Data Protection & Privacy
This Privacy Policy describes how CloverToto collects, uses, stores, and protects the personal data of players accessing our platform at clovertoto.cam. We are committed to handling your information responsibly and in accordance with applicable data protection principles.
Our Privacy Commitments at a Glance
These cards summarise the key principles of our Privacy Policy. They are intended as a helpful overview — please read the full policy below for complete details.
We Do Not Sell Your Data
CloverToto will never sell, rent, or trade your personal data to third-party marketers or data brokers. Your information is used solely to operate your account and deliver the services you have requested.
Bank-Grade Encryption
All data transmitted between your device and CloverToto is protected by 256-bit SSL/TLS encryption. Payment details are processed by certified payment providers and are never stored in plain text on our servers.
Purpose Limitation
Data collected by CloverToto is used only for the specific, stated purposes outlined in this Privacy Policy. We do not use your personal data for unrelated purposes without obtaining your prior consent.
Your Rights Are Protected
You have the right to access, correct, and request deletion of your personal data at any time. You may also object to certain processing activities and request data portability where applicable.
Transparent Cookie Use
CloverToto uses cookies to maintain your session, optimise platform performance, and understand aggregate usage patterns. Non-essential cookies require your consent. You can manage preferences at any time.
You Control Marketing
Promotional communications are sent only with your consent and can be opted out of at any time by contacting support. Opting out of marketing does not affect operational and account-related communications.
Contents
CloverToto ("we", "us", "the Company", "the Platform") is the operator of the online casino and sports betting platform accessible at clovertoto.cam. We are committed to protecting the privacy and personal data of every player who registers and participates on our Platform.
This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you as a data subject. This Policy applies to all users of CloverToto, including registered players and visitors who browse clovertoto.cam without creating an account.
By creating a CloverToto account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact us to request account closure.
This Policy is to be read in conjunction with our Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions with respect to data protection matters, this Policy shall take precedence.
Throughout this Privacy Policy, the following terms carry the meanings set out below:
CloverToto collects personal data in the following categories, depending on how you interact with the Platform:
| Category | Examples | Collection Trigger |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport number, nationality | Registration & KYC |
| Contact Data | Email address, phone number, residential address (city, postcode) | Registration |
| Financial Data | Payment method type, partial payment account identifiers (last 4 digits), transaction amounts in MYR | Deposit / Withdrawal |
| KYC Documents | Scanned ID, proof of address, proof of payment method ownership | Withdrawal verification |
| Gambling Activity Data | Games played, bet amounts, win/loss records, session durations, bonus usage | Platform use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution | Automatic on site visit |
| Usage Data | Pages visited, features used, time spent on the Platform, referral source | Automatic on site visit |
| Communications Data | Live chat transcripts, email correspondence, support ticket records | Customer support interactions |
| Marketing Preferences | Opt-in / opt-out status for promotional emails and SMS | Registration & account settings |
CloverToto does not intentionally collect sensitive personal data (such as health data, biometric data, or data revealing racial or ethnic origin) unless specifically required for responsible gambling assessments or legal compliance, in which case such collection will be clearly communicated to you at the time of collection.
We collect personal data through the following means:
CloverToto processes personal data for the following specific, stated purposes:
CloverToto processes personal data on the following legal bases, depending on the specific processing activity:
CloverToto does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients where necessary to deliver our services or meet legal obligations:
All third-party processors engaged by CloverToto are subject to written data processing agreements that require them to maintain appropriate security measures and use your data only for the specific purposes authorised by CloverToto.
In providing a global platform, some of CloverToto's service providers and game partners may process personal data outside of Malaysia. Where personal data is transferred internationally, CloverToto takes appropriate steps to ensure that such transfers comply with applicable data protection standards, including:
Players whose data is transferred internationally retain all rights described in Section 11 of this Policy. If you would like further information about the specific safeguards in place for international transfers affecting your data, please contact us at [email protected].
