lomboktoto Privacy Policy

01 Introduction

lomboktoto respects the privacy of people who visit or use its online services. This Privacy Policy describes the principles that apply when lomboktoto handles personal data associated with website visits, player accounts, MYR deposits and withdrawals, promotions, sports betting, casino activity, live dealer services and customer support.

By using lomboktoto, you acknowledge that personal data will be handled as described in this Policy. This document should be read together with the Terms & Conditions. Where consent is required for a specific processing activity, lomboktoto will request it separately and provide a reasonable way to withdraw that consent.

02 Definitions

For this Privacy Policy, “personal data” means information relating to an identified or reasonably identifiable person. “Processing” includes collecting, recording, organising, storing, reviewing, using, transmitting, restricting or deleting personal data.

“Player” or “you” refers to a person who visits or uses lomboktoto. “Account data” means information linked to a registered profile. “Service provider” means an organisation engaged to perform a defined function, such as identity verification, technical hosting, fraud prevention, analytics or payment processing.

03 Personal Data We Collect

The information collected by lomboktoto depends on how a person interacts with the Service. Categories may include:

• Identity data: full name, date of birth, nationality and government-issued identification information used for KYC and age verification.
• Contact data: email address, mobile number, residential address and communication preferences.
• Account data: username, encrypted password records, account settings, verification status, loyalty tier and responsible gambling controls.
• Transaction data: deposits, withdrawals, payment references, MYR amounts, bonus activity and account balance history.
• Gaming data: game selections, sports markets, wager values, outcomes, session activity and promotional participation.
• Technical data: IP address, browser, operating system, device identifiers, screen size, language setting, login timestamps and security events.
• Support data: messages sent to lomboktoto, complaint details, call or chat records where applicable, and documents supplied to resolve an enquiry.

lomboktoto requests only information reasonably connected with an operational, legal, security or player-protection purpose. Players should not provide passwords, full one-time banking codes or unrelated sensitive information in support messages.

04 How Personal Data Is Collected

Information may be collected directly when a player registers, verifies an account, updates profile details, selects a limit, makes a transaction or contacts support. Other data is generated through use of the lomboktoto platform, including login history, session records, game activity and risk indicators.

lomboktoto may also receive limited information from payment providers, identity-verification services, anti-fraud systems or other authorised providers. For example, a bank or e-wallet provider may return a transaction status, masked account detail or confirmation that the payer's name matches the registered player. Information obtained from providers remains subject to this Policy and applicable contractual safeguards.

05 Data Processing Purposes

lomboktoto processes personal information only where there is an identified purpose. Principal purposes include:

• creating, administering and securing a player account;
• confirming that a player is aged 21 or above and completing KYC checks;
• processing deposits, withdrawals, refunds and bonus adjustments;
• providing slots, live dealer games, EPL, Liga Super Malaysia, UFC and other betting markets;
• detecting duplicate accounts, fraud, money laundering, collusion and unauthorised access;
• applying deposit limits, cooling-off periods and self-exclusion requests;
• responding to account, payment, verification and responsible gambling enquiries;
• maintaining platform stability, diagnosing faults and improving mobile usability;
• meeting applicable record-keeping, dispute-resolution and regulatory obligations; and
• sending permitted service messages and, where authorised, promotional communications.

Automated systems may flag unusual transactions or gaming patterns for manual review. A flag does not by itself establish wrongdoing. It enables lomboktoto to examine account security, payment integrity or player-protection concerns.

06 Legal Bases for Processing

Depending on the activity and applicable law, lomboktoto may process personal data because it is necessary to perform a contract, satisfy a legal obligation, pursue a legitimate operational or security interest, protect vital interests or act on consent.

Contractual processing includes operating an account and completing an eligible withdrawal. Legal and compliance processing can include age verification, transaction monitoring and required record retention. Legitimate interests may support fraud prevention, platform security and service improvement, provided those interests do not improperly override player rights.

Where processing relies on consent, consent may be withdrawn for future activity. Withdrawal does not make earlier lawful processing invalid and may not affect information that lomboktoto must retain under another applicable basis.

07 MYR Payments and Financial Information

Malaysian players may use supported channels such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX. The available options may vary by account, maintenance period and transaction type.

lomboktoto may process transaction amounts, timestamps, payment references, masked account details, payer names and approval or rejection status. Full payment credentials may be handled directly by an authorised payment provider rather than stored by lomboktoto.

