Privacy Policy Ormastoto
– Player Data Protection

Information We Collect

Ormastoto collects your personal information when you register, use our services, or contact our support team. We only collect information that is strictly necessary to operate our services safely and effectively.

Information provided directly by you:

• Full name as it appears on your official identification card.
• An active mobile phone number that can be reached.
• A valid and actively used email address.
• Date of birth for age verification (18 and above).
• Bank account or digital wallet details for processing deposits and withdrawals.
• Identity verification document (MyKad) during the KYC process.

Information collected automatically:

• IP address and device information (device type, operating system, browser).
• Login data including date, time, and access location.
• In-platform game activity history and transaction records.
• Ormastoto mobile app usage data.

How We Use Your Data

Every piece of information we collect is used for clear and legitimate purposes. We do not process your data for purposes unrelated to ormastoto services.

You may withdraw consent to receive promotional communications at any time via your account settings or by contacting our support team.

Sharing Information with Other Parties

Ormastoto does not sell or rent your personal data to any third party. Data sharing only occurs in limited situations and with appropriate safeguards in place.

Parties that may receive limited access to your data:

• Payment providers: FPX, Touch 'n Go eWallet, GrabPay, and local banks — solely for the purpose of processing your financial transactions.
• Game software providers: Game providers such as Pragmatic Play, Microgaming, and others — only the game information required to operate the gaming session.
• Regulatory authorities: Law enforcement agencies or regulatory bodies when required by Malaysian law.
• Technical service providers: Hosting and cybersecurity companies bound by strict confidentiality agreements with ormastoto.

In the event of a merger, acquisition, or sale of company assets, your personal data may be transferred to a successor entity — however, you will be notified in advance and your right to withdraw consent remains protected.

Cookies and Tracking Technologies

Ormastoto uses cookies and similar tracking technologies to enhance the user experience, secure login sessions, and understand how users interact with our platform.

Types of cookies we use:

Cookies marked "Required" cannot be disabled as they are necessary for the platform to function properly. "Analytics" and "Preferences" cookies can be managed through your browser settings.

Data Storage and Retention Period

All personal data of ormastoto members is stored on secure servers located in the Asia Pacific region with 256-bit SSL encryption. Our servers are protected by multi-layered firewalls, intrusion detection systems, and round-the-clock security monitoring 24/7.

Data retention periods by category:

• Active account data: Retained for as long as your account remains active on the ormastoto platform.
• Financial transaction data: Retained for 7 years in accordance with Malaysian legal requirements for financial records.
• KYC Documents: Retained for 5 years after account closure in accordance with anti-money laundering requirements.
• Customer support communication logs: Retained for 2 years.
• Anonymous analytics data: Retained for 24 months before automatic deletion.

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by ormastoto.

To exercise any of the above rights, contact the ormastoto support team via Live Chat or email at [email protected]. All requests will be processed within 14 business days.

Children's Data Protection

The ormastoto platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Third-Party Links and Services

The ormastoto platform may contain links or integrations with third-party services such as game providers, payment systems, and customer support tools. This Privacy Policy applies only to data collected and processed directly by ormastoto.

Ormastoto is not responsible for the privacy practices of third parties whose services are integrated into our platform. We encourage you to read the privacy policy of each relevant third-party service provider when you interact with their services.

Amendments to This Privacy Policy

Ormastoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any amendments will be posted on this page with a new "Updated" date.

For material amendments that significantly affect your rights, ormastoto will notify you through:

• In-app or platform notifications while you are logged in.
• Email to the address registered in your account.
• A prominent notice on the website homepage for at least 7 days.

Continued use of the ormastoto platform after any amendments take effect will be considered your acceptance of the revised policy. Check this page periodically to stay informed of the latest terms.

Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the ormastoto Data Protection Officer team is ready to assist.

• Live Chat: Available directly on the ormastoto platform, 24 hours a day, 7 days a week.
• Email: [email protected] — responded to within 3 business days.
• General Support: [email protected] — for general account-related inquiries.

For formal privacy complaints, please submit in writing via email with the subject line "Data Privacy Complaint" along with your full name, account number, and details of your complaint. All privacy complaints are handled with the utmost confidentiality and will be resolved within 14 business days.