Privacy Policy — Binjaitoto

Binjaitoto ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use our online gaming and sports betting platform at binjaitoto.cam. This Privacy Policy ("Policy") sets out how we collect, use, store, share, and protect personal information in connection with the provision of our services to registered players, primarily across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions.

This Policy applies to all data processing activities carried out by binjaitoto in connection with the use of our website, mobile interface, customer support channels, and related services. By registering an account or continuing to use the binjaitoto platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform as a whole. In the event of any inconsistency between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.

The following terms carry specific meanings within this Privacy Policy:

Binjaitoto collects personal data only where it is necessary to deliver our services, meet legal or regulatory obligations, or improve the user experience. The categories of personal data we collect include:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Residential address, including city, state, and postcode
• Email address and mobile phone number
• Chosen username and encrypted password
• Nationality and country of residence

• MyKad (Malaysian National Identity Card), passport, or driving licence
• Proof of address documents (utility bills, bank statements)
• Payment method ownership verification (e.g., e-wallet screenshots)
• Source of funds documentation for enhanced due diligence cases

• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Payment method type (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, USDT TRC20, BTC, etc.)
• Account balance history and bonus redemption records

• Game sessions played, bets placed, and outcomes
• Sports betting markets used (e.g., EPL fixtures, Liga Super Malaysia, UFC events)
• Promotional codes redeemed and wagering activity
• Responsible gambling tool settings (deposit limits, self-exclusion status)

• IP address, browser type and version, operating system
• Device type and unique device identifiers
• Pages visited, session duration, and navigation patterns
• Geolocation data (approximate, where enabled by the user's device)

• Live chat transcripts between players and our support team
• Email correspondence sent to [email protected]
• Survey responses, feedback submissions, and complaint records

Binjaitoto collects personal data through the following channels and mechanisms:

Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys and promotions.

Technical data collected automatically as you interact with the platform, including through cookies, web beacons, log files, and session tracking technologies embedded in the website and mobile interface. This includes IP address, device information, and browsing behaviour on binjaitoto.cam.

Where permitted, binjaitoto may receive supplemental information from third parties to assist with identity verification, fraud prevention, and regulatory compliance. These sources may include:

• KYC and identity verification service providers
• Payment processors and financial institutions (Maybank, CIMB, Touch 'n Go, etc.)
• Anti-fraud and AML screening databases
• Publicly available sources for regulatory compliance purposes

Any data received from third-party sources is handled with the same level of care and is subject to the same protections as data collected directly from users.

Binjaitoto processes your personal data for the following specific, defined purposes:

Binjaitoto processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions — including account creation, game provision, and payment processing.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including KYC requirements, anti-money laundering obligations, and data retention mandates.
• Legitimate Interests: Processing for the purposes of fraud prevention, platform security, abuse detection, and internal analytics — where our interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and certain non-essential cookies — only where you have provided explicit, freely given, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Binjaitoto does not sell, rent, or trade your personal data. We share data only where necessary and with appropriate safeguards in place. The categories of third parties with whom personal data may be shared include:

• Payment Processors: Malaysian payment platforms including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating banks (Maybank, CIMB, Public Bank, Hong Leong) — for the sole purpose of processing financial transactions.
• Identity Verification Providers: Third-party KYC services engaged to verify identity documents and screen against regulatory watchlists.
• IT & Infrastructure Providers: Cloud hosting, content delivery, and security services that support the operation of binjaitoto.cam.
• Analytics Providers: Aggregated, anonymised usage analytics to help us understand platform performance. No individually identifiable data is shared for this purpose.
• Legal & Regulatory Authorities: Where required by law, court order, or regulatory directive, binjaitoto may disclose personal data to relevant government authorities or law enforcement bodies in Malaysia or other applicable jurisdictions.

All third-party data processors engaged by binjaitoto are required to operate under a Data Processing Agreement that binds them to handle personal data only for the purposes we specify, to maintain appropriate security standards, and to delete or return data upon termination of their engagement.

Some of our third-party service providers may be located or operate infrastructure outside Malaysia. Where personal data is transferred internationally, binjaitoto ensures that appropriate safeguards are in place, including contractual protections that require the recipient to maintain data protection standards equivalent to those applied by binjaitoto.

