Privacy Policy

Capsatoto2 ("the Platform", "We", "Us", "Our") is committed to protecting the privacy and personal data of all individuals who visit or register on the capsatoto2 platform at https://capsatoto2.cam. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information in connection with your use of our online casino, sports betting, and related gaming services.

This policy applies to all users of the capsatoto2 platform regardless of the device or channel used to access our services, including the website, mobile web interface, and any affiliated sub-domains. It applies equally to registered members with active accounts and to unregistered visitors who browse the platform without creating an account.

By accessing or using capsatoto2, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to arrange account closure if applicable.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the capsatoto2 platform and form part of the agreement between you and the Company.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure, or transfer.
• "Data Controller" — Capsatoto2, which determines the purposes and means of processing personal data collected through this platform.
• "Data Processor" — any third-party service provider that processes personal data on behalf of capsatoto2 under a contractual data processing arrangement.
• "Member" — any individual who has completed the capsatoto2 registration process and holds an active or suspended account.
• "Visitor" — any individual who accesses the capsatoto2 platform without completing the registration process.
• "KYC" — Know Your Customer — the identity and document verification process mandated for regulatory and anti-money laundering compliance.
• "Cookies" — small text files placed on your device by a website to store session information, preferences, and analytics data.
• "Sensitive Personal Data" — a subset of personal data warranting heightened protection, including financial information, identity documents, and where applicable, health-related disclosures made in connection with responsible gambling tools.

Capsatoto2 collects personal data through several channels: directly from you during registration and use, automatically via technical systems when you interact with the platform, and from third parties in the course of identity verification and payment processing.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

When you access capsatoto2, our technical systems automatically collect certain information about your device and interaction with the platform:

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution.
• Usage Data: Pages visited, games accessed, time spent on platform, click paths, session duration, referral URL.
• Transaction Data: Deposit and withdrawal amounts, payment method selections, timestamps, transaction references.
• Gaming Data: Game history, bet amounts, win/loss records, bonus redemptions, wagering activity across all game categories including slots, live dealer, and sports betting markets (Liga Super Malaysia, EPL, UFC, and others).

3.3 Data Received from Third Parties

• Identity verification results from KYC processing partners.
• Payment confirmation data from DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network confirmations.
• Fraud screening and sanctions screening results from compliance data providers.
• Politically exposed person (PEP) and adverse media screening results from third-party risk databases.

Capsatoto2 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, game access, payment processing, and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) legislation, counter-terrorism financing (CTF) regulations, KYC requirements, and tax reporting obligations.
• Legitimate Interests: Processing carried out in furtherance of our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, customer service improvement, and general platform analytics — provided such interests do not override your fundamental privacy rights.
• Consent: Where we rely on consent as the legal basis (for example, optional marketing communications), you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Your personal data is used exclusively for the following purposes:

• Account Management: Creating and maintaining your member account, processing login requests, and enabling access to capsatoto2 services.
• Identity Verification: Conducting KYC checks to confirm your identity and age eligibility (21+ requirement) before processing withdrawals and as required by compliance obligations.
• Payment Processing: Facilitating deposits and withdrawals through your selected payment methods, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels (BTC, ETH, USDT, LTC).
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, money laundering, and other prohibited activities as defined in our Terms & Conditions.
• Responsible Gambling: Monitoring account activity to identify responsible gambling risk indicators, administering self-exclusion requests, and enforcing deposit and session limits set by members.
• Customer Support: Responding to queries, resolving disputes, and processing complaints submitted via live chat or email.
• Legal Compliance: Meeting our obligations under applicable Malaysian and international financial regulations, including transaction reporting, record-keeping, and cooperation with lawful requests from regulatory authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game availability, and the overall member experience.
• Promotions and Bonuses: Administering bonus offers, VIP tier benefits, and promotional campaigns for eligible members in accordance with the specific terms of each offer.

Capsatoto2 does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. We share personal data only in the following strictly defined circumstances:

6.1 Authorised Service Providers

We engage carefully vetted third-party service providers who process personal data on our behalf under contractual data processing agreements that bind them to confidentiality and security standards equivalent to our own. These include:

• KYC and identity verification providers
• Payment processing partners (DuitNow, FPX, e-wallet operators, banking partners, cryptocurrency processors)
• Fraud screening and AML compliance platforms
• Customer support infrastructure providers
• Cloud hosting and data storage providers
• Cybersecurity and platform monitoring services

6.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where we are legally compelled to do so, or where we determine in good faith that disclosure is necessary to:

• Comply with a legal obligation or lawful regulatory request
• Prevent or investigate suspected fraud, money laundering, or other financial crime
• Protect the rights, property, or safety of capsatoto2, its members, or the public

We will, where legally permissible, notify you of such disclosure requests.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of capsatoto2's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections continuing to apply.

