How lancartoto collects, uses, stores, and protects your personal data — written in plain English for Malaysian players.
Six core commitments that define how lancartoto handles your personal data.
All personal data transmitted to and from lancartoto is protected by 256-bit SSL encryption. Data at rest is stored in encrypted form on access-controlled servers.
Lancartoto does not sell, rent, or trade your personal information with third-party marketing companies. Your data is yours and is used only for the purposes stated in this Policy.
We collect only the data we genuinely need — for account management, KYC verification, payment processing, fraud prevention, and service improvement.
You have the right to access, correct, port, and request deletion of your personal data at any time. Details of how to exercise these rights are in Section 10of this Policy.
Payment data processed via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and other supported Malaysian channels is handled by PCI-DS compliant payment processors.
Marketing communications are entirely optional. You may withdraw consent for promotional emails or SMS at any time through your Account settings or by contacting support.
Lancartoto ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of every person who accesses and uses the lancartoto online gaming platform athttps://lancartoto.cam ("Platform") and any associated services. This Privacy Policy ("Policy") explains how lancartoto collects, uses, stores, discloses, and otherwise processes your personal data in connection with your use of the Platform.
This Policy applies to all registered Players, prospective users, and visitors to the Platform, regardless of the device or location from which the Platform is accessed. It covers personal data collected through the Platform's website, any associated mobile-optimised interface, live chat, email correspondence, and any other channel through which lancartoto and its users interact.
This Policy should be read alongside our Terms and Conditions, which govern the contractual relationship between you and lancartoto, and our Responsible Gambling Policy.
ℹ️ Note: By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
The following definitions apply throughout this Policy:
Lancartoto collects personal data that is necessary and proportionate to the services we provide. The categories of data we collect are set out below.
When you create an Account on lancartoto, we collect:
To comply with our regulatory obligations, we collect:
ℹ️ Principle of Minimisation: Lancartoto collects only the personal data that is strictly necessary for the specific purpose for which it is collected. We do not collect sensitive categories of personal data (such as racial or ethnic origin, religious beliefs, or health data) beyond what is required by our regulatory compliance obligations.
Lancartoto collects personal data through the following channels:
The table below sets out the primary purposes for which lancartoto processes your personal data and the categories of data involved in each purpose.
| Processing Purpose | Data Categories Used | Mandatory? |
|---|---|---|
| Account registration & management | Registration, technical data | Yes |
| Identity verification (KYC) | KYC data, registration data | Yes (before first withdrawal) |
| Payment processing (deposits & withdrawals in MYR) | Financial data, registration data | Yes |
| Fraud prevention & anti-money laundering (AML) | All categories | Yes (legal obligation) |
| Regulatory compliance & reporting | KYC, financial, gameplay data | Yes (legal obligation) |
| Customer support provision | Registration, communications, financial data | Yes |
| Responsible gambling monitoring & intervention | Gameplay, financial, communications data | Yes |
| Platform security & abuse prevention | Technical, gameplay data | Yes |
| Service improvement & analytics | Technical, gameplay data (anonymised) | No (opt-out available) |
| Marketing communications (with consent) | Registration data, preferences | No (consent-based, fully optional) |
Lancartoto processes your personal data on the following legal bases, consistent with applicable data protection frameworks:
Lancartoto does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We share personal data with third parties only in the following limited and necessary circumstances:
To process deposits and withdrawals in MYR and facilitate transactions via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks, we share necessary transaction and identity data with our contracted payment processing partners. These processors operate under strict data processing agreements and are prohibited from using your data for any purpose other than transaction processing.
KYC verification is conducted with the assistance of specialist third-party identity verification service providers. Your identity documents and selfie photographs are shared with these providers solely for the purpose of verifying your identity. These providers are contractually bound to maintain the confidentiality and security of all documents submitted.
Lancartoto may be required to disclose personal data to regulatory bodies, law enforcement agencies, or government authorities where such disclosure is required by applicable law, court order, or regulatory direction. In such cases, we will disclose only the minimum data necessary to comply with the legal requirement.
