Yumetoto Privacy Policy for Malaysian Players

1. Introduction and Scope

Yumetoto respects the privacy of its users and recognises that personal information must be handled carefully. This policy applies when you visit yumetoto, create or manage an account, complete identity checks, deposit or withdraw MYR, place a casino or sports wager, claim a promotion or contact customer support.

By using yumetoto, you acknowledge that personal information will be processed as described in this policy. Where consent is required for a particular activity, yumetoto will request it separately. Declining optional processing will not prevent access to unrelated functions, although refusing information needed for verification, security or payment processing may prevent yumetoto from providing the relevant service.

This policy should be read together with the Terms & Conditions and Responsible Gambling provisions. It does not replace any notice displayed when yumetoto requests information for a specific purpose.

2. Information We Collect

Depending on how you use yumetoto, we may collect the following categories of personal information:

• Account information: name, date of birth, username, password credentials, residential address, email address and mobile number.
• Verification information: MyKad or passport details, document images, proof of address, age confirmation and the results of identity checks.
• Financial information: deposit and withdrawal records, MYR balances, payment references and limited details associated with an e-wallet or bank account.
• Gaming information: casino sessions, sports wagers, stakes, odds, winnings, losses, bonuses, account limits and responsible gambling controls.
• Technical information: IP address, browser type, operating system, device identifiers, login times, approximate location and security logs.
• Communication information: live chat transcripts, support messages, complaint records, preference selections and feedback provided to yumetoto.

Yumetoto seeks to collect information that is relevant and proportionate to the service being provided. You should not provide unnecessary personal details about another person unless you are lawfully authorised to do so.

3. Sources of Personal Information

Most information is collected directly from you during registration, verification, payment activity and support conversations. Yumetoto also records information automatically when you use the website, including device data, page interactions, authentication events and activity needed to protect your account.

Information may also be received from payment processors, identity-verification services, fraud-prevention providers and game or sports-betting systems. For example, a supported payment partner may confirm that a Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX transaction succeeded without giving yumetoto full access to your underlying payment credentials.

Where reasonably necessary, yumetoto may compare supplied information with reliable records to validate identity, detect duplicate accounts, investigate suspicious activity or comply with applicable obligations.

4. How and Why We Use Information

Yumetoto processes personal information for legitimate and defined operational purposes, including to:

• Create, authenticate, maintain and secure your yumetoto account.
• Confirm that users are eligible adults aged 21 or above.
• Process deposits, withdrawals, refunds and account balance adjustments in MYR.
• Record casino activity and settle sports markets such as the EPL, Liga Super Malaysia and UFC.
• Apply bonus rules, account limits and responsible gambling controls.
• Detect account takeover, collusion, payment fraud, duplicate accounts and other prohibited conduct.
• Respond to questions, resolve complaints and improve customer support.
• Maintain service performance, investigate errors and improve the yumetoto user experience.
• Comply with legal, regulatory, security and record-keeping requirements that apply to our operations.

We may also use aggregated or de-identified information to understand platform performance and gaming trends. Such information is not intended to identify an individual yumetoto user.

5. Payment, Verification and KYC Data

Payment and identity information receives additional protection because it may be sensitive. Yumetoto may request identity documents, proof of address, payment ownership evidence or source-of-funds information where necessary to verify an account, process a withdrawal, prevent fraud or complete a compliance review.

When you use Maybank, CIMB, Public Bank, Hong Leong, RHB or another Malaysian financial institution, the relevant provider processes information under its own privacy terms. Yumetoto normally receives a transaction reference, amount, status, date and enough account information to reconcile the payment. We do not ask users to disclose their online banking password or e-wallet security code.

6. Cookies, Analytics and Device Information

Yumetoto may use cookies and comparable browser technologies to maintain sessions, remember settings, support authentication, measure website performance and identify security threats. Essential cookies are required for functions such as keeping a user signed in and protecting account access.

Performance information helps yumetoto understand whether pages load correctly for users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and elsewhere in Malaysia. This may include general device, browser, connection and page-response data. It is used to diagnose technical problems rather than to identify a user's precise physical address.

Browser controls may allow you to remove or block cookies. Blocking essential cookies can affect account login, transaction security and other core yumetoto functions.