Capsatoto2 implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your browser and capsatoto2 is encrypted using 256-bit TLS (Transport Layer Security) protocols. This applies to login sessions, payment processing, KYC document uploads, and all API communications.
• Encryption at Rest: Sensitive personal and financial data stored in our systems is encrypted at the database level using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with data access undergo security training and are bound by confidentiality obligations.
• Two-Factor Authentication: Member accounts support two-factor authentication (2FA) as an additional layer of login security.
• Continuous Monitoring: Our security operations team monitors platform infrastructure for anomalous activity, intrusion attempts, and data integrity issues on a continuous basis.
• Penetration Testing: Capsatoto2 conducts regular security assessments and penetration testing of its platform infrastructure.

Despite these measures, no internet-based system can guarantee absolute security. You also bear responsibility for safeguarding your own account credentials. Capsatoto2 will never ask for your password via any communication channel. If you suspect your account has been compromised, contact our support team immediately.

In the event of a personal data breach that is reasonably likely to result in a risk to your rights and freedoms, capsatoto2 will notify affected members without undue delay and take all reasonable steps to contain and remediate the breach.

Capsatoto2 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Capsatoto2 uses cookies and similar tracking technologies (such as local storage and session storage) to ensure the proper functioning of the platform, maintain session security, and collect aggregate analytical data.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function. These cookies enable you to log in, navigate between pages, and maintain your session. They cannot be disabled without preventing you from using core platform features.
• Functional Cookies: Used to remember your preferences such as language settings and display options. These cookies improve your experience but are not essential for basic platform access.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors interact with the platform — pages visited, session duration, error events. This data is used to identify and improve areas of the platform experience. We do not use analytics data to identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and automated abuse. These cookies are essential for the security of the platform and its members.

9.2 Managing Cookies

You may manage or delete cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of the capsatoto2 platform — in particular, strictly necessary cookies are required for login and session maintenance. Instructions for managing cookies are available in the help documentation of all major browsers.

Capsatoto2 does not use cookies to serve targeted advertising or share browsing behaviour data with advertising networks.

Subject to applicable law, you have the following rights with respect to the personal data capsatoto2 holds about you. To exercise any of these rights, contact our support team with a clear description of your request. We will respond within 30 days, or notify you if additional time is required.

Capsatoto2 strictly prohibits access to and use of the platform by any person under the age of 21. The collection of personal data from persons under 21 is not permitted and any such data, if inadvertently collected, will be deleted upon discovery.

If you believe a minor has accessed or registered on capsatoto2, please contact our support team immediately with relevant information. We take these matters extremely seriously and will investigate all such reports without delay.

Capsatoto2 operates with service providers and infrastructure partners who may process personal data in jurisdictions outside of Malaysia. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within Malaysia.

Safeguards used for international transfers may include:

• Standard contractual clauses incorporated into data processing agreements with international service providers.
• Transfer to countries or organisations that maintain data protection standards recognised as adequate by applicable regulatory frameworks.
• Binding corporate rules where applicable within corporate group structures.

You may request information about the specific safeguards applied to international transfers of your personal data by contacting our support team.

Capsatoto2 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When material changes are made, we will notify registered members via a platform notification or email to the registered address, and update the "Last Updated" date at the top of this document.

Minor amendments — including clarifications, corrections of typographical errors, or formatting updates that do not change the substantive content of our privacy commitments — may be made without advance notification.

Your continued use of the capsatoto2 platform after any amendment to this policy constitutes your acceptance of the revised terms. We encourage you to review this policy periodically to stay informed about how your personal data is protected.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the capsatoto2 data team through the following channels:

For general platform questions, account issues, or payment enquiries not related to data rights, please contact standard customer support via the live chat function available in-platform.

For information about responsible gambling support tools and self-exclusion options, please visit our dedicated Responsible Gambling page. For the full terms governing your use of capsatoto2, please read our Terms & Conditions.