Privacy Policy Exototi — Our Commitment to Protecting Your Personal Data

Exototi ("we", "Platform") take our responsibility to protect every user's privacy seriously. This Privacy Policy is designed to provide full transparency on how your personal information is collected, used, stored, and protected throughout your use of the Exototi platform.

This policy applies to all users who access the Exototi website, use our mobile app, or interact with any of our services — including account registration, gaming activity, financial transactions, and communications with our support team.

Exototi operates in compliance with applicable data protection laws and international industry standards. We continually strive to align our privacy practices with evolving technology and current regulatory requirements.

Exototi collects your personal data through several methods — directly when you provide information, automatically while you use the platform, and in some cases from legitimate third-party sources. Below is a summary of the data we collect:

Exototi does not collect sensitive data such as medical information, religious beliefs, or political views. We only collect data that is genuinely necessary to operate the platform and comply with legal requirements.

The personal data we collect is used solely for legitimate and necessary purposes. Below are the primary purposes for which your data is used at Exototi:

• Account Management — Creating, verifying, and maintaining your account, including mandatory KYC processes.
• Transaction Processing — Processing deposits, withdrawals, and all financial activity related to your account.
• Game Operations — Ensuring a smooth, fair, and secure gaming experience for all players.
• Regulatory Compliance — Fulfilling legal obligations including anti-money laundering (AML) prevention and KYC requirements.
• Customer Support — Resolving enquiries, complaints, and assistance requests more effectively.
• Platform Security — Detecting and preventing fraudulent activity, account misuse, and other security threats.
• Service Improvement — Analysing usage patterns to improve platform features and user experience.
• Service Communications — Sending important notifications related to your account, transactions, or policy changes.

Exototi does not sell your personal data to any party. However, in the course of operating the platform, we may share your data with the following categories of third parties, and only to the extent necessary:

• Payment Service Providers — DuitNow, FPX, and e-wallet providers to process your financial transactions.
• Game Providers — Pragmatic Play, Evolution, PG Soft, and other providers that require minimal session data to enable gameplay.
• KYC Service Providers — Third parties that assist with legally mandated identity verification processes.
• Statutory Authorities — Government authorities or law enforcement when required by law or a valid court order.
• Technical Infrastructure Providers — Cloud and hosting service providers that help operate the platform technically, subject to strict data protection agreements.

All third parties who receive your data are bound by confidentiality and data protection agreements that govern how the data is handled, and they are not permitted to use your data for any purpose other than those specified.

Exototi uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small files stored on your device when you visit our website.

The types of cookies we use include:

• Essential Cookies — Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies — Helps us understand how players use the platform for improvement purposes. Data collected is aggregated and anonymised.
• Preference Cookies — Saving your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies — Helps us analyse traffic and usage patterns for continuous platform improvement.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. Continued use of Exototi is considered consent to the use of cookies as described.

Exototi invests seriously in security infrastructure to ensure your personal data remains protected at all times. The key security measures we implement include:

• 256-bit SSL Encryption for all data communications between you and our servers.
• Data encryption at rest for sensitive information stored in our databases.
• Role-based access control that ensures only authorised personnel can access specific data.
• Regular security audits by independent third parties to identify and address vulnerabilities.
• Active intrusion detection system that monitors network traffic 24/7 to detect threats.
• Two-factor authentication (2FA) available to all player accounts.

While we take all reasonable steps to protect your data, no system can guarantee 100% security against all cyber threats. We encourage you to take your own protective measures, such as using a strong password and enabling 2FA.

As an exototi user, you have certain rights regarding your personal data. exototi is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, you may contact the exototi support team via live chat or email. We will process your request within 30 business days. Please note that some requests may be limited by applicable legal or contractual requirements.

Exototi retains your personal data only as long as necessary for the purposes stated in this Privacy Policy or as required by law. The general principles we follow are:

• Active account data — Retained for the duration your account is active and for an additional period after account closure for regulatory compliance purposes.
• Financial transaction records — Retained for a minimum of 7 years as required by financial and anti-money laundering legal requirements.
• Support communication data — Retained for 3 years for reference and dispute resolution purposes.
• Technical and security logs — Retained for 12 months for security and fraud detection purposes.
• Analytics cookie data — Retained for the period specified in each cookie's settings, typically between 30 days and 2 years.

Once the relevant retention period has ended, data is securely deleted or anonymised so it can no longer be linked to any specific individual.

As a globally integrated platform, your personal data may be transferred to servers located outside Malaysia. Exototi ensures that any such data transfers are safeguarded with protections equivalent to Malaysian standards.

The protective measures we implement for cross-border data transfers include:

• Ensuring the recipient country has an adequate level of data protection.
• Using standard data transfer agreements that bind recipients to strict data protection standards.
• Complying with applicable notification and consent requirements prior to transfer.

Exototi reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any material changes will be communicated to you via:

• In-platform notification on your next login to Exototi.
• Email to your registered address for significant changes.
• Updates are reflected on the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Your continued use of the Exototi platform after any amendments are published indicates your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our privacy team Exototi through the following channels:

• Live Chat — The fastest way to get immediate assistance, available 24/7 within the exototi platform.
• Support Email — [email protected] for written enquiries requiring an official record.

For requests relating to personal data rights, please include your full name, registered email address, and a brief description of your request. We will verify your identity before processing any request in order to protect your privacy.

Exototi is committed to responding to all privacy inquiries within a reasonable timeframe and in a respectful, professional manner. Your satisfaction and trust are our top priority.