Official Documents

Privacy Policy ometoto — Your Personal Data Protection

Ometoto takes the privacy of every player seriously. This document clearly explains how we collect, use, store, and protect your personal information when you use our platform.

Last updated: 1 January 2026

Full Data Encryption

All your personal and financial data is protected with 256-bit SSL encryption. Your information is never transmitted or stored without adequate protection.

No Data Selling

Ometoto never sells, rents, or transfers your personal data to third parties for marketing purposes without your prior explicit consent.

Full Control by You

You have the right to access, correct, and request deletion of your personal data at any time through your account or by contacting our support team.

Secure Storage

Your data is stored on servers protected by strict access controls, continuous monitoring, and regular backups to prevent data loss or breaches.

PDPA Compliance

The Ometoto Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) to ensure full adherence to local legislation.

Breach Notification

In the event of any data security breach involving your information, Ometoto will notify you within the stipulated timeframe in accordance with established procedures.

Important Note: This Privacy Policy describes Ometoto's data collection and usage practices. By using our platform, you agree to the terms set out herein. If you do not agree, please discontinue use of the platform and contact us to close your account.

1. Introduction and Scope of This Privacy Policy

Welcome to the Ometoto Privacy Policy. This document is designed to give you a clear and transparent overview of how the Ometoto platform handles your personal information. We believe privacy is not merely a legal obligation — it is our moral responsibility to every player who trusts this platform.

This Privacy Policy applies to all services offered by Ometoto, including our official website at ometoto.fun, mobile app, Live Casino services, gaming platform, and all communication channels between Ometoto and its users. It also covers data collected during the registration process, platform usage, financial transactions, and interactions with our support team.

Ometoto operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and current international data protection principles. Any processing of your personal data is carried out solely on lawful grounds, transparently, and for clearly defined purposes.

Key Definitions: In this document, "personal data" refers to any information that can be used to identify you directly or indirectly — including your name, email address, phone number, IP address, and financial information.


2. Types of Personal Data We Collect

Ometoto collects various categories of data depending on how you interact with our platform. Below is a detailed explanation of the data we collect:

Data Category Example Information Collection Method
Identity Data Full name, date of birth, gender, MyKad / passport number Registration form, KYC verification
Contact Data Email address, phone number, residential address Account registration, profile updates
Financial Data Bank account number, e-wallet details, transaction history Deposit and withdrawal process
Technical Data IP address, device type, web browser, operating system Server logs, cookies, automatic collection
Usage Data Games played, session duration, betting history Activity on the platform
Communication Data Live Chat records, support emails, feedback Interactions with the support team

2.1 Data You Provide Directly

This is information you provide directly when using our platform — such as when registering a new account, completing your profile, making a deposit, or contacting our support team. We only request information that is strictly necessary to deliver the relevant service.

2.2 Automatically Collected Data

Every time you access the Ometoto platform, our systems automatically record certain technical information such as your IP address, device type, web browser, pages visited, and the duration of each session. This data is used solely for security purposes, improving user experience, and fraud detection.


3. Purposes for Using Your Personal Data

Ometoto uses the personal data collected for the following purposes, all of which are lawful and necessary for the operation of our platform:

  • Account Management: Creating and maintaining player accounts, verifying identity, processing logins, and ensuring the security of your account.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently across the various supported payment methods.
  • Legal Compliance: Meeting KYC compliance requirements, anti-money laundering (AML) obligations, and reporting to relevant authorities when required.
  • Customer Service: Providing technical support and helping resolve any issues or enquiries you encounter.
  • Platform Security: Detecting and preventing fraud, account abuse, bot activity, and any other security threats.
  • Service Improvement: Analysing usage patterns to improve platform design, game performance, and the overall player experience.
  • Service Communications: Sending important notifications regarding your account, changes to terms, security updates, and promotional information you have opted in to receive.
  • Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support.

Marketing Communications: ometoto only sends marketing communications to players who have given explicit consent. You may withdraw this consent at any time through your account settings or by contacting our support team.


4. Legal Basis for Data Processing

All personal data processing by Ometoto is carried out on a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). The following are the legal grounds we rely on for each category of data processing:

4.1 Performance of Contract

Most of our data processing is necessary to fulfil the contract between you and Ometoto — namely the Terms and Conditions you agreed to upon registration. This includes processing data to manage your account, process transactions, and deliver the services you requested.

4.2 Legal Obligations

Ometoto is subject to various legal obligations that require us to process certain personal data, particularly in relation to KYC and AML compliance. Such processing is mandatory and cannot be opted out of by users.

4.3 Legitimate Interests

Ometoto also processes certain data based on our legitimate interests in operating a safe and responsible business — such as fraud detection, network security, and service improvement. We always ensure our interests do not override your privacy rights.

4.4 Consent

For certain activities such as the use of non-essential cookies and sending marketing communications, Ometoto requests your explicit consent. You have the right to withdraw this consent at any time without any penalty.


