Minimal and Purposeful Collection
rumpitoto collects personal information that is reasonably necessary for account registration, identity verification, transaction processing and service operation. Information is not collected for its own sake.
Data protection and your rights
rumpitoto Privacy Policy for Malaysian Users
This Privacy Policy describes how rumpitoto collects, uses, stores, transfers and protects personal information when you access the platform, create an account or use any connected feature.
Effective date: 1 January 2026
Before You Continue
By registering with or using rumpitoto, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the way rumpitoto collects or processes personal data, you should not register an account, deposit funds or use real-money features.
Malaysian users access rumpitoto under international operating standards. The platform does not represent that its data practices are certified by any Malaysian regulatory authority. You remain responsible for any obligations imposed on you by Malaysian law regarding personal data that you choose to submit.
How we approach privacy
rumpitoto Privacy Principles at a Glance
These cards summarise the core approach rumpitoto takes toward your personal information. The complete clauses below govern all data processing; these highlights do not override or replace the full policy text.
Security-Conscious Storage
rumpitoto applies technical and organisational measures designed to protect stored data from unauthorised access, alteration, disclosure or accidental loss. No security system offers absolute guarantees.
User Access and Correction Rights
Subject to applicable law and verification requirements, rumpitoto users may request access to personal data held about them and ask for corrections where information is inaccurate.
Controlled Third-Party Sharing
rumpitoto does not sell personal data. Third-party processors, such as payment providers supporting FPX, DuitNow, Touch'n Go eWallet and Maybank, receive data only as needed to perform specific contracted tasks.
Defined Retention Periods
rumpitoto holds personal data for defined purposes. When data is no longer needed and no legal, regulatory or security obligation requires retention, it may be deleted or anonymised in line with the applicable schedule.
Cookies and Device Data
rumpitoto may use cookies, local storage or similar technologies to maintain sessions, measure usage and improve performance. Essential cookies that keep the account and platform functioning may not be disabled without breaking key features.
1Introduction
This Privacy Policy explains how rumpitoto collects and processes personal data in connection with website access, account registration, casino and sports betting products, payment handling, customer support interactions and promotional activity. It should be read alongside the Terms & Conditions and the Responsible Gambling page, which together govern use of the rumpitoto platform.
Where rumpitoto processes personal data on behalf of users in Malaysia, the platform applies internationally recognised data protection principles. rumpitoto does not represent that its practices are certified or supervised by any Malaysian government authority.
2Definitions
In this policy, "personal data" means any information that identifies or could reasonably be used to identify a living person. "Processing" covers any operation performed on personal data, including collection, storage, use, disclosure and deletion. "User", "you" or "your" refers to each registered or browsing individual. "We", "our" or "rumpitoto" refers to the platform and its operators.
"Third-party processor" means a service provider who processes personal data on rumpitoto's behalf under a contractual obligation that limits how that data may be used. "KYC" means identity and age verification procedures.
3Personal Data We Collect
rumpitoto may collect the following categories of personal data:
| Category | Examples |
|---|---|
| Identity data | Full name, date of birth, national identity or passport number, selfie or document image for KYC |
| Contact data | Email address, phone number, city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru) |
| Account data | Username, hashed password, account preferences, session records, communication history |
| Transaction data | Deposit amounts in MYR, withdrawal requests, chosen payment method (e.g., FPX, DuitNow, Maybank), timestamps |
| Gambling activity data | Game session records, wager history, sports bet details, bonus usage, responsible gaming limit settings |
| Technical data | IP address, device type, browser version, operating system, approximate location inferred from IP |
| Communications data | Support ticket content, live chat transcripts, feedback or complaint records |
4How Personal Data Is Collected
rumpitoto collects personal data through the following channels:
- Direct submission: Information you provide when registering, completing KYC, depositing funds, requesting a withdrawal or contacting support.
- Automated technology: Cookies, server logs and analytics tools that record how you navigate the rumpitoto interface and which features you use.
- Payment processors: Transaction confirmation and verification outcomes from approved providers such as Touch 'n Go eWallet, Boost, GrabPay, CIMB, Public Bank, Hong Leong or DuitNow.
- Identity verification services: Document authentication or database checks performed during KYC to confirm age and identity.
- Security systems: Fraud detection tools that process technical and behavioural signals to identify unusual account activity.
5Purposes of Data Processing
rumpitoto processes personal data for the following purposes:
- Registering and maintaining your account and verifying your identity and age.
- Processing deposits, withdrawals and payment instructions denominated in MYR or other supported currencies.
- Providing casino games, sports betting markets, live football coverage and other platform products.
- Applying and administering promotions, bonuses and loyalty rewards subject to eligibility conditions.
- Detecting, investigating and preventing fraud, money laundering, duplicate accounts and prohibited activity.
- Responding to support queries, resolving disputes and maintaining communication records.
- Meeting legal, regulatory, security and responsible gambling obligations, including 21+ age enforcement.
- Analysing platform usage and improving navigation, content and feature delivery.
- Sending service notifications and, where permitted, relevant promotional communications.
6Legal Basis for Processing
rumpitoto processes personal data one or more of the following bases, depending on the purpose and jurisdiction: performance of a contract when processing is necessary to provide the service you have agreed to; legitimate interests when processing is needed for fraud prevention, security, platform improvement or responsible gaming controls; legal obligation when applicable law requires rumpitoto to retain or disclose specific information; and consent, where you have opted in to a particular use such as promotional communications.
