Privacy Policy

Longtogel ("we", "us", "our", "the Company") operates the online gambling and sports betting platform accessible at https://longtogel.cam, including all associated subdomains, mobile interfaces, and applications (collectively, the "Platform"). This Privacy Policy governs the collection, use, storage, sharing, and protection of personal data provided to us by users ("you", "your", "Data Subject") in connection with the use of the Platform and any related services.

Longtogel is committed to protecting the privacy of all users who access or register on the Platform. We process personal data lawfully, fairly, and transparently. We collect only what is necessary for legitimate operational purposes and retain it only for as long as required by those purposes or by applicable law.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the Platform. By registering an Account on Longtogel or by continuing to access the Platform after being notified of this Policy, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein.

The following definitions apply throughout this Privacy Policy:

Longtogel collects personal data through several channels in the course of providing its Services. The categories of data we collect are described below.

3.1 Data Provided Directly by You

• Registration Data: Full legal name, date of birth, username, email address, and mobile phone number provided when creating an Account.
• Identity Verification Documents: Copies of government-issued photo identification (e.g., Malaysian National Identity Card / MyKad, passport), proof of address, and in some cases proof of income or source of funds, provided during KYC verification.
• Payment Information: Bank account numbers, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), FPX banking credentials (processed by your bank), and cryptocurrency wallet addresses used for deposits and withdrawals. Note that Longtogel does not store full payment card numbers; card transactions are handled by PCI-DSS compliant payment processors.
• Communications Data: Content of messages exchanged with our support team via live chat, email ([email protected]), or other correspondence channels, including dispute submissions and KYC queries.
• Preferences and Settings: Account configuration choices, notification preferences, responsible gambling tool settings (deposit limits, self-exclusion instructions), and language preferences.

3.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and connection type collected when you access the Platform.
• Session and Usage Data: Pages visited, features accessed, game sessions initiated, bets placed, wagering history, session duration, and clickstream data collected during your use of the Platform.
• Geolocation Data: Approximate geographic location derived from your IP address or, where you grant permission, precise location data from your mobile device, used for jurisdiction compliance checks.
• Cookie and Tracking Data: Data collected via cookies, web beacons, and similar tracking technologies as described in Section 7.

3.3 Data Received from Third Parties

• Identity Verification Agencies: Results and risk scores from third-party KYC and anti-fraud verification services used to validate your identity documents.
• Payment Processors: Transaction confirmation data, fraud scores, and payment status updates from DuitNow, FPX, Touch 'n Go eWallet, Maybank, CIMB, Public Bank, Hong Leong Connect, Boost, GrabPay, and cryptocurrency transaction networks.
• Responsible Gambling Databases: Where applicable, information from national self-exclusion registers used to verify that individuals who have self-excluded are not permitted to access the Platform.

Longtogel uses the personal data we collect for the following purposes, each of which is supported by an appropriate legal basis as described in Section 5:

4.1 Marketing Communications

Longtogel will only send you direct marketing communications where you have provided explicit consent, or where we have a legitimate interest basis supported by an easy opt-out mechanism. You may withdraw marketing consent at any time by updating your Account notification preferences or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

Longtogel processes your personal data on one or more of the following legal grounds depending on the purpose of processing:

• Contractual Necessity: Processing required to perform our contract with you — including Account management, game access, payment processing, and withdrawal fulfilment — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legal Obligation: Processing required for compliance with applicable laws and regulatory requirements — including KYC, AML screening, sanctions checks, age verification, and regulatory reporting — is carried out on the basis that it is legally required.
• Legitimate Interests: Processing for fraud prevention, platform security, analytics, and responsible gambling monitoring is carried out on the basis of Longtogel's legitimate interest in protecting the integrity of the Platform and the wellbeing of its users, provided that such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies is carried out only where you have provided freely given, informed, and specific consent. You have the right to withdraw consent at any time without affecting the lawfulness of any prior processing.

Longtogel does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include: payment processors (handling MYR transactions through DuitNow, FPX, and local banks); KYC and identity verification vendors; IT infrastructure and hosting providers; customer support platform operators; and fraud detection service providers. All Data Processors are required to maintain appropriate technical and organisational security measures.

