Privacy Policy lakutito — How We Protect the Personal Data of Malaysia Members

1 Introduction

Lakutito ("we", "Platform") respects the privacy of all members and users of our platform. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your personal information when you use the website, mobile app, and all services offered by lakutito.

We understand that privacy is a sensitive and important matter. That is why we ensure every aspect of personal data handling is carried out carefully, in accordance with applicable law, and with respect for the trust you place in us when you register and play on the Lakutito platform.

This policy applies to all information we collect from you across all channels — including account registration, platform use, communications with our support team, and any other interactions with Lakutito.

2 Personal Data We Collect

Lakutito collects various types of information to provide, improve, and protect our services. The following are the categories of data we collect:

Data You Provide Directly:

• Full name as shown on official identification documents
• Date of birth (for age verification, minimum 18 years)
• Email address and mobile number
• Residential address
• Identity card or passport details (for KYC process)
• Bank account or e-wallet information for deposits and withdrawals
• Communications with the customer support team

Data Collected Automatically:

• IP address and device information (device type, operating system, web browser)
• Platform usage data — pages visited, games played, session duration
• General location information based on IP address
• Cookie and related tracking technology data (see Section 8)
• Transaction logs for deposits, withdrawals, and wagering

3 How We Use Your Data

The personal data we collect is used for the following purposes, and only for these purposes:

1. Account Verification & Registration: To verify your identity, process registration, and confirm that you meet the platform's eligibility requirements.
2. Service Provision: To process deposits and withdrawals, manage bonuses and promotions, and provide access to the lakutito game lobby.
3. Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, and unauthorised access to your account.
4. Legal Compliance: To comply with applicable legal requirements, regulations, and regulatory body directives, including KYC and AML obligations.
5. Service Improvement: To analyse usage patterns for the purpose of improving the platform, fixing bugs, and developing useful new features.
6. Communication: To send you important notifications about your account, platform updates, and relevant promotional information — you may opt out of marketing communications at any time.
7. Customer Support: To efficiently process and respond to your enquiries, complaints, and requests.

4 Data Sharing & Disclosure

Lakutito does not sell your personal data to any party. However, we share data in the following limited circumstances:

• Service Providers: Payment providers, game providers, and technology service providers involved in platform operations — all parties are bound by strict data confidentiality agreements.
• Legal Compliance: When required by law, court order, or a lawful request from Malaysian or international government authorities.
• Fraud Prevention: To regulatory bodies or agencies responsible for preventing fraud and financial crime, where there are reasonable grounds to believe that illegal activity is taking place.
• Business Transfers: In the event of a merger, acquisition, or sale of lakutito assets, your data may be transferred to the new entity — you will be notified in advance.
• With Your Consent: For any other purpose that requires your explicit consent.

5 Data Security Measures

Lakutito implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or unintended disclosure:

• Data-in-Transit Encryption: All communications between your device and our servers are protected using 256-bit SSL/TLS encryption.
• Data-at-Rest Encryption: Sensitive data stored in our database is encrypted using the latest industry encryption standards.
• Access Control: Access to members' personal data is restricted on a need-to-know basis — only staff who require access for specific duties are granted permission.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect and respond to any threats or anomalies.
• Two-Factor Authentication: 2FA is available for all member accounts and is mandatory for staff access to sensitive data.
• Regular Security Audits: Vulnerability assessments and penetration testing are conducted periodically by independent parties to ensure system security is continuously maintained.

6 Data Retention Period

Lakutito retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law.

Once the retention period expires, data will be permanently deleted or anonymised in accordance with established procedures.

7 Your Rights Over Personal Data

Under Malaysia's Personal Data Protection Act 2010 and the Lakutito privacy policy, you have the following rights regarding your personal data:

To exercise any of the rights above, you may submit a request via our 24/7 live chat or email us at [email protected]. We will process your request within 30 business days.

8 Cookies & Tracking Technologies

Lakutito uses cookies and similar tracking technologies to enhance your experience on our platform. There are several types of cookies we use:

• Essential Cookies: Required for core platform functions — login, session security, and verification. These cookies cannot be disabled.
• Performance Cookies: Collect information on how you use the platform to help us improve performance and user experience. All data is collected anonymously.
• Functional Cookies: Store your preferences such as language, display theme, and game settings to provide a more personalised experience.
• Analytics Cookies: Help us understand aggregate usage patterns to improve the platform. This data does not identify you personally.

9 International Data Transfers

Lakutito operates on server infrastructure that may be located in multiple locations. Where your personal data needs to be transferred outside Malaysia, we ensure that:

• Data transfers only take place to countries or entities that provide an adequate level of data protection comparable to Malaysian standards.
• Binding data protection agreements are in place before any transfer is carried out.
• You will be notified of any international data transfers involving your data where relevant.

10 Minors & Youth Protection

Lakutito strictly prohibits use of the platform by individuals under the age of 18. We do not knowingly collect personal data from minors.

If we become aware that we have inadvertently collected data from someone under the age of 18, we will take immediate steps to delete that data and close the relevant account. If you believe we may have collected information from an underage individual, please contact us immediately.

11 Amendments to the Privacy Policy

Lakutito reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform operations. When we make material amendments, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to members via their registered email or an in-platform notice at least 7 days before the changes take effect.
• For significant changes, to request your renewed consent before continued data processing.

It is your responsibility to review this page periodically. Continued use of the Lakutito platform after any amendments take effect will be considered acceptance of the updated terms.

12 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by Lakutito, please contact us through the following channels:

We take every privacy enquiry and complaint seriously and will work to resolve any concerns promptly and to your satisfaction.