Personal data and transparency

clotplay Privacy Policy for Malaysian Users

This Privacy Policy explains how clotplay may collect, use, store, disclose and protect personal information when Malaysian users access casino, sports betting, MYR payment and responsible gambling content.

Effective date: 1 January 2026
Privacy principles

How clotplay approaches personal information

These principles provide a concise overview of the clotplay privacy approach. They should be read together with the complete provisions below.

Purpose Limitation

Personal information should be used only for stated and legitimate purposes, including technical delivery, fraud prevention and compliance obligations.

User Choice

Eligible users may request access, correction or deletion of certain information, subject to identity checks and applicable legal limitations.

1Introduction

clotplay respects the importance of personal privacy. This Privacy Policy describes how information may be handled when you visit https://clotplay.cam, read Malaysia-focused gambling content or interact with website functions. References to “clotplay”, “we”, “our” and “us” refer to the website and its operators. References to “you”, “your” and “user” refer to a person accessing clotplay.

This policy is intended to provide transparent information about data processing. It applies alongside the clotplay Terms & Conditions and other privacy notices presented at the point where information is collected. If a specific notice provides more detailed information for a particular feature, that notice should be read with this policy.

2Scope and Definitions

This Privacy Policy applies to personal information processed through clotplay. “Personal information” means information that identifies an individual or can reasonably be associated with an identifiable individual. It may include direct identifiers, device information, communications and activity records.

“Processing” includes collecting, recording, organising, storing, reviewing, using, transferring, restricting and deleting information. “Service provider” means an organisation that processes information to support clotplay functions, such as hosting, security, communications or technical maintenance.

Information that has been aggregated or anonymised so that an individual cannot reasonably be identified is not treated as personal information to the extent permitted by applicable law.

3Information We May Collect

The categories collected by clotplay depend on how the website is used. We seek to limit collection to information reasonably necessary for the relevant purpose. Categories may include:

  • Identification details: name, date of birth, age confirmation and other details needed to verify that a user is aged 21 or above.
  • Contact details: email address and information contained in a message sent to clotplay support.
  • Technical information: IP address, browser type, device category, operating system, language settings and approximate region.
  • Usage information: pages viewed, navigation paths, session duration, button interactions and error records.
  • Security information: login events, failed access attempts, risk signals and records used to investigate suspected misuse.
  • Preference information: cookie choices, display settings and content interests voluntarily indicated through clotplay.

clotplay does not request that users disclose passwords, complete one-time security codes or unnecessary financial credentials by email. Such information should never be sent in a general support message.

4How Information Is Collected

clotplay may receive information directly from you when you contact support, make a privacy request or provide information through an available website function. You are responsible for ensuring that details you provide are accurate and that you have authority to provide them.

Certain technical and usage information may be collected automatically when your browser communicates with clotplay. Standard server logs can record an IP address, request time, requested page, browser details and technical response. Cookies or similar local technologies may also remember preferences and help identify unusual traffic.

Where permitted, clotplay may receive limited information from service providers supporting hosting, website security or payment-related education. We do not seek information from unrelated public sources merely to build detailed gambling profiles about Malaysian users.

5Purposes of Data Processing

clotplay may process personal information for the following legitimate purposes:

  • delivering website pages and maintaining technical performance;
  • responding to questions, privacy requests and support communications;
  • confirming age eligibility where an age-restricted feature requires verification;
  • protecting clotplay against fraud, automated abuse, malicious code and unauthorised access;
  • investigating errors, outages and security events;
  • understanding general content usage and improving navigation for Malaysian readers;
  • maintaining records required for legal, regulatory or dispute-management purposes;
  • enforcing the clotplay Terms & Conditions; and
  • supporting responsible gambling controls where those controls are available.

clotplay does not use personal information to guarantee gambling success or predict whether an individual will win on slots, live casino games, EPL matches, Liga Super Malaysia fixtures or UFC markets.

6Legal Grounds and Consent

Depending on the information and context, clotplay may rely on consent, contractual necessity, compliance with a legal obligation or legitimate interests as the basis for processing. Legitimate interests may include website security, fraud prevention, service improvement and the defence of legal claims.

Where consent is required, clotplay seeks to present a clear choice. A user may withdraw consent for future processing where applicable, although withdrawal does not invalidate processing that occurred lawfully before the request. Some clotplay functions may not operate as intended when necessary cookies or information are withheld.

Malaysia privacy context: clotplay seeks to handle relevant personal information with regard to applicable data-protection requirements. This policy is a transparency statement and does not remove any mandatory right available under applicable law.

7MYR Payment and Verification Information

clotplay may publish guidance concerning Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong. Mentioning these methods does not mean clotplay receives complete payment credentials from those providers. Availability and data handling depend on the transaction service involved.

If a payment or verification process is available, relevant records may include the transaction amount in MYR, time, status, masked account information and a reference number. Identity documents may be required by an appropriate service to confirm account ownership, meet KYC obligations or investigate fraud. clotplay encourages users to provide only the requested document and only through the designated secure process.

Complete card numbers, banking passwords and e-wallet PINs should not be included in a clotplay support message. Before uploading a document, check the destination, connection security and stated purpose.

8Cookies and Similar Technologies

Cookies are small data files stored through a browser. clotplay may use strictly necessary cookies to preserve security, maintain sessions and remember essential preferences. Functional cookies may remember display choices, while measurement technologies may help clotplay understand which pages are useful and where technical errors occur.

