Logototo Privacy Policy – Malaysian Member Personal Data Protection

Logototo is an online sports betting and entertainment platform operating exclusively for the Malaysian market. We understand that member trust is our most valuable asset — and that trust begins with robust data protection and transparent privacy practices.

This Privacy Policy is a legally binding document that details how Logototo handles your personal data. "Personal data" in this context refers to any information that can identify you as an individual, whether directly or indirectly.

We operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), and we take our responsibilities as a data controller seriously. This means we do not collect excessive data, do not retain data longer than necessary, and do not disclose your data without a legitimate and well-founded reason.

If at any time you have concerns about how we handle your personal data, the Logototo privacy team can be reached directly via our support email. We are committed to responding within 48 hours to every privacy-related inquiry.

Logototo collects your personal data through several different methods depending on your interactions with our platform. Generally, the data we collect is divided into three main categories:

We only collect data that is genuinely necessary for the stated purposes. Logototo does not request irrelevant information or sensitive data beyond our operational requirements. All data collection is carried out transparently, and you will be informed of its purpose at the time of collection.

The personal data we collect is used solely for legitimate, stated purposes. We do not use your data for any other purpose without obtaining your consent first.

• Account management: Creating and maintaining your member account, verifying your identity at login, and enabling access to all Logototo services.
• Transaction processing: Processing deposits, withdrawals and bonus payments securely and promptly through trusted payment partners.
• KYC verification: Complying with legal requirements relating to identity verification and anti-money laundering (AML) as mandated by the relevant authorities.
• Security and fraud prevention: Detecting suspicious activity, preventing unauthorised access, and protecting your account and funds from security threats.
• Service communications: Sending important notifications relating to your account, security updates, policy changes, and transaction information.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problematic gambling behaviour and offer appropriate assistance.
• Platform enhancement: Analysing usage data in aggregated and anonymised form to improve platform features, performance and overall user experience.
• Marketing communications: Sending offers, promotions and product-related information — only to members who have consented to receive such communications.

Every data processing activity we carry out has a valid legal basis, whether grounded in your consent, contractual necessity, legal obligation, or the legitimate interests of logototo that do not override your rights and freedoms.

Logototo invests seriously in enterprise-grade cybersecurity infrastructure to ensure your personal data is always protected. Our security systems are built in multiple layers to defend against any threats that may arise.

• 256-bit SSL encryption: All data transmitted between your device and logototo's servers is encrypted using the latest TLS 1.3 protocol, rendering any data interception attempt meaningless.
• Secure data storage: Personal data is stored on servers protected by multi-layered firewalls, intrusion detection systems (IDS), and strict physical access controls.
• Internal access controls: Only Logototo staff with a legitimate operational need are permitted to access member personal data. All access is logged and continuously monitored.
• Backup and recovery: Data is regularly backed up to secure, geographically distributed locations to ensure service continuity under any emergency circumstances.
• Retention period: Personal data is retained for as long as your account is active and for an additional period required by applicable law following account closure — typically no more than seven years for financial records.

Logototo does not sell your personal data to any third party. However, in the course of our operations, there are certain situations where we need to share some of your information with trusted parties. This is done solely on the basis of legitimate need and is limited to the minimum information required.

• Payment processors: Payment partners such as FPX, bank transfers, and digital wallet providers receive only the information necessary to process your transactions securely.
• Identity verification service provider: Third parties that assist us in the KYC process and identity document verification to meet legal requirements.
• Game service provider: Game developers and online casinos providing content on the Logototo platform may receive session data necessary for game operations.
• Legal authorities: Logototo will disclose personal data to law enforcement agencies or regulatory bodies when required by law or a valid court order.
• Affiliated companies: In certain cases, companies within the same group as Logototo may access your data for integrated operational purposes — subject to the same level of protection.

All third parties with whom we share data are bound by strict confidentiality agreements and are required to comply with data protection standards equal to or higher than our own. We conduct due diligence checks on all partners before any data sharing takes place.

The Logototo platform uses cookies and similar tracking technologies to enhance user experience, ensure account security, and understand how our platform is used. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and account security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Storing your preferences such as language, theme and display settings so you do not need to reconfigure them on every visit.
• Analytics Cookies: Collecting aggregated and anonymised data on how visitors use our platform for service improvement purposes only.
• Security Cookies: Used to detect and prevent fraudulent activity, suspicious login attempts, and other security threats.

You can manage cookie settings through your web browser. Please note, however, that disabling certain cookies may affect the functionality and security of the Logototo platform. We do not use third-party cookies for advertising or cross-site tracking purposes.

As a logototo member and data subject under Malaysia's PDPA, you have the following rights, which you may exercise at any time:

To exercise any of the above rights, contact our privacy team at [email protected] by stating the right you wish to exercise along with your account ID number. We will process your request within 30 days and provide a detailed response.

Logototo reserves the right to amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data. Any material amendments will be communicated to you via:

• In-platform notifications that will be displayed upon your next login
• Notification email sent to the email address registered with your account
• An announcement on the Logototo homepage for 30 days prior to the changes taking effect

The "Updated" date shown at the top of this document and in the hero section above always reflects the date of the latest version of this Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal information.

Your continued use of the Logototo platform after any amendment takes effect will be deemed as your acceptance of the updated policy. If you disagree with any changes, please discontinue use of the platform and contact us to close your account.