Mafiatoto is committed to protecting your personal data. This Policy explains what we collect, why we collect it, how we use it, and the rights you hold over your information.
Six core principles that define how Mafiatoto handles your personal data — from Kuala Lumpur to Johor Bahru and everywhere in between.
All personal and financial data transmitted through the Mafiatoto Platform is protected by 256-bit SSL encryption. We apply industry-standard security protocols across all data storage and transfer systems.
Mafiatoto does not sell, rent, or commercially trade your personal data to any third party. Your information is used solely to provide and improve the gaming services you have subscribed to.
You have the right to access, correct, export, and request deletion of your personal data at any time. We honour data subject rights requests promptly and without unreasonable barriers.
Every data processing activity at Mafiatoto is grounded in a lawful basis — contract performance, legal obligation, legitimate interests, or your explicit consent. We do not process data without a clear justification.
We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by our licensing and legal obligations. Data no longer needed is securely deleted or anonymised.
Where we share data with third-party processors — such as payment providers like DuitNow, FPX, or Touch'n Go eWallet — we ensure appropriate data processing agreements and security standards are in place.
This Privacy Policy ("Policy") describes how Mafiatoto ("Company", "We", "Us", "Our") collects, uses, stores, discloses, and protects the personal data of individuals ("You", "Player", "User") who access or use the Mafiatoto online gaming platform atmafiatoto.cam and all associated services (the "Platform").
Mafiatoto operates as a licensed online gaming platform serving players across Malaysia — including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and beyond — as well as international jurisdictions where access to the Platform is lawfully permitted.
We are committed to handling your personal information with transparency, integrity, and in full compliance with our international licensing obligations and applicable data protection frameworks. This Policy is incorporated by reference into the Mafiatoto Terms and Conditions and should be read alongside that document.
For the purposes of this Privacy Policy, the following definitions apply:
Mafiatoto acts as the Data Controller for all personal data collected through the Platform. As Data Controller, we are responsible for determining how and why your personal data is processed.
The Platform operates under international gaming licensing from an established offshore regulatory jurisdiction. While Mafiatoto is not subject to Malaysian government data regulation (the Personal Data Protection Act 2010("PDPA") applies to commercial transactions in Malaysia), we voluntarily apply PDPA-aligned principles as a standard of good practice for our Malaysian player base.
This means we adhere to the seven data protection principles of the PDPA — including General, Notice and Choice, Disclosure, Security, Retention, Data Integrity, and Access — as a baseline commitment to our players in Kuala Lumpur, Penang, Johor Bahru, and across Malaysia.
Mafiatoto collects personal data from you through several channels and at various stages of your engagement with the Platform. The categories of data we collect include:
| Category | Data Collected | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (e.g. MyKad) | Registration; KYC Verification |
| Contact Data | Email address, phone number, residential address | Registration; Account Updates |
| Financial Data | Bank account details, e-wallet identifiers (Maybank, CIMB, DuitNow, Touch 'n Go, Boost, GrabPay), cryptocurrency wallet addresses, transaction history | Deposits; Withdrawals; KYC |
| Gaming Activity Data | Bet history, game session logs, win/loss records, bonus usage, wagering statistics | Platform Activity |
| Technical Data | IP address, device type and identifier, browser type, operating system, referal URL, session duration | Automatic on Platform Access |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer Support Interactions |
| KYC Documents | Scanned/photographed copies of identity documents, utility bills, bank statements | KYC Verification Process |
4.1 Mandatory Data. Certain categories of data — specifically Identity Data, Contact Data, and Financial Data — are mandatory for account registration and continued use of the Platform. Without this data, we are unable to provide gaming services or process transactions.
4.2 Voluntary Data. Additional preferences, communication consents, and optional profile information may be provided voluntarily. You are not required to provide this data but doing so may enhance your user experience.
4.3 Data from Third Parties. In limited circumstances, we may receive personal data about you from third-party sources, including payment processors (e.g. DuitNow, FPX), fraud prevention services, identity verification providers, and publicly available databases for KYC compliance purposes.
Mafiatoto processes your personal data for the following clearly defined purposes:
Each processing activity conducted by Mafiatoto is grounded in one or more of the following lawful bases:
7.1 We Do Not Sell Your Data. Mafiatoto does not sell, rent, or commercially exchange your personal data with any third party for their own marketing or commercial purposes.
7.2 Authorised Data Processors. We share personal data with carefully selected third-party processors who assist in delivering our services. All such processors are bound by contractual data protection obligations. Categories of processors include:
7.3 Regulatory and Legal Disclosure. Mafiatoto may disclose your personal data to regulatory authorities, law enforcement bodies, or gaming licensing authorities where required by law, court order, or our licensing obligations. Such disclosures are made only to the extent required and in accordance with applicable legal procedures.