7. When Information May Be Shared

Yumetoto does not sell personal information. We may share limited information with service providers that support hosting, payment processing, identity verification, fraud prevention, customer support, game delivery, security and professional advice. Providers receive only the information reasonably needed for their assigned function and are expected to maintain appropriate confidentiality and security.

Information may also be disclosed where yumetoto reasonably believes disclosure is required by applicable law, necessary to protect a user, needed to investigate fraud or required to establish or defend legal rights. Where a business reorganisation affects control of relevant data, appropriate safeguards will continue to apply.

Yumetoto does not authorise service providers to use player information for unrelated independent advertising merely because they process it on our behalf.

8. International Data Processing

Some systems and service providers supporting yumetoto may process information outside Malaysia. Privacy and data-protection standards differ between jurisdictions. Where international processing occurs, yumetoto uses reasonable contractual, organisational and technical measures intended to preserve an appropriate level of protection.

International processing does not remove yumetoto's responsibility to handle personal information consistently with this policy. Access is limited according to operational need, and service providers are expected to use information only for authorised purposes.

9. Data Retention

Yumetoto retains personal information only for as long as reasonably necessary for the purpose for which it was collected, including account administration, payment reconciliation, fraud prevention, dispute handling, responsible gambling controls and applicable record-keeping requirements.

Closing a yumetoto account does not always result in immediate deletion. Certain identity, transaction, security and self-exclusion records may need to be retained after closure. This helps resolve later payment disputes, prevent the reopening of excluded accounts and satisfy legitimate compliance obligations.

When retention is no longer required, information is deleted, anonymised or placed beyond ordinary operational use through appropriate controls.

10. Information Security

Yumetoto uses layered safeguards designed to protect personal information. Measures may include encrypted connections, access restrictions, authentication controls, system monitoring, backup procedures, vulnerability management and staff confidentiality requirements.

No online system can guarantee absolute security. Users also play an important role by choosing a strong password, keeping login credentials private, securing their devices and notifying yumetoto promptly if they suspect unauthorised account access.

Where yumetoto confirms a data incident that creates a material risk to affected individuals, we will take reasonable steps to contain the incident, investigate its impact and provide notice where required.

11. Your Privacy Rights

Subject to identity verification and applicable limitations, a yumetoto user may request information about personal data held in relation to their account. Users may also ask for inaccurate or incomplete details to be corrected and may raise an objection or concern about particular processing.

Requests should be sent to the plain-text address [email protected]. Yumetoto may ask for information needed to confirm identity before disclosing or changing account data. This protects users against fraudulent privacy requests. We will respond within a reasonable period and explain if a request cannot be fulfilled in full.

12. Marketing Preferences

Where permitted, yumetoto may send information about relevant games, sports markets, service features or promotions. Optional marketing preferences can be changed by contacting support or using an available preference control.

Account-security alerts, withdrawal updates, verification requests, changes to legal terms and responsible gambling notices are operational communications. Yumetoto may continue sending these essential messages while an account remains open or while a relevant matter is unresolved.

13. Age Restrictions and Minors

Yumetoto is strictly intended for users aged 21 and above. We do not knowingly permit minors to create accounts or participate in casino-style gambling. Age and identity verification may be required during registration, before withdrawal or at another appropriate stage.

If yumetoto identifies an underage account, access will be restricted and the matter reviewed. A parent or guardian who believes that a minor has provided personal information should contact [email protected] with enough information for the concern to be investigated.

14. Changes to This Privacy Policy

Yumetoto may update this policy when services, security practices, payment arrangements or applicable obligations change. The revised policy will display a new effective date. Material changes may also be communicated through an account notice or another appropriate yumetoto channel.

Users should review this page periodically. Continued use of yumetoto after an updated policy becomes effective acknowledges the revised information practices, except where fresh consent is legally required.

15. Contact Us

Questions, concerns and privacy-rights requests may be directed to the yumetoto support team. Please state that your message concerns privacy and provide enough detail for the request to be understood.

Email: [email protected]
Support availability: 24 hours a day, 7 days a week

The email address above is displayed as plain text and is not clickable. Do not include banking passwords, one-time passwords or unnecessary identity documents in an initial enquiry. Yumetoto support will explain any secure verification steps that are genuinely required.