Privacy Policy manastoto – We Protect Your Data as We Would Our Own

Manastoto ("we", "Platform") values the privacy of every individual who uses our services. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the manastoto website and services.

This document is prepared in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary law governing the processing of personal data in commercial transactions in Malaysia. We operate in full compliance with PDPA requirements and regard the protection of your personal data as both a legal and moral obligation.

By using the manastoto platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, you are advised not to continue using our services.

Manastoto collects your personal information through several means — directly from you during registration and platform use, and automatically through tracking technologies. The following are the categories of data we collect:

Every piece of data we collect is used for clear and legitimate purposes. manastoto uses your personal data for the following:

• Account management – Creates and maintains your account, verifies your identity through the KYC process, and securely processes deposit and withdrawal transactions.
• Service delivery – Allows you to access games, process bets, calculate wins, and manage your account balance.
• Platform Security – Detects and prevents fraud, multiple account usage, money laundering activities, and other security threats.
• Legal compliance – Fulfills reporting and compliance requirements under PDPA and other applicable regulations.
• Service communications – Sends important notifications related to your account, security updates, and policy changes.
• Platform improvements – Analyzes aggregated usage patterns to improve the user experience and develop beneficial new features.
• Marketing communications – Sends relevant promotional offers and bonuses, subject to the communication preferences you set in your account.

Manastoto does not sell or trade your personal data. However, in the course of operating the platform, we share certain data with selected and trusted third parties under limited circumstances:

• Payment processors – Payment service providers such as banks and e-wallet operators receive the transaction information required to process your deposits and withdrawals.
• Game providers – Game software development companies such as Pragmatic Play, Evolution Gaming, and others receive the session information required to run games fairly.
• Infrastructure service providers – Hosting and CDN companies supporting the platform's technical operations are bound by strict data processing agreements.
• Statutory authorities – Manastoto will disclose information to the relevant authorities when required by law, court order, or legitimate criminal investigation.

All third parties we work with are bound by contractual obligations to protect your data to a standard no lower than our own.

Manastoto implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

Manastoto's data security infrastructure includes:

• Encryption of data in transit uses 256-bit TLS/SSL encryption for all communications between your device and our servers.
• Encryption of data at rest for all sensitive information, including financial data and KYC documents.
• Tiered access controls which ensures only authorized personnel can access specific data based on their job requirements.
• Continuous security monitoring 24 hours a day to detect and respond to threats in real time.
• Regular security audits by independent parties to identify and address any potential vulnerabilities.

Manastoto retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law.

• Active account data – Retained for as long as your account is active and for a reasonable period after account closure.
• Financial transaction records – Retained for a minimum of 7 years to comply with anti-money laundering and tax reporting legal requirements.
• KYC Documents – Retained for a minimum of 5 years after the business relationship is terminated.
• Technical and security logs – Retained for 12 months for security and dispute resolution purposes.
• Support communication records – Retained for 2 years from the date of last interaction.

Once the designated retention period has lapsed, your data will be securely deleted or anonymised in accordance with industry-standard procedures.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by manastoto:

• Right to access data – You may request a copy of the personal data we hold about you at any time.
• Right to correct data – If the data we hold is inaccurate or outdated, you have the right to request a correction.
• Right to object to processing – You may object to the processing of your data for direct marketing purposes.
• Right to withdraw consent – Where processing of your data is based on consent, you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the rights above, contact the manastoto support team via live chat within the platform or email [email protected]. We will respond within 30 days of receiving your request.

Manastoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential cookies – Required for core platform functions such as login, user sessions, and security. These cookies cannot be disabled.
• Performance cookies – Collects information on how visitors use the platform to help us improve service quality.
• Functional cookies – Remembers your preferences such as language, display settings, and game preferences for a more personalized experience.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the manastoto platform.

Manastoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The latest version of the Privacy Policy is always available on this page.

When we make significant changes to this Privacy Policy, we will notify you via an in-platform notification or by email to the address registered on your account. The "Updated" date at the top of this page will reflect the date of the latest amendment.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the manastoto privacy team is ready to assist.

You can reach us through the following channels:

• Live chat – Available 24/7 within the manastoto platform for immediate inquiries.
• Privacy email – [email protected] for formal inquiries related to personal data.
• Support email – [email protected] for general inquiries related to your account and services.

We are committed to responding to all privacy-related inquiries within 3 business days, and to formal requests under the PDPA within 30 calendar days.

For more information about your rights and how to exercise them, you may also refer to our FAQ page or read our Terms and Conditions manastoto.