Kesiritoto Privacy Policy — Malaysia Member Data Protection

Welcome to the kesiritoto Privacy Policy. This document is designed to provide full transparency to all members and visitors of the kesiritoto platform regarding our personal data management practices.

Kesiritoto is committed to protecting your privacy and ensuring that all personal information we collect is managed in a responsible, transparent manner and in compliance with applicable laws, including Malaysia Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all information collected through:

• The kesiritoto.com website and all associated subdomains.
• Kesiritoto mobile app for Android and iOS.
• Interactions with the kesiritoto customer support team through any channel.
• Any other services operated under the kesiritoto brand.

By using the kesiritoto platform, you agree to the data collection and usage practices described in this policy. If you do not agree with any part of this policy, you should stop using the kesiritoto services.

Kesiritoto collects various types of information depending on how you interact with our platform. The following are the main categories of data collected:

The personal information we collect is used solely for the following purposes:

• Account management: To process registration, verify identity, and enable secure login to your account.
• Transaction processing: To process deposits, withdrawals, and any other financial transactions related to your account.
• KYC verification: To fulfil legal requirements related to customer identity verification and anti-money laundering.
• Customer support: To assist you in resolving any issues, enquiries, or complaints related to your account and use of the platform.
• Platform security: To detect and prevent fraud, unauthorised access, and other harmful activities on the platform.
• Service improvements: To analyse usage patterns and improve the user experience and platform functionality.
• Communications: To send important notifications related to your account, security, and policy changes that affect you.
• Legal compliance: To meet legal obligations and respond to requests from legitimate enforcement authorities.

Kesiritoto does not sell, rent, or trade members' personal information to any third party. However, in certain situations, we may need to share information with the following parties:

• Payment service providers: To process your financial transactions, the required information is shared with approved payment processors and is subject to strict confidentiality agreements.
• Technology service providers: Companies that help us operate the platform infrastructure, data storage, and cybersecurity — all subject to data protection agreements.
• Law enforcement agencies: If required by a court order, warrant, or lawful directive from a competent authority.
• Fraud prevention agencies: For the purpose of verifying identity and preventing financial fraud, subject to limits set by applicable law.

All third parties sharing data with kesiritoto are required to comply with data protection standards equivalent to or stricter than kesiritoto's own standards.

Kesiritoto continually invests in security infrastructure to ensure your data remains protected at all times. The following are the key security measures we have in place:

Your personal data is retained for as long as necessary to fulfil the purpose of collection or as required by applicable law. Financial transaction records are kept for a minimum of seven years in accordance with Malaysia's financial regulations.

The kesiritoto platform uses cookies and similar tracking technologies to enhance user experience and platform security. The types of cookies we use are:

• Essential Cookies: Required for the platform to function properly — including login session management and security. These cookies cannot be disabled.
• Performance Cookies: To gather information on how you use the platform to help us identify and resolve technical issues.
• Functional Cookies: To save your preferences such as language, display settings, and login details for your convenience.
• Analytics Cookies: To help us understand aggregate usage patterns for platform improvements — this data is not linked to individual identities.

As a kesiritoto member and an individual whose data we process, you have the following rights under applicable data protection laws:

The kesiritoto platform is intended for users who are 18 years and above only. kesiritoto does not intentionally collect any personal information from individuals under the age of 18.

If we find that we have collected data from an individual under the age of 18 without valid parental or guardian consent verification, we will take immediate steps to delete that information and close the relevant account.

The kesiritoto platform integrates with several third-party services to provide a more complete experience for members — including payment processors, game providers, and technology infrastructure suppliers.

Each of these third-party services has its own privacy policy governing how they handle data. kesiritoto is not responsible for the privacy practices of those third parties, although we ensure all our partners meet strict data security standards before any data sharing takes place.

We recommend reading the privacy policy of each third-party service you use within the kesiritoto ecosystem to fully understand how your data is managed.

Kesiritoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Members will be notified of any material changes via:

• Notices prominently displayed on the kesiritoto platform homepage.
• Notification emails sent to your registered email address.
• Push notifications via the kesiritoto mobile app.

The "Updated" date at the top of this document indicates the date of the latest revision. Your continued use of the kesiritoto platform after any amendment takes effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how kesiritoto manages your personal data, please contact us through the following channels:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available on the kesiritoto platform, 24 hours a day, 7 days a week

Kesiritoto is committed to responding to all privacy-related enquiries within 14 business days from the date of receipt. For cases requiring further investigation, we will notify you of a more precise timeframe.