08 Cookies and Similar Technologies

lomboktoto may use cookies, local storage and comparable technologies to maintain login sessions, remember language or display settings, protect accounts, measure site performance and understand general usage patterns. Essential technologies support functions that would not operate correctly without them.

Analytics information may include page visits, loading performance, device category and navigation events. Where required, non-essential cookies are used only after an appropriate choice has been provided. Browser controls may block or remove cookies, although doing so can affect account login, saved preferences or other platform features.

09 Data Sharing and Disclosure

lomboktoto does not disclose personal information without a valid purpose. Data may be shared with carefully selected providers that perform hosting, platform security, identity verification, payment processing, fraud detection, customer support, professional advice or technical analytics.

Each provider should receive only the information reasonably necessary for its assigned service and must handle it under contractual confidentiality and security requirements. Personal data may also be disclosed where required by a lawful authority, court process or enforceable legal obligation, or where disclosure is necessary to investigate fraud, protect a player or defend legal rights.

If the ownership or organisation of lomboktoto changes, relevant information may be transferred as part of a genuine business restructuring, subject to suitable confidentiality measures and applicable law.

10 International Data Transfers

Online services can involve systems and providers operating in more than one country. Personal information may therefore be processed outside Malaysia where lomboktoto uses international hosting, security, verification or support infrastructure.

When an international transfer occurs, lomboktoto seeks to use reasonable contractual, organisational and technical safeguards appropriate to the data and destination. These can include access restrictions, confidentiality terms, security assessments and recognised transfer mechanisms where available.

11 Data Retention

lomboktoto retains information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, compliance, security or dispute requirements. Retention periods vary according to the type of record.

Account, KYC and transaction records may need to be retained after account closure to address fraud prevention, payment disputes, self-exclusion enforcement or legal record-keeping. Routine technical records may be kept for shorter periods. When information is no longer required, it is deleted, anonymised or placed beyond ordinary operational use using reasonable processes.

12 Data Security

lomboktoto uses administrative, technical and physical measures designed to protect personal data against accidental loss, unlawful access, alteration or disclosure. Controls may include encrypted data transmission, restricted internal access, authentication measures, system monitoring, staff confidentiality and documented incident procedures.

No internet-based service can guarantee absolute security. Players share responsibility by choosing a strong and unique password, protecting their devices, signing out on shared equipment and reporting suspicious account activity promptly. lomboktoto will investigate credible security incidents and provide notifications where required by applicable law.

13 User Rights and Requests

Subject to applicable law and reasonable identity verification, a player may be entitled to request access to personal data, correction of inaccurate information, restriction of certain processing, deletion of eligible data, withdrawal of consent or a copy of information in an available format.

Some requests may be limited where information must be retained for KYC, anti-fraud, financial record, self-exclusion, legal claim or public-interest reasons. lomboktoto will explain a material restriction where permitted. A privacy request should identify the registered username, the requested action and enough detail for the relevant data to be located.

Players can also object to permitted direct marketing. Service messages concerning account security, transaction status, Policy changes or essential operational matters are not marketing and may still be sent while an account remains active.

14 Age Restriction and Younger Persons

lomboktoto is intended exclusively for people aged 21 and above. The Service is not directed at children or younger persons, and lomboktoto does not knowingly seek their personal data for gaming purposes.

If information indicates that a user is under 21, the account may be suspended while the matter is reviewed. Where appropriate, data will be removed unless retention is required to prevent repeated registration, document the incident or comply with another legal obligation.

15 Changes to This Privacy Policy

lomboktoto may update this Privacy Policy to reflect changes in the Service, technology, security practices or applicable requirements. The effective date at the top of the Policy identifies the current version.

Where a change materially affects how player data is handled, lomboktoto may provide a reasonable notice through the website, account area or registered contact details. Continued use after an update is subject to the revised Policy, but fresh consent will be requested where legally required.

16 Contact Us

Questions, complaints or privacy requests concerning lomboktoto can be sent to the support team. To protect account information, the team may require reasonable identity verification before disclosing records or changing personal details.

Support email: [email protected]

Support availability: 24 hours a day, 7 days a week.

Please state that the enquiry concerns privacy and explain the requested action clearly. Do not include a password, one-time code or unnecessary banking credentials.