Privacy Policy

Ormastoto Privacy Policy — Member Personal Data Protection

Your privacy is our priority. This document clearly explains how ormastoto collects, uses, stores, and protects your personal data. We are committed to keeping your information safe and handling it with full responsibility in accordance with international data protection standards.

Updated: June 2026
Language: Malay (MY)
Encryption: TLS 1.3
Our Privacy Commitment
  • Data encrypted to banking standards
  • No data sales to third parties
  • Data access and deletion rights are respected
  • Continuous 24/7 security monitoring
  • Global data protection standards compliance

This Privacy Policy applies to all registered members and visitors of the Ormastoto platform. By using our platform, you agree to how we handle your personal data as described in this document. We encourage you to read this policy carefully in full.

Ormastoto's Six Pillars of Data Protection

The core principles that underpin how we manage your privacy every day.

Banking-Level Encryption

All data transmitted between your device and ormastoto's servers is protected with TLS 1.3 encryption — the same technology used by leading financial institutions worldwide to ensure no third party can intercept your information.

Strict Access Control

Only authorised staff may access members' personal data, and every access is recorded in system logs. Our role-based access control (RBAC) system ensures your data is only viewed by those who genuinely need it for operational purposes.

No Data Sales

Ormastoto never sells, rents, or exchanges member personal data to any third party for marketing or commercial purposes. Your data belongs to you — we only use it for purposes you have given consent for.

Limited Retention Period

Your personal data is retained only for as long as necessary for the stated purposes or as required by law. Once the retention period expires, data is securely deleted using irreversible deletion methods.

Data Breach Notification

In the event of any security incident involving your data, we will notify you within 72 hours via your registered email. We will also take immediate remediation action and report to the relevant authorities.

Your Consent Comes First

We only process your personal data on the basis of clear consent, contractual necessity, legal obligation, or recognised legitimate interest. You have the right to withdraw consent at any time by contacting our team.

1

Information We Collect

To provide a secure, efficient, and personalised service, Ormastoto collects several categories of personal data from members and platform visitors. This data collection is carried out transparently and solely for clearly stated purposes.

Data Category Sample Information Primary Purpose
Identity Data Full name, date of birth, identification card number KYC verification & legal compliance
Contact Data Email address, phone number, residential address Account communications & customer support
Financial Data Bank account details, transaction records Deposit & withdrawal processing
Technical Data IP address, device type, web browser Account security & fraud detection
Usage Data Game records, betting history, session duration Responsible gaming & support
Cookie Data Site preferences, login session data User experience & platform analytics

We do not collect any sensitive data such as medical information, religious beliefs, or political views unless specifically required by applicable law. All data collected is the minimum necessary to deliver our services effectively.

2

How We Use Your Data

The personal data we collect is used solely for the following legitimate and stated purposes. We will not use your data for any other purpose without first obtaining fresh consent from you.

  • Account management: Creating, verifying, and managing your member account, including required KYC processes.
  • Transaction processing: Processing deposits and withdrawals securely while maintaining accurate transaction records.
  • Platform security: Detecting and preventing fraud, money laundering, and other unlawful activities.
  • Customer support: Responding to inquiries, resolving complaints, and providing technical assistance to members.
  • Regulatory compliance: Meeting reporting requirements to the relevant regulatory authorities.
  • Service improvement: Analyzing usage patterns to improve the overall user experience.
  • Marketing communications: Sending information about the latest promotions and offers — only to members who have consented to receive such communications.

You may withdraw consent to receive marketing communications at any time by updating your notification settings in your account panel or by contacting our support team. This withdrawal will not affect the data processing required for your account's operation.

3

Data Sharing with Third Parties

Ormastoto takes a highly cautious approach to data sharing. We do not sell or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary to operate our services.

Approved service providers — We work with carefully selected third-party providers for specific functions such as payment processing, identity verification, and cloud data storage. All such providers are bound by strict data protection agreements and may only use your data for purposes designated by Ormastoto.

