Exotot | We Protect Your Data
Serious, More Than Just Promise

This Privacy Policy describes how exotot ("we", "Platform") collects, uses, stores, and protects your personal information when you use our website, mobile app, or any services we provide. We respect the privacy of every member and are committed to handling your data with full responsibility.

By registering or continuing to use the exotot platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account.

01 Information We Collect

Exotot collects your personal information through several methods. The following are the main categories of data we collect:

Data You Provide Directly:

• Full name as stated on official identity documents.
• Email address and mobile phone number.
• Date of birth for age verification purposes.
• Current residential address.
• Bank account or digital wallet details for deposits and withdrawals.
• Copies of KYC documents such as MyKad, passport, and proof of address.

Data Collected Automatically:

• IP address and general location information.
• Device type, operating system, and web browser version.
• Game session data including bets, wins, and play duration.
• Complete financial transaction records.
• Platform activity logs and account access history.

02 How We Use Your Data

Every piece of data we collect is used for its stated purpose and will not be used excessively or beyond the defined scope. The following are the primary purposes for which your personal data is used:

• Account management: Creating, maintaining, and securing your user account.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Identity verification: Meeting KYC requirements and anti-money laundering (AML) obligations.
• Customer support: Resolving enquiries, complaints, and technical issues effectively.
• Platform security: Detecting and preventing fraud, abuse, and unauthorised access.
• Responsible gaming: Monitoring gameplay patterns to identify members who may need assistance.
• Service improvements: Analysing platform usage to improve the user experience.
• Marketing communications: Sending promotions and special offers to members who have opted in to receive them.

03 Data Sharing with Third Parties

Exotot does not sell or rent members' personal data to any third party. However, in certain limited situations, we may share data with the following parties:

• Payment providers: To securely process deposit and withdrawal transactions. These providers are bound by strict data protection agreements.
• KYC service providers: To verify member identity in compliance with legal requirements.
• Legal authority: When required by law, court order, or regulatory authority.
• Technology providers: Server infrastructure and cybersecurity providers used to operate the platform — all bound by NDAs and data processing agreements.

All third parties with whom we share data are subject to data protection terms no less stringent than our own standards. exotot remains accountable for the security of your data even when it is being processed by appointed third parties.

04 Cookies & Tracking Technologies

Exotot uses cookies and similar technologies to enhance the user experience, analyse platform traffic, and ensure security functions operate correctly.

• Essential Cookies: Required for core platform functions such as secure login and game sessions. Cannot be disabled.
• Performance Cookies: Collecting information on how users interact with the platform for improvement purposes.
• Functional Cookies: Storing user preferences such as language and display settings.
• Security Cookies: Helping detect suspicious activity and protecting your account from unauthorised access.

You can manage cookie settings through your web browser preferences. Disabling certain cookies may affect the functionality of some parts of the platform. exotot does not use third-party cookies for advertising purposes.

05 Data Security Measures

The security of your personal data is our absolute priority. exotot implements multiple layers of technical and organisational security measures to protect your data from unauthorised access, loss, or misuse.

• 256-bit SSL encryption for all data in transit.
• AES-256 encryption for data stored in the database.
• Two-factor authentication (2FA) for staff and user account access.
• Continuous 24/7 security monitoring and intrusion detection systems.
• Regular penetration testing by independent third parties.
• Role-based access control — staff can only access data required for their duties.
• Regular data backup procedures to prevent data loss.

06 Your Rights as a Data Subject

Under Malaysia's PDPA and the data protection principles we uphold, you have several important rights regarding your personal data:

07 Data Retention Period

Exotot retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable laws and regulations.

• Active account data: Retained for the duration your account is active and for a set period following account closure.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysia's financial laws.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends.
• Support communication logs: Retained for 3 years for reference and dispute purposes.
• Cookie data: Depending on the cookie type — ranging from session to 12 months.

Upon expiry of the retention period, data will be securely deleted or anonymised so it can no longer be identified.

08 Children's Data Protection

The exotot platform is intended for individuals aged 18 and above only. We do not knowingly collect or process personal data of children under 18.

If we discover that personal data of underage children has been collected without appropriate age verification, we will take immediate steps to delete that data and close the relevant account. If you are a parent or guardian who believes your child has registered on our platform, please contact us immediately.

09 Changes to This Privacy Policy

Exotot reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features.

• Material changes will be communicated to members via in-platform notifications or email at least 14 days before taking effect.
• The "Updated" date at the top of this page will always reflect the latest version.
• Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

We encourage you to review this page regularly. If you disagree with any changes, you have the right to close your account before the changes take effect.

10 How to Contact Us

For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact the exotot privacy team through the following channels:

• Live Chat: Available 24/7 directly within the exotot platform or mobile app.
• Email: Send a written enquiry to our support team at [email protected]
• Ticket System: Submit an official complaint via the "Support" section in your account.

We are committed to responding to all privacy-related enquiries within 5 business days. For cases requiring further investigation, we will inform you of the expected resolution timeframe.