situstoto takes the privacy of our players seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information as a user of our platform.
situstoto ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who visits, registers with, or uses our online betting and casino platform at https://situstoto.buzz. This Privacy Policy ("Policy") constitutes the complete description of how situstoto collects, processes, stores, shares, and protects personal information in connection with the operation of our platform.
This Policy applies to all users of the situstoto Platform, including registered account holders ("Players"), visitors browsing the site without an account, and any individual who communicates with situstoto through our support channels. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein.
Summary: situstoto collects only the personal data necessary to operate your account, process transactions, prevent fraud, and meet applicable legal and licensing obligations. We do not sell your personal data to third parties for marketing or commercial purposes.
This Policy should be read in conjunction with our Terms & Conditions, which govern the overall relationship between you and situstoto. In the event of any conflict between the two documents, the Terms & Conditions shall take precedence except where data protection rights are concerned, in which case this Policy applies.
The following definitions apply throughout this Privacy Policy:
situstoto collects Personal Data through multiple channels: directly from you during registration and account use, automatically through technical systems when you access the Platform, and from trusted third-party service providers where necessary for fraud prevention and payment processing.
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Account registration & KYC verification |
| Contact Data | Email address, phone number, residential address | Account registration |
| KYC Documents | MyKad / passport copies, proof of address, selfie verification | Identity verification prior to first withdrawal |
| Financial Data | Payment method details, bank account numbers (partial), e-wallet IDs, transaction history | Deposit & withdrawal processing |
| Support Data | Support enquiry content, chat transcripts, email correspondence | Customer support interactions |
| Preference Data | Responsible gambling settings, communication preferences, bonus opt-in status | Account dashboard configuration |
When you access the situstoto Platform, our servers and analytics tools automatically collect the following technical data:
situstoto may receive limited Personal Data from trusted third-party sources, including payment processors (confirming transaction status and payment method ownership), identity verification service providers (confirming KYC document authenticity), and fraud prevention partners (providing risk scores and alerts). Data received from third parties is subject to the same protections described in this Policy and is used only for the specific purpose for which it was shared.
situstoto processes your Personal Data for the following defined purposes. We do not use your data for any purpose not listed below without first seeking your explicit consent or updating this Policy.
What We Do Not Do: situstoto does not sell, rent, or trade your Personal Data to any third party for their independent marketing or commercial purposes. We do not use automated profiling to make decisions that produce legal or similarly significant effects on you without human review.
situstoto processes Personal Data on the following legal bases, each applied to specific processing activities:
situstoto shares Personal Data with third parties only where strictly necessary for one of the purposes listed in Section 4, and only with parties who have agreed to maintain confidentiality and data protection standards consistent with this Policy. The following categories of third parties may receive limited access to your Personal Data:
To process deposits and withdrawals, situstoto shares transactional data with licensed payment processors including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX, and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank). Data shared is limited to what is necessary to execute the specific transaction.
KYC document verification may be conducted through third-party identity verification service providers. These providers access only the specific documents necessary to confirm identity and age, and operate under binding data processing agreements with situstoto.
situstoto engages specialist fraud prevention partners who receive limited technical data (such as IP addresses, device fingerprints, and transaction patterns) to assist in identifying and preventing fraudulent activity. No directly identifying Personal Data such as names, addresses, or government ID numbers is shared with these partners beyond what is necessary.
situstoto will disclose Personal Data to law enforcement agencies, courts, regulators, or other government authorities when required to do so by valid legal order, court order, or binding regulatory direction. In such cases, situstoto will, where legally permissible, notify the affected Player prior to disclosure.
No Sale of Data: situstoto does not sell, lease, or otherwise commercially transfer your Personal Data to any third party. Data sharing is limited exclusively to the operational purposes described in this section.
situstoto retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law or our gaming licence obligations.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Contractual record-keeping & AML compliance |
| KYC documents | Duration of account + 5 years post-closure | Licensing obligation & fraud audit trail |
| Transaction records | 7 years from transaction date | AML / CTF regulatory requirement |
| Betting & game history | Duration of account + 2 years post-closure | Dispute resolution & bonus integrity audits |
| Support correspondence | 3 years from last interaction | Dispute resolution & service quality |
| Marketing consent records | Until consent withdrawn + 2 years | Proof of consent & compliance |
| Session & technical logs | 90 days | Security monitoring & fraud detection |
Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with industry-standard data disposal procedures. Anonymised, aggregated data derived from your usage may be retained indefinitely for Platform analytics purposes, as it cannot be used to identify you.
situstoto uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse aggregated usage patterns. We use the following categories of cookies:
You may manage your cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Note that blocking Strictly Necessary cookies will impair your ability to use the Platform. situstoto does not use third-party advertising or retargeting cookies.
situstoto implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes:
While situstoto takes all reasonable and technically appropriate steps to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your situstoto account and to contact support immediately if you notice any suspicious account activity.
