Updated: 1 January 2026

KenzoToto Privacy Policy – Malaysian Player Personal Data Protection

KenzoToto takes your privacy seriously. This document clearly explains how we collect, use, store, and protect your personal data as a player on our platform.

Compliance with the Personal Data Protection Act 2010 256-bit SSL Encryption No data sold to third parties
Your Data Is Safe
The official KenzoToto Privacy Policy in full effect for all players.
Bank-Level Encryption

All personal data and financial transactions are protected with 256-bit SSL encryption — the same security standard used by Malaysia's leading banks.

Control Your Own Data

You have the right to access, correct, or request deletion of your personal data at any time by contacting the KenzoToto support team.

No Data Sale

KenzoToto never sells, rents, or transfers players' personal data to third parties for marketing or commercial purposes without your consent.

MY Legal Compliance

KenzoToto's Privacy Policy is crafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

Important Notice

This Privacy Policy explains how KenzoToto collects, processes, stores, and protects your personal information. By registering for or using the KenzoToto platform, you agree to the terms set out in this Privacy Policy. Please read this document carefully in its entirety.

Introduction

KenzoToto ("we", "the platform", or "KenzoToto") is committed to protecting the privacy of every user who registers and uses our services. As an online Sports Betting and casino platform serving Malaysian players, we understand that your trust is our most valuable asset — and that trust begins with the responsible handling of your personal data.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and clearly sets out the types of data we collect, the purposes for collection, how we use and protect your data, the limited circumstances under which we may share it, and your rights as a data subject.

This document applies to all KenzoToto users — from new players who have just registered to long-standing VIP members. It also applies to all your interactions with our platform, including through our website, mobile app, and any other communication channels we provide.

Important: By using KenzoToto's services, you confirm that you have read and understood this Privacy Policy. If you do not agree with the terms stated here, please discontinue use of the platform and contact us to close your account.

Personal Data We Collect

2.1 Data You Provide Directly

When you register an account or use KenzoToto's services, we collect the following information that you provide directly:

  • Full name as shown on your identity card
  • Malaysian phone number (used for OTP verification and communications)
  • Email address (for account communications and promotions)
  • Date of birth (for age verification — minimum age requirement of 21)
  • Payment method details linked to your account — account holder name, masked account number for Touch 'n Go, GrabPay, DuitNow, FPX, ShopeePay, or Boost
  • Identity verification documents such as a copy of your MyKad requested during the KYC (Know Your Customer) process
  • Information you provide when contacting our customer support team

2.2 Data Collected Automatically

When you use the KenzoToto platform, our systems automatically record certain technical information for security, service improvement, and fraud prevention purposes:

  • Your device's IP address
  • Web browser type and version
  • Device type (phone, tablet, or computer) and operating system
  • Activity log data — pages visited, visit timestamps, and actions taken
  • General geolocation data based on IP address (not precise GPS location)
  • Betting session details — bet type, amount, time, and outcome
  • Cookie data and other tracking technologies (see Section 6)

2.3 Data from Third-Party Sources

In certain circumstances, KenzoToto may receive information about you from legitimate third-party sources, such as identity verification service providers we engage to comply with KYC and anti-money laundering legal requirements. We only use data from third-party sources that comply with applicable privacy laws.

Data Type How It Is Collected Primary Purpose
Personal Identification Information Registration form Identity Verification & KYC
Phone Number Registration & verification OTP, account communications
Payment Information Deposit/withdrawal process Financial transaction processing
Platform Activity Data Automated system logs Security & Fraud Prevention
Device Technical Data Cookies & Server Logs Platform Security & Optimisation

How We Use Your Personal Data

KenzoToto uses the personal data collected for the following purposes, all of which are necessary to deliver a safe, fair, and quality service to Malaysian players:

3.1 Account Management & Services

  • Creating and managing your user account
  • Verifying your identity during login and sensitive transactions
  • Processing deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX, ShopeePay, and Boost
  • Providing a transaction history and betting activity log that you can review at any time
  • Managing and displaying your account balance, winnings, and betting information

3.2 Security & Fraud Prevention

  • Detecting and preventing fraudulent activity, money laundering, and platform abuse
  • Ensuring each user holds only one account
  • Monitoring suspicious activity that could compromise your account security or the integrity of the platform
  • Complying with KYC (Know Your Customer) and AML (Anti-Money Laundering) legal requirements

3.3 Communication & Customer Support

  • Sending important account notifications — such as deposit confirmations, withdrawal approvals, and security alerts
  • Responding to enquiries and complaints you submit to our support team
  • Sending information about KenzoToto promotions, bonuses, and special offers (you may unsubscribe at any time)

3.4 Platform Improvements

  • Analysing usage patterns to improve the platform's interface and user experience
  • Understanding which products and features are most popular among Malaysian players
  • Detecting and resolving technical issues within the platform

3.5 Responsible Gaming

Your betting activity data is used by KenzoToto's systems to detect patterns that may indicate problem gambling behaviour. This forms part of our responsible gaming commitment — the data is used to protect you, not for marketing purposes.

