Ngawitoto is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used, and the rights you hold over your information.
This Privacy Policy ("Policy") issued by Ngawitoto ("we", "us", "our", or "the Platform") and governs the collection, processing, storage, and disclosure of personal data relating to individuals ("you", "User", or "Player") who access or use the Ngawitoto website athttps://ngawitoto.cam and all associated services.
Ngawitoto operates as an online casino and sports betting platform serving players primarily located in Malaysia. We are committed to handling your personal data responsibly, lawfully, and transparently. This Policy is designed to give you a clear understanding of our data practices so that you can make informed decisions about the information you share with us.
By registering an Account, making a deposit, or otherwise using the Ngawitoto Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue your use of the Platform and contact us to close your Account.
This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, all of which form part of your agreement with Ngawitoto.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
Ngawitoto collects only the data that is necessary for operating your account, processing transactions, complying with legal obligations, and improving your experience on the Platform. The categories of Personal Data we may collect include:
| Category | Data Items | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, government-issued ID (MyKad, passport) | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, mobile phone number, residential address | Account communications, support responses, security alerts |
| Financial Data | Bank account details, e-wallet identifiers, cryptocurrency wallet addresses, transaction history | Deposits, withdrawals, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser type, operating system, session duration, login timestamps | Security, fraud detection, platform optimisation |
| Usage Data | Games played, bets placed, wagering patterns, bonus usage, preferred payment methods | Responsible gambling monitoring, personalisation, analytics |
| Communication Data | Live chat transcripts, support ticket content, email correspondence | Dispute resolution, quality assurance, training |
| Marketing Preferences | Communication opt-in/opt-out status, promotion interaction history | Targeted promotions (where consented), preference management |
Our Commitment: We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data, except where strictly required by applicable anti-money laundering or responsible gambling regulations — and only with appropriate legal justification.
Ngawitoto collects Personal Data through the following means:
Ngawitoto processes Personal Data only where a lawful basis exists. The following table sets out the primary purposes for which we process your data and the legal basis applicable to each:
| Purpose | Legal Basis |
|---|---|
| Registering and managing your Account | Contractual necessity — required to perform our services |
| Processing deposits and withdrawals in MYR or cryptocurrency | Contractual necessity — required to fulfil transaction obligations |
| KYC identity and age verification (21+ compliance) | Legal obligation — required by applicable regulations |
| Anti-money laundering (AML) and fraud prevention monitoring | Legal obligation and legitimate interest |
| Responsible gambling monitoring and intervention | Legal obligation and legitimate interest in player welfare |
| Providing customer support in English, Bahasa Melayu, and Chinese | Contractual necessity and legitimate interest |
| Sending account-related notifications and security alerts | Contractual necessity and legitimate interest |
| Sending promotional communications and personalised offers | Consent — where you have opted in to marketing communications |
| Platform analytics, performance optimisation, and security | Legitimate interest |
All Personal Data collected by Ngawitoto is processed our internal team and, where necessary, by authorised Data Processors acting on our behalf. Processing activities include storage on secure servers, analysis for fraud and responsible gambling purposes, use in customer support interactions, and generation of anonymised analytics reports.
Ngawitoto maintains strict internal access controls. Personal Data is accessible only to members of staff or contractors who require it for a specific, legitimate operational purpose. Access is granted on a least-privilege basis and is subject to audit logging.
We do not engage in automated decision-making that produces legal or similarly significant effects on individuals, except where such processing is strictly necessary for fraud prevention or AML compliance. Where automated decisions are made in such contexts, you retain the right to request human review as described in Section 11.
All Data Processors engaged by Ngawitoto are bound by data processing agreements that require them to process Personal Data only in accordance with our documented instructions, maintain appropriate technical and organisational security measures, and not sub-process data without prior written authorisation from Ngawitoto.
Ngawitoto does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We do not share your data with advertisers, data brokers, or any entity that would use it for purposes outside the scope of this Policy.
We may disclose your Personal Data to third parties only in the following limited circumstances:
Ngawitoto retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, and as required to comply with applicable legal, regulatory, and contractual obligations.
The following general retention periods apply:
Upon the expiry of applicable retention periods, Personal Data will be securely deleted or anonymised in manner that prevents re-identification.
Ngawitoto uses cookies and similar browser-based technologies on the Platform. These technologies allow us to maintain session continuity, remember your preferences, detect suspicious activity, and gather anonymised analytics on how the Platform is used.
The cookies we deploy fall into the following categories:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use core Platform features. Ngawitoto does not use third-party advertising or retargeting cookies.
Ngawitoto employs a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure is aligned with the standards expected of Malaysian fintech and digital financial service providers.