Subject to applicable law and the limitations imposed by our legal obligations (such as AML retention requirements), you have the following rights with respect to your Personal Data held by situstoto:
To exercise any of these rights, please contact situstoto's support team via live chat on the Platform or by email at [email protected]. We will respond to all data rights requests within 30 days of receipt. We may request proof of identity before processing a data rights request to ensure the security of your information.
21+ Only: situstoto strictly prohibits access by individuals under 21 years of age. The Platform is designed, marketed, and operated exclusively for adults aged 21 and above.
situstoto does not knowingly collect Personal Data from any individual under the age of 21. Our registration process requires players to confirm their age, and mandatory KYC verification ensures that identity and age are confirmed before any withdrawal is processed.
If situstoto becomes aware that Personal Data has been collected from an individual who is under 21 years of age, we will immediately suspend the relevant Account, initiate a refund of any verifiable deposits, and permanently delete all Personal Data associated with that Account from our systems within the shortest technically feasible timeframe consistent with our legal obligations.
If you believe that an individual under 21 may have accessed the Platform or that a minor's Personal Data may be held by situstoto, please contact our support team immediately at [email protected].
situstoto's platform infrastructure and key service providers are located in multiple jurisdictions. As a result, your Personal Data may be transferred to, stored in, and processed in countries outside Malaysia. Such transfers occur in the following contexts:
Where Personal Data is transferred outside Malaysia, situstoto takes appropriate steps to ensure that your data receives a level of protection substantially equivalent to the protections described in this Policy, including through the use of data processing agreements incorporating standard contractual protections. situstoto does not transfer Personal Data to jurisdictions that it has assessed as providing inadequate data protection standards without implementing additional safeguards.
situstoto may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. The date of the most recent revision is displayed at the top of this page under "Last Updated."
Where changes to this Policy are material — particularly changes that affect how your Personal Data is used or that reduce your rights — situstoto will notify registered Players via the email address on file and/or through a prominent notice on the Platform prior to the changes taking effect. For non-material updates (such as clarifications or typographical corrections), we will update the Policy without prior notice.
Your continued use of the situstoto Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any updated terms, you should discontinue use of the Platform and contact support to request Account closure and data deletion where eligible.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by situstoto, please contact us through one of the following channels:
Email: [email protected]
Live Chat: Available 24 hours a day, 7 days a week — accessible via the situstoto Platform.
Response Time: Privacy-related enquiries will be acknowledged within 2 business days and substantively responded to within 30 days of receipt.
For data rights requests (access, erasure, portability, objection), please include your registered Account email address and a brief description of your request in your initial communication. situstoto may request proof of identity before processing data rights requests to ensure the security of your Personal Data.
For responsible gambling concerns or self-exclusion requests, please visit our Responsible Gambling page or contact our support team directly via live chat for immediate assistance.
Our approach to data protection is built on six clear commitments to every situstoto player — from Kuala Lumpur to Penang and everywhere in between.
Every byte of data sent between your device and situstoto travels over an encrypted connection. Your account details, payment information, and game activity are fully protected in transit.
situstoto does not sell, rent, or trade your personal data to third parties for marketing purposes. Data sharing is strictly limited to what is needed to process your transactions and operate your account.
We do not keep your data indefinitely. Retention periods for every data category are defined, enforced, and published in this Policy — so you know exactly how long your information is held and why.
You can request a copy of all Personal Data situstoto holds about you at any time. Requests are acknowledged within 5 business days and fulfilled within 30 days — at no charge to you.
Marketing emails and promotional notifications are strictly opt-in. If you no longer wish to receive them, you can withdraw consent at any time via your account preferences — effective immediately.
Access to player data within situstoto's systems is controlled on a strict need-to-know basis. All staff with data access are bound by confidentiality obligations and subject to access logging.
Your data is protected, your privacy is respected, and your rights are clearly defined. If you have questions about how situstoto handles your information, our team is available around the clock. Play responsibly. 21+ only.