Privacy Policy

This Privacy Policy (the "Policy") describes how Niastoto ("Niastoto", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the online gaming platform available at niastoto.cam (the "Platform").

Niastoto is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data we genuinely need, we use it only for the purposes described in this Policy, and we do not sell it to anyone.

By creating an account on the Platform or continuing to use our services, you acknowledge that you have read and understood this Policy. If you have any questions about how we handle your data, our support team is available 24/7 at [email protected].

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — that is, information from which a specific individual can be directly or indirectly identified.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, transmission, disclosure, or deletion.
• "Data Controller" means Niastoto, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of Niastoto under a formal data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity, age, and source-of-funds verification process mandated by regulatory requirements.
• "Cookie" means a small text file placed on your device by the Platform to store session information, preferences, or analytical data.
• "Account" means a registered user profile on the Niastoto Platform.

Niastoto collects the following categories of personal data in connection with the operation of your Account and the provision of our gaming services:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where the latter is voluntarily disclosed in the context of a responsible gambling self-exclusion or problem gambling support request.

Niastoto collects personal data through the following channels:

• Direct submission: Data you voluntarily provide during account registration, KYC verification, deposit and withdrawal requests, support interactions, and promotional opt-ins.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device fingerprint, session data, and cookie-driven behavioural analytics.
• Payment processors: Transaction confirmation data received from integrated Malaysian payment providers, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank, as a result of deposit or withdrawal transactions.
• Identity verification partners: Confirmation data received from third-party KYC and AML screening services engaged to verify the identity and eligibility of account holders.
• Fraud prevention tools: Risk signals from fraud detection systems designed to protect the Platform and its users from unauthorised access and financial crime.

Niastoto uses your personal data for the following purposes:

• Account management: To create, maintain, operate, and close your Account on the Platform, including processing your deposits and withdrawals in MYR.
• Identity and age verification: To verify that you meet the minimum age requirement of 21 years and that your identity is genuine, as required by our terms and applicable regulatory expectations.
• Gaming service delivery: To provide you with access to our full game library — including slots, live casino, sports betting markets, lottery, and arcade games — and to record the outcomes of your gaming activity accurately.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance via Live Chat and email in English, 24/7.
• Fraud prevention and security: To detect, prevent, and investigate fraudulent activity, money laundering, account takeovers, and other forms of abuse or criminal conduct on the Platform.
• Regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) requirements, to maintain required transaction records, and to respond to lawful requests from regulatory or law enforcement authorities.
• Responsible gambling: To monitor betting patterns for signs of problem gambling behaviour, to enforce self-exclusion and deposit limit settings you have activated, and to provide personalised responsible gambling communications where appropriate.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance, stability, and design of the Platform — including its mobile experience on Malaysian networks.
• Marketing communications: To send you promotional offers, bonus notifications, and event announcements where you have provided your consent or where we are otherwise permitted to do so. You may withdraw this consent at any time by contacting our support team.

Niastoto processes your personal data on the following legal bases, each of which applies to specific processing activities described in this Policy:

• Contractual necessity: Processing required to perform our obligations under the account agreement with you — including operating your Account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML record-keeping, and lawful authority requests.
• Legitimate interests: Processing undertaken for purposes that are reasonably necessary and proportionate to Niastoto's legitimate business interests, including fraud prevention, platform security, and business analytics — provided these interests are not overridden by your rights and interests.
• Consent: Processing for specific optional purposes — primarily direct marketing — where you have provided clear and informed consent. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

Niastoto does not sell, rent, or trade your personal data. We may share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment service providers: Personal and financial data necessary to process your MYR deposits and withdrawals is shared with your selected payment provider (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Boost, or GrabPay) solely to execute the relevant transaction.
• Identity verification and AML partners: Identity documents and related personal data are shared with vetted KYC and AML compliance service providers engaged to verify account holder eligibility, solely for that verification purpose.
• Technology and infrastructure partners: Service providers who host, maintain, and secure the Platform's technical infrastructure may have access to personal data as part of their contracted service delivery, subject to binding data processing agreements.
• Game software providers: Where required for the technical delivery of specific games, limited technical session data may be shared with certified game software providers. No financial or identity data is shared with game providers beyond what is strictly necessary.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful regulatory request, Niastoto will disclose personal data to competent authorities. We will notify you of such disclosure wherever we are legally permitted to do so.
• Fraud prevention networks: In cases of confirmed or suspected fraud, criminal activity, or AML violations, relevant data may be shared with fraud prevention databases, law enforcement, or industry bodies as permitted by law.

