End-to-End Encryption
All data transmitted between your device and papitogel's servers is protected by 256-bit SSL/TLS encryption, the same standard used by major banks and financial institutions in Malaysia.
No Third-Party Data Sales
Papitogel does not sell, rent, or trade your personal data to any external organisation for marketing or commercial purposes. Your information stays within our platform ecosystem.
Your Data, Your Rights
You have the right to access, correct, and request deletion of your personal data. Submit a data request to our support team at any time — we aim to respond within 30 days.
Minimal Data Collection
We collect only the data that is necessary for delivering our services, meeting legal obligations, and protecting account security. We do not collect data speculatively or without a defined purpose.
KYC & Identity Protection
Identity verification documents submitted for KYC are processed securely, stored in encrypted form, and accessed only by authorised personnel for verification and fraud prevention purposes.
Breach Notification
In the unlikely event of a data breach affecting your personal information, papitogel will notify affected users as promptly as practicable and in accordance with applicable data protection obligations.
Your privacy is a priority at papitogel. This Policy governs all personal data collected and processed through our platform at https://papitogel.cam. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Introduction
This Privacy Policy ("Policy") describes how Papitogel ("we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "User", "Member") who visit or use the online gaming and sports betting services available at https://papitogel.cam (the "Platform").
Papitogel operates as an English-language digital entertainment platform serving the Malaysian market. Our services include online casino games, live dealer tables, sports betting (including EPL, Liga Super Malaysia, UFC, and other markets), and associated account management tools. In delivering these services, we necessarily process certain personal data about our users.
This Policy is intended to provide you with clear, transparent information about our data practices so that you can make informed decisions about your use of the Platform. We encourage you to read this Policy in full. If you have questions about any section, please contact our Data Protection team at [email protected].
This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, both of which form part of our overall user agreement. By continuing to use the Platform after changes to this Policy are posted, you accept the updated terms.
Definitions
For the purposes of this Privacy Policy:
- "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, payment details, and device identifiers.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, transmission, and deletion.
- "Data Controller" means papitogel, as the entity that determines the purposes and means of Processing your Personal Data.
- "Data Processor" means any third-party service provider that processes Personal Data on our behalf and under our instructions.
- "KYC Data" means identity verification documents submitted by a User as part of the Know Your Customer process, including national identification, passport, or equivalent documentation.
- "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and usage data.
- "Sensitive Data" means Personal Data that warrants enhanced protection, including financial account details, government-issued identification numbers, and any data relating to health, religion, or biometric characteristics.
Data We Collect
Papitogel collects Personal Data through a variety of channels in the course of providing our services. The categories of data we collect include the following:
3.1 Registration & Account Data
When you create an account with papitogel, we collect your full legal name, date of birth, email address, phone number, and chosen username. This data is required to establish your account identity and verify your eligibility to use the Platform.
3.2 Identity Verification (KYC) Data
To comply with legal obligations relating to anti-money laundering and age verification, we collect copies of your government-issued identification documents (such as your Malaysian MyKad, passport, or driver's licence), along with a selfie or liveness check where required. This data is processed exclusively for verification purposes.
3.3 Financial & Transaction Data
We collect data relating to your deposits, withdrawals, bet history, and game activity. Payment method data (such as your Touch 'n Go eWallet-linked phone number, DuitNow-registered account, Maybank or CIMB account identifier, or USDT wallet address) is collected to process financial transactions. We do not store full payment card numbers on our servers.
3.4 Technical & Device Data
We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, time zone, and session duration. This data is used for security monitoring, fraud detection, and improving platform performance.
3.5 Usage & Behavioural Data
We track how you interact with the Platform — including which pages you visit, which games you play, which sports markets you browse, and how frequently you log in. This data helps us personalise your experience and improve our service.
3.6 Communications Data
When you contact our support team via live chat or email, we retain records of those communications — including message content, timestamps, and the nature of your query — for quality assurance, training, and dispute resolution purposes.
