Privacy Policy — Autotogel

This Privacy Policy (the "Policy") is published by Autotogel ("autotogel", "we", "us", or "our"), the operator of the online gambling and sports betting platform accessible at https://autotogel.cam (the "Platform"). This Policy explains how we collect, use, store, share, and protect the personal data of individuals who visit, register on, or use the Platform (collectively referred to as "Users", "Players", or "you").

Autotogel is committed to handling personal data with the highest degree of care and transparency. We recognise that as a gambling platform serving Malaysian users — including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — trust is the foundation of our relationship with every player. This Policy is designed to give you a clear, honest account of our data practices.

By registering an account, depositing funds, or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read, understood, and agree to the data practices described herein. If you do not agree to this Policy, you should discontinue use of the Platform and may request account closure via our customer support team.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Policy, the following terms carry the meanings set out below:

Autotogel collects only the personal data that is necessary for the delivery and improvement of our services, the fulfilment of legal obligations, and the protection of our players and platform integrity. The categories of data we collect are as follows:

3.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Email address
• Mobile telephone number
• Chosen username and encrypted password
• Preferred currency (Malaysian Ringgit — MYR — for most users)
• Residential address (city-level, e.g., Kuala Lumpur, Petaling Jaya, Penang)

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of address documents (e.g., utility bill, bank statement from Maybank, CIMB, Public Bank, or RHB)
• Selfie or facial image for liveness verification, where required

3.3 Financial & Transaction Data

• Payment method details (e.g., Touch 'n Go eWallet account reference, Boost account identifier, GrabPay, DuitNow, FPX bank code, USDT wallet address)
• Deposit and withdrawal history, amounts, timestamps, and statuses
• Wagering and betting activity records
• Bonus and promotion history

3.4 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session duration, login timestamps, and access logs
• Referral source and marketing attribution data (where applicable)

3.5 Responsible Gambling Data

• Deposit limits, session limits, and cooling-off preferences set by the User
• Self-exclusion status and exclusion period, where applicable
• Responsible gambling tool interactions, including limit adjustment history

3.6 Communication Data

• Live chat transcripts with customer support
• Email correspondence with autotogel
• Feedback, complaints, and dispute records

Autotogel collects your personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your Account settings.
• Automatically via the Platform: Through cookies, session tracking, access logs, and analytics tools as you navigate and interact with the Platform.
• From third-party service providers: Identity verification partners, payment processors (including payment gateway providers that support Touch 'n Go eWallet, Boost, GrabPay, FPX, and USDT transactions), and fraud detection services may provide us with data relevant to your Account and transactions.
• From public sources: In limited circumstances, publicly available databases may be consulted as part of anti-money laundering screening or KYC verification.

All collection methods are designed to gather only what is necessary for the stated purpose. Autotogel does not purchase personal data from data brokers or marketing list providers.

Autotogel processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

Autotogel uses the personal data we collect for the following purposes:

• Account administration: Creating and managing your registered Account, processing login authentication, and enabling access to all Platform features.
• Age and identity verification: Confirming that you meet the 21+ age requirement and verifying your identity to comply with KYC obligations before processing your first withdrawal.
• Payment processing: Facilitating deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, RHB, Hong Leong Bank), and USDT TRC20; processing withdrawal requests to verified payment methods.
• Service delivery: Providing access to casino games, live dealer tables, sports betting markets, and all other features of the Platform.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, multi-accounting, and other forms of prohibited conduct.
• Responsible gambling: Monitoring wagering patterns to identify potential signs of problem gambling; applying and recording responsible gambling tools such as deposit limits and self-exclusion in accordance with player instructions.
• Legal compliance: Meeting anti-money laundering, counter-terrorism financing, KYC, and other applicable regulatory obligations.
• Customer support: Responding to queries, resolving complaints, and managing disputes via live chat and email communication.
• Platform improvement: Using aggregated and anonymised analytics data to improve Platform performance, game selection, user experience, and payment processing efficiency.
• Marketing communications (where consented): Sending promotional emails, bonus notifications, and Platform updates to Users who have opted in to receive such communications. Users may unsubscribe at any time.

Autotogel does not sell your personal data to any third party. We may share your data with carefully selected third-party service providers, but only to the extent necessary for the delivery of Platform services or the fulfilment of legal obligations. All third-party data processors are bound by written data processing agreements that require them to handle your data securely and only for the specified purpose.

Categories of third parties with whom autotogel may share personal data include:

• Payment processors: Gateway providers that facilitate transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks. These providers receive only the data necessary to process the relevant transaction.
• Identity verification providers: Third-party KYC and document verification services used to confirm User identity and age compliance.
• Fraud detection and security providers: Services that analyse transaction and behavioural data to identify suspicious activity and protect platform integrity.
• Game content providers: Casino game studios and live dealer operators whose games are hosted on the Platform may process session data to deliver game functionality. No personally identifiable information is shared beyond what is technically required for game delivery.
• Legal and regulatory authorities: Where required by law, court order, or regulatory directive, autotogel may be obligated to disclose personal data to relevant governmental or law enforcement bodies, including those in Malaysia.
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to appropriate confidentiality obligations.