Sharing Data with Third Parties

KenzoToto does not sell, rent, or transfer players' personal data to third parties for marketing or commercial purposes. However, under strictly limited and necessary circumstances, we may share data with the following parties:

4.1 Trusted Service Providers

KenzoToto works with third-party service providers who help us run our platform operations. These include:

  • Payment service providers such as FPX, Touch 'n Go, GrabPay, DuitNow, ShopeePay, and Boost — to process your financial transactions
  • Casino and sports game software providers — who require minimal session data for technical functionality
  • Identity verification service providers — to meet KYC requirements as mandated by law
  • IT infrastructure and cybersecurity service providers who assist us in keeping the platform secure and stable

All third-party providers are bound by strict confidentiality agreements and are only permitted to use shared data for the specified purposes.

4.2 Legal Requirements

KenzoToto may be required to disclose users' personal data when legally obligated to do so under Malaysian law — including upon valid requests from judicial authorities, law enforcement agencies, or relevant regulatory bodies. We will always endeavour to notify affected users of such disclosures unless doing so is prohibited by law or court order.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of KenzoToto's assets, user data may be transferred as part of that process. In such circumstances, the receiving entity will be bound by this Privacy Policy or a privacy policy offering equivalent or greater protection.

Our commitment: KenzoToto never shares players' personal data with advertisers, third-party marketing companies, or any entity without a direct relationship to the provision of KenzoToto's services to you.

Data Security

KenzoToto implements a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. This is not merely a statement — it represents a genuine investment we make to maintain the trust of our players.

5.1 Technical Security Measures

  • 256-bit SSL Encryption: All communications between your device and KenzoToto's servers are encrypted to the same standard used by leading Malaysian financial institutions
  • Data-at-rest encryption: Sensitive data stored in our databases is encrypted even when at rest
  • Two-factor authentication (2FA): Available and strongly recommended for all user accounts to prevent unauthorised access
  • Continuous security monitoring: Our systems are monitored around the clock to detect any suspicious activity or attempted intrusions
  • Regular penetration testing: Our security infrastructure is regularly tested by independent security experts

5.2 Access Control Measures

Access to user personal data within KenzoToto's internal systems is restricted on a strict need-to-know basis. Staff who do not require access to specific data to perform their duties will not be granted it. All internal access to sensitive data is logged and monitored.

5.3 Incident Response

KenzoToto has a security incident response procedure that has been developed and tested. In the event of a data breach that could affect users, we will take immediate action to contain the damage, investigate the cause, and notify affected users and relevant authorities within the timeframe required by law.

Shared responsibility: While KenzoToto implements robust security measures, the safety of your account also depends on your own actions. Please use a strong password, enable 2FA, and never share your login credentials with anyone.

Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the KenzoToto website. They allow our platform to recognise your device on subsequent visits, delivering a more personalised and seamless experience.

6.2 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information on how users interact with the platform to help us identify and resolve technical issues, and improve overall performance.
  • Functional Cookies: Saves your preferences such as language and display settings so you don't have to reconfigure them each time you visit.
  • Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

6.3 Managing Cookies

You can manage or delete cookies through your web browser settings. However, blocking all cookies may affect certain features of the KenzoToto platform and your overall user experience. We recommend allowing at least essential cookies to ensure the platform functions correctly.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you hold certain rights regarding your personal data held by KenzoToto. We fully respect and support the exercise of these rights.

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 21 days of receiving your request.

Right to Rectification

If your personal data in our systems is inaccurate or out of date, you have the right to request a correction. You can update most basic information directly within your account profile settings.

Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data. However, this right is subject to our legal obligations — for example, we may be required to retain certain records for KYC and AML compliance purposes even after an account is closed.

Right to Object to Processing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may unsubscribe from KenzoToto marketing communications by using the "unsubscribe" link in our emails or by contacting our support team.

Right to Data Portability

You have the right to request a copy of certain personal data you have provided to us in a machine-readable format, so that you may transfer it to another service provider if you wish.

To exercise any of the rights above, please contact KenzoToto's customer support team via Live Chat on the platform or email support@kenzototo.my. We will endeavour to process your request within a reasonable timeframe and in accordance with applicable legal requirements.

Data Retention Period

KenzoToto retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, subject to applicable legal requirements.

8.1 Active Account Data

For as long as your account remains active with KenzoToto, we retain all personal data and activity records necessary to provide our services to you. This includes your account profile, transaction history, betting records, and communication information.

