Berlintoto Privacy Policy

1. Introduction

Berlintoto is an online sports betting and live casino platform serving players in Malaysia and other permitted jurisdictions. In operating this service we necessarily collect, process, and store certain personal data about the individuals who use our website, mobile interface, live chat, payment channels, and other associated features.

This Privacy Policy sets out, in plain and formal terms, what data we collect, why we collect it, how long we keep it, who we may share it with, and what choices and rights you hold. It applies to all data collected through berlintoto regardless of the device, browser, or access method used.

This policy should be read together with the berlintoto Terms & Conditions. Where there is a direct conflict, the Terms & Conditions shall prevail unless this policy expressly states otherwise.

2. Definitions

• "Personal Data" means any information that identifies, or could reasonably identify, a living natural person, either alone or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing — in this context, berlintoto.
• "Data Processor" means a third party that processes personal data on berlintoto's behalf under a written agreement.
• "Player" or "you" means the verified individual who holds or applies for a berlintoto account.
• "Cookies" means small text files placed on your device to store session or preference data.
• "PDPA" refers to the Personal Data Protection Act 2010, the primary Malaysian data protection statute applicable to our processing of Malaysian users' data.

3. Personal Data We Collect

3.1 Information You Provide

• Registration details: full legal name, date of birth, gender, nationality, residential address, email address, and mobile number;
• Identity and address verification documents: MyKad, passport, driving licence, utility bill, or bank statement;
• Payment information: bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow), FPX reference details, cryptocurrency wallet addresses, and source-of-funds declarations;
• Account preferences: language selection, communication preferences, responsible gambling settings;
• Support communications: live chat transcripts, email correspondence, and feedback submitted to berlintoto.

3.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system version, browser type, and screen resolution;
• Usage data: pages visited, time on page, betting activity, game session logs, deposit and withdrawal history, bonus usage, and click patterns;
• Location signals: country or region inferred from IP address for regulatory and fraud screening purposes;
• Cookie and tracking data: session identifiers, preference tokens, analytics identifiers, and fraud-detection signals — see Section 6 below.

3.3 Information From Third Parties

Berlintoto may receive identity verification outcomes from KYC service providers, sanctions screening results from compliance data sources, fraud risk signals from payment processors, and information from responsible gambling self-exclusion registers where applicable.

4. Purposes of Data Processing

5. Legal Bases for Processing

Berlintoto processes personal data on the following bases as recognised under applicable law, including the Malaysian Personal Data Protection Act 2010 and cognate international frameworks:

• Contractual necessity — processing required to administer the player account, process deposits and withdrawals, settle bets, and provide support;
• Legal obligation — processing required to comply with anti-money-laundering regulations, age verification mandates, sanctions screening requirements, and regulatorily mandated record-keeping;
• Legitimate interests — fraud prevention, security monitoring, platform integrity protection, and aggregated analytics that do not override individual rights;
• Consent — direct marketing communications and the use of non-essential cookies where your explicit agreement has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Cookies and Tracking Technologies

Berlintoto uses the following categories of cookies and analogous technologies when you access the platform:

• Strictly necessary cookies — essential for logging in, maintaining session state, and preventing cross-site request forgery. These cannot be disabled without breaking core functionality.
• Functional cookies — store your language preference, display settings, and recently viewed markets to improve your session experience.
• Analytics cookies — record anonymised or pseudonymised page-visit data and user journeys to help us identify technical problems and improve usability. No individual wagering amounts are transmitted to analytics processors.
• Fraud detection signals — device fingerprint and behavioural data processed by our fraud prevention systems to detect automated abuse, credential stuffing, and multi-account creation.

Non-essential cookies are activated only where your agreement has been recorded. You may adjust cookie preferences through your browser settings. Disabling certain categories may limit platform features.