Key security measures in place include:
While Ngawitoto takes all reasonable precautions to secure your data, no internet-based system is completely immune to risk. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately if you suspect unauthorised access to your Account.
Ngawitoto will never ask for your password via email, live chat, or any other channel. If you receive a communication claiming to be from Ngawitoto and requesting your login credentials, treat it as a phishing attempt and contact our support team immediately.
As a player whose Personal Data is processed by Ngawitoto, you hold a number of rights in relation to your data. We are committed to honouring these rights in a timely and transparent manner. The following rights apply to your Personal Data held by Ngawitoto:
Request a copy of the Personal Data we hold about you and information on how it is being processed.
Request correction of inaccurate or incomplete Personal Data held your Account or our records.
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements.
Request that we restrict processing of your data in certain circumstances, such as while a dispute is pending.
Request a structured, machine-readable copy of the Personal Data you have provided to us for transfer to another service.
Object to processing based on legitimate interest, including direct marketing communications. Objections to marketing will be honoured immediately.
Withdraw previously given consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Request human review of any decision made solely by automated processing that produces a significant effect on you.
To exercise any of these rights, please contact our Data Protection team at [email protected] (displayed as plain text — not a link). We will acknowledge your request within 3 business days and endeavour to resolve it within 30 days. Where requests are complex or numerous, we may extend this period by a further 60 days with prior notification.
We may request proof of identity before fulfilling a data rights request to ensure we do not disclose your data to an unauthorised party.
The Ngawitoto Platform is strictly intended for adults aged21 years and above. We do not knowingly collect, solicit, or process Personal Data from persons under the age of 21. If we become aware that we have inadvertently collected data from an individual under this age threshold, we will immediately close the associated Account, delete all related Personal Data, and forfeit any associated balances.
If you believe that a person under 21 years of age has registered an Account or is otherwise using the Platform, please notify our support team immediately. We take underage gambling extremely seriously and maintain age verification procedures as a core compliance obligation.
Ngawitoto primarily operates to serve players based in Malaysia, and our data processing activities are centred on the Malaysian market. However, some of our authorised third-party service providers — including KYC verification partners, cloud infrastructure providers, and payment processing networks — may process data in jurisdictions outside Malaysia.
Where such cross-border transfers occur, Ngawitoto ensures that appropriate safeguards are in place, including: contractual data protection clauses binding the receiving party to equivalent protection standards; transfers only to jurisdictions recognised as providing an adequate level of data protection; and, where required, explicit consent from the data subject prior to transfer.
We do not transfer your Personal Data to jurisdictions that do not provide adequate protection for personal data without first establishing and documenting appropriate legal mechanisms for the transfer.
Ngawitoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Where material changes are made, we will notify you via email to your registered address or through a prominent notice on the Platform at least 7 days before the changes take effect.
The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically. Your continued use of the Platform after any amendments take effect constitutes your acceptance of the revised Policy.
If you disagree with any changes to this Policy, you may request closure of your Account in accordance with ourTerms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Ngawitoto, please contact our Data Protection team through any of the following channels:
For matters specifically related to exercising your data rights as described in Section 11, please include "Data Rights Request" in the subject line of your email and provide sufficient information to verify your identity and identify the data concerned.
For information about how we handle your account terms and gambling rules, please refer to our Terms & Conditions. For responsible gambling tools including self-exclusion and deposit limits, visit our Responsible Gambling page.
Our Data Commitments
Six concrete practices that define how we handle your personal data — because trust is earned through actions, not policy statements alone.
Every piece of data transmitted between your device and Ngawitoto is protected by bank-grade 256-bit SSL/TLS encryption. Your financial data, identity documents, and account activity are secured in transit and at rest.
Ngawitoto does not sell, rent, or trade your personal data to any third party for marketing, advertising, or commercial purposes. Your data is used only for operational, legal, and security purposes as described in this Policy.
We collect only what is strictly necessary. You will never be asked for data that serves no clear operational, legal, or security purpose. Our data collection approach is need-based, not speculative.
Access, rectify, delete, or export your data at any time. Our Data Protection team responds within 3 business days and resolves requests within 30 days — in English, Bahasa Melayu, or Chinese.
We do not hold your data indefinitely. Clear retention schedules govern every category of data, from transaction records kept7 years for AML compliance to analytics data anonymised after 12 months.
Ngawitoto does not use third-party advertising cookies, retargeting pixels, or cross-site tracking. Our cookies are limited to strictly necessary, functional, analytics, and security purposes — all first-party only.
Our team is here to help. Whether you want to access your data, update your details, or understand how we use your information — we respond in English, Bahasa Melayu, and Chinese,24/7.