Privacy Policy

Last Updated: 2026-08-19

Privacy Snapshot

  • What we collect: Identity, contact, payment, and technical device data.
  • Why we collect it: To manage accounts, process transactions, and prevent fraud.
  • Who sees it: Only our internal team and essential partner service providers.
  • Retention: Kept for the life of your account plus legal requirements in Malaysia.
  • Your control: You can request access or deletion via our support channels.

Introduction and Scope

This Privacy Policy explains how exototo collects, uses, and protects the personal information of users within Malaysia. By registering an account or using our services, you agree to the practices described in this document.

This policy applies exclusively to the activities and data processed on this platform. It does not cover any third-party websites or external services that you may visit after leaving our domain; we encourage you to review the privacy policies of any external site you visit.

Personal Information We Collect

Account & Identity

Basic registration details to establish your user profile and verify your identity.

Verification Documents

Identification provided during KYC processes to prevent underage gaming and identity theft.

Payment Data

Necessary transaction details to facilitate deposits and withdrawals securely.

Gaming & Transactions

Records of games played, betting history, and financial movements for auditing and support.

Technical Data

IP addresses, browser type, device identifiers, and operating system for security and optimization.

Communication Records

Correspondence via our support channels to resolve inquiries and improve service.

How We Collect Data

We gather information through three primary channels:

  • Directly from you: Information you provide when registering, updating your profile, or contacting support.
  • Automatically: Data collected through cookies and system logs as you navigate the platform.
  • Partner Providers: Information from trusted verification and payment service providers to ensure account legitimacy.

Why We Use Data

Your data is processed for the following essential purposes:

  • Account Management: Creating and maintaining your secure user profile.
  • Financial Operations: Processing deposits and withdrawals in MYR.
  • Compliance: Verifying age and identity to meet legal requirements for gambling operators.
  • Security: Detecting and preventing fraud, money laundering, and the creation of duplicate accounts.
  • Experience: Personalizing content and improving site functionality based on usage patterns.
  • Marketing: Sending promotional offers only if you have provided explicit consent.

When We Share Data

We do not sell your personal data to third parties. We only share information in the following circumstances:

  • Essential Service Providers: With partner payment processors, identity verification services, and technical infrastructure providers.
  • Legal Requirements: When compelled by law or requested by relevant authorities to comply with legal obligations.
  • Security: To protect the rights and safety of our users and the platform.

How We Protect Data

We employ industry-standard security measures to safeguard your information:

  • Encryption: Data is encrypted during transit to prevent interception.
  • Access Control: Internal access to sensitive data is strictly limited to authorized personnel.
  • Isolation: Payment data is handled through secure, isolated channels.
  • Monitoring: Continuous system monitoring to detect and respond to potential security threats.

Cookies and Tracking

We use cookies to enhance your browsing experience, remember your preferences, and maintain session security. For a detailed explanation of how we use tracking technologies, please visit our Cookie Policy.

Your Rights

Depending on your situation, you have the following rights regarding your data:

  • Access & Correction: Request a copy of your data or correct inaccurate information.
  • Deletion: Request the removal of your personal data.
  • Portability: Request a transfer of your data to another service.
  • Objection: Object to specific types of data processing.
  • Consent: Withdraw consent for marketing communications at any time.

To exercise these rights, please contact our team via the channels available on our Support page. Please note that certain data must be retained even after account closure to comply with anti-money laundering and gambling regulations.

How Long We Retain Data

We retain your personal information for as long as your account remains active. Once an account is closed, we will keep the necessary data for the duration required by applicable law in Malaysia to satisfy legal, tax, and regulatory obligations.

Age Limits

Our services are strictly restricted to individuals aged 18 years and older. If we discover that an account has been created by a minor, we will terminate the account immediately and take steps to remove their data. Parents or guardians who suspect a minor is using the platform should report it via our support channels.

Cross-Border Transfers

To provide our services, some of our technical and service providers may operate outside of Malaysia. In such cases, we ensure that appropriate safeguards are in place to protect your data and maintain a level of protection consistent with our policy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be published on this page. We recommend checking the "Last Updated" date at the top of the page periodically to stay informed.

Contact Us

If you have any questions or concerns regarding your privacy or the handling of your data, please reach out to us through the official communication channels provided on our Support page.