CloverToto retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulation. The following indicative retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Regulatory & AML compliance |
| KYC Documents | Duration of account + 5 years post-closure | Regulatory & AML compliance |
| Financial Transaction Data | 7 years post-transaction | Accounting & audit requirements |
| Gambling Activity Data | Duration of account + 3 years | Responsible gambling monitoring |
| Support Communications | 3 years from last interaction | Dispute resolution |
| Technical / Usage Data | 13 months (rolling) | Analytics & fraud detection |
| Marketing Preferences | Until opt-out, then 3 years | Consent records |
After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is retained beyond the periods above due to a legal hold or ongoing investigation, you will be informed where practicable.
CloverToto uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience on the Platform. The following categories of cookies are used:
You can manage cookie preferences through your browser settings or via the Platform's cookie consent interface. Please note that disabling strictly necessary cookies may impair your ability to log in or use certain features. For more information, please refer to your browser's documentation on cookie management.
As a data subject, you hold the following rights with respect to your personal data held by CloverToto. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receipt of a verifiable request.
Right of Access
Request a copy of the personal data CloverToto holds about you, the purposes for which it is processed, and the categories of recipients with whom it has been shared.
Right of Rectification
Request correction of any inaccurate or incomplete personal data. You may update many details directly through your Account Settings without needing to contact support.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes collected, or where you withdraw consent and no other legal basis applies. This right is subject to legal retention obligations.
Right to Restrict Processing
Request that we limit the processing of your data while the accuracy is contested, or while you have objected to processing and we are assessing the basis for that objection.
Right to Data Portability
Receive a structured, machine-readable copy of the personal data you have provided to CloverToto, for transfer to another service provider, where technically feasible.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. We will cease processing for direct marketing immediately upon receipt of an objection.
Identity Verification Required: To protect your data from unauthorised requests, CloverToto may ask you to verify your identity before fulfilling any data rights request. We will not charge a fee for reasonable requests. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline the request, with written reasons provided.
The CloverToto Platform is strictly for adults aged 21 years or older. We do not knowingly collect personal data from any person under the age of 21. If we become aware that an account has been created by or for a person under 21, we will immediately suspend the account, delete any associated personal data that is not required for compliance purposes, and report the matter to relevant authorities where required.
If you believe a minor has created a CloverToto account or has been exposed to the Platform, please contact us immediately at [email protected] so we can take prompt action.
CloverToto implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While CloverToto employs robust security measures, no transmission over the internet is entirely risk-free. You are responsible for keeping your account credentials confidential and for logging out of shared devices. If you suspect unauthorised access to your account, contact us immediately at [email protected].
The CloverToto Platform may contain references to third-party services, such as game providers, payment processors, or responsible gambling support organisations. This Privacy Policy applies solely to CloverToto's own data processing activities. When you interact with a third-party service — for example, authenticating a payment via Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, or CIMB Clicks — that third party's own privacy policy will govern the data they collect and process.
CloverToto is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any external services you use in connection with your CloverToto account.
CloverToto reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered users by email at the address associated with their account, or by displaying a prominent notice on the Platform, prior to the changes taking effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed of how we protect your personal data. Your continued use of the Platform following notification of any update constitutes your acceptance of the amended Policy.
If you have any questions, concerns, or complaints about this Privacy Policy or CloverToto's data processing practices, or if you wish to exercise any of your data rights as described in Section 11, please contact our team through the following channels:
We commit to acknowledging all privacy-related enquiries within 72 hours and providing a substantive response within 30 days for data rights requests. Where a request is complex or high in volume, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.
Security reminder: CloverToto will never ask for your account password, full payment card number, or OTP codes via email or live chat. If you receive any communication purporting to be from CloverToto that requests this information, please treat it as suspicious and contact us immediately.
Your Data Is Safe With Us
Over 500,000 Malaysian players trust CloverToto for fast MYR payouts, 1,200+ games, and a platform that takes data security seriously. For players aged 21 and above only.
21+ only. Play responsibly. Players are responsible for checking local laws before registering.