The autotogel Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, maintain your logged-in session, and collect aggregated analytics data that helps us improve the user experience. The following categories of cookies are used:

Most web browsers allow you to manage cookie preferences via your browser settings. Disabling essential cookies may affect your ability to use the Platform. Disabling non-essential cookies will not prevent access to core functionality. For detailed browser-specific cookie management guidance, please refer to your browser's help documentation.

Autotogel retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with applicable legal obligations. The retention periods below reflect the minimum periods we are required to maintain records:

• Account registration data: Retained for the duration of the Account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Transaction and wagering records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for up to three (3) years from the date of the interaction, unless the communication relates to an open dispute or legal matter.
• Responsible gambling records: Self-exclusion records are retained indefinitely to prevent re-registration during the exclusion period. Other responsible gambling tool records are retained for a minimum of five (5) years.
• Marketing consent records: Retained for the duration of the consent and for one (1) year following withdrawal of consent, as evidence of the consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data must be retained beyond these periods due to ongoing legal proceedings, regulatory investigations, or statutory obligations, we will notify affected Users where practicable.

Autotogel employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• Transport Layer Security (TLS 1.2/1.3): All data transmitted between your device and the autotogel Platform is encrypted using industry-standard TLS protocols, protecting it from interception during transit.
• Data encryption at rest: Sensitive data stored on our servers — including financial information, KYC documents, and authentication credentials — is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Internal systems employ role-based access controls, and all access is logged and regularly audited.
• Two-factor authentication (2FA): Available for all User accounts. We strongly recommend enabling 2FA via your Account security settings.
• Password security: Passwords are stored in a one-way hashed format using bcrypt. Autotogel staff cannot view your plaintext password.
• Regular security assessments: The Platform undergoes periodic security reviews, including vulnerability scanning and internal security audits.
• Incident response: Autotogel maintains a documented data breach response procedure. In the event of a breach that poses a risk to Users, affected parties will be notified in a timely manner in accordance with applicable notification obligations.

As a User of the autotogel Platform, you hold the following rights in respect of your personal data. You may exercise any of these rights by contacting autotogel's customer support team via live chat or by sending a written request to our support email address.

Autotogel will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by up to a further 30 days, with notification provided to you. We may request proof of identity before processing a rights request to prevent unauthorised access to your information.

The autotogel Platform is strictly not intended for individuals under the age of 21. Autotogel does not knowingly collect personal data from any person below this age. Our registration process requires all Users to confirm they are 21 or older, and we conduct age verification as part of our KYC procedures.

If autotogel becomes aware — whether through our own verification processes, a third-party report, or parental notification — that personal data has been collected from an individual below the age of 21, we will take the following steps immediately:

• Suspend the relevant Account and prevent further access to the Platform.
• Void all wagers and transactions placed during the period of underage use.
• Return any net deposited funds (minus any fraudulently obtained winnings) to the payment method on record.
• Permanently delete or securely anonymise all personal data associated with the underage Account.

Parents or guardians who believe their child has registered an Account on the autotogel Platform are encouraged to contact our customer support team immediately via live chat or email so that corrective action can be taken without delay.

In delivering the autotogel Platform, personal data may be processed or stored in locations outside Malaysia. This may occur where we engage third-party service providers — such as cloud hosting infrastructure, identity verification services, or game platform operators — that operate data centres in other jurisdictions.

Where personal data is transferred outside Malaysia to a jurisdiction that does not offer an equivalent level of data protection, autotogel will take appropriate safeguarding measures, which may include:

• Binding contractual clauses that impose data protection obligations on the receiving party equivalent to those described in this Policy.
• Ensuring that receiving organisations have adopted internationally recognised security standards relevant to the nature of the data transferred.
• Limiting the scope and volume of data transferred to the minimum necessary for the specific processing purpose.

By using the Platform and accepting this Policy, you acknowledge that your personal data may be transferred and stored in jurisdictions outside Malaysia as described above, subject always to the safeguards outlined herein.

Autotogel reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or operational procedures. Where changes are material — that is, where they affect how we use your data in ways you would not reasonably expect — we will provide notice via the Platform, via email to your registered address, or by a prominent notification displayed on login before the changes take effect.

Minor updates — such as clarifications, formatting changes, or corrections to typographical errors that do not alter the substance of the Policy — may be made without specific notification, though the "Last reviewed and updated" date at the top of this document will always reflect the most recent revision.

Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms. If you disagree with any change to this Policy, you should discontinue use of the Platform and contact our support team to discuss your Account closure options.

For any questions, concerns, or requests related to this Privacy Policy — including requests to exercise your data rights under Section 11 — please contact autotogel's support team using the details below. Our team is available 24 hours a day, 7 days a week.

• Live Chat: Available directly on the autotogel Platform — average response time under 2 minutes.
• Email (plain text — not a link): [email protected]

When submitting a data rights request or privacy-related query, please include the following information to help us process your request efficiently:

• Your full legal name as registered on your autotogel Account
• Your registered email address or username
• A clear description of your request or the data-related concern
• Any relevant account reference numbers or transaction IDs, where applicable

We will acknowledge receipt of your request within two (2) business days and aim to resolve all data-related matters within 30 calendar days. Complex requests may require additional time, in which case we will notify you with an updated timeline.