◆ Data Protection & Privacy ◆
Your personal data belongs to you. This policy explains clearly and honestly how Turkitoto collects, uses, stores, and protects the information you share with us.
Last Updated: 1 January 2026A plain-English summary of our core data commitments. The full legal policy follows below.
We collect only the personal information that is necessary to operate your account, process payments, verify your identity, and fulfil our legal obligations. We do not collect data for its own sake.
All personal data is stored on secured servers protected by 256-bit TLS encryption. Access to your data is restricted to authorised personnel only, with role-based access controls and audit logging in place.
Turkitoto does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used to serve you, not to monetise you as a product.
You have the right to access, correct, export, or request deletion of your personal data at any time. We respond to all data rights requests within 30 days, with no unnecessary barriers or charges.
Every data processing activity at Turkitoto has a clearly stated lawful basis — whether that is contract performance, legal obligation, legitimate interest, or your explicit consent. We do not process data in the shadows.
We do not retain your personal data indefinitely. Account data is held for the duration of your membership plus a defined post-closure retention window to meet AML and regulatory record-keeping obligations.
This Privacy Policy ("Policy") describes how Turkitoto ("we", "us", "our", "the Platform") — the online casino and sports betting platform accessible at https://turkitoto.cam — collects, processes, stores, and protects the personal information of its users ("you", "your", "User", "Member") in connection with the provision of its services.
Turkitoto is committed to handling personal data responsibly and in accordance with applicable international data protection standards and principles. This Policy is designed to give you a clear and complete understanding of our data practices so that you can make informed decisions about your use of the Platform.
This Policy applies to all personal data collected by Turkitoto through the Platform, its mobile interfaces, customer support channels, and any other touchpoints through which you interact with us. It should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy.
The following terms are used throughout this Policy with specific meanings:
The Data Controller responsible for the personal data collected through the Turkitoto Platform is the legal entity operating the Turkitoto brand under its international gaming licence. The Platform operates under international online gaming regulatory frameworks and is not licensed by, nor does it operate under the authority of, any Malaysian government agency. Malaysian data protection considerations are respected as a matter of operational policy.
All data rights requests, privacy complaints, and queries relating to this Policy should be directed to our Privacy team at [email protected] with the subject line "Privacy Request". We will acknowledge all such communications within five business days and provide a substantive response within thirty days.
Turkitoto collects personal data through several channels: directly from you when you register or interact with the Platform; automatically through your use of the Platform (device and usage data); and from third parties such as payment processors and identity verification providers.
| Data Category | Collection Source | Examples |
|---|---|---|
| Identity Data | Provided by you | Full legal name, date of birth, nationality, government ID number (as part of KYC) |
| Contact Data | Provided by you | Email address, phone number, residential address (including Malaysian city/postcode) |
| Financial Data | Provided by you / payment processors | Payment method details (e.g., Touch 'n Go eWallet account reference, bank account name, cryptocurrency wallet address), deposit/withdrawal history in MYR |
| KYC Documents | Provided by you | Copy of Malaysian MyKad or passport, proof of address documents, selfie verification images |
| Account Data | Generated by Platform | Username, account ID, account balance, transaction records, bonus history, game play history, VIP tier status |
| Technical Data | Collected automatically | IP address, browser type and version, device type and operating system, session timestamps, referral URL |
| Usage Data | Collected automatically | Pages visited, game titles accessed, features interacted with, betting markets browsed, click patterns |
| Communications Data | Provided by you | Live chat transcripts, email correspondence, support ticket content, survey responses |
| Marketing Preferences | Provided by you | Opt-in/opt-out status for email marketing, promotional notification preferences |
Every data processing activity carried out by Turkitoto is conducted on one of the following lawful bases:
Turkitoto uses the personal data we collect for the following specific purposes:
6.1 Account Management. To create, administer, and maintain your Account, authenticate your identity at login, process deposits and withdrawals through Malaysian payment channels (including Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, GrabPay, Boost, and Public Bank), and maintain accurate account balance records.
6.2 KYC and Regulatory Compliance. To verify your identity and age (21+ requirement), conduct AML screening against sanctions and politically exposed persons (PEP) databases, fulfil reporting obligations to licensing regulators, and investigate suspicious transaction activity.
6.3 Service Delivery. To provide access to games, betting markets, live dealer tables, and all other Platform features; to process bonus credits and VIP tier calculations; to resolve disputes relating to game outcomes and transactions.
6.4 Customer Support. To respond to your queries, complaints, and data rights requests; to maintain records of support interactions for training and quality assurance; to proactively contact you regarding account security events.
