Privacy Policy

This Privacy Policy ("Policy") is issued by Mikototo ("we", "us", "our"), the operator of the online gaming platform accessible at mikototo.cam. It describes how Mikototo collects, processes, stores, shares and protects personal data relating to our members, website visitors and prospective users ("you", "User", "Data Subject").

Mikototo is committed to handling all personal data responsibly, transparently and in accordance with recognised data protection principles under our international licensing obligations. We do not sell, rent or commercially exploit personal data for the benefit of third parties.

This Policy applies to all personal data collected through your use of the Mikototo platform, including during account registration, identity verification (KYC), deposits and withdrawals via Malaysian payment methods (including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong and RHB), gameplay activity, customer support interactions and marketing communications.

For the purposes of this Policy, the following terms carry the meanings described below:

Mikototo collects personal data through several channels: directly from you when you register, verify or transact; automatically from your device and browser when you use the platform; and from third-party service providers during identity verification. The categories of data collected are set out below.

Mikototo uses personal data only for purposes that are necessary, proportionate and consistent with the lawful bases described in Section 5 of this Policy. The primary purposes for which your data is processed are as follows:

Account Management & Service Delivery

• Creating, maintaining and administering your Mikototo account, including processing deposits and withdrawals via DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost and other supported channels.
• Verifying your identity in compliance with our KYC obligations under international licensing conditions.
• Processing gameplay activity, wagers, bonus credits and loyalty tier calculations.
• Communicating with you regarding account status, transaction confirmations and support queries.

Compliance & Fraud Prevention

• Conducting anti-money-laundering (AML) checks, source-of-funds verifications and politically exposed person (PEP) screenings as required under our licensing obligations.
• Detecting, investigating and preventing fraudulent activity, duplicate account creation, bonus abuse and unauthorised access.
• Maintaining records of responsible gambling tool usage, self-exclusion requests and deposit limit settings.
• Enforcing the 21+ age requirement through identity verification and cross-referencing with self-exclusion registers where applicable.

Platform Improvement & Analytics

• Analysing usage patterns, game performance and payment method preferences (at an aggregated, anonymised level where possible) to improve platform features and user experience.
• Conducting A/B testing on platform interface elements to optimise performance for Malaysian users.

Marketing Communications

• Sending you promotional offers, bonus announcements and platform updates by email or in-platform notification, only where you have opted in to receive such communications.
• Tailoring promotional content to your game category preferences (e.g. football betting, slots, live casino) based on your historical activity on the platform.

Mikototo processes personal data only where a lawful basis exists. The primary bases on which we rely are as follows:

1. Contractual Necessity: Processing is required to perform the contract between you and Mikototo — including account creation, payment processing, game delivery and withdrawal fulfilment.
2. Legal Obligation: Processing is required to comply with our international licensing conditions, including KYC verification, AML screening and responsible gambling record-keeping obligations.
3. Legitimate Interests: Processing is necessary for the legitimate interests of Mikototo, including fraud prevention, platform security, abuse detection and service improvement — provided these interests are not overridden by your fundamental rights.
4. Consent: For marketing communications and optional personalisation features, we rely on your explicit consent as collected during registration or updated in your account dashboard. Consent may be withdrawn at any time without affecting your other rights.

Mikototo does not sell, rent or trade your personal data to any third party for commercial purposes. Personal data is shared only in the following limited circumstances, and only to the extent necessary for each purpose:

• KYC and Identity Verification Providers: Identity documents and selfies are transmitted to certified third-party KYC verification partners over encrypted connections for the sole purpose of confirming your identity and age eligibility.
• Payment Processors: Financial data necessary to process your deposit or withdrawal is shared with the relevant payment service provider (e.g. Touch 'n Go eWallet operator, FPX network participants, Maybank, CIMB, DuitNow infrastructure) to complete the transaction. Mikototo does not store full payment card numbers on its servers.
• Technology and Cloud Infrastructure Providers: Mikototo uses third-party cloud hosting and data management services. These providers process data strictly under Mikototo's instructions and under binding data processing agreements.
• Regulatory and Licensing Authorities: Where required by our international gaming licence or applicable law, Mikototo may disclose account or transaction data to licensing authorities, law enforcement agencies or other competent regulatory bodies upon receipt of a valid legal request.
• Anti-Fraud and AML Networks: In cases of suspected fraud, money laundering or match-fixing, Mikototo may share relevant account data with industry fraud prevention consortia or law enforcement.
• Business Transfers: In the event that Mikototo undergoes a merger, acquisition or asset sale, personal data held by the platform may be transferred to the acquiring entity, subject to equivalent privacy protections.

