Privacy Policy GolTogel — Your Personal Data Security Is Our Top Priority

1. Introduction & Scope of This Policy

GolTogel takes our responsibilities as your personal data controller seriously. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards in the industry. It applies to all users of the GolTogel platform, including visitors who browse our website without registering an account.

In the context of this policy, "personal data" means any information that can be used to identify you directly or indirectly, including your name, address, phone number, email address, financial information, and device data. GolTogel acts as a responsible data controller and is committed to handling your information in a transparent, fair, and secure manner.

2. Types of Personal Data We Collect

GolTogel collects your personal data in two main categories — information you provide directly and information collected automatically while you use our platform.

Data you provide directly:

• Registration Information: Full name, date of birth, gender, identity card number (MyKad) or passport, email address, and mobile phone number.
• KYC Information: Identity document scans, identity verification selfies, bank statements, and other supporting documents required for account verification.
• Financial Information: Bank account number, bank name, account holder name, and e-wallet details such as Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay registered for deposits and withdrawals.
• Profile Information: Username, language preference, personal settings, and any information you update in your account profile.
• Communications: Records of conversations with the goltogel customer support team via live chat, email, or any other communication channel.

Data collected automatically:

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone settings.
• Usage Data: Pages visited, time spent on the platform, actions taken (clicks, searches, navigation), and overall usage patterns.
• Game Data: Wagering history, total wins and losses, games played, and the time and date of gaming activity.
• Transaction Data: Deposit and withdrawal history, transaction amounts, payment methods used, and the status of each transaction.
• Location Data: Estimated geographic location based on your IP address for regulatory compliance purposes.

3. How We Collect Your Data

GolTogel collects your personal data through several different methods, each designed to ensure only necessary data is gathered:

• Account Registration: When you complete the registration form on the goltogel platform, you voluntarily provide basic personal information required to create your account.
• KYC Process: During identity verification, you submit supporting documents that are securely stored in our encrypted systems.
• Platform Usage: When you browse, play, or interact with any part of the goltogel platform, our systems automatically record technical information and user behavior.
• Cookies & Similar Technologies: Our platform uses cookies, web beacons, and other tracking technologies to automatically collect usage data. Further details are provided in Section 7.
• Direct Communications: When you contact our support team or submit feedback, we record those communications for service improvement purposes.
• Trusted Third Parties: In certain cases, we may receive information about you from payment service providers or identity verification agencies for verification and fraud prevention purposes.

4. Purpose of Use of Your Personal Data

GolTogel uses your personal data only for legitimate and necessary purposes. We do not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent.

The primary purposes for which your data is used are as follows:

• Service Provision: Creating and managing your account, processing deposits and withdrawals, running games, and delivering all services you request.
• Identity Verification (KYC): Verifying your identity to comply with anti-money laundering (AML) legal requirements and fraud prevention.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, account abuse, and any other unlawful activities.
• Account Communications: Sending important account-related notifications such as deposit confirmations, withdrawal approvals, security alerts, and policy updates.
• Customer Support: Handling your enquiries, complaints, and support requests efficiently and effectively.
• Marketing (with consent): Sending you information about promotions, offers, and platform updates where you have consented to receive marketing communications.
• Platform Improvements: Analysing usage patterns to improve the design, performance, and features of the goltogel platform.
• Legal Compliance: Fulfilling our obligations under the PDPA 2010, anti-money laundering laws, and any other applicable regulatory requirements.

5. Data Sharing with Third Parties

GolTogel does not sell or disclose your personal data to third parties for marketing or commercial purposes. However, there are certain situations where we need to share your information with relevant parties:

• Payment Service Providers: Banks, payment processors, and e-wallet providers required to complete your deposit and withdrawal transactions. All such providers are bound by strict confidentiality agreements.
• Game Software Providers: Game development companies that provide game content on the goltogel platform. Data shared is limited to the technical information required to run the games only.
• Identity Verification Agency: Third-party services that assist us in the KYC verification process to confirm the validity of member identities.
• Regulatory Authority: Government agencies, regulatory bodies, or law enforcement authorities when required by law or court order.
• Professional Advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations in carrying out their duties on behalf of goltogel.

