Privacy Policy GolTogel —
Your Personal Data Protection

GolTogel ("we", "Platform") is committed to protecting the privacy of every user of our services. This Privacy Policy has been prepared in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia and outlines your rights and responsibilities as a data subject.

We believe transparency is the foundation of trust. That is why this Privacy Policy is written in plain, easy-to-understand language — not confusing legal jargon. We want you to genuinely understand what happens with your data, not just click "I Agree" without reading.

This Policy applies to all information collected through the goltogel.vin website, the GolTogel mobile app, and all our official communication channels including live chat and support email.

GolTogel collects personal information necessary to provide safe, efficient, and responsible services. The following are the categories of data we collect:

Registration & Identity Data

• Full name as shown on your official identification document.
• Date of birth (for age verification).
• National identification number (MyKad) or passport number.
• Email address and mobile phone number.
• Current residential address.

Financial & Payment Data

• Bank account details used for deposits and withdrawals.
• Digital wallet account numbers (TNG eWallet, Boost, and others).
• Records of all deposit and withdrawal transactions.

Platform Usage Data

• Game records, betting history, and gameplay statistics.
• IP address, device type, operating system, and web browser.
• Login session data including time, location (based on IP), and session duration.
• Interactions with customer support and communication records.

Every piece of data we collect has a specific and legitimate purpose. We do not use your data for any purpose unrelated to delivering goltogel services.

• Account Management — registering accounts, verifying identity, and securely managing your login.
• Transaction Processing — processing deposits, wins, and withdrawals to your bank account or digital wallet.
• KYC Verification — fulfilling anti-money laundering (AML) legal obligations and age verification requirements.
• Platform Security — detecting suspicious activity, preventing fraud, and protecting your account from unauthorised access.
• Customer support — helping resolve enquiries, complaints, and technical issues quickly and accurately.
• Responsible gaming — monitoring gaming habits to identify signs of problem gambling and offer appropriate assistance.
• Service Improvement — analysing usage data in aggregate (not individually) to improve the platform experience.
• Marketing Communications — sending promotional information and exclusive offers, only if you have given consent to receive them.

GolTogel does not sell, rent, or trade your personal data to any third party. However, we share certain data with third parties directly involved in delivering our services, subject to strict confidentiality agreements.

Third parties that may receive your data:

• Payment Processors — to streamline deposit and withdrawal transactions via FPX, Touch 'n Go eWallet, Boost, and local banks. They only receive the information required to complete the transaction.
• KYC Service Providers — parties that help us securely verify your identity during the account verification process.
• Licensed Game Providers — gaming companies that supply Slots, Live Casino, and betting content to the goltogel platform. They are subject to their own strict privacy policies and security standards.
• IT Infrastructure Services — server and cloud computing service providers that enable the goltogel platform to operate.
• Legal authorities — where we are required by law or a valid court order to disclose certain information.

We take data security very seriously. goltogel implements multiple layers of technical and organisational protection to keep your personal data safe from unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL/TLS Encryption — all communications between your device and our servers are protected with the same industry-grade encryption used by Malaysia's major banks.
• Secure Password Storage — your password is stored in hashed form using modern cryptographic algorithms. Even our own staff cannot view your password.
• Two-Factor Authentication (2FA) — available to all accounts to add an extra layer of security during login.
• 24/7 Security Monitoring — intrusion detection systems and anomalous activity monitoring operate around the clock.
• Internal access controls — only goltogel employees who require access to specific data to perform their duties are permitted to access it, based on the principle of least privilege.
• Regular security audits — security assessments are conducted periodically by independent parties to identify and address potential vulnerabilities.

GolTogel retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active account data — retained for as long as your account is active and for 7 years after account closure, in line with Malaysia's financial record-keeping requirements.
• Financial transaction records — retained for a minimum of 7 years for audit, tax compliance, and anti-money laundering requirements.
• Security & Activity Logs — retained for 2 years for security incident investigation purposes.
• Customer support records — retained for 3 years from the date of last interaction.
• Marketing data — retained until you withdraw your consent or request removal from our marketing communications list.

Once the retention period expires, your data will be securely deleted or anonymised using procedures that guarantee it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 and international data protection best practices, you have the following rights regarding your personal data held by GolTogel:

GolTogel uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the GolTogel platform.

GolTogel does not accept registration or use of the platform by individuals under the age of 18 years old. We do not knowingly collect personal data from individuals under the age of 18.

If you believe a child has provided us with personal data without a valid guardian's consent, please contact us immediately at [email protected] and we will take immediate action to delete that information.

Our KYC process includes date of birth verification as a key step to prevent underage registration.

In certain circumstances, your personal data may be processed or stored on servers located outside Malaysia, particularly when we use cloud computing infrastructure services or international game providers.

When data is transferred outside Malaysia, we ensure that:

• Data recipients are held to data protection standards equivalent to or higher than Malaysia's PDPA.
• Appropriate data transfer agreements are in place to ensure adequate protection.
• Recipients use data solely for the specific purposes related to the delivery of goltogel services.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the goltogel privacy team is ready to assist.

You can reach us via:

• Live Chat — available 24/7 via the chat icon at the bottom-right corner of the goltogel platform.
• Privacy Email — send your enquiry to [email protected] and we will respond within 3 business days.
• General Support Email — [email protected] for general account and service enquiries.

If you are not satisfied with how we handle your privacy complaint, you have the right to refer the matter to Malaysia Department of Personal Data Protection which is the PDPA regulatory body in the country.

We are committed to updating this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to you via a notice on the platform or by email at least 7 days before the changes take effect.