lato99 Data Protection Commitment

Privacy Policy lato99Data Protection & Your Security

Lato99 takes every member's privacy seriously. This document explains in detail how we collect, use, store, and protect your personal information in accordance with strict international security standards.

Updated: 1 January 2026
256-bit SSL Encryption
All data is fully protected
Full KYC Compliance
Your identity is verified & secure
No Data Sales
Your data is not sold to third parties
International Standards
GDPR & PDPA Compliant

Why Your Privacy Top Priority lato99?

Lato99 has built a multi-layered data protection system specifically designed to ensure the security and confidentiality of every member's information in Malaysia.

Military-Grade Encryption

All data transmitted between your device and lato99's servers is protected by 256-bit SSL encryption — the same standard used by banking institutions and governments worldwide. Your information cannot be intercepted or read by any third party.

Secure & Isolated Servers

Lato99 members' personal data is stored in a secure server environment, isolated from public access, and monitored around the clock by our IT security team. Automatic backup systems ensure your data is never lost, even in the event of a technical disruption.

No Unauthorised Data Sharing

Lato99 does not sell, lease, or disclose your personal information to any third party for marketing purposes. Data sharing occurs only when required by law or to process your transactions with trusted payment partners.

KYC Identity Verification

Lato99's KYC (Know Your Customer) process is designed to protect you from identity fraud and unauthorised account use. All uploaded documents are stored in encrypted format and accessible only by authorised compliance staff.

Transparent Cookie Controls

Lato99 uses cookies solely to enhance the user experience, analyse usage patterns, and maintain session security. You can manage your cookie preferences at any time through your browser settings without affecting the platform's core functionality.

PDPA & GDPR Compliance

Lato99's Privacy Policy is designed in compliance with Malaysia's Personal Data Protection Act (PDPA 2010) and the European General Data Protection Regulation (GDPR). This means you have clear legal rights over your personal information on our platform.

Full Privacy Policy lato99

This document explains in detail how lato99 manages your personal information. By using our platform, you agree to the privacy practices described here.

1 Personal Information We Collect

Lato99 collects your personal information through various channels as you interact with our platform. This information is collected directly from you, automatically through your use of the platform, or from trusted third parties for verification purposes.

Information you provide directly:

  • Full name as it appears on your official identification document.
  • Active email address used for account communications.
  • Registered Malaysian mobile phone number.
  • Date of birth for age verification purposes (must be 18 years of age or older).
  • Current residential address for compliance purposes.
  • Bank account or digital wallet information for processing deposits and withdrawals.
  • Identity verification documents such as a copy of your MyKad or passport during the KYC process.

Information collected automatically:

  • Your IP address and device network information.
  • Browser type, operating system, and device information.
  • Session log data including login times, gaming activity, and transaction records.
  • Approximate geolocation data based on your IP address.
  • Cookie and session token information.
lato99 does not directly collect credit or debit card information. All payments are processed through licensed third-party payment gateways that are fully PCI-DSS compliant.

2 How We Use Your Information

All personal information collected by lato99 is used solely for legitimate purposes directly related to delivering our platform services to you. We do not use your data beyond the scope stated here without your explicit consent.

Purpose of Use Data Type Legal Basis
Account management & verification Name, email, password Contract performance
Deposit & withdrawal processing Banking and transaction information Contract performance
Identity verification (KYC) MyKad, passport, selfie Legal obligation
Fraud prevention & security IP, activity logs, device Legitimate interests
Customer service communications Email, phone number Contract performance
Platform improvement analytics Anonymous usage data Legitimate interests
Regulatory compliance All related records Legal obligation
lato99 does not use your data for third-party advertising or sell it to data brokers. Any marketing communications we send are based on your consent given at registration and can be withdrawn at any time.

3 Information Sharing with Third Parties

Lato99 understands that your trust is our most valuable asset. We therefore limit the sharing of your personal information to situations where it is genuinely necessary, and always with appropriate protections in place.

We share your data only with the following categories of parties:

  • Licensed payment providers: Required transaction information is shared with payment processing partners such as FPX, Touch 'n Go eWallet, and GrabPay to complete your financial transactions.
  • Technical service providers: Hosting, analytics, and security companies that help us operate the lato99 platform and have signed strict data protection agreements.
  • Regulatory bodies & legal authorities: When required by court order, law enforcement request, or the licensing compliance obligations of our gambling licence.
  • Identity verification service providers: A licensed third-party KYC verification platform used to authenticate your identity documents and protect your account security.
Absolute guarantee: lato99 has never and will never sell your personal information to advertisers, data brokers, or any commercial entity unrelated to the provision of our services to you.

