Coitoto Privacy Policy – Malaysian Member Personal Data Protection

Coitoto ("we", "Platform"), operating under the domain coitoto.fun, is an online entertainment platform committed to protecting the personal data of all its users. This Privacy Policy ("Policy") describes our practices for collecting, processing, storing, and safeguarding the personal information you provide or that we collect through your use of our platform.

This policy applies to all coitoto platform users, including visitors, registered members, and any party interacting with our services. It covers all access channels including the desktop website, mobile version, and any related applications we offer.

By registering as a member or continuing to use our platform after this Policy is published, you consent to the processing of your personal data as described in this document. If you disagree with any aspect of this Policy, please discontinue use of the platform and contact us to close your account.

Coitoto collects your personal information through several different means. Below is a comprehensive summary of the types of data we collect and their sources:

We only collect data that is strictly necessary for platform operations. Data that is no longer needed will be deleted in accordance with our data retention schedule.

Coitoto uses your personal data for the following purposes, all of which are necessary for the safe and effective operation of the platform:

• Identity verification and KYC: Ensuring all members are real individuals who meet the minimum age requirement of 18 years and comply with legal compliance requirements.
• Account management: Creating and maintaining your account, processing secure logins, and handling account-related requests.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Customer service: Addressing enquiries, resolving disputes, and providing technical support to members.
• Fraud prevention: Detecting and preventing suspicious activity, money laundering, and unauthorised use of the platform.
• Personalise your experience: Recommending relevant games and customising the platform display based on your preferences.
• Important communications: Sending account-related notifications, security updates, and necessary transaction information.
• Legal compliance: Fulfilling reporting obligations to relevant authorities in accordance with applicable law.

Your data security is coitoto's top priority. We implement multiple layers of technical and operational protection to keep your information safe at all times:

• 256-bit SSL encryption: All data transmitted between your browser and coitoto's servers is protected with high-grade SSL encryption. This ensures no third party can intercept or read your information in transit.
• Database encryption: Sensitive data such as financial information and KYC documents are stored in encrypted format within our databases. Even if an attacker gains physical access to the servers, the data cannot be read without the appropriate encryption key.
• Two-factor authentication (2FA): Our system supports two-factor authentication for an additional layer of security during login.
• Continuous monitoring: Our security system monitors platform activity around the clock to detect any unauthorized access attempts or suspicious behavior.
• Regular penetration testing: coitoto conducts regular security testing by independent third-party expert teams to identify and patch any vulnerabilities before they can be exploited.

Coitoto only shares your personal data in very limited situations and with strict controls in place. We do not sell your data to any party. Data sharing only occurs in the following circumstances:

• Payment service providers: Data required to process financial transactions is shared with approved payment processors, who are bound by strict data protection agreements.
• Game service providers: Third-party game providers may receive the minimum data necessary to operate their games on our platform.
• Legal authorities: coitoto will disclose data when required by court order, regulatory directive, or applicable legal obligation.
• Fraud prevention: Data may be shared with recognised industry bodies or fraud prevention agencies in cases involving fraud or money laundering.
• Business transfer: In the event of a company merger or acquisition, data may be transferred with the same privacy protections maintained.

All third parties we share data with are bound by strict confidentiality agreements and are prohibited from using that data for any purpose other than what is specified in their service agreement with coitoto.

Coitoto uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences for a smoother return experience.
• Analytics Cookies: Helping us understand how players use the platform so we can continuously improve the user experience. This data is collected in aggregate and anonymised form.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect your ability to use certain features on the coitoto platform. For guidance on managing cookies in your browser, please refer to your browser's documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

To exercise any of the above rights, please contact the coitoto support team via email at [email protected] or via live chat on the platform.

Coitoto retains your personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable law.

• Active account data: Retained for the duration your account is active and for a reasonable period thereafter for support and dispute purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial and tax legal requirements in Malaysia.
• KYC documents: Retained for a minimum of 5 years after account termination in accordance with anti-money laundering compliance requirements.
• Support communication logs: Retained for 3 years after the case is resolved.
• Technical data and system logs: Retained for 12 months for security and fraud detection purposes.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to any individual. The deletion process follows industry standards for secure data disposal.

Coitoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business circumstances. Any material changes will be communicated to members via platform notifications or their registered email.

The latest version of the Privacy Policy is always available on this page. The "Last Updated" date at the top of this document indicates when the current version took effect. Continued use of the platform after changes are published is considered your acceptance of the updated policy.

For any inquiries, concerns, or requests regarding your privacy and personal data, please contact us via:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live chat: Available 24/7 on the coitoto platform