Your privacy matters to us. This Privacy Policy explains exactly what personal data Rogtoto collects, why we collect it, how we use it, and the rights you hold as a player on our platform.
All data transmitted between your device and the Rogtoto platform is protected using industry-standard 256-bit SSL encryption. Your personal and financial information is never sent in plain text.
Rogtoto does not sell, rent, or share your personal data with third parties for marketing purposes. Data is only shared with trusted service providers strictly necessary to operate the platform.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a request via our support team and we will respond within 30 days.
We use cookies solely to improve your experience — session management, preference storage, and anonymous performance analytics. No cross-site tracking cookies are placed without your knowledge.
Payment details processed through DuitNow, FPX, Touch 'n Go eWallet, and other supported methods are handled by PCI-DSS compliant payment processors. Rogtoto does not store full card numbers.
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Policy or as required by applicable law and regulatory obligations. Data is securely deleted once retention periods expire.
This Privacy Policy ("Policy") describes how Rogtoto ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "the User", "the Player") who access or use the Rogtoto online betting and live casino platform at rogtoto.cam.
Rogtoto is committed to handling personal data responsibly and in compliance with applicable data protection legislation. We recognise that privacy is a fundamental right and we have designed our data practices to be transparent, proportionate, and respectful of your expectations as a player on our platform.
By registering an account, using our services, or continuing to browse rogtoto.cam, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the Platform and contact our support team to arrange account closure.
This Policy should be read alongside our Terms & Conditions, which govern the overall use of the Rogtoto platform and your rights and obligations as a registered player.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
When you create a Rogtoto account, we collect the following information:
To comply with anti-money laundering (AML) obligations and to verify player identity prior to processing withdrawals, we collect:
We record all financial activity on your account including deposit amounts and timestamps, withdrawal requests and processing records, bonus credit and wagering activity, and the payment methods used (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, BTC, USDT). Full payment card numbers are never stored on Rogtoto systems — card processing is handled entirely by PCI-DSS compliant third-party processors.
As you use the Platform, we automatically collect certain usage data, including:
When you contact our support team via live chat, WhatsApp, or email, we retain records of those communications for quality assurance, training, and dispute resolution purposes. This includes messages sent and received, the subject matter of your query, and the resolution outcome.
Rogtoto collects personal data through the following mechanisms:
The table below sets out the primary purposes for which Rogtoto processes your personal data:
| Purpose | Data Used | Retention |
|---|---|---|
| Account registration and authentication | Name, email, date of birth, password | Duration of account + 5 years post-closure |
| Age and identity verification (KYC) | ID documents, proof of address, selfies | 5 years from verification date |
| Processing deposits and withdrawals | Payment method details, transaction records | 7 years (financial regulation requirement) |
| Fraud detection and AML monitoring | Behavioural data, transaction patterns, IP logs | 5 years from last activity |
| Customer support and dispute resolution | Communication records, account history | 3 years from resolution date |
| Bonus and promotion administration | Wagering activity, bonus claim records | 2 years from claim date |
| Platform analytics and improvement | Anonymised usage and session data | 26 months (rolling) |
| Responsible gambling monitoring | Betting patterns, self-exclusion records | 7 years from exclusion date |
| Marketing communications (opt-in only) | Email address, preference data | Until opt-out or account closure |
Rogtoto processes personal data on one or more of the following legal grounds depending on the specific processing activity:
Rogtoto shares personal data only with third-party service providers who are contractually bound to process such data solely on our instructions and to the standard required by this Policy. These providers include payment processors and e-wallet operators (including those handling DuitNow, FPX, and Touch 'n Go eWallet transactions), identity verification and KYC service providers, fraud detection and AML monitoring platforms, cloud hosting and infrastructure providers, and customer support platform operators.
Rogtoto may disclose personal data to regulatory authorities, law enforcement agencies, or licensing bodies where required or permitted by law. Such disclosures are made only to the extent necessary to fulfil the relevant legal obligation.
Rogtoto does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is not a product. It is information we hold on your behalf to provide you with a service.
In the event of a merger, acquisition, or sale of all or part of Rogtoto's business assets, personal data held by Rogtoto may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify affected players prior to the transfer and the receiving entity will be required to uphold the commitments set out in this Policy.
Rogtoto uses cookies and similar tracking technologies to maintain your login session and user preferences, store your language and display settings, measure platform performance and page load speeds, and collect aggregated, anonymised analytics data to understand how players navigate the Platform.
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Rogtoto Platform, including the ability to maintain a logged-in session. Instructions for managing cookies are available in the help documentation for all major browsers including Chrome, Firefox, Safari, and Edge.
Rogtoto retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The specific retention periods applicable to each category of data are set out in the table in Section 5 of this Policy.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. Where anonymisation is applied, the resulting data may be retained indefinitely for analytical purposes as it can no longer be linked to any identifiable individual.
If you close your Rogtoto account, we will retain certain data (including KYC records and transaction history) for a minimum of five years following closure to comply with applicable AML and financial record-keeping obligations.
Rogtoto implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Whilst Rogtoto takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely infallible. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Rogtoto will notify affected users and the relevant regulatory authorities in accordance with applicable data protection law.
Subject to applicable data protection legislation, you have the following rights with respect to your personal data held by Rogtoto. To exercise any of these rights, please contact our Data Protection team through the support channels listed in Section 15 of this Policy.
We will respond to all verified data rights requests within 30 days of receipt. In complex cases where an extension is required, we will notify you within the initial 30-day window and provide an estimated completion date. We will not charge a fee for handling data rights requests unless requests are manifestly unfounded or excessive.
Age Restriction — 21 and Above Only: Rogtoto is strictly for players aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a minor, we will immediately suspend the associated account, void any related transactions, and delete the data in question. If you believe a minor has registered on the Platform, please contact our support team immediately.
Rogtoto's platform infrastructure and some of our third-party service providers operate in jurisdictions outside Malaysia. As a result, your personal data may be transferred to, stored in, and processed in countries other than your country of residence. In all such cases, Rogtoto ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Policy, including the use of standard contractual clauses, data processing agreements, and transfer impact assessments where applicable.
By using the Rogtoto Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions that may have data protection laws different from those of Malaysia, subject to the safeguards described in this section.
Rogtoto reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where changes are material, we will notify registered players by email or through an in-Platform notification prior to the revised Policy taking effect. The "Last updated" date at the top of this page will be revised accordingly.
Your continued use of the Rogtoto Platform following notification of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Rogtoto, please contact us through any of the following channels. Our Data Protection team will handle all privacy-related queries with strict confidentiality.
Data Protection Enquiries:
Customer support is available 24 hours a day, 7 days a week via live chat on the Platform and via WhatsApp.
Email: [email protected] (displayed as plain text — not a clickable link)
Response Time: Privacy and data rights requests will be acknowledged within 5 business days and resolved within 30 calendar days.
Languages Supported: English, Bahasa Melayu, Chinese
Rogtoto is built on transparency. We tell you exactly what data we collect, why we collect it, and how long we keep it. If you have questions that this Policy does not answer, our support team is available around the clock in English, Bahasa Melayu, and Chinese.
For full usage terms, see our Terms & Conditions. For safe play tools, visit our Responsible Gambling page. For players aged 21 and above only.