How We Use Your Data
The following table summarises the primary purposes for which papitogel processes your Personal Data:
| Purpose | Description | Data Categories Used |
|---|---|---|
| Account Management | Creating and maintaining your member account, enabling login, and managing account settings. | Registration data, technical data |
| Identity Verification | Verifying your age (21+) and identity to comply with anti-money laundering and responsible gambling obligations. | KYC data, registration data |
| Transaction Processing | Processing MYR deposits and withdrawals via Touch 'n Go, DuitNow, FPX, CIMB, Maybank, and other payment channels. | Financial data, registration data |
| Fraud & Security | Detecting, investigating, and preventing fraudulent activity, account takeover, and money laundering. | Technical data, transaction data, usage data |
| Responsible Gambling | Monitoring gambling patterns to identify at-risk behaviour and apply responsible gambling interventions where necessary. | Usage data, transaction data |
| Customer Support | Responding to queries, resolving disputes, and providing technical assistance via live chat and email. | Communications data, account data |
| Platform Improvement | Analysing usage patterns to improve Platform features, game selection, and overall user experience. | Usage data, technical data |
| Legal Compliance | Meeting obligations under applicable data protection, anti-money laundering, and gaming regulations. | All categories as required |
| Marketing (Optional) | Sending promotional emails or notifications about bonuses and new games, only with your explicit consent. | Registration data, usage data |
Legal Basis for Processing
Papitogel processes your Personal Data on the following legal grounds:
- Contractual Necessity: Processing required to fulfil our obligations under the user agreement — including account creation, payment processing, and service delivery.
- Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering requirements, age verification obligations, and financial reporting duties.
- Legitimate Interests: Processing carried out in pursuit of papitogel's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests do not override your fundamental rights and freedoms.
- Consent: Where we rely on your consent — for example, for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Data Sharing & Third Parties
Papitogel does not sell your Personal Data to third parties. We may share your data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Payment Service Providers: Malaysian payment processors and banking partners (including networks supporting Touch 'n Go, DuitNow, FPX, Maybank, CIMB, Public Bank, and GrabPay) receive transactional data to facilitate deposits and withdrawals.
- Identity Verification Providers: Authorised KYC and fraud detection service providers process identity documents on our behalf for age and identity verification purposes.
- Game Studio Technology Partners: Game platform operators may receive anonymised session data for game performance monitoring. No personally identifiable information is shared with game studios beyond what is technically necessary to render the game.
- Cloud Infrastructure & Hosting Providers: Our cloud hosting and data storage providers operate under strict data processing agreements that prohibit any use of your data beyond the scope of providing services to papitogel.
- Legal and Regulatory Authorities: We may disclose Personal Data to law enforcement, financial regulators, or other government authorities where required by law, court order, or to protect papitogel's legal rights.
- Professional Advisors: Lawyers, auditors, and compliance consultants may access limited Personal Data under strict confidentiality obligations as necessary for legal, financial, or regulatory advisory services.
All third-party Data Processors engaged by papitogel are contractually bound to process your data only in accordance with our instructions and applicable data protection requirements. We do not permit third parties to use your data for their own independent purposes.
Cookies & Tracking Technologies
The papitogel Platform uses cookies and similar tracking technologies to operate certain features, maintain session continuity, and understand how the Platform is used. Cookies are small text files placed on your device when you visit the Platform.
7.1 Types of Cookies We Use
- Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, anti-CSRF tokens, and load balancing cookies. These cannot be disabled without impairing your ability to use the Platform.
- Functional Cookies: Remember your preferences such as language settings, display preferences, and recently visited game categories to personalise your experience.
- Analytics Cookies: Allow us to measure Platform traffic, identify popular pages, and understand user navigation patterns so we can improve service quality. Analytics data is aggregated and anonymised wherever possible.
- Security Cookies: Used to detect unusual activity, prevent account takeover attempts, and support our fraud detection systems.
7.2 Managing Cookies
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Browser-level cookie management instructions are available in the help documentation of major browsers including Chrome, Firefox, Safari, and Edge.
Data Retention
Papitogel retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:
- Active Account Data: Retained for the duration of your account with papitogel and for a minimum period of five (5) years following account closure, in accordance with anti-money laundering and financial record-keeping obligations.