Lancartoto works with technology partners — including game software providers, server hosting providers, and analytics platforms — who may process limited technical data in the course of delivering their contracted services. All such providers operate under data processing agreements aligned with the requirements of this Policy.
🔒 Strict Limitation: In all cases of third-party data sharing, lancartoto applies the principle of data minimisation — sharing only what is strictly necessary for the specific purpose — and requires all recipients to maintain appropriate technical and organisational security measures.
Lancartoto retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any legal obligations to retain data for longer periods.
When retention periods expire, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.
Lancartoto implements and maintains a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While lancartoto takes all reasonable measures to protect your personal data, no method of electronic transmission or storage is completely infallible. You play a critical role in your own security by maintaining a strong, unique password and enabling two-factor authentication on your Account.
Subject to applicable data protection law, you have the following rights in relation to your personal data held by lancartoto. Requests to exercise any of these rights may be submitted to [email protected].
Request a copy of all personal data we hold about you. We will respond within 30 days of a verified request.
Request correction of any inaccurate or incomplete personal data held your Account record.
Request deletion of your personal data where there is no longer a legal basis for its retention, subject to our regulatory obligations.
Request that we limit the processing of your data in certain circumstances while a rectification or objection request is being assessed.
Receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
Object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.
Withdraw consent for marketing communications at any time, without affecting the lawfulness of prior processing.
Lodge a complaint with the relevant data protection supervisory authority if you believe your rights have not been respected.
⏱ Response Timeline: Lancartoto will acknowledge all data rights requests within 5 business days and endeavour to fulfil verified requests within 30 calendar days. For complex requests, we may extend this period by a further 30 days with notice.
The lancartoto Platform uses cookies and similar technologies to ensure the Platform functions correctly, to remember your preferences, and to understand how the Platform is used. The table below categorises the types of cookies we use.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, payment flow continuity | No — required for Platform functionality |
| Functional | Language preferences, display settings, responsible gambling tool state | Yes — via browser settings; some features may be affected |
| Analytics | Aggregated usage statistics to improve Platform performance and user experience | Yes — via cookie consent settings |
| Marketing | Understanding user engagement with promotional content; frequency capping of promotional messages | Yes — via cookie consent settings or Account preferences |
You can manage cookie preferences through your web browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform, including your ability to log in and complete financial transactions. For instructions on managing cookies in your browser (Chrome, Firefox, Safari, Edge), refer to the relevant browser's help documentation.
The lancartoto Platform is strictly intended for adults aged21 years and above. We do not knowingly collect, solicit, or process personal data from individuals under the age of 21.
All registrations are subject to mandatory age verification. If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to suspend the Account, delete the associated personal data, and — where funds have been deposited — return those funds to the payment source.
If you are a parent or guardian and believe that a minor has registered on lancartoto, please contact us immediately at [email protected] so that we can take prompt action.
In the course of providing its services, lancartoto may transfer your personal data to servers or processors located outside of Malaysia. Such transfers occur only where:
Where personal data is transferred internationally, lancartoto requires all recipient processors to maintain security standards consistent with those applied within Malaysia and as described in this Policy.
The lancartoto Platform does not contain outbound links to third-party websites. However, the payment processing flow may involve redirects to third-party payment interfaces operated by DuitNow, FPX, or supported Malaysian eWallet providers. Once you leave the lancartoto Platform environment, the privacy practices of the respective third-party service apply and lancartoto assumes no responsibility for the data handling practices of those third parties.
You are encouraged to review the privacy policies of any payment provider through which you transact before submitting your financial information.
Lancartoto reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our services. When material changes are made to this Policy, we will notify registered Players by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this Policy indicates when the current version came into effect. We recommend reviewing this Policy periodically. Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the updated terms.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the lancartoto team through the following channels:
When submitting a data rights request, please include your Account username and a clear description of the right you wish to exercise. We may request proof of identity before processing your request to ensure the security of your data.
ℹ️ Formal Complaints: If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in the applicable jurisdiction. Please refer to Section 10 for further detail on the right to complain.
Lancartoto is built on trust. Every data protection measure we put in place exists to keep your personal and financial information secure. For players aged 21 and above only.