Privacy Policy Coloktoto – Our Commitment to Protecting Your Personal Data

Coloktoto Privacy Policy – Full Explanation

This Privacy Policy explains how Coloktoto ("Platform", "We") collects, uses, stores, discloses, and protects your personal information ("Member", "You") when you use our website and services at coloktoto.my. This document is written in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering an account or using any Coloktoto service, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our platform.

1. Information We Collect and How We Collect It

Coloktoto collects your personal information through several key channels. Understanding how this information is gathered helps you make more informed decisions about the data you share with us.

Information you provide directly:

• During account registration: your full name, date of birth, email address, phone number, and your chosen password.
• During the identity verification (KYC) process: a copy of your MyKad or passport, and potentially other supporting documents depending on compliance requirements.
• When making a deposit or withdrawal: information related to your chosen payment method — whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks). Coloktoto does not store your full debit or credit card number — this sensitive information is handled directly by licensed payment processors.
• When contacting customer support: the content of your communications with the Coloktoto support team, including emails and chat records.

Automatically collected information:

• Platform usage data: games played, matches wagered on, session times and duration, visit frequency, and in-platform activity records.
• Technical data: IP address, device type, operating system, browser type, and language settings.
• Cookie data: Coloktoto uses session cookies and preference cookies to enhance the user experience. Analytics cookies are used to understand usage patterns on an aggregated, anonymous basis.

2. How We Use Your Personal Information

Coloktoto uses the personal information collected for the following purposes only:

• Account management: Creating and maintaining your Coloktoto account, processing logins securely, and handling identity verification requests.
• Financial transaction processing: Processing deposits and withdrawals using your chosen payment method, verifying ownership of your payment account, and maintaining accurate transaction records.
• Platform security: To detect and prevent fraud, hacking, money laundering, and other suspicious activity, and to analyse usage patterns for identifying security risks.
• Legal compliance: To comply with Malaysia's PDPA, anti-money laundering (AML) reporting requirements, and directives from relevant regulatory authorities.
• Service improvement: Understanding how members use the platform in order to improve the interface, add in-demand games, and enhance the overall quality of Coloktoto's services.
• Service communications: Sending important notifications regarding your account, changes to our terms, or security issues that require your attention.
• Marketing communications (with your consent): Sending you information about promotions, bonus offers, and new games on Coloktoto — but only if you have given consent to receive such communications during registration or at a later time.

3. Disclosure of Information to Third Parties

Coloktoto does not sell, rent, or trade your personal information to third parties for marketing purposes. However, there are limited circumstances where we may need to share your information with carefully selected third parties:

• Licensed payment processors: Information required to process your transactions is shared with licensed and authorised payment service providers in Malaysia — including e-wallet providers and banking institutions. All such parties are bound by strict confidentiality agreements and relevant data protection regulations.
• Game software provider: The minimum information required to activate and verify your gameplay is shared with licensed game providers (such as Pragmatic Play, PG Soft, Evolution Gaming, and others). This is a technical requirement for the service to function properly.
• Regulatory authorities and law enforcement: Coloktoto may be required to disclose certain information to Malaysian government authorities or law enforcement agencies when lawfully requested via a court order or relevant regulatory directive.
• Technical service providers: Companies that assist us with the technical operation of the platform — such as cloud computing services, security systems, and platform analytics — may have limited access to data in their capacity as service providers. All such vendors are bound by strict data processing agreements.

4. Data Storage and Retention Periods

Coloktoto stores your personal information in secure, encrypted server systems. Access to this data is restricted to staff who require it to perform their duties, and all access is logged and monitored.

Regarding data retention periods:

• Active account data is retained for the duration your account remains active on the Coloktoto platform, plus any additional period required by Malaysian law (typically 7 years for financial records).
• Financial transaction records (deposits, withdrawals, betting history) are retained in accordance with Malaysia's applicable anti-money laundering and taxation legal requirements.
• Communication logs with the customer support team are retained for 2 years for complaint resolution and service quality improvement purposes.
• Following account closure, your personal information will be deleted or anonymised within a reasonable timeframe, unless a longer retention period is required by applicable law.

Coloktoto employs secure data deletion procedures to ensure that information no longer required, or requested for deletion by a member, is disposed of in a manner that prevents recovery of that data.

5. Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Coloktoto's internal policies, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the Coloktoto privacy team at support@coloktoto.my by stating the right you wish to exercise along with your account details for identity verification purposes. Coloktoto is committed to responding to all privacy rights requests within a reasonable timeframe.

6. Information Security & Technical Measures

Coloktoto continuously invests in its security infrastructure to ensure your personal data remains protected at all times. The technical and operational security measures we have in place include:

• Data encryption in transit: All communications between your browser or app and Coloktoto's servers are encrypted using TLS/SSL 256-bit protocol — meaning the data you transmit cannot be read by unauthorised parties even if intercepted.
• Data encryption at rest: Sensitive data stored in Coloktoto's databases is encrypted using industry-standard encryption. Your account password is stored in hashed form and cannot be decrypted by our staff.
• Internal access controls: Only Coloktoto staff who require access to specific data in order to perform their duties are granted permission — based on the principle of least privilege. All access to sensitive data is logged and regularly audited.
• 24/7 security monitoring: The Coloktoto system is continuously monitored by our internal security team and automated intrusion detection systems to identify and respond to threats promptly.
• Regular security audits: Coloktoto conducts regular security assessments and penetration testing to identify and address any vulnerabilities before they can be exploited.
• Staff training: All Coloktoto staff who handle personal data receive comprehensive data protection training and are bound by legally enforceable confidentiality agreements.

7. Cookies, Tracking Technologies, and Analytics

Coloktoto uses cookies and similar tracking technologies to enhance your experience on our platform. Here is an overview of the types of cookies we use:

• Required session cookies: These cookies are essential for the platform's core functions — such as maintaining your login status during an active session and saving your language preferences. Without them, certain platform features may not function properly.
• Preference cookies: These cookies save your personal preferences — such as display settings and game preferences — so you don't have to reconfigure them each time you log in.
• Analytics cookies: We use aggregated, anonymised analytics data to understand overall platform usage patterns — such as the most-played games, user navigation paths, and technical performance issues. This data cannot be used to directly identify any individual.
• Security cookies: Used to detect suspicious activity, prevent unauthorised access, and protect your account from attacks such as CSRF (Cross-Site Request Forgery).

You can control and manage cookies through your web browser settings. Instructions for managing cookies on popular browsers such as Chrome, Firefox, Safari, and Edge are available on their respective support pages. Please note that disabling required cookies may affect your ability to use certain features of the Coloktoto platform.

8. Changes to This Privacy Policy

Coloktoto may update this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or developments in the technologies we use. Any changes will be published on this page with a revised "Last Updated" date.

For significant changes that materially affect your privacy rights, Coloktoto will send a notification via email to the address registered on your account at least 14 days before those changes take effect. Continued use of the platform after the effective date of such changes constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy page periodically to stay informed about how Coloktoto protects your information. If you have any questions or concerns regarding changes to this Privacy Policy, please contact us at support@coloktoto.my before the effective date of those changes.