At ulartoto, protecting your personal data is as important to us as protecting your account funds. This Privacy Policy explains precisely what information we collect, why we collect it, how we use it, and the rights you hold as a data subject.
Our Data Commitments
Six principles that govern how we handle every byte of data you share with ulartoto.
We collect only the personal data strictly necessary to operate the Platform, comply with legal obligations, and deliver the services you have requested. Nothing more.
ulartoto does not sell, rent, or trade your personal data to any third party for their own marketing purposes — full stop. Your data is not a product we monetise.
All personal data is stored on encrypted servers protected by industry-standard security controls, including 256-bit SSL encryption and restricted access protocols.
Every use of your personal data is grounded in a valid legal basis — whether contractual necessity, legal obligation, legitimate interest, or your explicit consent.
We tell you exactly what we collect and why. There are no hidden data flows. This Policy is written to be read and understood, not buried in legal jargon.
You have clear rights over your data — access, correction, deletion, portability, and objection — and we have processes in place to honour every valid request promptly.
This Privacy Policy (hereinafter "Policy" or "Privacy Policy") issued by ulartoto (hereinafter "ulartoto", "we", "us", or "our") and governs the collection, processing, storage, disclosure, and protection of personal data in connection with your use of the ulartoto website accessible at https://ulartoto.cam and all associated services, features, and applications (collectively, the "Platform").
ulartoto is committed to protecting the privacy and personal data of all users, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. This Policy has been prepared to inform you clearly and transparently of your rights and of our obligations under applicable data protection law.
By accessing the Platform, creating an account, or submitting any personal information to ulartoto, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. This Policy forms a binding part of our Terms & Conditions.
This Policy applies to all personal data processed by ulartoto regardless of the means by which it is collected — whether through account registration, payment processing, customer support interactions, or automated technical collection via cookies and similar technologies.
The following definitions apply throughout this Privacy Policy:
ulartoto collects the following categories of personal data, depending on your level of engagement with the Platform:
When you register an account on ulartoto, we collect: full legal name, date of birth, gender, nationality, Malaysian MyKad number or passport number (for KYC purposes), username, and password (stored in encrypted form only).
We collect your email address, mobile phone number, and residential address. Contact data is used for account management, transaction notifications, support communications, and where consented, promotional messaging.
ulartoto collects records of all deposits and withdrawals processed through your Account, including payment method details (e.g., Touch 'n Go eWallet account identifier, Boost wallet reference, Maybank account number, CIMB account number, GrabPay reference, DuitNow transfer references, FPX transaction IDs, and cryptocurrency wallet addresses for USDT TRC20 transactions). We do not store complete bank card numbers or CVV codes.
To comply with anti-money laundering (AML) obligations, we collect and retain copies of government-issued identity documents, proof of address documents, and, where required, photographs or video verification records.
We automatically collect data about how you interact with the Platform, including: games played, betting history, session duration, features accessed, search queries within the Platform, and in-play betting patterns.
We collect technical identifiers including your IP address, device type, operating system, browser type and version, screen resolution, and referring URL. This data is used for security monitoring, fraud prevention, and Platform optimisation.
When you contact our support team via live chat or email, we retain a record of those communications, including the content of messages and any attachments submitted.
| Data Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport | Registration, KYC |
| Contact Data | Email, phone number, address | Registration, account updates |
| Financial Data | Payment method IDs, transaction history | Deposit / withdrawal processing |
| KYC Documents | MyKad scan, utility bill, selfie | KYC verification process |
| Behavioural Data | Games played, betting history, session data | Automated — Platform use |
| Technical Data | IP address, device ID, browser data | Automated — every visit |
| Communications Data | Support chat logs, email correspondence | Support interactions |
ulartoto collects personal data through the following primary channels:
All processing of personal data by ulartoto is conducted on the basis of one or more of the following legal grounds:
ulartoto uses your personal data for the following purposes:
To create and maintain your account, authenticate your identity at login, manage your account preferences, and communicate account-related notifications including transaction confirmations and security alerts.
To provide access to all games, sports betting markets, live dealer tables, lottery draws, and other Services offered on the Platform. Behavioural data is also used to personalise your Platform experience and surface relevant game recommendations.
To process deposits and withdrawals through your selected payment methods — including Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, DuitNow, FPX, and USDT TRC20 — and to maintain accurate financial records of all transactions.
To verify your identity in compliance with Know Your Customer (KYC) requirements, screen transactions for money laundering indicators, detect and prevent fraudulent account activity, and fulfil mandatory reporting obligations under applicable law.
To monitor your gaming behaviour and identify indicators of potential problem gambling, including unusual betting patterns, escalating deposit frequency, or use of self-exclusion tools. This processing serves both our regulatory obligations and our commitment to player welfare.
To respond to your support enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
To comply with applicable legal obligations, respond to lawful requests from regulatory authorities or law enforcement agencies, and to enforce our Terms & Conditions.