6.5 Fraud Prevention and Security. To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, underage gambling, bonus abuse, multi-accounting, and other prohibited activities described in our Terms & Conditions.
6.6 Responsible Gambling. To monitor play patterns for signs of problem gambling behaviour; to apply voluntary and mandatory responsible gaming tools (deposit limits, self-exclusion); and to proactively identify accounts that may benefit from responsible gambling outreach.
6.7 Platform Improvement. To analyse aggregated and anonymised usage data to improve Platform performance, identify popular game categories and sports markets among Malaysian players, and develop new features.
6.8 Marketing (with consent). To send promotional communications about bonuses, new game releases, and sports betting offers to Users who have opted in to receive marketing. You may unsubscribe at any time.
Turkitoto does not sell or rent personal data to third parties. We share personal data only in the following limited circumstances:
As an internationally operated platform serving Malaysian players, Turkitoto and its third-party service providers may store and process personal data in jurisdictions outside Malaysia. These jurisdictions may include countries where data protection laws differ from those in Malaysia.
Where personal data is transferred to jurisdictions without an equivalent level of data protection, Turkitoto implements appropriate safeguards to ensure that your data remains protected to a standard consistent with this Policy. Such safeguards may include contractual data transfer mechanisms, binding corporate rules, or reliance on recognised adequacy frameworks.
By using the Platform, you acknowledge and accept that your personal data may be transferred to and processed in countries outside Malaysia for the purposes described in this Policy.
Turkitoto retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. Specific retention periods are determined by reference to the following principles:
Where retention beyond these periods is required by a specific legal obligation, regulatory direction, or litigation hold, we will retain data accordingly and notify you where legally permissible to do so.
Turkitoto implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:
Turkitoto uses cookies and similar tracking technologies (such as web beacons and local storage) on the Platform. These technologies serve the following functions:
You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform's core features but may affect your personalisation experience. Where consent is required for specific cookie categories, we will request it separately through an on-screen cookie preference interface.
Subject to applicable law and certain exceptions (such as data we must retain for legal compliance), you have the following rights in respect of your personal data held by Turkitoto:
Request a copy of the personal data Turkitoto holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data. You may update basic account details directly through your account settings.
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as while a dispute about accuracy is resolved.
Receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Object to processing based on legitimate interests, including profiling, and to the use of your data for direct marketing at any time.
To exercise any of these rights, please contact us at [email protected] with "Privacy Request" in the subject line. We will verify your identity before processing any request. We respond to all requests within thirty (30) days. Where a request is complex or numerous, we may extend this by an additional sixty (60) days with prior notice.
The Turkitoto Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from, or permit account registration by, persons under the age of 21.
As part of our KYC process, all new members are required to verify their date of birth and provide a copy of a valid government-issued photo ID. Where our age verification checks indicate that a User may be under 21, the Account will be immediately suspended pending investigation. Accounts confirmed to belong to individuals under 21 will be permanently closed, all funds returned where legally possible, and the incident will be reported to the relevant regulatory authority.
If you are aware of, or suspect, that an Account has been registered by a person under 21, please contact us immediately at [email protected].
Turkitoto may send you promotional communications about bonuses, new game releases, sports betting offers (including Liga Super Malaysia, EPL, and UFC markets), VIP programme updates, and other relevant promotions by email and/or push notification, where you have opted in to receive such communications.
You can withdraw your consent to receive marketing communications at any time by:
Opting out of marketing communications will not affect transactional communications relating to your Account — such as deposit confirmations, withdrawal notifications, security alerts, and KYC status updates — which are sent based on contract performance necessity rather than consent.
We do not engage in unsolicited telephone marketing. If you receive a call purporting to be from Turkitoto that you did not request, please treat it as potentially fraudulent and report it to us.
Turkitoto reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as the introduction of new categories of data collection, new data sharing arrangements, or significant changes to retention periods — we will notify registered Members by email and via a prominent notice on the Platform at least fourteen (14) days before the changes take effect.
Minor or administrative updates (such as formatting changes or clarification of existing practices without substantive alteration) may be made without prior notice, with the updated "Last Updated" date revised accordingly.
The most current version of this Policy is always available on this page at https://turkitoto.cam/privacy-policy. We encourage you to review this page periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way Turkitoto handles your personal data, please contact our Privacy team through the following channels:
We take all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within five business days and provide a substantive response within thirty days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.
Our support team is available around the clock to answer data privacy questions, process rights requests, and help you manage your Turkitoto Account securely.
For players aged 21 and above only. Play responsibly. Gambling involves financial risk.