Browser settings generally allow users to block or remove cookies. Blocking essential cookies may affect navigation, preference storage or security controls. clotplay does not use a cookie as proof that a person has won, lost or participated in a particular gambling activity.

Device and log data may be reviewed in aggregate to compare performance across smartphones, tablets and desktop browsers used in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other regions. Where practical, reporting is aggregated to reduce identification risk.

9Sharing and Disclosure

clotplay does not sell personal information as a routine business practice. Information may be disclosed only where reasonably necessary and subject to appropriate controls. Possible recipients include hosting providers, security specialists, technical support services, professional advisers and authorities acting under a valid legal requirement.

Service providers are expected to process information for the agreed purpose and to apply suitable confidentiality and security measures. clotplay may also disclose information where necessary to protect users, investigate suspected fraud, enforce legal rights or respond to an emergency involving a credible risk of harm.

If ownership or operation of clotplay changes through a restructuring, merger or transfer, relevant information may form part of that transaction. Reasonable steps will be taken to require continued protection and provide notice where legally required.

10International Data Processing

The internet and supporting infrastructure may involve processing outside Malaysia. A clotplay hosting, security or technical provider may operate in another jurisdiction whose data-protection rules differ from those in Malaysia.

Where personal information is transferred internationally, clotplay seeks to use reasonable safeguards appropriate to the transfer. These may include contractual data-protection terms, security requirements, limited access and checks concerning the recipient. International processing does not remove the responsibility to handle information for a stated purpose.

11Data Retention

clotplay retains personal information only for as long as reasonably necessary for the purpose for which it was collected, including security, dispute, legal and record-keeping requirements. Retention periods vary according to the nature and sensitivity of the information.

Short-term technical logs may be retained for troubleshooting and security monitoring. Communications may be kept while a request remains open and for a reasonable period afterwards. Records connected with fraud prevention or a legal obligation may require longer retention. When information is no longer needed, clotplay may delete, anonymise or securely isolate it.

12Security Measures

clotplay applies reasonable administrative, technical and organisational measures intended to protect information. Measures may include encrypted connections, access controls, monitoring, backups, system updates and restricted administrative privileges. Security measures are reviewed in light of the information involved and the nature of current risks.

No online system can guarantee absolute security. Users also have an important role: keep devices updated, use strong and unique passwords, avoid unsecured public networks for sensitive activity and never share one-time verification codes. Suspected impersonation or unauthorised access should be reported promptly.

If a personal-data incident creates a material risk, clotplay will assess the event, take proportionate containment steps and provide notifications where required by applicable law.

13User Rights and Choices

Subject to applicable law and reasonable identity verification, users may have rights regarding their personal information. A request should identify the relevant clotplay interaction and describe the action sought. Available rights may include:

Access

Request confirmation of processing and a copy of eligible personal information.

Correction

Ask clotplay to correct information that is inaccurate or materially incomplete.

Deletion

Request deletion where continued retention is not legally or operationally required.

Restriction

Ask for eligible processing to be limited while an accuracy or legal concern is reviewed.

Objection

Object to certain processing based on legitimate interests where applicable.

Consent Withdrawal

Withdraw consent for future processing where clotplay relies on that consent.

clotplay may request information needed to confirm identity before completing a privacy request. This helps prevent another person from gaining unauthorised access to your data. A request may be limited or refused where the law permits, including where disclosure would affect another person's rights or conflict with a legal obligation.

14Age Restriction and Children's Privacy

clotplay gambling content is intended for adults aged 21 and above only. We do not knowingly seek personal information from children or invite people below 21 to use age-restricted sections. A person below the permitted age must not provide false birth details or use an adult's identity.

If clotplay reasonably determines that age-restricted personal information was submitted by a minor, we may restrict access and delete the information where legally appropriate. Parents and guardians should consider browser, network and device controls to reduce unintended access to gambling-related content.

15Responsible Gambling and Sensitive Requests

Where clotplay offers or discusses deposit limits, cooling-off periods or self-exclusion, information associated with such a request may be processed to apply the selected restriction, prevent circumvention and maintain an appropriate record. These records should be treated with particular care because they may reveal personal behaviour or wellbeing concerns.

clotplay will not treat a responsible gambling request as permission to send promotional pressure. Users who experience difficulty controlling gambling should stop, protect essential funds and use the available responsible gambling resources. Privacy should not prevent a user from seeking timely support.

16Changes to This Privacy Policy

clotplay may revise this Privacy Policy to reflect changes in law, technology, website features or data practices. The updated effective date will appear near the top of the page. Material changes may be highlighted through an appropriate website notice where required.

Users should review the clotplay Privacy Policy periodically, particularly before providing new personal information. Continued website use after an update does not remove any consent choice or mandatory privacy right provided by applicable law.

Contact Us

Questions or privacy requests

Contact clotplay using the website email shown here if you have a question about this policy or wish to submit an eligible privacy request. Include enough information to identify the relevant interaction, but do not send passwords, one-time codes, complete bank details or unnecessary identity documents.

Continue with clarity

Explore clotplay with privacy in mind

Return to the homepage for Malaysia-focused casino and sports information, or read the clotplay Terms & Conditions to understand the rules governing website use.

For players aged 21 and above only. Protect your personal information, keep security codes private and always play responsibly.