4 Data Security & Information Protection

Lato99 continuously invests in advanced cybersecurity infrastructure to keep all members' personal data safe from cyber threats, unauthorised access, and data breaches.

Technical security measures we implement:

  • 256-bit SSL/TLS encryption for all data communications between your browser/app and lato99 servers.
  • Member passwords are stored using an irreversible one-way hashing algorithm — even lato99 staff cannot view your password.
  • 24/7 security monitoring with an active intrusion detection system (IDS).
  • Regular security audits by independent, certified third-party firms.
  • Two-factor authentication (2FA) is available for all member accounts as an additional layer of protection.
  • Network segmentation and role-based access controls ensure that only authorised personnel can access relevant data.
  • Documented incident response procedures to ensure any data breach is addressed promptly and members are notified in accordance with legal requirements.
While lato99 takes all reasonable steps to protect your data, no security system in the world is 100% breach-proof. You also play an important role — ensure your account password is strong, unique, and never shared with anyone.

5 Cookies & Tracking Technologies

Lato99 uses cookies and similar tracking technologies to deliver a better platform experience, maintain session security, and understand how users interact with our platform.

Types of cookies used by lato99:

  • Essential Cookies — Required for core platform functions such as login verification, session management, and transaction security. These cookies cannot be disabled.
  • Performance Cookies — Collects information about how you use the platform (pages visited, time spent) to help us improve the user experience. This data is aggregated and anonymised.
  • Functional Cookies — Remembers your preferences such as language, display settings, and personal preferences so you do not need to reconfigure them each time you log in.

You can manage and delete cookies through your web browser settings at any time. However, disabling mandatory cookies may affect certain functions of the lato99 platform. For more information on managing cookies, please refer to your browser's documentation.

lato99 does not use third-party cookies for retargeting advertising or to build an ad profile based on your browsing behaviour outside our platform.

6 Your Rights Over Personal Data

As a lato99 member, you have legally protected rights over your personal information. lato99 is committed to fully respecting and facilitating the exercise of these rights.

Your Rights As a lato99 Member

Lato99 fully recognises and respects your personal data protection rights under the applicable laws of Malaysia.

01
Right of Access

You have the right to request a copy of all personal information lato99 holds about you at any time. We will provide this information within 30 business days.

02
Right to Rectification

If any of your personal information is inaccurate or outdated, you have the right to request that we correct or update it promptly at no charge.

03
Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements. Such requests will be processed in accordance with Malaysia's PDPA guidelines.

04
Right to Object

You have the right to object to the processing of your personal data for specific purposes such as direct marketing. Your objection will be processed within 14 days.

05
Right to Data Portability

You may request your personal data in a machine-readable format (JSON or CSV) for transfer to another service provider of your choice.

06
Right to Restrict Processing

In certain situations, you may request lato99 to restrict the processing of your data while a dispute or investigation is being conducted by the relevant authority.

To exercise any of the above rights, contact the lato99 data protection team via live chat within the platform. We will respond within 5 business days.

7 Data Retention Period

Lato99 retains your personal information only for as long as necessary to fulfil the original purpose of collection, or as required by applicable laws and regulations.

  • Active account data: Retained for as long as your account remains active on the lato99 platform.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Income Tax Act requirements and anti-money laundering (AML) compliance.
  • KYC Documents: Retained for 5 to 7 years after account closure in accordance with regulatory guidelines.
  • Security & activity logs: Retained for 12 months for security investigation and fraud prevention purposes.
  • Marketing data & preferences: Retained until you withdraw consent or close your account.

Once the retention period expires and no ongoing legal obligation applies, your data will be securely deleted or anonymised so it can no longer be linked to you.

Data deletion is carried out using technical methods that meet security standards, ensuring the data cannot be recovered by any party.

8 Cross-Border Data Transfers

As an internationally operating platform, lato99 may transfer some of your personal data to other countries for processing or storage by our technical service partners.