Legal and regulatory requirements — We may be required to disclose data to government authorities, regulatory bodies, or law enforcement agencies when mandated by law or a valid court order. In such circumstances, we will notify you where permitted to do so.

Business transfer — In the event of a merger, acquisition, or asset sale, member data may be transferred to the new entity. You will be notified in advance and given the option to close your account if you do not agree to the new terms.

Important reminder: ormastoto will never request your password or full account information via email, phone, or social media platforms. If you receive any communication demanding such information, please report it to our security team immediately.

4

Data Security & Storage

The security of your personal data is a responsibility we take extremely seriously. Ormastoto invests in the latest security infrastructure to ensure your data is protected at every stage — whether in transit, in processing, or in storage.

Our servers are protected by multi-layered firewalls, an intrusion detection system (IDS), and round-the-clock continuous security monitoring. All stored data is encrypted using AES-256 standards — the same standard used by world-class defense and financial institutions.

We conduct regular penetration testing by independent security experts to identify and close any vulnerabilities before they can be exploited. All our systems are also updated regularly to ensure the latest security patches are always applied.

Your personal data is stored in data centres with internationally recognised security certifications. Physical access to these facilities is strictly restricted and monitored. Data backups are performed regularly and stored at separate locations to ensure service continuity in the event of any disruption.

5

Your Rights as a Member

Ormastoto recognizes and respects your rights regarding personal data. You may exercise the following rights at any time by contacting our support team:

Right of Access You have the right to request a copy of all personal data we hold about you. Requests will be processed within 30 days.
Right to Rectification If your data is inaccurate or incomplete, you have the right to request an immediate correction. Updates can be made directly through your account panel.
Right to Erasure You may request deletion of your personal data, subject to legal retention obligations and platform risk management requirements.
Right to Restriction of Processing You may request that we restrict how we process your data in certain situations, such as while a complaint investigation is ongoing.
Right to Data Portability You may request your personal data in a machine-readable format (JSON or CSV) for transfer to another service provider.
Right to Object You have the right to object to the processing of your data for direct marketing or analytics purposes at any time, without needing to provide a reason.
6

Cookie Policy

Ormastoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the categories of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Preference Cookies: Storing your settings such as preferred language and display preferences for a more personalized experience.
  • Analytics Cookies: Helps us understand how visitors use the platform by collecting anonymous data for continuous improvement.
  • Marketing Cookies: Used to display relevant promotions. You may deactivate this category without affecting the platform's core functions.

You can manage cookie settings through your web browser or via the privacy settings panel in your account. Please note that disabling certain cookies may affect specific platform functions.

7

Privacy Frequently Asked Questions

Active members' personal data is retained for as long as your account remains active. Following account closure, financial data and transaction records are kept for a minimum of five years to meet anti-money laundering legal requirements. Data with no legal retention requirement will be deleted within 90 days of account closure.

No. Your personal data is not shared with third-party game providers or casinos for their marketing or data collection purposes. Game providers only receive the session information technically required to run the games, which does not include your personal identity details.

You may submit a data access request in two ways: first, log in to your account and navigate to the "Privacy Settings" section for an automated request; second, contact our support team via live chat or email with "Data Access Request" as the subject. We will process your request within 30 days and deliver the data in a readable format.

When your account is closed, we will retain data required by law — such as financial records and KYC logs — for the period specified by regulators. Data with no legal retention requirement, such as game preferences and analytics data, will be deleted within 90 days. You may request a full report of data still held after account closure.

ormastoto uses two-factor authentication (2FA), suspicious login monitoring, real-time notifications for unusual account activity, and an AI-based fraud detection system. Every login from a new device or location will require additional verification. We also conduct periodic cross-checks to detect any signs of account misuse.

Join a Platform That Puts Your Privacy First

At Ormastoto, data security is not just a promise — it is our daily practice. Register now and enjoy a gaming experience with true peace of mind.

Bahasa Melayu