Exxototo takes the privacy and security of every player's personal data seriously. This document clearly explains how we collect, use, store, and protect your information — without confusing legal language.
Privacy is more than a written policy — it is a real commitment we uphold every day through rigorous technology and procedures.
All data transmitted between your device and exxototo servers is protected by 256-bit SSL encryption — the same level of security used by leading financial institutions and banks in Malaysia. No third party can intercept or read your data in transit.
Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and real-time intrusion detection systems. Only authorised personnel have limited access to your data, strictly on a need-to-know basis.
Exxototo has never and will never sell, rent, or share your personal data with third parties for marketing purposes without your explicit consent. Your data belongs to you — we only use it to provide you with a better service directly.
You have full rights to access, correct, download, or request deletion of your personal data at any time. This process can be initiated through your account settings or by contacting our privacy team — no complicated procedures required.
The exxototo cybersecurity team monitors our platform 24 hours a day, 7 days a week to detect and respond to any data security threats promptly. Independent security audits are conducted periodically by qualified third parties.
Exxototo complies with Malaysia's Personal Data Protection Act (PDPA) and relevant international data protection standards. We ensure all our data handling practices are kept current with legislative changes and the latest guidelines.
Exxototo ("we", "Platform") is an online casino and wagering games platform operator, operating under the domain exxototo.app. We understand that your trust is the foundation of our relationship, and that trust begins with how we handle your personal information.
This Privacy Policy is written in plain, easy-to-understand language because we believe you have the right to know exactly what happens with your data — not buried in hard-to-read legal jargon. We have made every effort to explain each aspect as directly and transparently as possible.
This document explains the types of personal data we collect, why we need it, how we use it, who may view it, and your rights regarding that data. If at any time you have questions or concerns about your privacy at exxototo, our privacy team is here to help.
Exxototo collects various types of personal data depending on the nature of your interaction with our platform. Below is an overview of the data categories we process:
| Data Category | Examples of Information | Required? |
|---|---|---|
| Personal Identification Information | Full name, date of birth, identification card number (MyKad) | Yes |
| Contact Information | Email address, phone number, residential address | Yes |
| Account Information | Username, password (encrypted), login history | Yes |
| Financial Data | Bank account details, deposit and withdrawal history, transaction records | Yes |
| Game Data | Game history, betting records, performance, and platform activity | Automatic |
| Technical Data | IP address, device type, web browser, operating system, cookie data | Automatic |
| KYC Documents | MyKad copy, proof of address, screenshot of payment method | For withdrawals |
Your personal data is collected through several key channels when you interact with the exxototo platform:
Every piece of data we collect has a clear and legitimate purpose. exxototo does not collect data for the sake of it — every item of information is used for the following purposes:
Exxototo does not sell your personal data. However, in the course of operating the platform, there are certain situations where we need to share some of your information with trusted third parties:
All third parties with whom we share data are bound by strict data protection agreements and are only permitted to use your data for the specific agreed purposes. exxototo remains responsible for ensuring all our partners uphold high privacy standards.
Your data security is the absolute priority at exxototo. We continuously invest in the latest security infrastructure and procedures to ensure your information is always protected.
Exxototo uses cookies and similar tracking technologies to enhance platform functionality and user experience. Cookies are small text files stored on your device when you visit our website.
You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and your experience on the exxototo platform.
Under Malaysia's Personal Data Protection Act (PDPA) and the privacy principles we uphold, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you in a readable format.
Request correction of inaccurate or incomplete data about you.
Request deletion of your personal data, subject to our legal obligations.
Object to the processing of your data for specific purposes such as direct marketing.
Receive your data in a structured format that can be transferred to another platform.
Request restriction of your data processing under certain permitted circumstances.
Exxototo retains your personal data only for as long as necessary for the purposes stated in this policy or as required by law. Below is a guide to our data retention periods:
When the retention period expires or you request data deletion (subject to eligibility), exxototo will securely delete or anonymise your data using industry-recognised methods.
The exxototo platform may contain links to or be integrated with certain third-party services such as game providers, payment processors, and identity verification providers. This Privacy Policy applies only to the exxototo platform and does not cover the privacy practices of any third party.
Exxototo is not responsible for the privacy policies or data handling practices of third parties. We encourage you to read the privacy policy of any third-party service you use alongside our platform. Nonetheless, all our third-party partners are selected based on high security and privacy standards.
Exxototo reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technology, legal requirements, or other legitimate reasons. The "Last Updated" date at the top of this page will always show the date of the most recent amendment.
For material and significant changes, exxototo will notify active players via in-platform notifications or email at least 7 days before the changes take effect. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or how exxototo handles your personal data, our privacy team is ready to assist. We are committed to providing accurate, clear, and helpful responses in a timely manner.
We aim to respond to all privacy enquiries within 3 business days and data subject rights requests within 14 business days. For more complex cases requiring in-depth investigation, we will notify you of the expected timeframe.
Our platform is designed not only to deliver the best gaming experience, but also to ensure your privacy and data security are protected at all times.