Privacy Policy flokitoto – Malaysian Player Data Protection

Flokitoto acts as the data controller for all personal information collected from players using the flokitoto platform at the address flokitoto.best. This means we are fully responsible for ensuring your data is processed lawfully, securely, and in accordance with this privacy policy.

If you have any questions, concerns, or wish to exercise your privacy rights, you can reach the flokitoto data protection team by email at support@flokitoto.best or via live chat on the platform. We are committed to responding to all privacy-related enquiries within a reasonable timeframe.

Flokitoto only collects data that is necessary for platform operations, player identity verification, and compliance with legal requirements. We do not collect excessive or irrelevant data. Below are the categories of data we collect from Malaysian players.

• Registration Information: When you register a flokitoto account, we collect the username you choose, your mobile phone number, your password (stored in encrypted form), and other basic account information you provide. This information is required to create and manage your account.
• Identity Information (if requested): In certain situations — such as verification for large withdrawals or anti-money laundering compliance checks — flokitoto may require a copy of a valid identity document, such as a Malaysian MyKad or passport. This data is handled with care and stored securely.
• Financial Transaction Data: We record all deposit and withdrawal transactions you make, including the amount, date, time, and payment method used — whether that is Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX. These records are required for financial accountability and customer support purposes.
• Platform Activity Data: flokitoto records your in-platform gaming and betting activity, including matches followed, game types played, bet amounts, and winnings. This data is used to calculate VIP points, process bonuses, and resolve any disputes that may arise.
• Technical Data: We automatically collect technical information including IP address, device type, operating system, browser type, screen resolution, and session data. This information helps us ensure the platform runs smoothly across all devices used by Malaysian players.
• Communication Data: When you contact the flokitoto support team via live chat or email, we retain records of those communications for quality control purposes and to resolve issues effectively.

Flokitoto uses the personal data of Malaysian players solely for legitimate and relevant purposes. Below are the specific purposes for which your data is used on the flokitoto platform.

• Account Management: Registration data is used to create and maintain your account, process logins, recover your account if you forget your password, and keep your session secure every time you use the platform.
• Transaction Processing: Financial data is used to process your deposits and withdrawals accurately and promptly. This includes verifying deposits made via Touch 'n Go, DuitNow, or GrabPay, and ensuring your winnings are sent to the correct account.
• Experience Personalisation: flokitoto uses platform activity data to personalise your experience — surfacing games relevant to your interests, displaying suitable promotional offers, and tailoring the interface for your ease of use.
• Customer Support: Account data and transaction records allow the flokitoto support team to assist you more effectively when you reach out. Without access to these records, we would not be able to resolve deposit, winnings, or account issues in a timely manner.
• Security & Fraud Prevention: Technical data such as IP addresses and usage patterns are analysed to detect and prevent unauthorised access, account fraud, money laundering, and other illegal activities that could harm players or the platform.
• VIP Programme & Promotions: Betting activity data is used to calculate your VIP points, determine your membership tier, and provide the promotions and bonuses you are eligible for based on your activity on the flokitoto platform.
• Legal Compliance: In certain circumstances required by law, flokitoto may be obligated to use or disclose player data to the relevant authorities. This is done solely to fulfil legal obligations and not for any commercial purpose.

Player data security is flokitoto's highest priority. We continuously invest in security infrastructure to ensure your personal and financial information is always protected to the highest standard.

• 256-bit SSL Encryption: All communications between your browser or app and flokitoto's servers are protected with 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions such as Maybank and CIMB. This ensures your data cannot be intercepted in transit.
• Secure Data Storage: Players' personal and financial data is stored on servers secured with multi-layered access controls, enterprise-grade firewalls, and threat monitoring systems operating 24 hours a day.
• Encrypted Password: Your account password is never stored in plain text. flokitoto uses a robust hashing algorithm with a unique salt for each account, ensuring your password remains secure even in the unlikely event of a data breach.
• Two-Factor Authentication: flokitoto encourages players to enable two-factor authentication (2FA), available in your account settings. This feature adds an extra layer of security by requiring verification via your registered phone number each time you log in from a new device.
• Anti-Fraud Monitoring: flokitoto's automated monitoring system continuously analyses activity patterns to detect any unauthorised access attempts or suspicious behaviour. If anything unusual is detected, your account will be secured immediately and you will be notified.
• Regular Security Audits: Flokitoto conducts regular internal and external security audits to identify and address any system vulnerabilities before they can be exploited by malicious parties.

