empiretoto Privacy Policy for Malaysian Users

1 Scope of This Policy

This Privacy Policy applies to personal and technical information processed through empiretoto. It covers visitors accessing the website from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations, subject to any applicable legal requirements.

References to “we”, “our” or “the website” mean empiretoto. References to “you” and “user” mean any person who visits or communicates with empiretoto. “Personal data” means information relating to an identified or reasonably identifiable individual.

The empiretoto Privacy Policy does not control the independent practices of banks, e-wallet services, telecommunications providers or other organisations. Each independent service provider determines how it handles data under its own terms and legal duties.

2 Information We May Collect

The type of information processed by empiretoto depends on how you use the website. Merely reading an EPL guide or MYR payment explanation generally requires less information than sending a support enquiry or completing an eligibility check.

3 How Information Is Collected

empiretoto may collect information directly when you communicate with the website, make a privacy request or provide details through an approved interaction. The information you choose to provide should be accurate and limited to what is reasonably necessary for the enquiry.

Certain technical information may be collected automatically when your browser connects to empiretoto. Server logs and cookies can record basic device and activity data needed to deliver pages, remember settings, maintain security and diagnose technical faults.

empiretoto may also receive limited information from service providers supporting hosting, security, analytics or communications. Such information is processed only where an appropriate purpose and lawful basis exist.

4 Purposes of Data Processing

empiretoto may process information for the following purposes:

• to provide, maintain and improve website functions;
• to present content in a readable format suited to Malaysian devices and browser settings;
• to respond to support, privacy and responsible-gambling enquiries;
• to protect empiretoto against fraud, automated abuse, malicious code and unauthorised access;
• to understand general interest in topics such as live football, Liga Super Malaysia, UFC, casino games and MYR payment guidance;
• to meet applicable legal, regulatory, accounting or security obligations;
• to investigate errors, disputes and suspected breaches of the Terms & Conditions; and
• to establish, exercise or defend legal rights where reasonably necessary.

empiretoto will not use personal data for a purpose that is materially incompatible with the reason it was collected unless another lawful basis applies or appropriate notice is provided.

5 Lawful Bases and Consent

Depending on the circumstances, empiretoto may process information because it is necessary to provide a requested service, comply with a legal duty, pursue a legitimate operational or security interest, or act with your consent.

Legitimate interests may include protecting empiretoto systems, understanding aggregate website performance, responding to enquiries and preventing fraud. Before relying on such an interest, empiretoto considers the likely effect on user privacy and whether less intrusive means are reasonably available.

Where processing depends on consent, you may withdraw that consent for future activity. Withdrawal does not make earlier lawful processing invalid, and certain information may still be retained where empiretoto has a separate legal obligation or valid basis.

6 Cookies and Similar Technologies

Cookies are small text files that a website may place or read through a browser. empiretoto may use essential cookies for core functions, security and preference storage. Optional measurement cookies may help identify broad usage patterns and improve page performance.

Cookie data can indicate whether a page loaded correctly, which device category was used or how visitors move between general sections. empiretoto does not treat an analytics estimate as a guaranteed identification of a particular person.

Most browsers allow users to block or delete cookies. Disabling essential cookies may affect navigation, saved preferences or security functions. Browser settings apply to the relevant device, so a choice made on a phone may need to be repeated on a laptop or tablet.

7 Malaysian Payment Information

empiretoto may publish general information about payment methods familiar to Malaysian users, including Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX. Mentioning these services does not mean empiretoto receives access to a user's complete banking credentials.

Where transaction-related information is required for a legitimate enquiry, empiretoto may process a limited reference, amount, date, payment route or status. Users should conceal unnecessary account numbers and never disclose passwords, PINs or one-time security codes.

Banks and e-wallet services act under their own privacy notices. A bank may process information for fraud prevention, account security, payment execution or regulatory compliance independently of empiretoto.

