Privacy Policy

Privacy Policy exxototo

Your personal data is a trust we take seriously. This document transparently explains how exxototo collects, uses, and protects your information as a user of our platform.

Last Updated: 1 January 2026

Six Data Protection Principles exxototo

Before reading the full policy, here is a summary of exxototo's key commitments in managing the personal data of Malaysian users.

Highest-Level Encryption

All data transmitted between your device and exxototo's servers is protected by SSL TLS 1.3 encryption with 256-bit keys — the same standard used by leading financial institutions worldwide.

Your Data, Your Rights

You have the right to access, correct, transfer, or request deletion of your personal data at any time. exxototo makes this process straightforward through your account settings or customer support.

No Sale of Data

Exxototo has never and will never sell user personal information to third parties for marketing purposes or any commercial purpose without your explicit consent.

Purpose-Driven Data Collection

We only collect data that is strictly necessary to provide our services. Each category of data collected has a clear purpose, as stated in this policy.

Full User Control

You can manage your privacy preferences, withdraw marketing consent, and control optional cookies directly from your exxototo account settings without needing to contact support.

Limited Retention Period

Personal data is retained only for as long as it is needed for its original purpose. Once the retention period expires or an account is closed, data is securely deleted in accordance with our standard procedures.


1. Introduction and Scope of This Policy

Exxototo ("we", "Platform") respects the privacy of every individual who interacts with our services. This Privacy Policy is designed to clearly and transparently explain how we collect, process, store and protect your personal data when you use the exxototo platform — whether through our official website or mobile app.

This policy applies to all users, including visitors who access the site without registering, registered members with active accounts, and any party that interacts with exxototo customer support. We encourage you to read this document carefully so you fully understand your rights and how we handle your information.

Important Note: By registering an exxototo account or continuing to use the platform after any policy update is published, you are deemed to have read and agreed to the terms stated in this Privacy Policy.

Exxototo is committed to complying with applicable data protection laws, including the Malaysia Personal Data Protection Act and any related regulations applicable to our platform's operations.

2. Categories of Personal Data We Collect

Exxototo collects several categories of information from users. Below is a detailed table covering data types, sources and the purposes for their collection:

Data Categories Example Information Source
Identity Data Full name, date of birth, IC/passport number Users during KYC registration
Contact Data Phone number, email address, residential address Users during registration
Financial Data Bank account number, e-wallet details, transaction records Users during deposit/withdrawal
Technical Data IP address, device type, operating system, web browser Collected automatically
Usage Data Game records, betting history, active session duration Collected automatically within the platform
Communication Data Live chat conversation records, support tickets Interactions with customer support

Data We Do Not Collect

Exxototo does not collect special category data such as health information, religious beliefs, political views or biometric data unless specifically required by applicable law or regulation.

3. How We Use Your Data

All data collected by exxototo is used for legitimate, defined purposes. We do not use your data for anything beyond what is stated below:

  • To manage user accounts, including registration, login, and KYC verification
  • To process deposits, withdrawals, and all financial transactions on the platform
  • To provide gaming services, sports betting, and all content on the exxototo platform
  • To send important notifications related to your account, security, and platform updates
  • To contact you with promotional information and special offers (subject to your marketing preferences)
  • To identify and prevent fraud, money laundering, and other unlawful activities
  • To comply with legal obligations and regulations set by the relevant authorities
  • To analyse usage patterns in order to improve our products and user experience
  • To support responsible gaming programmes and identify users who may need assistance

Marketing: You may withdraw consent to receive marketing communications at any time through the notification settings in your exxototo account. Withdrawing marketing consent will not affect the receipt of essential operational communications related to your account.

4. Data Sharing with Third Parties

Exxototo does not sell user personal data to any third party. However, in the course of running a safe and efficient platform, we may share data with a limited set of third-party categories in certain situations:

Authorised Service Providers

  • Payment service providers such as FPX gateways and DuitNow processors to facilitate transactions
  • Identity verification service providers for compliant KYC processes
  • Cloud infrastructure providers that store data under strict data processing agreements
  • Third-party game providers that require minimal session data to operate their games

Legal Obligations

Exxototo may disclose personal data to authorities or regulatory bodies when required by law, court order or for the purpose of preventing financial crime. In such situations, we disclose only the minimum information necessary.

All third parties that receive exxototo user data are bound by strict confidentiality agreements and are prohibited from using that data for any purpose other than what is specified in their service contract with exxototo.

