Mikatoto is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you hold as a registered player on our platform.
Last Updated: 1 January 2026Six core principles that govern how Mikatoto collects and processes personal information from Malaysian players and all registered users.
We collect only the data we genuinely need — for account management, payment processing, identity verification, fraud prevention, and responsible gambling monitoring. Nothing more.
All data transmissions are encrypted with 256-bit SSL/TLS protocols. Sensitive documents uploaded for KYC verification are stored in isolated, access-controlled environments.
You have the right to access, correct, export, or request deletion of your personal data. Submit a request to our support team and we will respond within 30 days.
Your data is never sold or rented. It is shared only with licensed payment processors (including Touch 'n Go eWallet, DuitNow, and FPX partners), KYC providers, and regulators where legally required.
We retain personal data only for as long as required to fulfil the purpose it was collected for, or to satisfy applicable legal and regulatory obligations. Inactive accounts are reviewed periodically.
We use essential, functional, and analytics cookies to operate the platform efficiently. You can review and manage non-essential cookie preferences through your browser settings.
This Privacy Policy (hereinafter "Policy") describes how Mikatoto (hereinafter "Mikatoto", "we", "us", or "our"), the operator of the online gaming platform accessible at mikatoto.cam (the "Platform"), collects, uses, stores, and shares personal information provided by or collected from users (hereinafter "User", "Player", or "you") in connection with their use of the Platform and associated services.
By registering an account on the Mikatoto Platform, accessing any part of the website, or using any service offered thereon, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
This Policy applies to all registered players and visitors, including users accessing the Platform from Malaysia and other international locations. It should be read in conjunction with Mikatoto's Terms and Conditions, which govern the overall relationship between you and Mikatoto.
This Privacy Policy was last updated on 1 January 2026. We encourage you to review this Policy periodically. Material changes will be communicated via a notice on the Platform or by email to your registered address.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | Mikatoto, as the entity that determines the purposes and means of processing personal data collected via the Platform. |
| "Data Processor" | Any third party engaged by Mikatoto to process personal data on its behalf, including payment service providers and KYC verification partners. |
| "KYC" | Know Your Customer — the identity verification process requiring submission of government-issued identification and proof of address documents. |
| "Cookies" | Small text files stored on your device by the Platform that enable site functionality, user preference retention, and usage analytics. |
| "Sensitive Data" | A subset of personal data warranting heightened protection, including identity document scans, financial account details, and health-related information relevant to responsible gambling assessments. |
Mikatoto collects personal data across several categories depending on how you interact with the Platform:
Mikatoto does not collect or store full payment card numbers. All card-based transactions are processed directly by our PCI-DSS compliant payment partners. We retain only transaction reference data and masked payment identifiers.
Personal data is collected through the following channels:
Mikatoto processes personal data on the following legal grounds:
| Legal Basis | Application |
|---|---|
| Contractual Necessity | Processing required to fulfil our obligations under the Terms and Conditions — including account management, payment processing, and service delivery. |
| Legal Obligation | Processing required for compliance with applicable laws, including anti-money-laundering (AML) obligations, identity verification requirements, and regulatory reporting duties under our gaming licence. |
| Legitimate Interests | Processing necessary for fraud prevention, platform security, responsible gambling monitoring, and improving service quality — where such interests are not overridden by your rights. |
| Consent | Processing for non-essential marketing communications, optional analytics cookies, and participation in surveys or research — where you have given explicit, freely withdrawable consent. |
The personal data we collect is used for the following purposes:
Mikatoto does not use personal data for automated individual decision-making that produces legal or similarly significant effects without human oversight, except where required by our AML compliance obligations or fraud prevention systems, in which case you retain the right to request human review of such decisions.
Mikatoto does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Data is shared only in the following circumstances and with the following categories of recipients:
Transaction data is shared with our licensed payment processing partners to facilitate deposits and withdrawals. These include the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect, as well as cryptocurrency exchange and custodial service providers. All payment partners are contractually obligated to handle data in accordance with applicable financial services data protection standards.
Identity documents and verification data are shared with third-party KYC service providers engaged by Mikatoto to conduct document authentication and biometric verification checks. These providers are bound by strict data processing agreements and are not permitted to retain or use your data beyond the scope of verification services.
Mikatoto may disclose personal data to regulatory authorities, licensing bodies, financial intelligence units, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory obligation. Such disclosures are made only to the extent strictly necessary to comply with the relevant legal requirement.
Data may be shared with specialist fraud detection platforms, sanctions screening providers, and credit reference agencies for the purpose of verifying player identity, detecting fraudulent activity, and complying with our AML obligations under our international gaming licence.
In the event of a merger, acquisition, restructuring, or sale of assets involving Mikatoto, personal data held by Mikatoto may be transferred to the relevant successor entity, subject to the successor's assumption of equivalent data protection obligations.
Where data is shared with any third party, Mikatoto ensures that appropriate contractual safeguards are in place. We do not authorise any data processor to use your personal data for their own independent purposes beyond the contracted services they provide to Mikatoto.
Given that Mikatoto operates under an international online gaming licence (Curaçao jurisdiction) and employs globally distributed infrastructure, your personal data may be transferred to, stored in, and processed in countries outside Malaysia. These countries may not provide a level of data protection equivalent to that applicable in Malaysia under the Personal Data Protection Act 2010 (PDPA).