When such transfers occur, lato99 ensures protection equivalent to Malaysia's standards is upheld through:

  • Legally binding data transfer agreements with all data recipients outside Malaysia.
  • Use of standard contractual clauses recognised by international regulatory bodies.
  • Transfers are made only to jurisdictions with adequate data protection laws or with special regulatory approval.
  • A data protection impact assessment (DPIA) is conducted before any new transfer is approved.
You may request further information about the specific safeguards applied to data transfers to particular countries by contacting the lato99 data protection team.

9 Children's Privacy & Minor User Protection

Lato99 is an online gambling platform strictly restricted to individuals aged 18 and above only. We take the responsibility of child protection very seriously.

  • Lato99 does not intentionally collect, process, or store any personal information from individuals under the age of 18.
  • Our registration process requires date-of-birth verification, and our KYC process confirms age through official documents.
  • If we discover that information belonging to a minor has been collected inadvertently, the account will be suspended immediately and all associated data securely deleted.
  • Parents or guardians concerned about their minor child's use of the platform are encouraged to contact our support team immediately.
If you are aware of a minor using the lato99 platform, please contact our support team via live chat immediately. We will take prompt action within 24 hours.

10 Changes to This Privacy Policy

Lato99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform enhancements.

When significant changes are made to this Privacy Policy, we will notify you via:

  • Clear in-platform notifications when you log in to your lato99 account.
  • A notification email will be sent to your registered address for changes that materially affect your rights.
  • Update the "Last Updated" date at the top of this page.

Continued use of the lato99 platform after changes take effect will be considered acceptance of the updated terms. We recommend reviewing this page regularly, at least once every three months.

The version of the Privacy Policy published on this page at any given time is the version currently in force. Previous versions may be requested from our support team for your reference.

11 Contact the lato99 Data Protection Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how lato99 handles your personal information, we encourage you to contact us directly.

lato99 Data Protection Officer (DPO) can be reached via:

  • Email: [email protected]
  • Live Chat: Available 24/7 within the lato99 platform for immediate assistance.
  • Response Time: We are committed to responding to all privacy-related inquiries within 5 business days.

If you believe lato99 has failed to address your privacy concerns satisfactorily, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory authority in your jurisdiction.

lato99 values every privacy-related feedback. Your feedback helps us improve our data protection practices and deliver better service to all members.

Frequently Asked Questions About lato99 Privacy

Answers to the most frequently asked questions by lato99 Malaysia members regarding data protection and account privacy.

Absolutely not. lato99 does not share your personal information with any other gambling platform or industry competitor. Your data is exclusive to the lato99 platform and is only shared with technical service partners directly involved in our platform's operations — such as payment processors and identity verification providers — and only under strictly enforced protections.

lato99 does not directly store your credit or debit card details. All financial transactions are processed through licensed third-party payment gateways that are fully compliant with PCI-DSS (Payment Card Industry Data Security Standard). Your bank account information retained for withdrawal purposes is encrypted using AES-256 encryption and is accessible only by our payment processing systems automatically.

Yes, you may submit a data deletion request to the lato99 data protection team. Please note, however, that certain data may need to be retained by lato99 to fulfil legal obligations — for example, financial transaction records must be kept for a minimum of 7 years under Malaysian law. Data not subject to any legal retention requirement will be deleted within 30 business days of the request being received.

When your account is closed — whether at your request or by lato99's decision — your personal data will be moved to a secure archived status and will no longer be accessible for operational purposes. This data will be retained for the minimum storage period required by law (typically 5–7 years for financial records), after which it will be permanently and securely deleted.

You can stop receiving promotional emails from lato99 easily in two ways: click the "Unsubscribe" link found at the bottom of every promotional email we send, or log in to your account and update your communication preferences in your account settings. Please note that important transactional emails (such as deposit confirmations and account security notifications) cannot be opted out of, as they are essential for your account security.

If you suspect your account has been compromised or accessed without authorization, take the following steps immediately: change your account password right away, enable two-factor authentication (2FA) if you have not already done so, and contact the lato99 security team via 24/7 live chat. Our team will temporarily freeze your account, investigate the activity logs, and help you regain full control of your account as quickly as possible.
Join lato99 Today

Your Data Is Safe. Your Game No Limits.

Now that you understand lato99's commitment to your privacy and data security, register a free account today and enjoy over 2,000 games of your choice with complete peace of mind.

256-bit SSL Encryption No data sales Malaysia PDPA Compliance 24/7 Support
Bahasa Melayu