The Mikototo platform uses cookies and similar tracking technologies to operate core platform functionality, remember your session preferences, monitor platform performance and analyse usage patterns.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair platform functionality. Mikototo does not use cookies to serve third-party advertising or to track you across unaffiliated websites.

Mikototo retains personal data for no longer than is necessary for the purpose for which it was collected, subject to overriding legal, regulatory or contractual retention obligations. The following retention principles apply:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations under international licensing requirements.
• KYC Documents: Identity documents and verification records are retained for a minimum of five (5) years from the date of verification, or from the date of account closure — whichever is later — in accordance with AML compliance obligations.
• Transaction Records: Deposit, withdrawal, wager and bonus records are retained for a minimum of five (5) years following each transaction.
• Marketing Data: Email addresses and marketing preference records are retained until you withdraw consent or request erasure, after which they are deleted within thirty (30) days, unless retention is required for a separate legal purpose.
• Support Communications: Live chat transcripts and email correspondence are retained for up to three (3) years for quality assurance and dispute resolution purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

Mikototo implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. Key measures include:

• Transport Encryption: All data transmitted between your device and the Mikototo platform is protected using 256-bit TLS/SSL encryption. Verify the padlock icon in your browser address bar before submitting any personal information.
• At-Rest Encryption: Sensitive personal data stored in Mikototo's systems — including KYC documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Personal data is accessible only to authorised Mikototo personnel and contracted processors on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• Two-Factor Authentication: Mikototo supports two-factor authentication (2FA) for all player accounts, providing an additional layer of protection against unauthorised login attempts.
• Intrusion Detection: Mikototo employs real-time intrusion detection systems and regular security assessments to identify and respond to potential threats.

Mikototo recognises the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your registered account username and a clear description of your request. We will respond within thirty (30) days.

Please note that some rights are subject to limitations where data must be retained to comply with legal obligations (e.g. AML records cannot be deleted on request alone). Mikototo will explain any such limitations when responding to your request.

The Mikototo platform is strictly intended for persons aged 21 (twenty-one) years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process for all accounts.

If Mikototo discovers or is informed that personal data has been collected from an individual under the age of 21 without verified parental or guardian consent, all data associated with that account will be deleted and the account will be permanently closed as soon as reasonably practicable.

Parents and guardians who believe that a minor may have registered on the Mikototo platform using false age information are encouraged to contact our support team immediately at [email protected].

Mikototo operates under an international gaming licence and uses cloud infrastructure and service providers that may process personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, Mikototo ensures that appropriate safeguards are in place, including:

• Binding contractual clauses with third-party processors that impose data protection obligations equivalent to those applied by Mikototo.
• Transfer only to processors located in jurisdictions with adequate data protection frameworks, or subject to supplementary safeguards where adequacy has not been formally determined.
• Encryption of personal data in transit across all international transfers.

By using the Mikototo platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia. Mikototo takes reasonable steps to ensure that any such transfers are handled with the same level of care as described in this Policy.

Mikototo reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, legal obligations or regulatory requirements. Where changes are material — meaning they meaningfully affect how we collect, use or share your data — we will notify you via email to your registered address and/or by posting a prominent notice on the platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of the Mikototo platform following the effective date of any updated Policy constitutes acceptance of the revised terms. If you object to any changes, you should cease using the platform and contact us to request account closure.

For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact the Mikototo support team. All privacy-related communications should include your registered account username and a clear description of your query or request.