Data Protection

Exotito Privacy Policy — Malaysia Member Personal Data Protection

Your privacy is our priority. This document clearly explains how exotito collects, uses, stores, and protects your personal information at all times.

Effective: 1 January 2026  |  Version 3.5

Important Note: By using the exotito platform, you agree that your personal data will be processed in accordance with this privacy policy. We respect your right to privacy and are committed to ensuring your information is handled in a safe, responsible, and transparent manner. This policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Introduction

Exotito ("we", "Platform") values the privacy of every member who uses our services. This privacy policy outlines our data management practices — from the types of data we collect, why it is collected, how it is used, and the measures we take to protect it.

We understand that your trust in us depends largely on how we handle your personal information. That is why we strive to remain transparent and clear in all matters relating to your personal data.

This policy applies to all registered exotito members, website visitors, and anyone who interacts with our platform through any device or communication channel.

If you have any questions about how we handle your data, the exotito data protection team can be reached via live chat on the platform or through our support email.

2. Personal Data We Collect

Exotito only collects data that is genuinely necessary to provide you with a safe, fair, and integrated service. We do not collect data excessively.

Data Category Example Information How It Is Collected
Identity Information Full name, date of birth, MyKad/passport number Registration & KYC
Contact Information Email, phone number, residential address Account Registration
Financial Data Bank account details, e-wallet information, transaction history Deposits & withdrawals
Game Data Betting history, wins, game preferences Activity on the platform
Technical Data IP address, device type, browser, cookie data Collected automatically during use
Communication Data Correspondence with customer support Interaction with our team

Sensitive data such as medical information or religious background does not collected by exotito unless required by applicable law.

3. How We Use Your Data

Every piece of data we collect has a specific and legitimate purpose. We do not use your data for any purpose beyond what is stated here:

  • Account Management: Creating, verifying, and managing your exotito account, including any required KYC processes.
  • Service Provision: Allows you to access all games, make deposits, process withdrawals, and use all platform features.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, or platform abuse.
  • Legal Compliance: Fulfilling legal and regulatory obligations applicable to exotito.
  • Platform Improvement: Analysing usage patterns to improve the user experience and develop more useful new features.
  • Communications: Sending important account-related information, platform updates, and relevant offers (subject to your communication preferences).
  • Customer Support: Helps resolve your issues and enquiries more effectively.
Exotito does not sell your personal data to third parties for marketing or commercial purposes. This is our absolute commitment.

4. Sharing Information with Third Parties

Exotito only shares your personal data in limited and necessary circumstances. The following are situations in which data sharing may occur:

  • Service Providers: Payment processors, gaming software providers, and technology vendors who help us operate the platform — all bound by strict confidentiality agreements.
  • Legal Requirements: Government authorities, law enforcement agencies, or courts when required by Malaysian law or a valid court order.
  • Fraud Prevention: Certified industry bodies or fraud prevention agencies for the purpose of platform security and member protection.
  • Business Transfers: In the event of a merger, acquisition, or asset transfer, data will be transferred subject to equivalent privacy protections.

All third parties who receive your data are subject to strict data processing agreements and are required to protect your information to a level no less than exotito's own standards.

We do not transfer your data outside Malaysia unless it is necessary to provide our services and with adequate protection safeguards in place at the destination.

5. Security of Your Personal Data

Exotito invests seriously in security infrastructure to ensure your data is always protected. The security measures we implement include:

  • 256-bit SSL Encryption: All data transmitted between your device and exotito servers is encrypted using the highest industry standards.
  • Secure Data Storage: Sensitive data is stored in controlled databases with strict access controls and continuous monitoring.
  • Two-Factor Authentication (2FA): Available to all accounts for added protection against unauthorized access.
  • Regular Security Audits: Our systems undergo penetration testing and security audits by independent parties on a regular basis.
  • Real-Time Monitoring: Intrusion detection systems operate 24/7 to identify and respond to security threats.
  • Staff Training: All exotito staff who handle personal data receive comprehensive data protection training.
While no system can be guaranteed 100% secure, exotito applies the best available industry standards to minimize the risk of a data breach to the lowest possible level.

