Privacy Policy exotito — Your Information, Our Responsibility

This Privacy Policy explains how exotito ("we", "Platform") collects, uses, stores, and protects your personal information when you use the exotito.net platform and all related services.

We understand that entrusting your personal information to any online platform requires a great deal of confidence. That is why we strive to be fully transparent about our data practices — not through dense legal language, but with clear, straightforward explanations.

This Policy applies to all users of the exotito platform, including visitors without an account, registered members, active players, and former players. By using our platform, you agree to the practices described in this document.

Exotito collects your personal information through several means — directly from you during registration, automatically as you use the platform, and in certain cases, through legitimate third parties such as payment providers.

We only collect information that is genuinely necessary to provide our services to you. We do not collect excessive or irrelevant data.

The information we collect is used for the following purposes, and only for these purposes:

• Account Management: To create and maintain your account, process logins, and ensure account security.
• Transaction Processing: To process deposits, verify withdrawals, and resolve any payment-related issues.
• Identity Verification (KYC): To meet legal obligations to verify player identity for the prevention of fraud and money laundering.
• Customer Support: To respond to enquiries, resolve complaints, and provide technical support.
• Platform Improvement: To analyse usage patterns and improve the user experience and platform performance.
• Service Communications: To send important notifications relating to your account, transactions, or policy changes.
• Fraud Prevention: To detect and prevent suspicious activity, fraud, or violations of the terms of service.
• Legal Compliance: To fulfil reporting and compliance obligations as required by Malaysian law.

Exotito does not share your personal information with outside parties except in the following limited circumstances:

• Payment Providers: Information required to process deposits and withdrawals is shared with recognised payment providers such as banks and e-wallet operators. This sharing is limited strictly to necessary information only.
• Game Software Providers: Third-party game providers receive the technical data necessary for game operations. They are bound by strict confidentiality agreements with exotito.
• Regulatory Body: Information is shared with relevant authorities when required by law, court order, or official investigation.
• Fraud Prevention: In certain cases, information may be shared with fraud prevention agencies or financial institutions to protect the integrity of the payment ecosystem.

All third parties who receive your data are required to comply with security and privacy standards equal to or higher than those of exotito. We periodically review these data-sharing agreements to ensure ongoing compliance.

Exotito uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device while you browse the website.

We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how players use the platform — pages visited, time spent, and any errors encountered. All data is anonymised.
• Functional Cookies: To save your preferences such as language, theme, and platform settings for a more personalised experience.
• Analytics Cookies: Helps us understand overall usage patterns to improve the platform. Data is collected in aggregate and does not identify individuals.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect platform functionality. More information on managing cookies is available in your browser's documentation.

The security of your data is exotito's highest priority. We continually invest in the latest security infrastructure to ensure your information remains protected at all times.

The security measures we employ include:

• 256-bit SSL Encryption for all communications between your browser and our servers.
• Data encryption at rest — sensitive information such as passwords and financial details is stored in encrypted format.
• Role-based access control — only authorised staff with a specific need may access user data, and every access is logged for audit purposes.
• 24/7 security monitoring with an automated intrusion detection system.
• Penetration testing periodically by independent security experts to identify and close any vulnerabilities.
• Data backup regular backups and disaster recovery procedures to ensure continuity of service.

While we do everything within our power to protect your data, no system is 100% secure. We encourage you to take precautions as well, such as using a strong password and not sharing your account details.

As an exotito player, you have the following rights regarding your personal information, in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010:

To exercise any of the above rights, contact the exotito support team via email at [email protected] with the subject line "Privacy Rights Request". We will process your request within 30 days.

Exotito retains your personal information only for as long as necessary to fulfil the purposes stated in this policy, or as required by Malaysian law.

• Active account data retained for the duration your account is active and for a reasonable period after account closure.
• Financial transaction records retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements.
• Support communication logs retained for 2 years for reference and service improvement purposes.
• Anonymised analytics data may be retained longer as this data cannot be used to identify individuals.

When data is no longer needed, it will be securely deleted or anonymised in accordance with established procedures. You may request early deletion of your data, subject to applicable legal obligations.

Exotito is a platform dedicated to individuals aged 18 and above. We do not knowingly collect or process personal information from minors.

If we find that we have collected information from a minor without proper age verification, we will take immediate steps to delete that information and close the relevant account.

Parents or guardians who suspect their child has registered on the exotito platform are encouraged to contact our support team immediately at [email protected].

Exotito reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform updates. The latest version will always be available on this page.

For significant amendments that affect how we use your personal information, we will notify you via your registered email or in-account notification at least 14 days before the amendment takes effect.

Your continued use of the exotito platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes made, you have the right to close your account before the effective date.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal information, please contact us:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the exotito platform
• Response Time: Privacy-related enquiries are answered within 5 business days

For complaints that cannot be resolved directly with us, you have the right to refer the matter to the Department of Personal Data Protection under the Ministry of Communications and Multimedia Malaysia.

We are committed to resolving every privacy enquiry in an honest, transparent, and timely manner. Your trust is something we never take lightly.