6. Data Security Measures

GolTogel continuously invests in sophisticated security infrastructure to ensure your personal data is always protected against unauthorised access, loss, misuse, or accidental disclosure.

The technical security measures we implement include:

• Data Encryption at Rest: All data stored in the goltogel database is protected with AES-256 encryption, the same standard used by financial institutions and government agencies worldwide.
• Data Encryption in Transit: All communications between your device and goltogel servers are conducted via TLS 1.3 protocol, ensuring your data cannot be intercepted during transmission.
• Internal Access Controls: Access to members' personal data within GolTogel staff is restricted on a "need-to-know" basis. All access is logged and regularly audited.
• Regular Security Audits: GolTogel conducts regular penetration testing and security audits by independent cybersecurity firms to identify and address any vulnerabilities.
• Two-Factor Authentication (2FA): goltogel's internal systems enforce 2FA for all staff access, and we encourage members to enable 2FA on their accounts.
• 24/7 Monitoring: The goltogel security team monitors our systems around the clock to detect any suspicious activity or intrusion attempts.

7. Cookies & Tracking Technologies

The goltogel platform uses cookies and other tracking technologies to enhance your experience, analyze platform usage, and deliver relevant content. The following are the types of cookies we use:

• Strictly Necessary Cookies: These cookies are required for core platform functions such as login authentication, session security, and language preferences. The platform cannot operate properly without them and they cannot be disabled.
• Performance Cookies: Collecting information about how visitors use our platform — which pages are most frequently visited and any error messages encountered. This data is used to improve platform performance.
• Functional Cookies: Allowing the platform to remember your preferences such as username, language, and display settings to deliver a more personalised experience.
• Analytics Cookies: Helping us understand how users interact with the platform through aggregated and anonymised data. This data is used solely for internal improvements.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality and your experience on the goltogel platform.

8. Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and best-practice data protection standards, you have the following rights regarding your personal data held by GolTogel:

To exercise any of the above rights, please contact our Data Protection Officer via email at [email protected]. All requests will be processed within 14 business days. We may require identity verification before processing your request to protect the security of your account.

9. Children's Data Protection

Goltogel Platform is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors or underage individuals. Our registration process requires age verification, and any account found to be owned by a minor will be terminated immediately.

If you believe someone under the age of 18 has registered an account on goltogel, please contact us immediately at [email protected] and we will take immediate action to delete the relevant data.

10. Cross-Border Data Transfers

In the context of GolTogel's global operations, your personal data may be processed or stored on servers located outside Malaysia. However, GolTogel ensures that any such cross-border data transfer is carried out with adequate safeguards, including:

• Ensuring the recipient country maintains a level of data protection equivalent to or higher than that required under Malaysia's PDPA.
• Implementing standard contractual clauses that bind data recipients to the protection standards set by goltogel.
• Conducting data protection impact assessments (DPIA) prior to any significant data transfers.

11. Changes to This Privacy Policy

GolTogel reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When material changes occur, we will notify you via:

• In-platform notification on goltogel upon login.
• Email sent to the address registered to your account.
• A prominent notice at the top of this page.

The "Effective Date" at the top of this document will be updated whenever changes are made. We encourage you to review this page periodically. Continued use of the goltogel platform after the updated effective date constitutes your acceptance of the revised policy.

12. Contact Our Data Protection Officer

GolTogel appoints a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and handling all personal data-related inquiries. If you have any questions, concerns, or wish to exercise your rights as a data subject, please contact us:

• DPO Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon within the goltogel platform

We are committed to responding to all privacy-related enquiries within 5 business days and resolve all official data rights requests within 14 business days.