8.2 Data After Account Closure

After your account is closed — whether at your request or for other reasons — KenzoToto may retain certain data for the period required under Malaysian law. This includes:

  • Financial transaction records — retained for a minimum of 7 years for tax compliance and financial regulatory purposes
  • Identity verification (KYC) records — retained for a minimum of 5 years after account closure for AML compliance purposes
  • Customer support communication logs — retained for a minimum of 3 years for dispute resolution purposes

Data that is no longer required for any legitimate purpose will be deleted or anonymised once the relevant retention period has expired.

Links to Third-Party Sites

The KenzoToto platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies only to information collected by KenzoToto itself — we are not responsible for the privacy practices of any third-party websites you may visit through those links.

We encourage you to read and understand the privacy policy of any third-party website before providing them with any personal information. KenzoToto has no control over, and accepts no responsibility for, the content, privacy policies, or practices of such third parties.

Changes to This Privacy Policy

KenzoToto may update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Whenever we make significant changes, we will take reasonable steps to notify you — including displaying a notice on the platform's main page, sending a notification email to your registered email address, or via in-account notifications.

The "Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. We encourage you to check this page periodically to stay informed about how we protect your data.

Current version: This Privacy Policy is the version in effect as of 1 January 2026 and supersedes all previous versions.

Contact Us About Your Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to reach out. Our team is ready to assist and will respond to all privacy-related enquiries as a top priority.

Live Chat
Available 24/7 within the KenzoToto platform
Privacy Email
support@kenzototo.my

Our Commitment

How KenzoToto Protects Your Privacy

Six concrete ways that demonstrate KenzoToto's genuine commitment to the privacy of Malaysian players

Bank-Grade Encryption

Every bit of data transmitted between your device and KenzoToto's servers is protected with 256-bit SSL encryption — the same standard used by Maybank and CIMB to secure your online banking transactions.

Data Minimisation Principle

KenzoToto only collects data that is genuinely necessary to provide our services to you. We do not gather excessive or irrelevant information just for the sake of it — every piece of data we retain has a clear and defined purpose.

Restricted Staff Access

Players' personal data is accessible only to KenzoToto staff who have a legitimate business need to do so. All internal access is logged, monitored, and regularly audited.

Data Stored Securely

KenzoToto players' personal data is stored within secure server infrastructure protected by strict physical and digital access controls. Automated backup systems ensure your data is never lost due to technical failures.

Malaysia PDPA Compliance

KenzoToto's Privacy Policy and data handling practices are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We regularly review our practices to ensure ongoing compliance.

Full Transparency

We believe you have the right to know exactly how your data is used. This Privacy Policy is written in clear, straightforward language — free of confusing legal jargon — so that every Malaysian player can genuinely understand it.

FAQ: KenzoToto Privacy Policy

No, absolutely not. KenzoToto never sells, rents, or transfers players' personal data to third parties for marketing or commercial purposes. Your data is only shared with third parties in very limited circumstances — with service providers who help us operate the platform (such as payment providers Touch 'n Go, GrabPay, and DuitNow), or when required by Malaysian law. All third parties we work with are bound by strict confidentiality agreements.

You may submit a data access request by contacting KenzoToto's customer support team via Live Chat within the platform, or by emailing support@kenzototo.my with the subject line "Data Access Request". Please include your registered phone number and the required identity verification details. We will process your request within 21 business days and provide your data in an easily readable format.

When creating a new account, KenzoToto collects your full name, Malaysian phone number, email address, and date of birth (for age verification). You will also be asked to link a payment method such as Touch 'n Go, GrabPay, or DuitNow to your account. Depending on your activity level and transaction volume, we may request additional identity verification documents such as a copy of your MyKad for KYC purposes. We only collect information that is strictly necessary to provide our services to you.

You have the right to request deletion of your personal data upon closing your KenzoToto account. However, this right is subject to our legal obligations. For example, Malaysian law requires us to retain financial transaction records for a minimum of 7 years and KYC records for a minimum of 5 years after account closure — these are KYC and AML compliance requirements that cannot be waived. Data not subject to legal retention requirements will be deleted or anonymised within the stipulated timeframes.

Identity verification documents such as MyKad copies submitted to KenzoToto are stored in an encrypted system with strictly enforced access controls. Only staff specifically authorised for KYC verification purposes may access these documents. All access is logged and audited. These documents are not used for any purpose other than legally required identity verification, and are not shared with any third party unless required by the relevant authorities.
 Related Documents
Trust & Security
SSL 256
PDPA MY
No Data Sale
Responsible Gaming

This platform is intended for users aged 21 and above. Gambling can be addictive. Set your limits and play within your means. Visit Responsible Gaming for more information.

Your Data Is Safe at KenzoToto — Register with Confidence

Your privacy is our priority. Register for free today and enjoy a safe, transparent Sports Betting and casino experience built specifically for Malaysian players.

Data protected with SSL 256-bit Min deposit RM 10 24/7 BM Support
Bahasa Melayu