Evostoto Privacy Policy — Malaysian User Data Protection
Evostoto takes the privacy of every user seriously. This policy clearly explains how we collect, use, store and protect your personal information when you use our platform.
Contents of This Policy
- 1. Information We Collect
- 2. Purpose of Data Use
- 3. Cookies & Tracking
- 4. Data Storage & Security
- 5. Sharing with Third Parties
- 6. User Rights & Policy Updates
1. What information do we collect?
When you register and use the evostoto platform, we collect several categories of information to ensure our services run smoothly and securely. The types of information we collect are as follows:
Account Information: Full name, email address, phone number, date of birth, and encrypted password upon registration. This information is required to create and manage your evostoto account.
Payment Information: Transaction details in Malaysian Ringgit (RM / MYR), including payment methods used such as FPX, TNG eWallet or DuitNow. We do not store full card numbers — all sensitive financial data is handled through recognised payment providers.
Device & Browser Information: IP address, device type, operating system, browser type, screen resolution and general location data (state/country level). This data is used to improve platform performance and detect any suspicious access.
Usage Data: Pages visited, session duration, games played, buttons clicked and general usage patterns. This data helps us understand how users interact with the platform for continuous improvement purposes.
2. How is your information used?
All information collected by evostoto is used exclusively for legitimate purposes directly related to the platform's services. We do not use your information for any purpose not stated in this policy.
- Account management: Creating, verifying and managing user accounts, including secure login processes and identity verification where required.
- Transaction processing: Processing RM deposits and withdrawals accurately and securely through approved payment channels.
- Platform security: Detecting and preventing fraud, unauthorised access, account misuse, and other suspicious activity.
- Service improvements: Analysing usage patterns to improve interface design, platform speed and the overall experience for Malaysian users.
- Service communications: Sending account-related notifications, transaction updates, system announcements, or important policy changes via email or in-platform notifications.
- Legal compliance: Meeting applicable legal and regulatory requirements, including retaining transaction records for the prescribed period.
3. How do cookies and tracking work here?
Evostoto uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. Cookies are small text files stored on your device when you visit our platform.
Essential Cookies: Required for core platform functions such as login sessions, security verification and language preference settings. These cookies cannot be disabled without affecting platform functionality.
Analytics Cookies: Used to understand how users interact with the platform — the most frequently visited pages, time spent in each section, and general navigation patterns. This data is collected in aggregate and does not identify individual users.
Cookie Controls: You can manage or block cookies through your browser settings at any time. However, blocking certain cookies may affect the functionality or your overall experience on the evostoto platform.
4. How is your data stored and protected?
The security of your personal data is evostoto's top priority. We apply multiple layers of technical and organisational safeguards to protect your information from unauthorised access, loss, or disclosure.
Encryption: All data transmitted between your device and evostoto's servers is protected using industry-standard SSL/TLS encryption protocols. Passwords are stored in hashed form and cannot be read by any party.
Access Controls: Only staff with explicit authorisation may access user data, and all access is strictly logged and monitored.
Retention Period: Active account information is retained for as long as your account remains active. Following account closure, personal data will be deleted within a set timeframe unless there is a legal requirement to retain it longer. Financial transaction records are kept in accordance with applicable regulatory requirements.
Incident Response: In the event of a data security breach affecting user information, evostoto will notify affected users within a reasonable timeframe in accordance with our incident response procedures.
5. Is your information shared with third parties?
Evostoto does not sell, rent, or trade users' personal information to any third party for marketing purposes. However, there are limited situations where we share necessary information:
- Payment providers: Transaction details required for processing are shared with recognised payment providers (such as banks and e-wallet operators) solely for the purpose of handling deposits and withdrawals in MYR.
- Technical service providers: Server infrastructure providers, cybersecurity services and platform analytics tools may have limited access to certain data solely to deliver their services to us. All such third parties are bound by strict confidentiality agreements.
- Legal requirements: evostoto may disclose user information to the relevant authorities when required by law, court order or in the course of a legitimate investigation.
In all of the sharing scenarios above, we ensure that only the minimum necessary information is shared, and all receiving parties are subject to appropriate data protection obligations.
Evostoto never sells user data. Any sharing of information is strictly limited, purposeful, and governed by binding legal agreements.
6. What are your rights and how does this policy change?
User Rights
As an evostoto user, you have the following rights regarding your personal information:
- Right of Access: You have the right to request a copy of the personal information we hold about you at any time.
- Right to Correction: If any of your personal information is inaccurate or out of date, you may request a correction through your account settings or by contacting our support team.
- Right to Deletion: You may request the deletion of your account and personal data, subject to any applicable legal retention requirements. Deletion requests will be processed within a reasonable timeframe.
- Right to Object: You may object to the processing of your data for certain purposes that are not legally required.
Privacy Policy Updates
Evostoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service improvements. Users will be notified of any significant changes via their registered email or in-platform notification before the changes take effect.
How to Contact Us
For any enquiries, requests, or complaints relating to this Privacy Policy, please contact the evostoto support team by email at [email protected]. We will respond within 1–3 business days and handle all privacy requests with care and diligence.
Still have questions about your privacy?
Browse FAQ page us for immediate answers, or reach the evostoto team at [email protected]. We operate daily and are happy to assist in Bahasa Malaysia.