jostoto Privacy Policy for Malaysian Visitors

Introduction

jostoto respects the privacy of every visitor who uses this website. This Privacy Policy describes the categories of information that jostoto may collect, the purposes for which that information may be processed, the circumstances in which it may be shared and the choices available to eligible users.

This Policy should be read together with the jostoto Terms & Conditions. By continuing to use the website, you acknowledge that you have reviewed this Policy. If you do not agree with the practices described here, you should stop using the jostoto website.

jostoto is an information brand focused on sports betting, live casino entertainment, payment education, account security and responsible gambling for Malaysian adults. jostoto does not operate a sportsbook or casino and does not accept wagers or hold player balances.

Definitions

Scope and Role

This Privacy Policy applies to information processed through the jostoto website and direct communications sent to the displayed website email. It does not govern independent websites, casino platforms, sportsbooks, banks, e-wallet providers or other services that operate under their own privacy notices.

Where jostoto determines why and how personal information is processed for its own website operations, jostoto acts as the responsible organisation for that processing. The precise legal description of this role may vary according to the law applicable to a particular visitor.

References to Malaysian payment brands, sports markets or gaming services are provided as general context. Such references do not establish that jostoto controls information held by those organisations.

Information We May Collect

The categories collected by jostoto depend on how you use the website. Information may include:

• Contact information: your name, email address and the content of a message when you voluntarily contact jostoto.
• Technical information: internet protocol address, browser type, operating system, device category, language setting, approximate region and referral information.
• Usage information: pages viewed, approximate visit duration, navigation sequence, interaction events and general website performance records.
• Security records: failed access attempts, suspicious request patterns, server logs and information needed to investigate misuse.
• Preference information: cookie choices or display preferences saved through website functionality.

jostoto does not require ordinary visitors to provide a MyKad number, passport copy, bank account password, e-wallet PIN or one-time security code. Visitors should never send these details in an unsolicited message.

Sources of Information

jostoto may obtain information directly from you when you send an enquiry, make a privacy request or communicate with the website team. Technical and usage information may be generated automatically by your browser, device, hosting infrastructure or security tools when you access the website.

jostoto may also receive aggregated or de-identified performance information from service providers used to maintain website reliability. Such information is intended to show broad patterns, such as whether visitors generally use mobile or desktop devices, rather than reveal the identity of a particular reader in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam.

We ask visitors not to submit personal information concerning another person unless they have proper authority to do so and the disclosure is lawful.

Purposes of Data Processing

jostoto may process information for the following purposes:

1. To provide, maintain and improve the jostoto website and its Malaysia-focused content.
2. To respond to questions concerning site content, privacy, account security or responsible gambling information.
3. To identify technical faults, analyse website performance and improve mobile accessibility.
4. To detect malicious activity, protect site integrity and prevent unauthorised access.
5. To establish, exercise or defend legal rights and comply with valid legal obligations.
6. To maintain records of consent, privacy preferences or completed user requests where necessary.

Depending on the applicable legal framework, processing may be based on consent, performance of a requested service, compliance with a legal obligation or a legitimate interest that is not overridden by the visitor’s rights. jostoto seeks to use an appropriate basis for each processing activity.

Cookies and Website Analytics

Cookies are small text files that a website may store through a browser. jostoto may use essential cookies to remember basic settings, preserve security functions or maintain reliable page delivery. Where optional analytics are used, they may help jostoto understand general traffic patterns and improve site structure.

Visitors can usually manage cookies through browser controls. Blocking essential cookies may affect parts of the website, while rejecting optional analytics should not prevent access to ordinary editorial content. Browser settings differ, so visitors should review the privacy and storage controls provided by their own device software.

jostoto does not use cookies to guarantee gambling outcomes, create betting profiles or access balances held with Malaysian banks, Touch ’n Go eWallet, Boost, GrabPay, DuitNow or FPX.

Payment and Gambling Account Information

jostoto publishes educational information about Malaysian payment options such as Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX. These references do not mean that jostoto processes deposits or withdrawals through those services.

No real-money gambling transaction takes place on the jostoto website. jostoto does not hold a casino balance, receive wagering funds or determine whether a third-party operator approves a payment. Any information entered directly on a separate operator or payment service is governed by that organisation’s own privacy terms.