Binjaitoto uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The cookies we deploy fall into the following categories:

Essential cookies cannot be disabled as they are required for the platform to function. They include session tokens, CSRF protection cookies, and login state management. These cookies do not collect personally identifiable information beyond what is necessary for security.

Functional cookies remember your preferences — such as your preferred interface language or display settings — so you do not need to reconfigure them on every visit.

Analytical cookies help us understand how players interact with binjaitoto — which pages are visited most frequently, where users encounter friction, and how we can improve the overall gaming experience. Data collected for analytical purposes is aggregated and anonymised wherever possible.

Binjaitoto does not deploy third-party advertising cookies or cross-site behavioural tracking tools. You may manage your cookie preferences through your browser settings at any time. Note that disabling functional or analytical cookies will not prevent access to the platform but may affect certain features.

Binjaitoto retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following general retention guidelines apply:

Upon expiry of the applicable retention period, personal data is either permanently deleted from our systems or irreversibly anonymised such that it can no longer be linked to any identifiable individual. Data subject to active legal proceedings or regulatory investigations may be retained for longer periods as required by law.

As an individual whose personal data is processed by binjaitoto, you hold the following rights. These rights may be exercised at any time by contacting us through our 24/7 live chat or by emailing our support team at the address provided in Section 14.

Binjaitoto will respond to all data subject requests within 30 days of receipt. In cases of complex or multiple requests, this period may be extended by a further 30 days, of which you will be notified. Some requests — particularly for erasure — may be limited by our legal obligations to retain certain data (such as KYC and financial records) for regulatory compliance periods.

Binjaitoto implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Encryption: All data transmitted between users and binjaitoto.cam is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to account login, all payment transactions, and customer support communications.
• Password Security: User passwords are stored using industry-standard one-way hashing algorithms with salting. Binjaitoto never stores or transmits passwords in plaintext.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security.
• Access Controls: Internal access to personal data is restricted to authorised personnel with a legitimate business need. Role-based access controls ensure the principle of least privilege is applied.
• Infrastructure Security: Our hosting infrastructure is maintained with regular security patching, intrusion detection systems, firewalls, and DDoS protection.
• Data Breach Response: Binjaitoto maintains a documented data breach response procedure. In the event of a breach that poses a risk to individual rights, affected users will be notified in accordance with applicable regulatory timelines.

While we take extensive measures to protect your personal data, no system is entirely impervious to security threats. We encourage all players to use strong, unique passwords, enable 2FA, and avoid accessing their binjaitoto account on public or shared devices.

The binjaitoto platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of our account registration and KYC process, and any account found to have been opened by or on behalf of a person under 21 will be immediately closed.

If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to binjaitoto, please contact us immediately via live chat or at the email address provided in Section 14. We will investigate and take appropriate action, including deletion of the minor's data and return of any deposited funds to the verified payment method.

Binjaitoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, regulatory requirements, or platform features. When material changes are made, we will notify registered users by email (to the address on file) or by displaying a prominent notice on binjaitoto.cam, with the updated "Last Updated" date reflected at the top of this document.

We recommend that players periodically review this Privacy Policy to stay informed of how their personal data is being handled. Your continued use of the binjaitoto platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and request account closure.

Prior versions of this Privacy Policy are archived and available upon request from our customer support team.

For any questions, concerns, or requests relating to this Privacy Policy — or to exercise any of your data subject rights — please contact our team through the following channels:

• Live Chat: Available 24/7 via the chat widget on binjaitoto.cam. Peak support hours: 8:00 AM – 2:00 AM MYT.
• Email: [email protected] — please note this is displayed as plain text only and is not a clickable link.
• Platform Location: Kuala Lumpur, Malaysia.

When submitting a data subject rights request, please provide your registered email address, account username, and a clear description of your request so we can locate your records and respond as efficiently as possible. We will acknowledge all requests within 48 hours and provide a substantive response within 30 days.

For responsible gambling enquiries, self-exclusion requests, or deposit limit changes, please visit our Responsible Gambling page. For general platform questions, our FAQ page covers the most common topics. Platform usage is governed by our Terms & Conditions.