Where processing relies on consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
7Third-Party Disclosure
rumpitoto does not sell, rent or trade personal data. Data may be shared with carefully selected third-party processors who assist with payment processing, identity verification, fraud detection, platform hosting, analytics and customer support. Each processor operates under a contractual obligation that restricts use of data to the agreed purpose.
rumpitoto may also disclose personal data where required by law, court order, regulatory direction or urgent safety need; where necessary to enforce the Terms & Conditions or defend a legal claim; or in the context of a business reorganisation where data transfers are conducted under applicable safeguards.
8Payment Data
Transaction data associated with FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay Maybank, CIMB, Public Bank, Hong Leong or other approved payment methods is processed to verify funding, confirm withdrawal eligibility and support fraud investigation. rumpitoto does not permanently store full card numbers or complete banking credentials within its own systems; where payment card data must be handled, it is processed by a certified third-party provider.
Payment ownership verification may require you to submit documentation confirming that a bank account or e-wallet is registered in your name. This data is treated as identity-related and subject to the same protections as KYC records.
9International Data Transfers
rumpitoto operates under international licensing standards and may process or store data on infrastructure located outside Malaysia. Where personal data is transferred internationally, rumpitoto applies contractual protections or other recognised safeguards intended to preserve the level of data protection described in this policy.
Malaysian users should be aware that data protection laws in other countries may differ from those applicable in Malaysia. rumpitoto's use of international processors does not reduce its commitment to the principles described in this Privacy Policy.
10Data Retention
rumpitoto retains personal data for as long as is necessary to fulfil the purposes described in this policy. Typical retention considerations include the duration of an active account relationship, outstanding transaction or dispute resolution requirements, applicable legal or audit obligations, fraud prevention needs and responsible gambling monitoring periods.
When data is no longer required and no legal hold applies, rumpitoto will delete it or render it non-identifiable. Requests for early deletion may be submitted as described in the User Rights clause; however, certain data may need to be retained to comply with law or resolve an open matter.
11Cookies and Tracking Technologies
rumpitoto uses cookies and similar client-side technologies to maintain authenticated sessions, remember account preferences, measure page traffic and support security functions. The main categories are:
- Essential cookies: Required for login sessions, security tokens and core platform functionality. Disabling them prevents normal use of rumpitoto.
- Analytics cookies: Aggregate and anonymised data about navigation patterns, feature use and device types that helps rumpitoto improve the mobile and desktop experience.
- Preference cookies: Store non-sensitive settings such as selected language or display options so you do not need to re-enter them on each visit.
- Security cookies: Support fraud detection and session integrity by identifying unusual request patterns or credential reuse.
Browser-level controls allow you to manage or delete cookies. Blocking essential cookies will affect your ability to sign in and use rumpitoto account features.
12Minors and Age Enforcement
rumpitoto services are strictly intended for adults aged 21 and above. rumpitoto does not knowingly collect personal data from any below the age of 21. Age is confirmed during the account registration and KYC process. Where rumpitoto reasonably determines that an account is held by an underage user, the account will be closed, any associated balance held pending investigation and the matter referred as required by applicable standards.
Parents and guardians in Malaysia and elsewhere are encouraged to use parental controls and to keep gambling-related accounts and applications secure from minors.
13User Rights
Subject to identity verification and applicable law, rumpitoto users may exercise the following rights regarding personal data:
Access: Request a copy of personal data held about your account.
Correction: Ask rumpitoto to correct inaccurate or incomplete information.
Deletion: Request removal of data no longer needed for the stated purpose, subject to legal holds.
Objection: Object to processing based on legitimate interest where your individual circumstances warrant it.
Withdraw consent: Withdraw previously given consent for optional processing such as marketing communications.
Portability: Where technically feasible, receive account data in a structured machine-readable format.
Submit a rights request to the contact details in Clause 16. rumpitoto will verify your identity before processing any access, correction or deletion request. Response times may vary based on complexity and applicable statutory periods.
14Security Measures
rumpitoto applies technical and operational safeguards designed to reduce the risk of unauthorised access, disclosure, alteration or accidental loss of personal data. Measures include encrypted data transmission, access controls that limit internal staff to data required for their role, monitoring anomalous account activity and regular review of security procedures.
Users also have a role in account security. You should use a strong unique password, keep login credentials confidential, never share one-time codes and report suspected unauthorised access promptly. rumpitoto cannot accept responsibility for loss resulting from a user's failure to protect their own credentials.
15Changes to This Privacy Policy
rumpitoto may update this Privacy Policy when required by changes to services, technology legal obligations or data practices. The effective date at the top of this page indicates the version currently in force. Material changes will be communicated where reasonably practicable. Continued use of rumpitoto after an updated policy takes effect constitutes acceptance of the revised terms where permitted by applicable law.
Users are encouraged to review this page periodically, particularly before making account deposits or withdrawal requests where data processing practices are relevant to their decision.
16Contact Us
If you have questions about this Privacy Policy, wish to exercise a data right, or need to report a data concern, please contact rumpitoto through the details below. Include a clear description of your request and enough account context for the team to identify the relevant records. Never send your password, one-time verification code or full payment credential in a message.
Platform: rumpitoto
Website email: [email protected]
Answers to common account questions may also be found on the FAQ page. The email address above is displayed as plain text only and is not a clickable link.