Flokitoto takes a highly cautious approach to sharing player data. Our core principle is straightforward — your data is never sold, traded, or shared with third parties for marketing or commercial purposes without your explicit consent.

However, there are limited situations where flokitoto needs to share data with certain parties to keep the platform running properly.

• Payment Service Providers: To process your deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, or FPX, the minimum necessary transaction data is shared with the relevant payment gateway. These providers are subject to strict international payment security standards.
• Game Providers: Licensed game providers such as Evolution Gaming and Pragmatic Play may receive the session data required to operate live casino games and slots on the flokitoto platform. They do not receive your financial information or full identity details.
• Legal Authorities: flokitoto will fully comply with any court orders, lawful investigation requests, or legal requirements mandating the disclosure of player data to the relevant authorities. This is done solely to comply with the law and is not at flokitoto's own discretion.
• Analytics & Technical Services: flokitoto uses third-party technical services to analyse platform performance and ensure a quality user experience. Data shared for this purpose is aggregated and anonymised, and cannot be traced back to any individual player's identity.

The flokitoto platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how players use our platform. Below is an overview of the types of cookies we use.

• Essential Cookies: Required for core platform functions such as maintaining your login session, remembering your language preference, and ensuring smooth platform navigation. These cookies cannot be disabled without affecting platform functionality.
• Security Cookies: Used to detect unauthorised access attempts, prevent CSRF (Cross-Site Request Forgery) attacks, and keep your session secure throughout your time on the flokitoto platform.
• Performance Cookies: Collects information on how players use the platform — most visited pages, time spent, and any errors encountered. This data is used solely to improve the performance and user experience of flokitoto.
• Functional Cookies: Allows the platform to remember your preferences — such as display settings, last betting limits, and game preferences — so you don't have to reconfigure them each time you log in.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect your ability to use certain features of the flokitoto platform properly.

As a flokitoto player, you have certain rights regarding your personal data. Flokitoto fully respects and supports the exercise of these rights. To make use of any of the rights listed below, contact us at support@flokitoto.best.

• Right of Access: You have the right to request a copy of all personal data flokitoto holds about you. We will provide this information in a readable format within a reasonable timeframe once your request has been verified.
• Right to Rectification: If any personal data held by flokitoto is inaccurate or incomplete, you have the right to request a correction. You can update certain details directly in your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that flokitoto delete your personal data. This right is subject to legal obligations — we may be required to retain certain records for periods specified by applicable legislation.
• Right to Restrict Processing: You may request that flokitoto restrict how your data is processed in certain situations — for example, while we are verifying its accuracy or when you have objected to the processing.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for the purpose of transferring it to another system, where technically feasible.
• Right to Object: You have the right to object to the processing of your data for specific purposes, such as direct marketing. Once you object to direct marketing, flokitoto will cease processing your data for that purpose immediately.

Flokitoto does not retain players' personal data for longer than is necessary for its stated purposes or to comply with applicable legal obligations.

• Active Account Data: For as long as your account remains active on flokitoto, we retain all account data and activity records necessary for platform operations and customer support.
• Financial Transaction Records: Deposit and withdrawal records are retained for a minimum of seven years to comply with legal requirements relating to anti-money laundering and financial record-keeping. This is a mandatory legal obligation that cannot be waived.
• Support Communication Data: Customer support conversation records are retained for two years after the last interaction, for quality control purposes and to resolve any disputes that may arise thereafter.
• After Account Closure: When your account is closed at your request, flokitoto will delete or anonymise personal data that is no longer needed, while retaining records required for legal compliance within the specified retention period.

Flokitoto reserves the right to amend or update this Privacy Policy at any time to reflect changes in our operational practices, legal requirements, or improvements in data protection. The latest version is always available on this page with a clearly indicated update date.

• Policy Change Notification: For material and significant changes to how we process your data, flokitoto will endeavour to notify you via an in-platform notification or an email to your registered address before the changes take effect.
• Effect of Continued Use: Your continued use of the flokitoto platform after an updated Privacy Policy has been published constitutes your acceptance of the latest version of that policy.

For any questions, complaints, or requests relating to your privacy and data protection on the flokitoto platform, please contact us:

This Privacy Policy document forms part of the flokitoto user protection framework, together with Terms & Conditions and policies Responsible Gaming us. We encourage you to read all of these documents for a thorough understanding of your rights and responsibilities as a flokitoto player.