Privacy Policy Lakutoti – Personal Data Protection for Malaysia Users

1Personal Information We Collect

Lakutoti collects various categories of personal information depending on how you interact with our platform. The following are the main categories of data we collect:

2How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. Lakutoti uses your personal information solely for the following purposes:

• Account management — Create and manage your user account, verify identity, and process service requests.
• Transaction processing — Process deposits, withdrawals, and all financial transactions related to your account.
• Provision of gaming services — Enables access to all games and platform features you have registered for.
• Platform security — Detect and prevent fraud, money laundering, and platform abuse.
• Customer support — Process inquiries, complaints, and support requests you submit.
• Service communications — Send important notifications related to your account, security, and policy changes.
• Platform improvement — Analyse usage patterns to improve the overall user experience.
• Legal compliance — Fulfil obligations under Malaysia law and applicable regulatory requirements.

3Legal Basis for Data Processing

Lakutoti processes your personal data based on the following grounds recognized under Malaysia's Personal Data Protection Act 2010:

• Contract performance — Processing required to fulfil the service obligations you have requested.
• Legal compliance — Processing mandated by applicable Malaysia legislation.
• Legitimate interest — Processing for platform security, fraud prevention, and service improvement purposes.
• Consent — For certain marketing communications, we will obtain your explicit consent beforehand.

4Data Sharing and Disclosure

Lakutoti does not sell or trade users' personal data. However, under limited and controlled circumstances, we may share data with the following parties:

• Service providers — Third parties that help operate our platform, such as cloud infrastructure providers and payment processors. They are bound by strict confidentiality agreements and may only process data on our behalf.
• Regulatory authorities — Regulatory bodies, law enforcement, or courts when required by applicable law.
• KYC service providers — Identity verification companies that help us meet anti-money laundering (AML) requirements.

5Data Storage and Security Measures

Lakutoti implements comprehensive technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse:

• 256-bit SSL encryption for all data in transit.
• Encryption at rest for stored sensitive information.
• Role-based access controls to restrict employee access to user data.
• Round-the-clock 24/7 security monitoring by a team of experts.
• Regular security audits by independent parties.
• A defined incident response plan to address any data breaches.

Data retention period: We retain your personal data for as long as your account is active and for the period required thereafter to meet legal obligations (typically 7 years for financial records). Data that is no longer needed will be securely deleted or anonymized.

6Cookies and Tracking Technologies

The lakutoti platform uses cookies and similar technologies to enhance the user experience and ensure the platform functions correctly.

• Essential Cookies — Required for the platform to function. Includes login session cookies and security settings. Cannot be disabled.
• Functional Cookies — Remember your preferences such as language, display mode, and other personal settings.
• Analytics cookies — Helps us understand how users interact with the platform for improvement purposes. Data is collected in aggregate and is not used to identify individuals.

7User Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by lakutoti:

To exercise any of the above rights, you may submit a request via live chat on the platform or by contacting our support team. We will process your request within 30 calendar days.

Please note that some requests may be subject to assessment and could be restricted in certain situations — for example, where the data is required to fulfill a legal obligation or to resolve an active dispute.

8Children's Data Protection

The lakutoti platform is strictly for users aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

9Cross-Border Data Transfers

In the course of its operations, lakutoti may store or process user data on servers located outside Malaysia, including in the Asia Pacific and European regions, for the purposes of reliability, performance, and service continuity.

All cross-border data transfers are carried out with adequate safeguards, including:

• Data transfer agreements that comply with international data protection standards.
• Security assessments of all third-party partners that receive data.
• Use of encryption standards that meet or exceed Malaysia's legal requirements.

10How to Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, the lakutoti team is ready to assist through the following channels:

• Live chat — Available on the platform 24 hours a day, 7 days a week.
• Support email — [email protected] (replies within 24 hours on business days).

If you are not satisfied with how we handle your privacy inquiry, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia.