingual support team is available 24/7 — or explore our full range of responsible gaming features on the Gajitoto homepage. For players aged 21 and above only.