Privacy Policy Rupiahtoto – Your Information Is Safe With Us

1 Introduction & Scope of Privacy Policy

Rupiahtoto ("we", "Platform", or "company") is a trusted digital entertainment platform operator in Malaysia. We understand that privacy is a fundamental right of every individual, and we take this responsibility seriously across every aspect of our platform's operations.

This Privacy Policy applies to all users and members who access or use the rupiahtoto platform, whether through our official website or mobile app. It covers all personal data we collect, process, store, and protect when you interact with our services.

We are committed to processing your personal data lawfully, fairly, and transparently in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. If you have any questions about how we handle your personal data, our privacy team is available to assist through the customer support channels available on the platform.

2 Personal Data We Collect

Rupiahtoto only collects personal data that is strictly necessary to provide quality, secure services in compliance with legal requirements. The following are the categories of data we collect:

Data You Provide Directly:

• Registration Information: Full name, date of birth, gender, national ID or passport number
• Contact Information: Email address, mobile phone number, residential address
• Financial Information: Bank account number, account holder name, digital wallet details for deposit and withdrawal purposes
• KYC Verification Documents: Copies of identity documents, utility bills, or other supporting documents required for identity verification
• Communications: Messages or complaints you submit to our customer support team

Automatically Collected Data:

• Technical Data: IP address, web browser type, operating system, screen resolution, device information
• Usage Data: Pages visited, session duration, games played, betting records
• Location Data: General geographic location based on IP address for regional compliance purposes
• Cookies and Session Data: Information stored on your device during platform use

The table below summarises the data categories, purposes of collection, and applicable legal bases:

3 How We Use Your Personal Data

Rupiahtoto uses collected personal data solely for legitimate, clearly stated purposes. We will not use your data for any other purpose without informing you in advance and obtaining your consent where required.

The primary purposes for which your data is used are as follows:

• Service Provision: Creating and managing your account, processing deposits and withdrawals, and enabling access to games and platform features
• Identity Verification (KYC): Verifying your identity in accordance with anti-money laundering (AML) compliance requirements and applicable financial laws
• Account Security: Detecting and preventing fraud, bot usage, collusion, or suspicious activity that could compromise platform integrity
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to members
• Legal Compliance: Fulfilling reporting obligations to relevant authorities when required by law
• Platform Improvement: Analysing usage patterns to improve overall functionality, performance, and user experience
• Service Communications: Sending important account notifications, security updates, and changes to terms
• Marketing (with consent): Sending promotional information, bonus offers, and platform news where you have consented to receive such communications

4 Data Sharing & Disclosure

Rupiahtoto does not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes. However, in the course of operating the platform, we may share your data with selected parties under the following circumstances:

• Technical Service Providers: Companies that assist us in managing platform infrastructure, including cloud service providers, payment systems, and analytics platforms — all bound by strict confidentiality agreements
• Game Providers: Third-party game studios that provide game content require certain minimum data to enable game functions to operate correctly
• Payment Processors: Financial institutions and payment processors that facilitate your deposit and withdrawal transactions
• Law Enforcement Authorities: In circumstances required by a court, legal order, or official investigation by a competent authority
• Professional Advisors: Accountants, lawyers, or auditors subject to professional confidentiality obligations in the course of their duties

5 Cookies and Tracking Technologies

The rupiahtoto platform uses cookies and similar tracking technologies to enhance your user experience and help us understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and game sessions. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Saving your preferences such as language, display settings, and other preferences to deliver a more personalised experience.
• Analytics Cookies: Helps us understand how members use the platform, which pages are most popular, and where technical issues occur — for continuous improvement purposes.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect member accounts from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the rupiahtoto platform.

6 Data Security Measures

Rupiahtoto continuously invests in cutting-edge security infrastructure to ensure your personal data is always protected. The key security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected by banking-grade encryption protocols
• Two-Factor Authentication (2FA): An additional security layer that protects your account from unauthorised access even if your password is compromised
• 24/7 Monitoring: Our security team and automated systems monitor platform activity around the clock to promptly detect threats and anomalies
• Internal Access Controls: Access to members' personal data among our staff is restricted to those who genuinely require it to perform their duties
• Regular Security Audits: Regular independent security assessments to ensure our systems always meet the latest industry standards
• Secure Storage: All data is stored on servers protected by comprehensive physical and digital security controls

7 Data Retention Period

Rupiahtoto retains your personal data only for as long as necessary to fulfil the original purpose for which it was collected, or as required by applicable laws and regulations.

• Active Account Data: Retained for the duration your account is active and for several years after account closure for legal compliance purposes
• Financial Transaction Records: Retained for a minimum of seven years in accordance with Malaysia's financial and tax legal requirements
• KYC Documents: Retained for the period specified by the relevant regulatory authority, generally no less than five years after the business relationship ends
• Support Communication Logs: Retained for three years for reference and dispute resolution purposes
• Analytics Data & Cookies: Session data is deleted after the session expires; aggregated analytics data may be retained longer in anonymised form

When your personal data is no longer required, we will securely delete it using methods that ensure it cannot be recovered or accessed by any party.

8 Your Rights Regarding Personal Data

Under Malaysia's PDPA and the data protection principles we adhere to, you have the following rights regarding the personal data we hold:

To exercise any of the above rights, please contact our privacy team via the customer support section within the rupiahtoto platform. We will process your request within 30 business days. In complex cases, this period may be extended by up to 60 days with prior notice to you.

9 Children's Privacy

The rupiahtoto platform is strictly for users aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18.

Should we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate action to delete that data and close the associated account. Parents or guardians who become aware that their child has registered an account on our platform are required to contact us promptly for a swift resolution.

10 International Data Transfers

In the course of platform operations, your personal data may be processed or stored on servers located outside Malaysia. When this occurs, rupiahtoto ensures such data transfers are carried out with protections equivalent to or exceeding the standards required in Malaysia.

The safeguards we implement for international data transfers include:

• Binding standard data transfer agreements with all international service providers
• Recipient region suitability assessment before any data transfer is carried out
• Standard contractual clauses approved by the relevant data protection authority
• Periodic audits of service providers to ensure ongoing compliance

11 Amendments to Privacy Policy

Rupiahtoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant amendments will be communicated to you via your registered email or a clear in-platform notification at least seven days before the changes take effect.

The date of the latest amendment is always stated at the top of this document. You are encouraged to review this page periodically. Your continued use of the platform after any amendment's effective date is considered your acceptance of the updated Privacy Policy.

12 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the rupiahtoto privacy team is ready to assist you.

You may reach us via:

• Live Support: The live chat function on the rupiahtoto platform operates 24 hours a day, 7 days a week
• Privacy Email: Send your enquiry via the contact form in the platform's support section
• Complaints Department: Use the support ticket system in your account to submit formal complaints related to privacy

We are committed to responding to all privacy-related enquiries within three business days. For cases involving formal data rights requests, we will provide an acknowledgement of receipt within two business days and resolve the request within 30 days.