Disclosure and Information Sharing

jostoto does not sell personal information. Information may be disclosed only where reasonably necessary and subject to appropriate safeguards. Recipients may include:

• Hosting, infrastructure, security or technical support providers that help operate jostoto.
• Professional advisers where legal, accounting, security or compliance assistance is required.
• Public authorities where disclosure is required by a valid legal process or necessary to protect legal rights.
• A successor organisation in connection with a lawful restructuring, transfer or change of control, subject to continued privacy obligations.

Service providers are expected to process information only for authorised purposes and to apply safeguards appropriate to the nature of the information. jostoto does not authorise providers to use personal data for unrelated independent marketing.

Data Retention

jostoto keeps personal information only for as long as reasonably necessary to fulfil the purpose for which it was collected. Retention periods may depend on the nature of an enquiry, the need to maintain security records, applicable limitation periods and any legal requirement to preserve information.

Routine server logs may be retained for a limited operational period before deletion or aggregation. Communication records may be retained while an enquiry remains open and for a reasonable period afterwards to document the response. Information subject to an active dispute, investigation or legal hold may be retained until the matter is resolved.

When information is no longer required, jostoto may delete it, anonymise it or securely isolate it until deletion is technically completed.

Data Security

jostoto uses reasonable administrative, technical and organisational controls intended to protect information against accidental loss, unauthorised access, misuse, disclosure or alteration. Measures may include access restrictions, HTTPS encryption in transit, software maintenance, security monitoring and limited staff access.

No internet transmission or storage method can be guaranteed completely secure. Visitors are responsible for securing their own devices, browsers and email accounts. jostoto recommends installing updates promptly, using unique passwords and avoiding sensitive communications over public Wi-Fi.

If jostoto becomes aware of a personal data incident, it will assess the circumstances and take reasonable containment, investigation and notification measures where required by applicable law.

International Processing

Website infrastructure or service providers may process information in territories outside Malaysia. Privacy and data protection requirements in those territories may differ from Malaysian requirements.

Where an international transfer occurs, jostoto seeks to use reasonable contractual, technical or organisational safeguards appropriate to the circumstances. These may include limiting the transferred data, restricting provider access and requiring confidentiality and security commitments.

Use of the website from Malaysia does not necessarily mean that every supporting server or backup is physically located in Malaysia. Visitors may contact jostoto if they require further general information about relevant processing arrangements.

User Rights and Choices

Subject to applicable law and relevant exemptions, you may have the right to:

• Request confirmation of whether jostoto processes personal information about you.
• Request access to eligible personal information and receive information about its use.
• Ask jostoto to correct information that is inaccurate or incomplete.
• Request deletion or restriction where there is no continuing lawful reason for processing.
• Object to certain processing based on legitimate interests.
• Withdraw consent for future processing where consent is the applicable basis.
• Raise a concern with an appropriate privacy authority where that right is available.

jostoto may need to verify the requester’s identity before responding. Verification protects personal information from unauthorised disclosure. Requests may be limited or refused where permitted by law, including where they would adversely affect another person’s rights, conflict with legal duties or are manifestly unfounded.

jostoto aims to respond within a reasonable period. Complex requests may require additional time, in which case the requester may receive an update explaining the delay.

Age Restriction and Younger Users

jostoto is intended only for adults aged 21 and above because its content concerns casino-style gambling and sports betting. The website is not directed at children or younger persons, and jostoto does not knowingly seek their personal information.

If jostoto reasonably determines that information was submitted by a person below the applicable age requirement, the information may be deleted and access may be restricted. A parent or guardian who believes a younger person has provided information may contact jostoto using the plain-text email address below.

Changes to This Privacy Policy

jostoto may update this Privacy Policy when website functions, legal requirements or information-handling practices change. The revision date displayed near the top of the page identifies the current version.

Material updates may also be highlighted through a website notice where appropriate. Visitors should review this page periodically, particularly after an extended absence. Continued use after an updated Policy becomes effective indicates acknowledgement of the revised information.

An update will not retrospectively create a new purpose for previously collected information where additional consent or another legal basis would be required.