5. Sharing Data with Third Parties

Ometoto does not sell your personal data. However, there are specific situations where we may need to share your data with trusted third parties for legitimate purposes:

5.1 Service Providers

Ometoto works with carefully selected third-party service providers to help operate our platform. These include payment service providers (FPX, DuitNow, e-wallets), gaming software providers, identity verification companies, and cloud service providers. All such providers are bound by strict data protection agreements and may only use your data for the specified purposes.

5.2 Legal Authorities

Ometoto will disclose personal data to government authorities, regulators, or law enforcement agencies when required by applicable law or a valid court order. We will not disclose data beyond what is required by such a request.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of company assets, users' personal data may be transferred as part of that process. We will notify you via a prominent notice before your data is transferred and becomes subject to a different privacy policy.

International Transfers: Should your data need to be transferred outside Malaysia, Ometoto ensures such transfers are carried out with adequate safeguards, including the use of standard contractual clauses or recognised data protection mechanisms.


6. Data Retention and Security Measures

6.1 Data Retention Period

Ometoto retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes stated in this Privacy Policy. After an account is closed, we retain certain data for the period prescribed by applicable law — typically between 5 and 7 years for financial records and transactions, in line with AML and tax compliance requirements.

6.2 Technical Security Measures

Ometoto implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

  • Data encryption in transit using TLS 1.3 protocol and AES-256 encryption for data at rest.
  • Role-based access control — only staff who genuinely require it may access player personal data.
  • Continuous 24/7 security monitoring with intrusion detection systems (IDS) and intrusion prevention systems (IPS).
  • Two-factor authentication (2FA) for all staff access to data management systems.
  • Regular penetration testing by independent security experts.
  • Regularly encrypted data backups to a secure, separate location.

Incident Reporting: While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach involving your personal information, Ometoto is committed to notifying you within 72 hours of the breach being identified, in line with international best practices.


7. Your Rights Under PDPA

As an Ometoto player and data subject under Malaysia's PDPA, you have the following rights regarding your personal data. Ometoto is committed to respecting and facilitating the exercise of all these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request correction of inaccurate or incomplete data through your account.

Right to Erasure

You may request deletion of your personal data, subject to our legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Restriction of Processing

Under certain circumstances, you may request that we restrict the way we process your data.

Right to Data Portability

You may request your personal data in a structured, machine-readable format.

To exercise any of the above rights, you may contact the Ometoto support team via 24/7 Live Chat within the platform or refer to the FAQ for further guidance. We will respond to your request within 30 working days.


8. Use of Cookies and Tracking Technologies

The Ometoto platform uses cookies and similar tracking technologies to enhance your experience, ensure platform security, and understand how players interact with our services.

8.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Functional Cookies: Remembering your preferences such as language, display theme, and account settings to deliver a more personalised experience.
  • Analytics Cookies: Collecting information about how you use our platform to help us improve our services. This data is gathered in aggregate form and without individual identification.
  • Performance Cookies: Helping us monitor platform performance, identify technical issues, and ensure the platform runs smoothly.

8.2 Managing Cookies

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Ometoto platform. Essential cookies cannot be disabled as they are required for platform security and basic operation.


9. Protection of Children's Data

The Ometoto Platform is exclusively for individuals aged 18 and above. We do not knowingly or intentionally collect personal data from minors. Ometoto uses an age verification system during the registration process to ensure that only eligible adults may access the platform.

If we discover that we have unknowingly collected personal data from a minor, we will take immediate steps to delete that data and close the account in question. If you believe a child has registered an account on our platform, please contact our support team immediately.


10. Amendments to This Privacy Policy

Ometoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. We will notify you of any material amendments through:

  • A prominent notice on our platform's home page.
  • In-account notification upon your next login.
  • Email to the address registered in your account for significant amendments.

The "Last Updated" date at the top of this document will be updated whenever amendments are made. We encourage you to review this Privacy Policy periodically. Continued use of the Ometoto platform after any amendments take effect constitutes your acceptance of the revised terms.


11. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how ometoto handles your personal data, we encourage you to reach out to us through the following channels:

  • Live Chat: Available 24/7 directly within the Ometoto platform — the fastest way to get an immediate response.
  • Support Email: Submit your written enquiry to [email protected]. We aim to respond within 24–48 working hours.
  • FAQ Section: Visit FAQ page for answers to frequently asked questions about privacy and data security.

For formal requests relating to your rights under the PDPA (such as data access or deletion requests), please clearly state in your message the type of request you are making along with your account details to facilitate the verification process.

You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your privacy rights have been violated and we have been unable to resolve the matter to your satisfaction.

Play with Safe and Trusted at Ometoto

Your privacy is our priority. Register a free account today and enjoy a safe, fair, and fully protected online casino gaming experience in Malaysia.

By registering, you agree to the Terms and Conditions and Privacy Policy us. Age restriction: 18 and above. Play responsibly.

Bahasa Melayu