Where such international transfers occur, Mikatoto implements appropriate safeguards to protect your personal data, including:
By using the Mikatoto Platform, you acknowledge and consent to the international transfer of your personal data under the safeguards described above.
Mikatoto retains personal data for the following periods, after which data is securely deleted or anonymised unless a longer retention period is required by applicable law:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Contractual necessity, AML compliance |
| KYC documents | Duration of account + 5 years post-closure | Regulatory and licensing obligations |
| Transaction records | 7 years from transaction date | Financial record-keeping and AML compliance |
| Betting activity logs | 5 years from activity date | Dispute resolution, responsible gambling monitoring |
| Support correspondence | 3 years from last interaction | Complaint handling and quality assurance |
| Marketing preferences | Until consent is withdrawn | Consent-based processing |
| Technical/usage logs | 13 months from collection | Platform security and fraud detection |
Following the expiry of the applicable retention period, data is irreversibly deleted from active systems and backups within a reasonable timeframe in accordance with our data deletion procedures.
Mikatoto uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the Platform effectively, remember your preferences, and understand how players interact with our services. The types of cookies we use are categorised as follows:
These cookies are strictly necessary for the Platform to function. They enable core features such as session management, account authentication, security token validation, and load balancing. The Platform cannot operate properly without these cookies, and they cannot be disabled.
Functional cookies allow the Platform to remember your preferences and personalise your experience — for example, your preferred language, currency (MYR), display settings, and recently viewed markets. Disabling these cookies may affect the quality of your experience.
Analytics cookies help us understand how players use the Platform by collecting aggregated, anonymised data about page visits, feature interactions, and session durations. This information is used to improve Platform performance and content. Analytics cookies are non-essential and may be declined through your browser settings.
You may control cookie settings through your browser's privacy preferences. Note that disabling essential cookies will prevent you from accessing the Platform. For guidance on managing cookies in common browsers, please refer to the help documentation provided by your browser provider.
Mikatoto does not use third-party advertising or retargeting cookies. We do not serve interest-based advertising and do not share browsing data with advertising networks.
Subject to applicable law, you hold the following rights in relation to the personal data Mikatoto holds about you. To exercise any of these rights, please submit a written request to our support team via live chat or email. We will respond within 30 calendar days of receiving a valid request.
Request a copy of the personal data we hold about you and information about how it is being processed.
Request correction of inaccurate or incomplete personal data held in your account profile.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that we restrict processing of your data in specific circumstances, such as while the accuracy of data is contested.
Request a structured, machine-readable copy of the personal data you have provided to us, where technically feasible.
Object to processing based on legitimate interests, including direct marketing communications and profiling activities.
Withdraw previously given consent to optional processing at any time, without affecting the lawfulness of prior processing.
Request full account closure and data review in accordance with our retention policy and applicable legal obligations.
Please note that certain rights may be limited where Mikatoto is required to retain data to comply with legal obligations (for example, AML record-keeping requirements), to resolve active disputes, or to enforce our Terms and Conditions. Where we are unable to fulfil a request in full, we will explain the reason in our response.
The Mikatoto Platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Registration on the Platform by a person under 21 constitutes a breach of our Terms and Conditions and this Privacy Policy.
Where Mikatoto identifies or is notified that personal data has been collected from a person under the age of 21, we will take immediate steps to suspend the associated account, delete the relevant personal data, and withhold any account balance pending investigation in accordance with our Terms and Conditions.
If you believe that a minor has registered on the Mikatoto Platform using false age information, please contact our support team immediately at [email protected] so that we can take prompt action to protect the minor and close the account.
Mikatoto implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
Whilst Mikatoto takes all reasonable steps to protect personal data, no method of electronic transmission or storage is entirely secure. You also play an important role in keeping your data safe — please ensure your account password is strong and unique, enable two-factor authentication where available, and never share your login credentials with any third party.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Mikatoto will notify affected users without undue delay once the breach has been identified, confirmed, and assessed in accordance with our incident response procedures.
The Mikatoto Platform may contain references to third-party services — for example, the payment platforms used to process deposits and withdrawals (Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, and bank internet banking portals). When you navigate away from the Mikatoto Platform to access these third-party services, their own privacy policies and data practices apply.
Mikatoto is not responsible for the privacy practices, content, or data handling of any third-party websites or services. We encourage you to review the privacy policy of any third-party service you access in connection with your use of the Mikatoto Platform, particularly those of your chosen payment provider.
Mikatoto reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform functionality. When material changes are made to this Policy, we will notify registered users by displaying a prominent notice on the Platform and, where practicable, by sending an email notification to your registered email address.
The date of the most recent revision is displayed at the top of this Policy. Your continued use of the Platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.
We recommend bookmarking this page and checking it periodically. All previous versions of this Privacy Policy are archived and available upon written request to our support team.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way Mikatoto handles your personal data, please contact our support team through the channels below:
We aim to acknowledge all privacy-related requests within 3 business days and to provide a substantive response within 30 calendar days of receipt. For complex requests, we may require additional time and will inform you of any extension in advance.
For matters relating to data subject rights — including access, rectification, erasure, or portability requests — please include your registered email address, username, and a clear description of your request to help us process it efficiently.
For responsible gambling support, self-exclusion requests, or deposit limit adjustments, please visit our dedicated Responsible Gambling page for full details of the tools available to you.
Now that you know how we protect your data, explore the Mikatoto platform with confidence. Fast payouts, fair odds, and a secure experience built for Malaysian players. 21+ only.