5. Data Security and Protection

Exxototo invests seriously in security infrastructure to ensure user personal data is always protected. The following technical and organizational security measures are applied on an ongoing basis:

  • SSL TLS 1.3 encryption with 256-bit keys for all data communications between the platform and users
  • Data-at-rest encryption for all sensitive information stored in our databases
  • Two-factor authentication (2FA) is available for all user accounts to prevent unauthorised access
  • Continuous 24/7 security monitoring to detect and respond to cyber threats
  • Regular penetration testing conducted by independent cybersecurity experts
  • Strict internal access controls — only authorised staff can access user data
  • Regular data backups and disaster recovery procedures to prevent data loss

Security Limits: While exxototo takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against all cyber threats. In the event of a data breach that may affect users, exxototo will notify affected users within the timeframe required by applicable law.

6. Cookies and Tracking Technologies

Exxototo uses cookies and similar tracking technologies to enhance user experience, maintain session security and understand how the platform is used. The following are the categories of cookies we use:

  • Necessary Cookies (Mandatory): These cookies are required for the platform to function properly, including login session management and language settings. They cannot be disabled.
  • Performance Cookies: To help us understand how users interact with the platform for continuous improvement. Data is collected in aggregate and does not identify individuals.
  • Functional Cookies: To save your preferences such as display settings, language selection, and other personal configurations so you don't have to set them up every time.
  • Marketing Cookies (Optional): Used to display more relevant promotions. You can decline these cookies without affecting core platform functionality.

You can manage your cookie preferences through your web browser settings or via the privacy preference panel in your exxototo account. Please note that disabling certain cookies may affect some platform functionality.

7. User Rights Regarding Personal Data

As an exxototo user, you have the following rights regarding your personal data. We make it easy to exercise these rights and are committed to responding within a reasonable timeframe:

Right of Access

You have the right to obtain a copy of all personal data we hold about you. Requests can be made through your account settings or via exxototo customer support.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction. You can also update most of your profile information directly within your exxototo account.

Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data, subject to our legal obligations to retain certain records. Requests will be processed within 30 days.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for transfer to another service provider if desired.

Right to Object to Processing

You have the right to object to the processing of your data for direct marketing purposes at any time. Objections can be submitted through the notification settings in your account.

How to Exercise Your Rights: To submit any privacy rights request, log in to your exxototo account and go to Settings > Privacy, or contact our customer support team via live chat available 24/7. We are committed to responding within 30 days of receiving your request.

8. Protection of Children's Data

The exxototo platform is restricted to individuals aged 18 and above. We do not knowingly collect, process, or store personal data from anyone under the age of 18.

If we determine that a child's personal data has been collected without the knowledge or consent of a parent or legal guardian, exxototo will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that their minor child has registered an exxototo account are urged to contact our support team immediately.

9. International Data Transfers

In the course of platform operations, exxototo user data may be processed or stored on servers located outside Malaysia. This includes cloud infrastructure providers and international game providers that are part of our platform ecosystem.

All international data transfers are carried out with appropriate safeguards, including data transfer agreements that comply with international standards, the use of recognised standard contractual clauses, and ensuring that data recipients adhere to data protection laws equivalent to or exceeding Malaysia's standards.

Our Guarantee: Regardless of where data is processed, the level of protection applied to exxototo user data remains consistent — whether data is processed within Malaysia or overseas.

10. Amendments to This Privacy Policy

Exxototo reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or changes in how we operate. Whenever the Privacy Policy is updated, the "Last Updated" date shown at the top of this page will change.

  • Material changes to this policy will be communicated to active users via in-platform notifications or their registered email
  • Continued use of the exxototo platform after an amendment is published constitutes acceptance of the updated policy
  • You are encouraged to review this page periodically to stay informed about how we handle your data.
  • The version history of this policy is available upon request through exxototo customer support

11. Contact Us for Privacy Inquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how exxototo handles your personal data, our team is ready to help. Here are the ways to reach us:

  • Live Chat on the exxototo platform — available 24/7 in Bahasa Melayu and English
  • Customer support email: [email protected] (response time within 24 business hours)
  • The FAQ section at FAQ page us for answers to frequently asked questions

For formal privacy rights requests such as data access, correction or deletion, please use the live chat or email channels above and specify the request type, account name and relevant identity verification details. All requests will be handled with care and full confidentiality.

Response Time: exxototo is committed to responding to all privacy-related inquiries within 5 business days. More complex privacy rights requests such as data portability or account deletion will be resolved within 30 calendar days of receipt.


Your Data Is Safe at exxototo

We built this platform not just for entertainment, but for trust. Join over 500,000 Malaysian players who have entrusted their data to exxototo.

SSL 256-bit No Data Sale Guaranteed User Rights 24/7 Support
Bahasa Melayu