At Gengtoto, your privacy is not merely a legal obligation — it is a responsibility we take seriously every day. This document clearly explains how we handle your personal information with full transparency and accountability.
Gengtoto has built a multi-layered data protection system that ensures every piece of your information is handled with the utmost confidentiality and integrity.
All data transmitted between your device and gengtoto's servers is protected with 256-bit SSL encryption — the same technology used by the world's leading financial institutions. No third party can intercept your information during transfer.
Your personal data is stored on secure servers with multi-layered access controls. Only authorised personnel with specific operational needs may access your information, and every access is logged for audit purposes.
Gengtoto has never and will never sell, rent, or transfer your personal data to third-party advertisers or data brokers. Your information is used solely to provide and improve our services to you.
You have the right to access, correct or request deletion of your personal data at any time. Gengtoto fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA), giving you complete control over your own information.
Gengtoto's identity verification (KYC) process is designed to protect you from identity fraud. Documents you submit are encrypted, securely stored, and used solely for account verification purposes — never shared without your consent.
You have full control over the marketing communications you receive from Gengtoto. You may unsubscribe at any time through your account settings or by contacting our customer support, and requests will be processed within 48 hours.
Have a question about your privacy?
View FAQEffective Date: 1 January 2026 | Version: 2.5 | This policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and supersedes all previous versions.
Welcome to the Privacy Policy Page Gengtoto. This policy explains how Gengtoto, as the operator of an online betting platform in Malaysia accessible via gengtoto.vin, collecting, processing, storing and protecting your personal data.
We understand that your trust is the most valuable asset we hold. As such, gengtoto is committed to handling all members' personal information with the highest level of care, confidentiality, and transparency. This Privacy Policy applies to all users who visit, register with, or use any services offered through the gengtoto platform.
By continuing to use our platform after reading this policy, you give your consent to the data processing practices as described herein. If you do not agree with any part of this policy, we advise you not to proceed with registration or use of the platform.
This Privacy Policy should be read together with Terms and Conditions gengtoto. Together, these two documents form a comprehensive agreement between you and gengtoto regarding your use of the platform.
Gengtoto collects various types of personal information depending on your interactions with our platform. We only collect data that is strictly necessary for the stated purposes:
When you register a new account at gengtoto, we collect basic information including your full name, identification card number, date of birth, mobile number, email address, and your preferred username. This information is required to create your account and verify your identity.
To comply with anti-money laundering regulatory requirements and ensure platform security, we may request copies of your identity verification documents such as your national identity card, passport or other valid official documents. These documents are processed securely and stored with full encryption.
To process deposits and withdrawals, we collect information related to your payment method, including your bank account number, e-wallet phone number, and other required transaction details. Full credit or debit card numbers are never stored in our system.
| Data Type | Example | Purpose of Collection |
|---|---|---|
| Personal Identity | Name, IC number, date of birth | Account Verification & KYC |
| Contact Information | Email, phone number | Communication & Notifications |
| Financial Data | Bank account number, e-wallet | Deposit & withdrawal processing |
| Technical Data | IP address, device type, browser | Security & Fraud Prevention |
| Usage Data | Game logs, betting history | Service Enhancement & Compliance |
| Cookie Data | Preferences, login sessions | Enhanced user experience |
We automatically collect certain technical information when you access our platform, including your IP address, browser type and version, device operating system, pages you visit, session duration, and other diagnostic data. This information is used to improve platform performance and detect suspicious activity.
Gengtoto uses collected personal data solely for legitimate and transparent purposes. Below is a detailed description of how your information is used:
gengtoto does not use your data for any purpose other than those stated above. Any new use will be communicated to you and will require your prior consent.
Gengtoto understands how sensitive your personal information is and takes an extremely careful approach when it comes to sharing data. We does not sell, rent, or trade your personal information to any party for marketing or commercial purposes.
However, there are limited situations where we need to share information with certain parties for platform operational purposes:
We work with carefully selected third-party service providers to support our platform operations, including payment processors (DuitNow, FPX, Touch 'n Go, GrabPay, Boost), cloud infrastructure providers, and KYC verification platforms. All such providers are bound by strict confidentiality agreements and may only use your data for purposes specified by gengtoto.
Gengtoto may be required to disclose your personal information to government authorities, law enforcement agencies, or courts when mandated by applicable Malaysian law or a valid court order. In such circumstances, we will endeavour to notify you where permitted to do so.
In cases involving fraud, money laundering, serious security threats or severe violations of the Terms and Conditions, Gengtoto reserves the right to share relevant information with the relevant authorities or security partners without prior notice to the user concerned.
gengtoto never shares your personal data with advertisers, data brokers, or any company not directly involved in the operation of our platform.
Gengtoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
You can control and manage cookies through your browser settings. Most modern browsers allow you to view, manage and delete stored cookies. Please note, however, that disabling certain cookies may affect the functionality and your experience on the Gengtoto platform, particularly essential cookies required for session authentication.
Gengtoto invests seriously in technical security infrastructure to ensure your personal data is always protected. The security measures we implement encompass multiple layers of protection:
While we take all reasonable precautions, no digital security system can guarantee one hundred percent absolute protection. In the event of a data breach affecting your information, gengtoto will notify you within the timeframe required by applicable Malaysian law.
The gengtoto platform undergoes comprehensive security testing on a regular basis. All our payment systems comply with international industry security standards to ensure every transaction you make is fully protected.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data that Gengtoto fully respects:
To exercise any of the above rights, you may contact the gengtoto support team via live chat within the platform or refer to the FAQ us. We will process your request within 30 business days in accordance with PDPA requirements.
Gengtoto retains your personal data for as long as your account is active or as long as is necessary to provide services to you. Following account closure, we retain certain records in accordance with applicable legal and regulatory requirements:
Once the specified retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked back to your identity.
The gengtoto Platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process or store any personal data from individuals under the age of 18.
If we discover that we have collected personal data from anyone under the age of 18, we will take immediate steps to delete that information and close the account in question. Parents or guardians who become aware that their minor has registered on our platform are advised to contact our support team immediately.
Gengtoto employs an age verification system as part of our KYC process. Any attempt to falsify age information constitutes a serious violation of our Terms and Conditions and may result in permanent account closure.
In the course of operating our platform, your personal data may be processed or stored on servers located outside Malaysia. This occurs primarily when we utilise cloud infrastructure services or internationally accredited technology providers.
Whenever your personal data is transferred outside Malaysia, gengtoto ensures that protection equivalent to or greater than that required under Malaysia's PDPA is applied to your data. This is achieved through legally binding data transfer agreements with all overseas data recipients.
We only work with service providers based in countries or regions recognised as having adequate data protection standards, or those that have agreed to comply with the data security standards set by gengtoto.
Gengtoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements or platform service improvements.
When material changes occur, we will notify you through one or more of the following methods:
The effective date of the latest version of this Privacy Policy is always displayed at the top of this document. Your continued use of the gengtoto platform after any amendments take effect constitutes your acceptance of the revised version. We encourage you to review this page periodically.
You can access the latest version of this Privacy Policy at any time via the link in the footer of the Gengtoto platform. An amendment history is available upon request through our customer support.
Gengtoto has a Data Protection Officer (DPO) responsible for ensuring compliance with the PDPA and our internal privacy policies. If you have any questions, concerns or complaints regarding how we handle your personal data, you may contact us through the following channels:
We are committed to responding to all privacy-related inquiries within 5 business days. For more complex complaints requiring investigation, we will provide you with an update within 30 business days in accordance with Malaysia's PDPA requirements.
If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body.