Where you have provided explicit consent, we may use your contact details to send you promotional offers, bonus notifications, and news about ulartoto. You may opt out at any time.
ulartoto does not sell, rent, or trade your personal data. We may share your data only in the following carefully controlled circumstances:
We share necessary financial and identity data with payment processors — including but not limited to Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX operators — solely to facilitate the processing of your deposits and withdrawals. These providers are bound by contractual obligations and their own privacy frameworks.
We share identity document data with licensed third-party KYC verification and AML screening providers for the purpose of identity verification and fraud prevention. These processors act on our instructions and are prohibited from using your data for any other purpose.
We use trusted third-party cloud hosting, security, and analytics providers to operate the Platform. These providers process data as our data processors under strict contractual data processing agreements.
ulartoto may disclose personal data to regulatory bodies, law enforcement agencies, or courts of law where required to do so by applicable law, court order, or regulatory directive. We will comply with lawful disclosure requests.
In the event of a merger, acquisition, reorganisation, or sale of assets, personal data held by ulartoto may be transferred to a successor entity. We will provide notice of any such transfer and ensure that the acquiring entity is bound by this Privacy Policy or an equivalent standard.
Reminder: ulartoto will never sell your personal data to unafiliated third parties for marketing or commercial purposes. Any sharing is strictly for operational, legal, or contractual necessity.
ulartoto uses cookies and similar tracking technologies to operate improve the Platform, remember your preferences, and analyse usage patterns. By using the Platform, you consent to the use of cookies as described in this section.
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform and your ability to access some features. Instructions for managing cookies are available in the help documentation of your chosen browser.
ulartoto does not use third-party advertising cookies or social media tracking pixels. We do not allow third-party advertisers to set cookies on our Platform.
ulartoto retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes and enforce our agreements. Our general retention approach is as follows:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents reconstruction or identification.
ulartoto implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:
While ulartoto takes all reasonable precautions to protect your data, no system is entirely immune to risk. You are responsible for maintaining the confidentiality of your own account credentials. If you believe your account has been compromised, please contact our support team immediately.
As a data subject, you hold a number of rights in relation to the personal data that ulartoto holds about you. These rights may be exercised by submitting a written request to our support team at [email protected]. We will respond to all valid requests within thirty (30) days.
You have the right to request confirmation of whether ulartoto holds personal data about you and, if so, to receive a copy of that data along with information about how it is being processed.
You have the right to request the correction of any inaccurate or incomplete personal data we hold about you. Where feasible, corrections may also be made directly through your account settings.
You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to overiding legal obligations, including financial record-keeping requirements that may require us to retain certain data for prescribed periods.
You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or have objected to processing and determination of legitimate interests is pending.
Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit that data to another controller where technically feasible.
You have the right to object to processing based on legitimate interests or carried out for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately. For other legitimate interest processing, we will balance your objection against our interests and legal obligations.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to withdrawal.
To exercise any of these rights, contact our support team at [email protected] with "Data Rights Request" in the subject line. We may require verification of your identity before processing your request to protect against fraudulent submissions.
The ulartoto Platform is strictly intended for adults aged21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the Platform or submit any personal information to us.
If ulartoto becomes aware that personal data has been collected from an individual under 21 without verified parental consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor is using the Platform or has submitted personal data to us, please contact us immediately at [email protected].
ulartoto operates globally and may transfer personal data to servers, processors, or service providers located outside Malaysia. Where such transfers occur, we ensure that adequate safeguards are in place to protect your personal data at a standard equivalent to that provided under this Policy.
Safeguards for international transfers may include: contractual clauses providing enforceable data protection obligations on recipient parties; transfers to jurisdictions recognised as providing an adequate level of data protection; or other legally approved transfer mechanisms.
Payment processors such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, DuitNow, and FPX operate primarily within Malaysian jurisdiction and are subject to Bank Negara Malaysia's regulatory oversight. Cryptocurrency transactions via USDT TRC20 are processed on the TRON blockchain network, which is decentralised by nature.
ulartoto reserves the right to amend, update, or revise this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business practices, or the services we provide. All amendments will be published on this page with a revised "Last Updated" date.
For material changes to the Policy — particularly those that affect how we use your data or your rights — we will provide reasonable advance notice via Platform notification or registered email address. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy.
We recommend that you review this page periodically to remain informed of the current version of our Privacy Policy. If you disagree with any material change, you have the right to close your account and request deletion of your data, subject to our legal retention obligations.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which ulartoto processes your personal data, please contact our Data Protection team through the following channels:
ulartoto will acknowledge receipt of all data-related requests within five (5) business days and will endeavour to resolve requests fully within thirty (30) days. In complex cases, the resolution period may be extended, and we will notify you accordingly.
If you are not satisfied with our response to a data-related complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
This Privacy Policy was last reviewed and updated on 1 January 2026. By continuing to use the ulartoto Platform on or after this date, you acknowledge your acceptance of this version of the Policy.
Have more questions about how we handle your data? Our 24/7 support team is always available. Or visit our FAQ for quick, clear answers.
🔞 21+ Only · Play Responsibly · ulartoto is for adult entertainment only