Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how Wengtoto ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of users ("you", "your") who access and use the website located at wengtoto.cam and all associated services, features, and products made available thereon.

Wengtoto is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws and internationally recognised privacy standards. We process personal data only for the purposes described in this Policy and to the minimum extent necessary to fulfil those purposes.

By registering an account on the Wengtoto platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not register an account or use the platform.

This Policy should be read alongside our Terms & Conditions, which govern the use of the platform generally. In the event of any conflict between this Policy and the Terms & Conditions as it relates to data protection matters, this Policy shall take precedence.

2Definitions

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, payment details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, Wengtoto is the Data Controller.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller, under binding contractual obligations and solely on the Data Controller's documented instructions.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" — Know Your Customer, the identity and age verification process required prior to withdrawal processing or as otherwise triggered under our compliance obligations.
• "Cookies" — small text files stored on your device by a web browser at the request of the platform, used to retain session information and user preferences.
• "Account" — the individual registered user account held on the Wengtoto platform.

3Data We Collect

Wengtoto collects several categories of personal data depending on how you interact with the platform. The categories and specific data points we may collect are set out in the table below:

4How We Collect Data

Wengtoto collects personal data through the following means:

4.1 Directly from You

The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in any platform promotion or survey.

4.2 Automatically Through Platform Use

When you access the Wengtoto platform, certain technical data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, device identifiers, browser characteristics, and in-session activity data. This data is collected to maintain platform security, prevent fraud, and improve the overall user experience.

4.3 From Third-Party Payment Processors

When you make a deposit or withdrawal using a Malaysian payment method — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (via Maybank, CIMB, Public Bank, or Hong Leong), or USDT TRC20 — we may receive transactional confirmation data from the payment processor. We do not receive or store your full payment credentials (e.g., your full bank account number or e-wallet password).

4.4 From Identity Verification Services

For KYC verification purposes, we may engage third-party identity verification service providers who assist in authenticating the documents and information you submit. These providers act as Data Processors under binding contractual obligations.

5How We Use Your Data

Wengtoto processes personal data only for the purposes disclosed in this Policy. The primary purposes for which your personal data is used are set out below:

• Account Management — Creating, maintaining, and administering your registered account, including authentication, password recovery, and account settings management.
• Identity & Age Verification (KYC) — Verifying that you are who you say you are and confirming that you meet the minimum age requirement of 21 years before permitting withdrawals.
• Payment Processing — Facilitating deposits and withdrawals via your chosen Malaysian payment method, confirming transaction status, and resolving payment disputes.
• Fraud Prevention & Security — Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited activities as described in our Terms & Conditions.
• Regulatory & AML Compliance — Meeting the anti-money laundering, counter-terrorism financing, and identity verification obligations under the conditions of our international operating licence.
• Customer Support — Responding to queries, complaints, and support requests submitted via live chat or email.
• Responsible Gambling Monitoring — Monitoring gameplay patterns and account activity to identify indicators of problem gambling behaviour and facilitate access to responsible gambling tools where appropriate.
• Platform Improvement — Analysing aggregated and anonymised usage data to improve platform performance, user experience, game selection, and feature design.
• Legal Obligations — Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and defending or pursuing legal claims.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you without your explicit consent.

6Legal Basis for Processing

Wengtoto processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity — Processing required to enter into or perform the contract formed when you register an account and accept our Terms & Conditions. This covers account creation, payment processing, KYC verification, and customer support.
• Legal Obligation — Processing required to comply with applicable law, including anti-money laundering regulations, identity verification requirements under our licensing conditions, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests — Processing undertaken in pursuit of Wengtoto's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and the improvement of platform features and services — provided such interests are not overridden by your privacy rights.
• Consent — Where processing is not covered by the above bases, Wengtoto will seek your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7Data Sharing & Third Parties

Wengtoto does not sell, rent, or disclose your personal data to unaffiliated third parties for commercial or marketing purposes. Personal data is shared only in the following strictly limited circumstances:

7.1 Service Providers (Data Processors)

Wengtoto engages a limited number of carefully selected third-party service providers to assist in delivering platform services. These providers include payment processors (such as the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX), identity verification vendors, cloud hosting providers, and customer support platform operators. All such providers are engaged under binding Data Processing Agreements that restrict them to processing your data solely on Wengtoto's documented instructions.

7.2 Legal & Regulatory Disclosure

We may disclose your personal data to a court, regulator, law enforcement authority, or other governmental body where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of Wengtoto, our users, or the public.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of Wengtoto's business, your personal data may be transferred to the acquiring or successor entity. You will be notified of any such transfer and of any material changes to how your data is processed as a result.