8 Sharing and Disclosure

empiretoto does not disclose personal data without a relevant purpose. Information may be shared with service providers that support hosting, cybersecurity, technical maintenance, communications or professional advice. These providers should receive only the information reasonably needed for their assigned function.

empiretoto may also disclose information where required by applicable law, a valid legal process or an authorised regulatory request. Disclosure may be necessary to investigate fraud, protect users, secure the website or defend legal rights.

If the ownership or operation of empiretoto changes, relevant information may be transferred as part of a legitimate business restructuring, subject to appropriate confidentiality and data-protection measures.

9 International Data Transfers

Website hosting, security or technical support may involve processing outside Malaysia. Privacy laws and enforcement standards can differ between locations. Where an international transfer occurs, empiretoto seeks to use proportionate safeguards appropriate to the information and circumstances.

Safeguards may include contractual obligations, access restrictions, encryption and careful service-provider selection. No transfer mechanism can remove every online risk, but empiretoto aims to apply reasonable protection throughout the information lifecycle.

10 Data Retention

empiretoto retains information only for as long as reasonably necessary for the purpose for which it was collected, including security, dispute handling, legal compliance and record-management needs. Retention periods vary according to the information category and surrounding risk.

Short-lived technical logs may be removed sooner than records connected to a security incident or legal obligation. When information is no longer required, empiretoto may securely delete it, anonymise it or restrict further processing.

Anonymised statistical information that no longer identifies an individual may be retained for website analysis and planning.

11 Security Measures

empiretoto uses reasonable administrative, technical and organisational safeguards intended to protect information against accidental loss, unauthorised access, alteration, disclosure or destruction. Measures may include encrypted connections, access controls, security monitoring, backups and staff confidentiality procedures.

No internet transmission or storage method is completely secure. Users should keep devices updated, use strong passwords for relevant services and avoid sharing sensitive data through public or unsecured networks.

12 Your Privacy Rights

Subject to applicable law and identity verification, you may be entitled to request access to personal data held about you, seek correction of inaccurate information, object to certain processing, withdraw consent or request deletion where no valid retention basis remains.

A request should identify the relevant interaction with empiretoto and explain the action sought. empiretoto may ask for limited verification information before responding so that personal data is not disclosed to an unauthorised person.

Some requests may be restricted where disclosure would affect another person's rights, compromise security, conflict with a legal obligation or reveal protected information. If a request cannot be completed in full, empiretoto will aim to explain the reason where permitted.

13 Responsible Gambling and Sensitive Information

A user may voluntarily provide information about deposit limits, time-outs, self-exclusion or concerns about gambling behaviour. empiretoto treats such information carefully and uses it only for responsible-play support, safety, compliance or related record-keeping.

Responsible-gambling information can be sensitive. Access should therefore be restricted to people with a legitimate need to handle the request. Users should share only the details necessary to explain the concern.

empiretoto gambling content is intended for adults aged 21 and above. If an underage person has provided personal information, a parent or lawful guardian may contact the website support team to request review and appropriate deletion.

14 Automated Decisions

Security systems may automatically identify unusual traffic, repeated failed actions, malicious requests or automated scraping. This can result in temporary technical restrictions intended to protect empiretoto and its users.

empiretoto does not intend to make a decision producing significant legal effects solely through automated profiling without an appropriate lawful basis and safeguards. Where applicable, a user may request human review of a significant automated decision.

15 Changes to This Privacy Policy

empiretoto may revise this Privacy Policy to reflect changes in website functions, security practices, service providers or applicable requirements. The effective date at the top of the page indicates when the current version took effect.

Material changes may be highlighted through a suitable website notice. Users are encouraged to review the empiretoto Privacy Policy periodically, particularly before providing new information or using a recently introduced function.

16 Contact Us

Questions about this Privacy Policy or requests concerning personal data may be directed to the empiretoto website support team. Describe the request clearly, mention the relevant interaction and avoid including unnecessary financial or identity information.

empiretoto will aim to review valid requests within a reasonable period, subject to verification, complexity and applicable legal requirements.