Birutoto Privacy Policy – Your Personal Data Protection

Birutoto collects your personal information through several channels — directly from you during registration and platform use, automatically through website tracking technologies, and via legitimate third parties such as payment providers and identity verification partners.

Information you provide directly:

• Full name as shown on a valid identification document.
• Date of birth for age verification and eligibility purposes.
• Active email address and registered mobile phone number.
• Bank account or e-wallet details for processing deposits and withdrawals.
• Copies of identity documents (identity card, passport) for the KYC process.
• Any information you provide during interactions with our customer support team.

Automatically collected information:

• IP address, device type, operating system, and web browser version in use.
• Platform usage data including games played, session duration, and betting patterns.
• General location information based on IP address for regulatory compliance purposes.
• Access logs, timestamps, and financial transaction history within the platform.

The personal data we collect is used responsibly and strictly for the following purposes. Birutoto will not use your information beyond the stated scope without first obtaining your express consent.

• Account management: Creating, maintaining, and securing your player account, including a secure login process and two-factor authentication.
• Financial processing: Processing deposits, withdrawals, and any other financial transactions you carry out on our platform accurately and promptly.
• Identity verification (KYC): Meeting legal requirements related to player identity verification to prevent fraud and money laundering.
• Customer support: Processing enquiries, complaints, and support requests you submit to our support team.
• Personalize your experience: Personalizing game recommendations, promotions, and bonus offers based on your usage patterns and preferences.
• Platform communications: Sending important notifications regarding your account, transactions, security updates, and changes to terms of service.
• Fraud prevention: Monitoring suspicious activity and protecting the platform from abuse for the benefit of all players.
• Regulatory compliance: Fulfilling legal and reporting obligations required by relevant regulatory bodies.

Birutoto does not sell or trade your personal data. However, there are certain situations where we need to share information with trusted third parties to ensure the platform operates smoothly and securely.

Third parties that may receive your data:

• Payment providers: Banks, e-wallet companies, and payment processors that handle your financial transactions require certain information to verify and complete each transaction.
• KYC verification partner: Third-party identity verification service providers that assist us in verifying player documents and information in accordance with regulatory standards.
• Technology infrastructure providers: Companies that operate the servers, cloud services, and technical infrastructure required for the birutoto platform's operations.
• Regulatory bodies and law enforcement agencies: Birutoto will disclose required information when mandated by court order, law enforcement investigation, or legitimate regulatory requirement.

All third parties working with birutoto are required to comply with strict data protection policies and may only use the information received for agreed purposes. A binding data protection agreement is signed with each of our partners.

Birutoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helping us understand how players interact with our platform — which pages are visited most, session duration, and navigation patterns — for continuous improvement.
• Functional Cookies: Storing your personal preferences such as language, display settings, and favorite game history to deliver a more personalized experience.
• Performance Cookies: Collecting platform performance data so we can identify and resolve any technical issues more quickly and efficiently.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect your ability to use certain features of the Birutoto platform.

The security of your personal data is birutoto's highest priority. We continuously invest in the latest security infrastructure and adopt a multi-layered security approach to ensure your information is always protected.

Key security measures we implement:

• 256-bit SSL/TLS encryption for all data communications between the platform and your device.
• Passwords and sensitive data are stored in encrypted form (hashed) using modern algorithms — never in plain text.
• Two-factor authentication (2FA) is available and encouraged for all player accounts.
• 24/7 security monitoring by an experienced cybersecurity team to detect threats in real time.
• Regular penetration testing by independent third-party security auditors.
• Strict internal access controls — only authorized personnel can access player data, and only for legitimate operational purposes.

As a birutoto player, you have clear rights regarding your personal data. We are committed to respecting and facilitating the exercise of each of these rights through a simple and transparent process.

To exercise any of the above rights, please contact our customer support team. Requests will be processed and responded to within 7 business days. No fee is charged for reasonable requests.

Birutoto retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law.

Data retention periods depend on the type of information and its purpose:

• Active account data: Retained for the duration your account remains active on Birutoto and continuously updated.
• Financial transaction records: Retained for a minimum of 5 years from the transaction date to comply with financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure or end of business relationship.
• Customer support communication logs: Retained for 2 years for reference and service improvement purposes.
• System and security log data: Retained for 1 year for security analysis and internal audit purposes.

Once the retention period expires, data will be securely deleted or anonymised using industry-accepted technical procedures so that it can no longer be linked back to you.

In the course of platform operations, your personal data may be transferred to and stored on servers located outside your country. Birutoto ensures that any such data transfers are carried out with adequate protections equivalent to the standards enforced in Malaysia.

Steps we take to protect international data transfers include:

• Use of standard contractual clauses recognized as a lawful data transfer mechanism.
• Selecting data processing partners that operate only in countries with an equivalent or higher level of data protection.
• Data encryption throughout the transfer process to prevent access by unauthorized parties.
• Data protection impact assessments (DPIA) are conducted before any new transfer is approved.

The birutoto platform is exclusively for users aged 18 and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

If we find that a minor's personal data has been collected without our knowledge, we will take immediate action to delete that information and close the account in question. Parents or guardians with concerns about this matter may contact us directly for prompt action.

Birutoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform practices, updated legal requirements, or improvements in how we protect your data.

When any significant changes are made, we will:

• Updating the "Last Updated" date displayed at the top of this page.
• Sending notifications to your registered email address for changes that materially affect your privacy rights.
• Displaying a clear notice on our platform for at least 14 days before changes take effect.

You are encouraged to review this page periodically. Continued use of the Birutoto platform after any amendments take effect will be considered acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your privacy rights, the Birutoto team is ready to assist you. We are committed to providing prompt responses and satisfactory resolutions for every enquiry received.