7. Sharing Your Personal Data

Berlintoto does not sell personal data. Data may be shared in the following circumstances only:

• Identity and compliance service providers — KYC verification, sanctions screening, AML transaction monitoring, and fraud analytics providers operating as data processors under written agreements;
• Payment processors — banks, e-wallet operators (Boost, Touch 'n Go eWallet, GrabPay, DuitNow), FPX infrastructure, card networks, and cryptocurrency settlement providers as required to execute transactions;
• Game and technology providers — licensed studio platforms and live dealer streaming operators to the extent necessary to deliver the game experience requested;
• Responsible gambling registries — self-exclusion data shared with cross-platform exclusion databases where you have expressly requested such registration;
• Legal and regulatory authorities — law enforcement bodies, financial intelligence units, courts, or licensing authorities where berlintoto is legally compelled to disclose data;
• Professional advisers — lawyers, auditors, and accountants bound by professional confidentiality obligations where required for legitimate business operations.

8. International Data Transfers

Given the global nature of online gaming technology infrastructure, some personal data may be processed by servers or data processors located outside Malaysia. In all such cases, berlintoto requires that appropriate safeguards are in place — whether contractual clauses, equivalent data protection standards, or other recognised mechanisms — before transferring data internationally.

Players in Kuala Lumpur, Penang, Johor Bahru, Shah Alam, and other Malaysian locations may have their data temporarily processed by servers in the Asia-Pacific region to reduce latency. These transfers remain subject to the same protections described throughout this policy.

9. Data Retention

Berlintoto retains personal data only for as long as necessary to fulfil the purposes described in this policy. The following general retention principles apply:

• Active account data is retained for the duration of the account relationship and for a reasonable period thereafter to resolve disputes, process outstanding transactions, and respond to support queries;
• Identity and KYC documents are retained for a minimum period required by applicable anti-money-laundering regulation following the closure of the account;
• Transaction records, including deposit, withdrawal, and betting history, are retained for the regulatory minimum period applicable in the relevant jurisdiction;
• Support communications are retained for a period sufficient to manage complaints, handle escalations, and meet quality assurance requirements;
• Marketing data is deleted or suppressed promptly upon withdrawal of consent or following a sustained period of inactivity.

Where data must be retained beyond the standard period due to an active investigation, legal proceeding, or regulatory inquiry, it will be restricted from use outside that specific context.

10. Your Data Rights

Subject to applicable law and berlintoto's compliance obligations, you hold the following rights regarding your personal data:

• Right of access — to request confirmation that berlintoto holds data about you and to obtain a copy of that data;
• Right of rectification — to request correction of inaccurate or outdated personal data held on your account;
• Right of erasure — to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention requirements;
• Right to restrict processing — to request a limitation on how your data is used while a dispute or review is ongoing;
• Right to object — to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes;
• Right to data portability — where technically feasible and legally applicable, to receive your personal data in a structured machine-readable format;
• Right to withdraw consent — to withdraw consent for marketing communications or non-essential cookie use at any time.

Requests are handled within a reasonable period, and berlintoto may require identity verification before fulfilling a data access or deletion request. Requests should be directed to the contact details in Section 14 below.

11. Children and Minors

Berlintoto's platform is strictly intended for adults aged 21 and above only. We do not knowingly collect personal data from individuals under 21. If we become aware that an account holder is under the minimum age, the account will be suspended, pending wagers cancelled in accordance with applicable rules, and any funds returned through the deposit method used after verification checks are completed.

12. Security Measures

Berlintoto implements a layered security architecture to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and berlintoto servers;
• Encrypted storage for sensitive account credentials and identity documents at rest;
• Two-factor authentication (2FA) available for player accounts as an additional layer of login security;
• Role-based internal access controls restricting staff access to personal data on a strict need-to-know basis;
• Continuous intrusion detection, anomaly monitoring, and real-time fraud alerting;
• Regular security assessments and vulnerability testing of platform infrastructure.

Despite these measures, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your password, 2FA codes, and device access. Report suspected unauthorised activity immediately through live chat or email.

13. Changes to This Privacy Policy

Berlintoto reserves the right to update this Privacy Policy to reflect changes in legal requirements, platform features, data processing practices, or operational changes. Material updates will be communicated through a prominent notice on the website, an in-account notification, or email where required by applicable law.

The effective date at the top of this document identifies the current version. Continued use of the berlintoto platform following notification of a revised policy constitutes acceptance of the updated terms, to the extent permitted by applicable data protection law.

14. Contact and Complaints

For questions about this Privacy Policy, to exercise a data right, or to submit a privacy-related complaint, contact berlintoto using the details below.