8Cookies & Tracking Technologies

Wengtoto uses cookies and similar session technologies to operate the platform securely and efficiently. Our use of cookies is limited to the following categories:

• Strictly Necessary Cookies — Required for the platform to function. These include session authentication tokens, security tokens, and cookies that maintain your login state. These cannot be disabled without preventing you from using the platform.
• Functional Cookies — Used to remember your preferences, such as your preferred display language or previously selected game categories. These are not required for basic platform functionality but improve your experience.
• Analytics Cookies — Used to collect aggregated, anonymised data about how users interact with the platform — such as which pages are visited most frequently and where users encounter errors. This data is used to improve platform performance and user experience. Analytics data is not linked to your individual identity.

Wengtoto does not use third-party advertising cookies, cross-site tracking cookies, or social media tracking pixels. Your browsing activity on wengtoto.cam is not shared with advertising networks.

You may control cookie settings through your browser's privacy preferences. Disabling strictly necessary cookies will prevent you from logging in to your account. Disabling functional or analytics cookies will not affect platform access but may reduce the quality of your experience.

9Data Retention

Wengtoto retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention principles we apply are:

• Active Account Data — Personal data associated with an active account is retained for the duration of the account's existence.
• Closed Account Data — Following account closure, Wengtoto retains identity, financial, and transaction records for a minimum of five (5) years to comply with anti-money laundering and record-keeping obligations under our licensing conditions.
• KYC Documents — Identity verification documents are retained for a minimum period consistent with AML regulatory requirements, typically five years from the date of verification or from the date of account closure, whichever is later.
• Support Communications — Records of customer support interactions are retained for a period of two (2) years from the date of the interaction, or longer where relevant to an unresolved dispute or legal matter.
• Cookie and Analytics Data — Anonymised analytics data derived from cookie tracking is retained in aggregated form for up to two (2) years and is not linked to individual user identities.

When personal data is no longer required and the applicable retention period has elapsed, Wengtoto will securely delete or irreversibly anonymise that data.

10Data Security

Wengtoto implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures include:

• Encryption in Transit — All data transmitted between your device and the Wengtoto platform is encrypted using TLS 1.2 or higher (256-bit SSL). This protects your data from interception during transmission.
• Encryption at Rest — Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls — Access to personal data within Wengtoto's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and auditable.
• Two-Factor Authentication — User accounts support two-factor authentication (2FA) as an additional layer of login security. We strongly encourage all users to enable 2FA.
• Intrusion Detection — Wengtoto's infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous data access patterns.
• Vendor Security Standards — All third-party service providers who process personal data on our behalf are required to maintain security standards consistent with or exceeding our own.

Notwithstanding these measures, no data transmission or storage system can be guaranteed as 100% secure. You are responsible for maintaining the security of your account credentials and notifying Wengtoto immediately if you suspect any unauthorised access to your account.

11Your Data Rights

Subject to applicable law and Wengtoto's legal obligations, you have the following rights with respect to your personal data:

To exercise any of these rights, please contact our team at [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 days. Where requests are complex or numerous, we may extend this period by a further 30 days with written notification.

Wengtoto will not charge a fee for processing data subject requests unless they are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or decline to action the request.

12Protection of Minors

The Wengtoto platform is strictly intended for users aged 21 years and above. We do not knowingly collect or process the personal data of individuals under the age of 21.

As part of our account registration and KYC processes, Wengtoto takes active steps to verify the age of all registered users before permitting withdrawal activity. Any account found to have been registered by a person under the age of 21 will be immediately and permanently closed, and any balance will be returned to the originating payment method after investigation.

13International Data Transfers

Wengtoto operates under an international online gaming licence and may, in the course of providing its services, transfer personal data to countries or territories outside Malaysia. Such transfers may occur where third-party service providers — including cloud infrastructure providers, identity verification vendors, or payment processors — are located outside Malaysia.

Where personal data is transferred to a jurisdiction that may not provide a level of data protection equivalent to Malaysian standards, Wengtoto takes appropriate safeguards to ensure your data remains protected. These safeguards may include:

• Standard Contractual Clauses (SCCs) or equivalent data transfer agreements binding the recipient to adequate data protection standards;
• Binding Corporate Rules where data is transferred within a corporate group subject to common governance;
• Adequacy decisions or other approved transfer mechanisms recognised under applicable data protection frameworks.

You may request information about the specific safeguards applied to international transfers of your personal data by contacting our team.

14Policy Amendments

Wengtoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. When material changes are made, we will post the updated Policy on this page with a revised "Last Updated" date and, where reasonably practicable, notify registered users by email or via an in-platform notification.

Your continued use of the Wengtoto platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment to this Policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

We recommend that you review this Policy periodically to stay informed about how we protect your personal data. The date at the top of this page indicates when the Policy was last updated.

15Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Wengtoto processes your personal data, please contact our team through the following channels. All contact details are provided as plain text only and are not clickable links.

• Privacy Enquiries & Data Rights Email: [email protected]
• Live Chat Support: Available 24 hours a day, 7 days a week via the platform interface
• Acknowledgement Time: Within 5 business days of receiving your request
• Response Time: Requests actioned within 30 days; complex requests within 60 days with written notification

Please include your registered email address and a brief description of your request or concern to help us verify your identity and process your request efficiently.