Your privacy is more than a legal obligation to us — it is a responsibility we take seriously. This document clearly explains what we collect, why we collect it, and how we protect your information.
Six core principles that define how Namastoto manages your data
256-bit SSL protects all data in transit and at rest.
Your information is never sold to any advertiser or third party.
We only collect data that is strictly necessary for the platform to operate.
Only authorised staff may access user personal data.
You have the right to access, correct, or request deletion of your data.
Data is retained only for as long as necessary in accordance with legal and operational requirements.
Namastoto understands that your trust is the most valuable asset we hold. A large part of that trust is built on how we handle your personal information. This Privacy Policy is written in plain language — not legal jargon that requires a lawyer to interpret — so you truly know what happens with your data.
This policy applies to all information collected through namastoto.net, the Namastoto mobile app (Android and iOS), and all your interactions with our platform and support team. By using the Namastoto platform, you agree to the data collection and usage practices described in this document.
Namastoto only collects information that is strictly necessary to provide the services you use. Here is a summary of the types of data we collect and where it comes from:
| Data Type | Example Information | Resources |
|---|---|---|
| Identity Data | Full name, date of birth, IC number | Registration form / KYC |
| Contact Data | Phone number, email address | Account Registration |
| Financial Data | Bank account number, bank name, e-wallet | Payment Verification / KYC |
| Technical Data | IP address, device type, web browser | Automated System Logs |
| Usage Data | Game records, transaction history | Platform activity |
| Communication Data | Customer Support Chat Logs | Interactions with the support team |
Namastoto does not store your full credit or debit card number. Sensitive payment information is processed directly by certified payment processors and never passes through or is stored on our servers.
Every piece of information we collect has a clear and legitimate purpose. We do not use your data for any purpose beyond what is stated here:
Namastoto does not sell, rent, or trade your personal information to any third party for their marketing or commercial purposes. Full stop. No exceptions.
There are limited situations where we may need to share your information with certain parties:
Protecting your data is an ongoing investment we take seriously. The namastoto security infrastructure is built in layers to ensure there is no single point of failure:
All communication between your device and namastoto's servers is protected by 256-bit SSL (Secure Socket Layer) encryption — the same security standard used by leading financial institutions worldwide. This means that even if someone were to intercept data in transit, it cannot be read without the correct encryption key.
Access to user data in our internal systems is strictly controlled. Staff may only access data relevant to their duties, and all access is recorded in audit logs that are reviewed regularly. No staff member may access user data without a legitimate work requirement.
Our systems are continuously monitored to detect any unusual activity or unauthorized access attempts. Our security team responds to any detected threats in real time, 24 hours a day, 7 days a week.
Data security is a shared responsibility. On your end, we encourage you to use a strong and unique password, enable two-factor authentication, and never share your login credentials with anyone. Enable biometric login on the mobile app for an easy extra layer of security.
Namastoto uses cookies and similar tracking technologies to enhance your experience on the platform. Understanding how cookies work helps you make informed decisions about your privacy settings.
You can manage cookies through your web browser settings. Disabling essential cookies may affect platform functionality, but analytics cookies can be disabled without impacting basic usage.
Namastoto retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Once data is no longer needed, it will be securely deleted or anonymised.
When you close your Namastoto account, personal data that can identify you will be deleted within the prescribed period, except for any data we are required to retain due to legal obligations.
As a namastoto user, you have the following rights regarding your personal data. We respect and facilitate the exercise of these rights:
To exercise any of these rights, contact our support team via the in-platform live chat. We will process your request within a reasonable timeframe and no later than 30 calendar days.
The namastoto platform is strictly for adults aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.
If we discover that personal data of a child has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. If you believe that a child's data has been provided to us, please contact us immediately.
Namastoto may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When we make significant changes, we will notify you via an in-platform notification or through your registered email.
The "Last Updated" date at the top of this document will always reflect the latest version. Continued use of the platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, please contact us to close your account.
If you have any questions, concerns, or requests regarding your privacy and data protection, the Namastoto support team is ready to assist you at any time.
The fastest way to get help is through the live chat available directly in our platform or mobile app — our 24/7 support team will handle your privacy enquiries with priority.
How Namastoto puts its privacy commitments into practice in the platform's day-to-day operations
All data transmitted between your device and namastoto's servers is protected by bank-grade encryption — making it impossible for any third party to intercept.
EncryptionLogging in with fingerprint or facial recognition on the mobile app ensures only you can access your account — biometric data never leaves your device.
BiometricsEnable 2FA to add an extra layer of security to your account. Even if someone knows your password, they still cannot log in without the second verification code.
2FAIdentity verification is a one-time process that ensures only the legitimate account owner can make withdrawals. Your documents are stored with full encryption.
KYCOur systems continuously monitor for unusual transaction patterns and login activity. Any suspicious activity is detected and flagged for immediate review.
24/7 MonitoringYour sensitive financial information is processed directly by certified payment processors without passing through our servers — no risk of card or banking details being stored insecurely.
Financial SecurityYour personal data belongs to you. Namastoto provides straightforward mechanisms for you to exercise the following rights
To exercise any of your privacy rights, contact our support team via the in-platform live chat or by email at [email protected]. We will respond within 5 business days.
Request a complete copy of all personal data we hold about you in a clear and readable format. We will process this request within 30 days.
If any information is inaccurate or out of date, let us know and we will correct it promptly. This includes your name, email address, phone number, and more.
Under certain circumstances, you may request the deletion of your personal data. Such requests will be assessed in accordance with applicable operational and legal requirements.
Unsubscribe from marketing communications at any time through your account settings or by contacting support. The opt-out will take effect within 48 hours.
Request your data in a portable format. Useful if you want to keep your own record of your account activity.