Privacy Policy

1 Introduction

Teslatoto is an online gaming platform operating under the domain https://teslatoto.cam, offering casino games, live dealer tables, sports betting, and related entertainment services primarily to players in Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions across the country.

This Privacy Policy ("Policy") sets out how teslatoto ("we", "us", "the Platform") collects, processes, stores, shares, and protects the personal data of our users ("you", "the Player"). We are committed to handling personal information responsibly, transparently, and in accordance with applicable data protection principles.

We recognise that trust is the foundation of our relationship with every player. Your personal data belongs to you, and we take seriously our obligation to treat it with care, discretion, and integrity. This Policy is designed to give you a clear and comprehensive understanding of our data practices so that you can make informed decisions about your engagement with the teslatoto platform.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or can identify a natural person, directly or indirectly, including but not limited to name, identification number, email address, phone number, IP address, and payment details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is the teslatoto platform.
• "Data Processor" — a third-party entity that processes personal data on behalf of the Data Controller, such as payment processors or KYC verification services.
• "KYC" — Know Your Customer; the identity verification and due diligence process applied to all registered accounts, particularly in connection with financial transactions.
• "Cookies" — small text files placed on your device by the Platform to enable certain functionality, remember preferences, and collect usage analytics.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.

3 Data Controller

The teslatoto platform, operating under the domain https://teslatoto.cam, acts as the Data Controller in respect of all personal data collected and processed in connection with the provision of its services. As Data Controller, teslatoto is responsible for determining the purposes for which and the means by which personal data is processed.

Where teslatoto engages third-party service providers to assist in the delivery of its services — including payment processors such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank, or identity verification services — those entities act as Data Processors, processing personal data solely on our instructions and subject to appropriate contractual safeguards.

4 Data We Collect

Teslatoto collects personal data across the following categories, depending on the nature of your interaction with the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions, except where such information is voluntarily provided by the Player in the context of responsible gambling support.

5 How We Collect Personal Data

Teslatoto collects personal data through the following channels and methods:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with any feature of the Platform that requires input of personal information.
• Automatically: Through cookies, server logs, and similar tracking technologies when you access and use the Platform. This includes IP addresses, device identifiers, and session activity data collected passively as you navigate the site.
• From third-party service providers: Where we engage KYC verification services, fraud detection systems, or payment processors to verify your identity or process transactions, those providers may share data with us as part of their service delivery.
• From public sources: In the context of AML compliance or fraud investigation, we may cross-reference certain information against publicly available records or databases.

6 Purposes of Processing & Legal Basis

We process your personal data only for specific, legitimate purposes. The table below outlines the primary purposes for which teslatoto processes personal data and the corresponding legal basis for each:

7 Data Sharing & Disclosure

Teslatoto does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: Where necessary to process your deposit or withdrawal, we share relevant financial data with our payment processing partners, including FPX operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency settlement services. Each processor is bound by their own privacy obligations and applicable financial regulations.
• KYC and Identity Verification Providers: We engage accredited third-party KYC service providers to verify identity documents and perform due diligence checks on accounts. These providers process personal data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• Fraud Detection and AML Services: Data may be shared with specialist fraud detection and anti-money laundering platforms in connection with transaction monitoring and risk assessment activities.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent authorities, courts, or regulators where required by law, court order, regulatory direction, or in connection with the investigation of suspected criminal activity.
• Professional Advisers: In limited circumstances, such as responding to a legal claim, we may share relevant data with our legal or auditing advisers on a strictly confidential basis.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the Platform's business, player data may be transferred as part of the transaction, subject to equivalent privacy protections being maintained by the acquiring entity.

8 Cookies & Tracking Technologies

Teslatoto uses cookies and similar technologies to ensure the Platform operates correctly, remembers your session state, and improves your overall experience. We categorise our cookie use as follows:

• Strictly Necessary Cookies: These are essential for the Platform to function. They enable secure login sessions, maintain your account state during a game, and support payment flow continuity. These cookies cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: These collect aggregated, anonymised data on how players use the Platform — which pages are visited most frequently, how long sessions last, and where users experience friction. This data is used to improve the product. No individual player is identified by these cookies.
• Functional Cookies: These remember your language preference, display settings, and other personalisation choices to improve your experience on return visits.
• Session Security Cookies: Short-lived cookies used to protect against cross-site request forgery (CSRF) and other common web security threats.

