Privacy Policy

Introduction

Marontoto ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at marontoto.cam. We are committed to protecting the privacy of every individual ("you", "user", "player", "data subject") who visits, registers with, or otherwise interacts with our services.

This Privacy Policy ("Policy") sets out in clear, accessible terms: the categories of personal data we collect; the purposes for which we process that data; the legal grounds underpinning each processing activity; the circumstances under which we may share your data with third parties; the security measures we apply to protect it; and the rights available to you as a data subject under applicable privacy law.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. By accessing or using the Marontoto platform, you acknowledge that you have read and understood this Policy. If you do not agree with any provision of this Policy, you must cease using the platform immediately.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifier, or factors specific to the physical, physiological, economic, or social identity of that person.
• "Processing" — any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is Marontoto.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller, under documented instruction.
• "KYC Data" — identity verification documentation submitted by a player in fulfilment of Know Your Customer obligations, including but not limited to government-issued identity documents and selfie photographs.
• "Cookies" — small text files placed on a user's device by the Platform for the purposes of session management, functionality, analytics, and performance monitoring.
• "Consent" — any freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of personal data relating to them.
• "Legitimate Interest" — a lawful basis for processing where the processing is necessary for the purposes of the legitimate interests pursued by the Data Controller, except where overridden by the interests or rights of the data subject.

Data We Collect

Marontoto collects personal data through several channels and for clearly defined purposes. The categories of personal data we collect are as follows:

3.1 Registration Data

When you create a Marontoto account, we collect: full legal name; date of birth; residential address (including city and postcode — e.g., players from Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, or Shah Alam); email address; and mobile phone number. This data is required to create and maintain your account and to fulfil our contractual obligations to you.

3.2 Identity Verification (KYC) Data

To comply with international Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations, we collect copies of government-issued identity documents — including the Malaysian MyKad (front and back) — selfie photographs, and, where required, proof of payment method ownership (for example, a screenshot of a registered e-wallet account or bank statement). KYC data is processed solely for compliance purposes.

3.3 Financial Transaction Data

We record data relating to all financial transactions on the Platform, including deposit amounts, withdrawal requests, payment method used (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB), transaction timestamps, and transaction reference numbers. This data is processed for contractual, compliance, and fraud-prevention purposes.

3.4 Gaming Activity Data

We collect data relating to your use of games and betting markets on the Platform, including bet amounts, game selections, session durations, wager history, and win/loss records. This data is used for account management, responsible gambling monitoring, and platform improvement.

3.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical data including: IP address; browser type and version; operating system; device identifiers; referring URL; and access timestamps. This data is collected via server logs and cookies for security, fraud detection, and analytical purposes.

3.6 Communication Data

We retain records of communications between you and our support team — including live chat transcripts and email correspondence — for quality assurance, dispute resolution, and regulatory compliance purposes.

Legal Basis for Processing

Marontoto processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases upon which we rely are as follows:

• Contractual Necessity: Processing of registration data, financial transaction data, and gaming activity data is necessary to perform our contractual obligations to you under the Terms & Conditions.
• Legal Obligation: Processing of KYC data and certain financial transaction data is required for Marontoto to comply with applicable AML, fraud prevention, and regulatory obligations.
• Legitimate Interest: Processing of technical and device data for security monitoring, fraud detection, and platform improvement is carried out on the basis of Marontoto's legitimate interest in operating a secure and reliable service, balanced against your privacy rights.
• Consent: Where we process personal data for purposes not covered by the above grounds — for example, optional marketing communications — we will obtain your explicit consent prior to processing. You may withdraw consent at any time without detriment to your account.

How We Use Your Data

The personal data we collect is used exclusively for the following clearly defined purposes:

• Creating, maintaining, and managing your Marontoto player account.
• Processing deposits and withdrawal requests via your chosen payment method (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and others).
• Verifying your identity and age in accordance with KYC requirements prior to processing any withdrawal.
• Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and money laundering.
• Monitoring gaming activity for the purposes of responsible gambling compliance, including identifying patterns that may indicate problem gambling behaviour.
• Administering and enforcing the Terms & Conditions, including bonus eligibility and wagering requirement tracking.
• Providing customer support and resolving disputes through live chat and email communication.
• Sending transactional notifications related to your account — including deposit confirmations, withdrawal updates, and KYC requests.
• Analysing platform usage patterns to improve the user experience, game selection, and overall service quality.
• Complying with applicable legal, regulatory, and audit obligations.

Data Sharing & Disclosure

Marontoto does not sell, rent, or trade your personal data to third parties. We may share your personal data with third parties only in the following limited and controlled circumstances:

6.1 Payment Service Providers

To process deposits and withdrawals, we share necessary financial and identity data with your chosen payment provider (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB). Each payment provider operates under its own privacy policy and is subject to applicable financial sector regulations.

6.2 Identity Verification Partners

Where we engage third-party KYC service providers to assist with identity document verification, those providers process your KYC data solely under documented instructions from Marontoto and are bound by confidentiality and data protection obligations.