6. Cookies and Tracking Technologies

Exotito uses cookies and similar tracking technologies to enhance your experience on the platform. Understanding how we use cookies helps you make more informed choices.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as staying logged in and session security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting anonymous information about how the platform is used to help us improve the overall user experience.
  • Functional Cookies: Remembering your preferences such as language and display settings so you do not have to reconfigure them each time.
  • Analytical Cookies: Helps us understand usage patterns within the platform for continuous improvement purposes.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the exotito platform.

7. Your Rights Over Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and exotito's policy, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request a correction. Profile updates can be made directly through your exotito account settings.

Right to Withdraw Consent

You may withdraw consent for certain data processing at any time, particularly for marketing communications, without affecting the validity of prior processing.

Right to Object

You may object to the processing of your data for specific purposes such as direct marketing. We will act on your objection promptly.

Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data, subject to legal obligations and ongoing operational requirements.

To exercise any of the above rights, contact the exotito data protection team via live chat on the platform or our support email. We will respond within 14 business days.

8. Data Retention & Deletion

Exotito only retains your personal data for as long as necessary for the purposes stated in this policy, or as required by applicable law.

  • Active Account Data: Retained for as long as your account is active and for a minimum of 7 years after account closure for legal compliance purposes.
  • Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
  • KYC Data: Retained for a minimum of 5 years after the business relationship ends.
  • Communication Logs: Retained for 2 years for dispute resolution and service improvement purposes.
  • Cookie Data: Retention periods vary by cookie type, ranging from session-only to a maximum of 2 years.

Once the retention period expires or data is no longer needed, exotito will delete or anonymise that data securely and irreversibly.

9. Child Protection

Exotito is a platform restricted to users aged 18 and above only. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that personal data of an individual under 18 years of age has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.

If you have information that a minor has registered on the exotito platform, please notify our support team immediately so that appropriate action can be taken.

10. Amendments to the Privacy Policy

Exotito reserves the right to update or amend this privacy policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments.

When significant changes are made to this policy, we will notify you via email or an in-platform notification at least 7 days before the changes take effect. For minor changes that do not materially affect your rights, we may only update the amendment date at the top of this document.

Your continued use of the exotito platform after the effective date of any amendment to this privacy policy will be considered your acceptance of the updated policy.

11. Contact Our Data Protection Officer

Exotito has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this privacy policy and handling personal data-related enquiries.

For any inquiries, complaints, or requests related to your data privacy, you may contact us via:

Platform Live Chat
Available 24/7 in your account
Data Protection Email

For information on your rights and responsibilities as a user, please also refer to Terms and Conditions our platform.

Our Privacy Commitment

Five Ways exotito Protects Your Data

Data protection is not just about legal compliance — for us, it is about trust.

End-to-End Encryption

Every bit of data moving between your device and exotito servers is protected by 256-bit SSL encryption — the same standard used by major banking institutions.

No Data Sales

Your personal data is never sold, rented, or shared for commercial purposes with any third party. This is a promise we make to every exotito member.

Malaysia PDPA Compliance

All data management practices at exotito are designed and audited to comply with Malaysia's Personal Data Protection Act 2010 and international data protection standards.

Control Is in Your Hands

Through your account settings, you can manage communication preferences, update your information, and submit data-related requests at any time.

Regular Independent Audits

Exotito's data management systems and practices undergo regular security audits by experienced independent audit firms to ensure standards are maintained.

Data Breach Notification

In the event of a data breach affecting you, we are committed to notifying you within the timeframe required by law and explaining the steps taken.

Your Data Is Safe with Exotito

Register your exotito account with confidence — your privacy and data security are our number one priority in every decision we make.

Register an Account Now Login
By registering, you agree to the Terms and Conditions and Privacy Policy exotito.
Bahasa Melayu