Niastoto retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active Account, plus a minimum period of five (5) years following Account closure, in compliance with applicable AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years following the date of each transaction, as required for financial record-keeping and regulatory compliance.
• Support and communications records: Retained for a minimum of three (3) years following the closure of the relevant support interaction, to facilitate dispute resolution and quality assurance.
• Technical and session data: Retained for a maximum of twelve (12) months from collection, unless retained longer for the purposes of a live security investigation or fraud inquiry.
• Marketing preference data: Retained for the duration of your consent or until you withdraw it, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction or re-identification.

Niastoto implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and Niastoto's servers.
• Encrypted storage of sensitive account and payment data at rest, using industry-standard encryption protocols.
• Multi-factor authentication options for account login, reducing the risk of unauthorised account access.
• Role-based access controls ensuring that only authorised Niastoto personnel can access personal data, and only to the extent required for their specific role.
• Regular third-party security audits and penetration testing of the Platform's technical infrastructure.
• Comprehensive incident response procedures designed to identify, contain, and remediate data security incidents within minimum possible timeframes.

In the event of a data breach that is likely to result in a material risk to your rights and interests, Niastoto will notify you as promptly as reasonably practicable, providing details of the nature of the breach and the steps you can take to protect yourself.

Niastoto uses cookies and similar tracking technologies to operate certain essential Platform functions, to improve your user experience, and to gather anonymous analytical data that helps us understand how players interact with the Platform.

The following categories of cookies are used on the Platform:

• Essential cookies: Required for the Platform to function correctly. These include session management cookies that keep you logged into your Account and security cookies that help protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences — such as language settings, preferred display options, and responsible gambling tool configurations — so that your session is personalised on subsequent visits.
• Analytical cookies: Collect anonymous, aggregated data about how users navigate and interact with the Platform — page views, session duration, device types, and feature usage. This data is used exclusively for internal Platform improvement and does not identify individual users.
• Performance cookies: Monitor the technical performance of the Platform, including load times and error rates, to help Niastoto's technical team identify and resolve issues that may affect Malaysian players' experience on 4G, 5G, and WiFi connections.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to access certain features of the Platform, including account login. Niastoto does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertising on external platforms.

As a player on the Niastoto Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request – [Your Account Username]".

• Right of Access: You have the right to request a copy of the personal data Niastoto holds about you. We will provide this in a clear, structured format within 14 working days of receiving your verified request.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data held in your Account. You may update basic contact details directly through your Account settings at any time.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to Niastoto's overriding legal obligations to retain certain data for the minimum periods specified in Section 8 above.
• Right to Restrict Processing: You have the right to request that Niastoto temporarily suspends processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, and to withdraw your consent to marketing communications at any time without penalty.

Niastoto will respond to all verified data rights requests within 14 working days. Where a request cannot be fulfilled — for example, due to a conflicting legal obligation — we will explain the reason clearly and in writing.

The Niastoto Platform is strictly intended for individuals aged 21 years and above. Niastoto does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

All account registrations are subject to mandatory KYC age verification. Where Niastoto identifies that personal data has been collected from an underage individual — whether through the registration process or otherwise — that Account will be immediately suspended, any associated balance will be returned to the source payment method where feasible, and the personal data of the minor will be permanently deleted from our systems without delay.

If you are a parent or guardian and believe that your child has registered an account or provided personal data to Niastoto without your knowledge or consent, please contact us immediately at [email protected].

Niastoto reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, industry best practice, or our own internal data processing operations. The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision.

Where a material amendment is made to this Policy — one that significantly alters the way we collect, use, or share your personal data — Niastoto will notify active account holders via the registered email address associated with their Account, or via a prominent notice on the Platform, prior to the amendment taking effect.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to an amendment, you should discontinue use of the Platform and contact our support team to request Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Niastoto processes your personal data, please get in touch with our support team using the contact details below:

• Data Enquiries Email: [email protected] — Subject line: "Privacy Enquiry" or "Data Rights Request – [Username]"
• Live Chat: Available 24/7 within your Account dashboard after login.
• Response Time: All data-related enquiries are responded to within 14 working days. Urgent security-related matters are prioritised and typically addressed within 48 hours.

Our support team is based in Malaysia and serves players across Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and throughout the country. All data correspondence is handled in English.