6.3 Technology & Infrastructure Providers

We work with cloud hosting providers, content delivery networks, and software vendors who may process personal data incidentally in the course of providing infrastructure services. All such providers are subject to data processing agreements that prohibit independent use of your data.

6.4 Game Content Providers

Certain technical data (such as session identifiers and game logs) may be shared with the game studios whose content is hosted on the Platform, for the purposes of game functionality, result verification, and technical support. No personally identifiable registration data is shared with game content providers beyond what is technically necessary.

6.5 Legal and Regulatory Authorities

Marontoto may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or as part of an AML or fraud investigation. We will notify affected users of such disclosures where we are legally permitted to do so.

6.6 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets involving Marontoto, personal data held by the Platform may be transferred to the relevant acquiring entity. Affected users will be notified of any such transfer and of any change to applicable privacy terms prior to their data being transferred.

Cookies & Tracking Technologies

Marontoto uses cookies and similar tracking technologies to operate the Platform effectively and to deliver a consistent user experience. The types of cookies we use are as follows:

• Essential Cookies: Strictly necessary for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Enable personalised features such as remembering your preferred language, currency display, and game lobby settings across sessions.
• Analytics Cookies: Allow Marontoto to understand how players interact with the Platform — including which pages are visited most frequently, where errors occur, and how navigation flows are used. This data is used in aggregate form to improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and account takeover attempts.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. Where consent is required for non-essential cookies, we will request it via a cookie consent mechanism upon your first visit.

Data Retention

Marontoto retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory retention obligations that require a longer period.

• Account & Registration Data: Retained for the duration of your account registration and for a minimum of five (5) years following account closure, in compliance with AML and financial record-keeping requirements.
• KYC Data: Retained for a minimum of five (5) years from the date of verification, as required by applicable AML regulations.
• Transaction Records: Retained for a minimum of seven (7) years to satisfy financial audit and regulatory reporting obligations.
• Gaming Activity Logs: Retained for a minimum of three (3) years for responsible gambling monitoring and dispute resolution purposes.
• Communication Records: Retained for two (2) years from the date of last communication, unless required for longer in the context of an unresolved dispute.
• Technical/Device Data: Retained for up to twelve (12) months for security and fraud detection analysis.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised or aggregated data derived from personal data may be retained indefinitely for statistical and analytical purposes, provided it can no longer be associated with any individual.

Data Security

Marontoto implements and maintains a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls that limit access to personal data to authorised personnel on a need-to-know basis.
• Multi-factor authentication requirements for all internal systems that handle personal data.
• Regular third-party security audits and penetration testing of our infrastructure.
• Formal data breach incident response procedures, including notification obligations where required by law.

While we employ industry-standard security measures, no system is entirely immune to risk. You are responsible for maintaining the confidentiality of your own account credentials. In the event you suspect unauthorised access to your account, please notify us immediately through live chat or at [email protected].

International Data Transfers

Marontoto operates on international infrastructure, and certain data processing activities — including cloud storage and game platform hosting — may involve the transfer of personal data to servers located outside Malaysia. Where such transfers occur, Marontoto ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses with all third-party processors receiving personal data internationally.
• Transfers only to jurisdictions or organisations that provide an adequate level of data protection equivalent to applicable Malaysian and international standards.
• Implementation of additional technical and organisational measures where the adequacy of protection in the destination jurisdiction is uncertain.

You may request details of the specific safeguards applicable to any international transfer of your personal data by contacting our support team.

Your Rights as a Data Subject

Subject to applicable law and certain exceptions where legal obligations require us to retain or continue processing data, you hold the following rights in respect of your personal data held by Marontoto:

To exercise any of the above rights, please submit your request via live chat on the Platform or in writing to [email protected]. We will acknowledge your request within 5 business days and endeavour to fulfil it within 30 calendar days. Where requests are complex or numerous, we may extend this period by up to an additional 60 days, with prior notice to you.

Minors & Age Restriction

The Marontoto platform is strictly restricted to individuals aged 21 years or older. We do not knowingly collect, process, or store personal data from persons under the age of 21. If we become aware that personal data has been submitted by a minor, we will take immediate steps to delete that data and close the associated account.

We implement age verification controls during the registration process and through our KYC programme to minimise the risk of underage access. If you believe a minor has registered an account or submitted personal data to the Platform, please notify us immediately at [email protected].

Amendments to This Policy

Marontoto reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where material changes are made, we will notify registered players via on-platform notification or by email to the registered address prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date on which the current version came into effect. We encourage you to review this Policy periodically to remain informed of how your personal data is being handled. Continued use of the Platform following any amendment constitutes your acceptance of the revised Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact Marontoto through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Marontoto platform. This is the fastest channel for privacy-related queries and data rights requests.
• Email: [email protected] — please use the subject line "Privacy Request" for all data-related enquiries. Responses are typically provided within 24 hours on business days.

For information about our bonus terms and account conditions, see our Terms & Conditions. For responsible gambling tools and support resources, visit our Responsible Gambling page. For common questions, see our FAQ.