- KYC Documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by applicable anti-money laundering regulations.
- Transaction Records: Retained for a minimum of seven (7) years for accounting, tax, and regulatory compliance purposes.
- Support Communications: Retained for up to three (3) years for dispute resolution and quality assurance purposes.
- Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of your original authorisation.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.
Data Security
Papitogel implements a comprehensive set of technical and organisational security measures to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit.
- Encryption at Rest: Sensitive Personal Data including KYC documents and financial details is encrypted when stored on our servers.
- Two-Factor Authentication (2FA): Available to all members and mandatory for administrative access to production systems.
- Access Controls: Personal Data is accessible only to personnel with a legitimate operational need, governed by role-based access control policies and audit logging.
- Regular Security Audits: Our Platform and infrastructure undergo periodic penetration testing and security reviews by qualified independent assessors.
- Fraud Detection Systems: Automated anomaly detection monitors account activity in real time for signs of unauthorised access or suspicious transactions.
While we take all reasonable steps to protect your data, no digital platform can guarantee absolute security. You play an important role in protecting your own account by using a strong, unique password and enabling two-factor authentication where available.
Your Rights
As a papitogel member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our Data Protection team at [email protected].
Right of Access
You may request a copy of the Personal Data we hold about you. We will respond within 30 days of a verified request.
Right to Rectification
If any Personal Data we hold is inaccurate or incomplete, you have the right to request correction. Contact support to update your account details.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary, subject to overriding legal retention obligations.
Right to Restrict Processing
You may request that we restrict Processing of your data in certain circumstances, such as while a dispute about accuracy is being resolved.
Right to Data Portability
You may request that we provide your Personal Data in a structured, machine-readable format for transfer to another service provider.
Right to Withdraw Consent
Where Processing is based on consent (e.g., marketing communications), you may withdraw consent at any time. This does not affect lawfulness of prior Processing.
Please note: Certain rights may be limited where papitogel has overriding legal obligations — for example, we cannot delete transaction records that are required to be retained under anti-money laundering regulations. We will always inform you of any such limitation when responding to your request.
International Data Transfers
In the course of operating the Platform, your Personal Data may be transferred to and processed in jurisdictions outside of Malaysia — for example, where our cloud infrastructure providers or game technology partners operate data centres. Such transfers occur only where appropriate safeguards are in place, including contractual data protection clauses requiring the recipient to maintain standards of protection equivalent to those applied by papitogel.
Papitogel takes all reasonable steps to ensure that international data transfers are conducted securely and in compliance with applicable data protection requirements. If you have questions about the safeguards in place for international transfers, please contact our Data Protection team.
Minors & Age Policy
The papitogel Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is conducted as part of the KYC process, and any account found to belong to a person under the minimum age will be immediately suspended and all associated data will be securely deleted in accordance with our data retention schedule.
Parents and guardians who believe that a minor may have registered an account with papitogel are encouraged to contact us immediately at [email protected] so that appropriate action can be taken without delay.
Amendments to This Policy
Papitogel reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. Material changes will be communicated to registered members via email notification and/or a prominent notice on the Platform at least seven (7) days before the change takes effect, where practicable.
The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of any amendment constitutes your acceptance of the revised Policy.
Contact Us
If you have any questions, requests, or concerns regarding this Privacy Policy or the way papitogel handles your Personal Data, please contact our Data Protection team through the following channels:
Data Protection Enquiries: [email protected]
Subject Line: Please include "Privacy Request" in your email subject for faster routing.
Live Chat: Available 24/7 via the Platform. Agents can raise data-related requests on your behalf.
Response Time: We aim to acknowledge all privacy-related requests within 3 business days and provide a substantive response within 30 calendar days.
Related Policies: Terms & Conditions | Responsible Gambling Policy
To exercise any of your data rights (access, rectification, erasure, portability, or withdrawal of consent), please email us at the address above with your registered account email and a clear description of the request. We may request additional verification to confirm your identity before processing sensitive data requests.