6.2 Legal and Regulatory Disclosure

Longtogel may disclose personal data to competent authorities, regulators, law enforcement agencies, or courts where required by applicable law, regulatory order, or legal process. We will endeavour to notify you of such disclosures where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or change of control involving Longtogel, your personal data may be transferred to the acquiring or successor entity as part of that transaction. We will notify you prior to any such transfer and ensure that the receiving entity is bound by data protection obligations no less protective than those set out in this Policy.

6.4 No Sale of Data

Longtogel does not and will not sell, rent, or otherwise commercially exploit your personal data to third-party advertisers, data brokers, or marketing networks. Your information is used exclusively for the purposes described in this Privacy Policy.

The Longtogel Platform uses cookies and similar tracking technologies to maintain session state, remember your preferences, analyse usage patterns, and support security functions. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. For analytical cookies, you may withdraw consent at any time by adjusting your Account privacy settings or by following the opt-out instructions in the cookie consent banner presented on your first visit.

Longtogel retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data and Transaction Records: Retained for a minimum of 5 years from the date of last Account activity, or longer where required by AML and financial crime regulations applicable in the relevant operating jurisdiction.
• KYC and Identity Documents: Retained for a minimum of 5 years following Account closure or last transaction, in accordance with standard anti-money laundering regulatory requirements.
• Customer Support Correspondence: Retained for 2 years from the date of last correspondence unless the matter relates to an ongoing dispute, legal claim, or regulatory inquiry, in which case retention continues until final resolution.
• Marketing Consent Records: Retained for the duration of your consent plus 12 months following withdrawal, to demonstrate that communications were sent on a lawful basis.
• Session and Technical Logs: Retained for 12 months for security and fraud investigation purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

Longtogel implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and the Platform is encrypted using TLS 1.2 or higher (256-bit SSL). All API communications between the Platform and third-party processors are encrypted.
• Encryption at Rest: Sensitive personal data and payment information stored in our systems is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: 2FA is available for all user Accounts and is mandatory for all internal system administration access.
• Penetration Testing: The Platform undergoes regular third-party penetration testing and vulnerability assessments. Critical vulnerabilities are remediated within defined SLA timeframes.
• Incident Response: Longtogel maintains a formal data breach incident response procedure. In the event of a breach that poses a risk to your rights and freedoms, affected users and relevant authorities will be notified in accordance with applicable legal requirements.

Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are encouraged to use a strong, unique password for your Account and to enable 2FA to reduce the risk of unauthorised access.

Depending on the data protection laws applicable in your jurisdiction, you may have the following rights with respect to your personal data held by Longtogel. To exercise any of these rights, please contact us using the details in Section 14.

Longtogel will respond to all data subject requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day window and explain the reason for the extension.

Longtogel's Services are strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data from persons under the age of 21. Age verification is conducted as part of the registration process and is enforced prior to the processing of any withdrawal request.

If Longtogel becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian verification, we will immediately suspend the relevant Account, delete all associated personal data without undue delay, and refund any deposits made to the payment method from which they originated.

If you believe that a minor has registered on the Platform or that you have discovered underage gambling activity, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

The Platform may contain references to or integrations with third-party services, including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Connect), and game content providers. When you interact with these third-party services, your data may be processed by those third parties under their own privacy policies, which Longtogel does not control.

Longtogel is not responsible for the privacy practices, security measures, or content of any third-party services, platforms, or websites that you access in connection with using the Platform. We encourage you to review the privacy policies of any third-party services you interact with, particularly those handling your financial transactions.

Game content provided by third-party game developers and studios is delivered through secure APIs. Longtogel does not share identifiable player data with game providers beyond session tokens and bet values necessary for game operation. Player identity data remains within Longtogel's controlled environment.

Longtogel reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Material changes — those that significantly affect how your personal data is processed or your rights as a Data Subject — will be communicated to you via a prominent notice on the Platform and, where practicable, via email to your registered address, with reasonable advance notice before the changes take effect.

Minor or administrative changes (such as formatting updates, clarification of existing practices, or correction of typographical errors) may be made without prior notification. The "Last updated" date at the top of this page will be revised to reflect the date of any amendment.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to a material change, you should discontinue use of the Platform and may request Account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data subject rights as described in Section 10, please contact the Longtogel Data Privacy team through any of the following channels:

We are committed to resolving all privacy-related enquiries and complaints fairly and efficiently. If you remain dissatisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.