Teslatoto does not use third-party advertising or retargeting cookies. We do not participate in behavioural advertising networks or audience profiling schemes. You may manage your cookie preferences through your browser settings, although disabling strictly necessary cookies will impair your ability to use the Platform.

9 Data Retention

Teslatoto retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or regulation.

• Active Accounts: Personal data is retained throughout the lifetime of an active account. We review inactive accounts after twelve (12) consecutive months and apply applicable dormancy procedures.
• Closed Accounts: Following account closure, transaction records, KYC documentation, and related financial data are retained for a minimum of five (5) years in compliance with standard AML and financial record-keeping obligations applicable to online gaming operators.
• Marketing Data: Where you have consented to receive marketing communications, your contact and preference data for that purpose is retained until you withdraw consent or opt out.
• Support Interaction Records: Live chat transcripts and email correspondence relating to support queries are retained for up to three (3) years from the date of the interaction.
• Technical and Log Data: Server logs and technical access records are retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised in accordance with our internal data management procedures.

10 Data Security

Teslatoto implements a comprehensive set of technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including payment details and identity documents, is encrypted at rest within our secure infrastructure.
• Access Controls: Personal data is accessible only to authorised personnel who require it for specific, legitimate operational purposes. Access is controlled through role-based permissions and multi-factor authentication requirements.
• Penetration Testing: Our Platform undergoes periodic security testing and vulnerability assessments conducted by independent security professionals to identify and remediate potential weaknesses.
• Incident Response: We maintain a documented security incident response procedure. In the event of a data breach that poses a risk to individuals, we will notify affected players and relevant authorities within the timeframes required by applicable law.

While we take all reasonable and appropriate measures to protect your data, no internet transmission or electronic storage system is completely immune to risk. You should ensure that your login credentials are kept confidential and not shared with any third party.

11 Your Rights as a Data Subject

Subject to applicable law, you hold the following rights in respect of your personal data held by teslatoto. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond within a reasonable timeframe, typically within 30 days.

Please note that certain rights are subject to exceptions, particularly where processing is required for legal compliance, fraud prevention, or the performance of a contract. We will inform you of any applicable exceptions when responding to your request.

12 International Data Transfers

In providing its services, teslatoto may transfer personal data to servers or service providers located outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to maintain the level of protection described in this Policy.

These safeguards may include contractual clauses with data processors requiring them to maintain equivalent data protection standards, or reliance on recognised data transfer frameworks applicable to the jurisdictions involved. Players based in Malaysia retain their full rights under this Policy regardless of where data is processed.

13 Children & Minors

The teslatoto platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.

If we discover or have reasonable grounds to suspect that an account holder is under 21, the account will be immediately suspended. Any personal data collected in relation to an underage account will be securely deleted following the completion of the investigation, except to the extent that retention is required by law or for the purposes of the investigation itself.

14 Marketing Communications

Where you have provided consent or where permitted by applicable law in the context of an existing customer relationship, teslatoto may send you promotional and marketing communications, including information about new games, promotions, bonuses, and VIP programme updates.

You may withdraw consent for marketing communications or opt out at any time by:

• Clicking the unsubscribe link included in any marketing email sent by the Platform.
• Updating your communication preferences within your account settings.
• Contacting our support team via live chat or at [email protected] and requesting removal from marketing lists.

Opting out of marketing communications does not affect your ability to use the Platform or receive essential transactional communications related to your account, such as deposit confirmations, withdrawal notifications, or security alerts.

15 Amendments to This Privacy Policy

Teslatoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the evolution of our services. Material changes — those that significantly affect how your personal data is used or your rights — will be communicated via email to your registered address and/or through a prominent notice on the Platform prior to the changes taking effect.

The effective date of the current version of this Policy is displayed at the top of this page. We encourage you to review this Policy periodically. Continued use of the Platform following the publication of a revised Policy constitutes acceptance of the updated terms.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please do not hesitate to contact us. Our team is available 24 hours a day, 7 days a week, and is committed to addressing all privacy-related enquiries promptly and thoroughly.

For issues related to responsible gambling, self-exclusion, or account closure, please visit our Responsible Gambling page or contact us directly.