7.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or a portion of Mafiatoto's business assets, personal data held by the Company may form part of the transferred assets. You will be notified of any such transfer that materially affects your privacy rights.
8.1 Mafiatoto operates on a global infrastructure. Your personal data may be transferred to and stored in servers or processed by entities located outside of Malaysia. This includes data centre locations in various international jurisdictions used for cloud hosting and backup purposes.
8.2 Where personal data is transferred internationally, Mafiatoto implements appropriate safeguards to ensure an equivalent level of protection applies, including contractual data transfer agreements with receiving entities and selection of processors who operate under adequate data protection frameworks.
8.3 By using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this Policy.
9.1 Retention Principle. Mafiatoto retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or licensing obligations.
9.2 Active Account Data. Personal data associated with active player accounts is retained for the duration of the account relationship and for minimum of five (5) years following account closure, in compliance with anti-money laundering recordkeeping requirements.
9.3 Financial Transaction Records. Records of deposits, withdrawals, and betting transactions are retained for a minimum of seven (7) years from the date of the transaction, in line with standard financial compliance retention periods.
9.4 KYC Documentation. Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, or longer where required by applicable licensing or legal obligations.
9.5 Marketing Data. Where processing is based on consent for marketing, data is retained until consent is withdrawn or the player's account is closed, whichever occurs first.
9.6 Deletion Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.
Subject to applicable law and our licensing obligations, you hold the following rights with respect to your personal data held by Mafiatoto:
You have the right to request a copy of the personal data Mafiatoto holds about you, along with information about how it is being processed. We will respond to access requests within 30 days.
You have the right to request correction of inaccurate or incomplete personal data held about you. You may update certain account details directly through your account settings or by contacting support.
In certain circumstances, you have the right to request deletion of your personal data. This right is subject to our legal and regulatory retention obligations — data required for AML compliance, licensing records, or open dispute resolution cannot be deleted.
You have the right to request a restriction on how we use your personal data in certain circumstances — for example, while we verify the accuracy of data you have disputed.
Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
You have the right to object to processing of your personal data where we rely on legitimate interests as the lawful basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
To exercise any of the above rights, please contact our Data Protection team at the details provided in Section 15. We will acknowledge your request within 72 hours and aim to complete it within 30 calendar days, subject to identity verification and applicable legal limitations.
11.1 What Are Cookies. Cookies are small text files stored on your device when you visit the Mafiatoto Platform. They help us recognise your device, maintain session continuity, and understand how you interact with our services.
11.2 Categories of Cookies We Use:
11.3 Cookie Management. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling marketing cookies will not affect your access to gaming services.
11.4 Similar Technologies. In addition to cookies, we may use similar tracking technologies including web beacons, pixel tags, and local storage objects for purposes consistent with this Policy.
12.1 Age Verification. Mafiatoto implements mandatory age verification as part of the KYC process. All players are required to provide valid proof of age before withdrawal functions are activated. Providing false information about your age constitutes a material breach of our Terms and Conditions.
12.2 Discovery of Underage Data. If we discover or are notified that personal data belonging to an individual under the age of 21 has been collected, we will immediately suspend the associated account, delete the personal data (subject to any overiding legal obligations), and take appropriate action in line with our responsible gambling policies.
12.3 Parental Controls. We encourage parents and guardians to utilise available internet filtering and parental control tools to prevent minors from accessing online gambling platforms. If you believe a minor has accessed our Platform, please notify us immediately at the contact details in Section 15.
13.1 Technical Safeguards. Mafiatoto employs industry-standard technical security measures to protect your personal data, including:
13.2 Organisational Measures. Our data security framework includes regular staff training on data protection obligations, documented data processing procedures, and incident response protocols for data breach management.
13.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Mafiatoto will notify you without undue delay, providing information on the nature of the breach, the categories of data affected, and the steps being taken to mitigate the impact.
13.4 Player Responsibility. You also bear responsibility for the security of your account credentials. We recommend using a strong, unique password and not sharing your login details with any third party. If you suspect unauthorised access to your account, contact our support team immediately.
14.1 Mafiatoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. The revised Policy will be published on this page with an updated "Last Updated" date.
14.2 Material Changes. Where changes to this Policy are material — meaning they significantly affect how we collect or use your personal data — we will notify you by email to your registered address or by a prominent notice on the Platform prior to the changes taking effect.
14.3 Continued Use. Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the changes. If you do not accept the updated Policy, you must discontinue use of the Platform and may request account closure.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Mafiatoto, please contact our support team using the details below. Data subject rights requests should clearly state the nature of your request and provide sufficient information to verify your identity.
Please also refer to our Terms & Conditions for the full contractual framework governing your use of the Mafiatoto Platform, and our Responsible Gambling page for information on player protection tools.
We protect your personal information with the same seriousness we bring to game fairness and payment security. Explore Malaysia's most complete online gaming platform with confidence.