Jacktoto Privacy Policy — Your Personal Data Protection

01 Introduction & Scope of This Policy

Jacktoto is an online entertainment platform that operates and provides services to users across Malaysia. In the course of our operations, we collect and process various types of personal data to enable us to deliver a secure, efficient and high-quality service to you.

This Privacy Policy applies to:

• All visitors to jacktoto.vu — whether registered or not.
• All registered members using the jacktoto platform services.
• JackToto mobile app users on Android and iOS platforms.
• Anyone who contacts our customer support team through any channel.

This policy does not apply to third-party websites or services that may be linked from our platform. We encourage you to read those third-party privacy policies separately.

02 Personal Data We Collect

Jacktoto collects your personal data through various means as you interact with our platform. The following are the main categories of data we collect:

Data you provide directly:

• Full name, date of birth and personal identification number (MyKad / Passport).
• Email address, phone number and residential address.
• Bank account and digital wallet details for financial transaction purposes.
• Identity verification documents submitted during the KYC process.
• Any communications you send to our support team.

Data collected automatically:

• IP address, device type and browser information.
• In-platform activity data including wagering records and transactions.
• General (non-precise) location information based on IP address.
• Cookie data and other tracking technologies (see Section 9).
• Access timestamps, pages visited and session duration.

03 How We Use Your Data

We use collected personal data solely for legitimate and necessary purposes. The following is a summary of our data usage:

We will not use your data for any other purposes not stated here without obtaining your consent first.

04 Legal Basis for Data Processing

Jacktoto processes your personal data on the following legal bases, in accordance with applicable data protection legislation:

• Contract Performance: Processing required to provide the services you have requested, including account management and transaction processing.
• Legal Obligation: Processing required to comply with legal and regulatory obligations, including anti-money laundering (AML) and KYC requirements.
• Legitimate Interests: Processing for fraud prevention, platform security and service improvement purposes — where these interests do not override your fundamental rights.
• Consent: For marketing communications and non-essential cookie usage — you may withdraw your consent at any time.

05 Data Sharing with Third Parties

JackToto does not sell, rent, or trade your personal data. However, under certain circumstances, we may share your data with the following parties:

• Payment Service Providers: To securely process your deposits and withdrawals. They receive only the data required for transaction purposes.
• Technical Service Providers: Companies that assist us in managing IT infrastructure, cybersecurity, and platform analytics — bound by strict confidentiality agreements.
• Regulatory Body & Authorities: When required by law, court order or to comply with a legitimate investigation.
• Identity Verification Services: Integrated third-party KYC providers to securely verify your identity.

All third parties we work with are bound by data processing agreements that require them to protect your information to the same or higher standards that we uphold.

06 Data Security Measures

We implement multiple layers of technical and organisational protection to ensure the security of your personal data:

• Data Encryption: All sensitive data is encrypted using AES-256 encryption at rest and SSL/TLS in transit.
• Access Controls: Only staff with a legitimate operational need may access personal data — and every access is logged and monitored.
• Regular Security Audits: Our systems undergo regular penetration testing and security audits by independent experts.
• Two-Factor Authentication (2FA): Our internal systems are secured with additional authentication layers to prevent unauthorised access.
• Incident Response Plan: We have clear procedures in place to handle any data breach — including notifying affected parties within the required timeframe.

07 Data Retention Period

JackToto retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data: For as long as your account is active and for the required period following account closure.
• Financial Transaction Records: Minimum 7 years after the transaction occurs, in line with Malaysia's financial legal requirements.
• KYC Documents: Minimum 5 years after the business relationship ends, in accordance with anti-money laundering requirements.
• Support Communication Logs: 3 years after the last interaction.
• Analytics Data: Stored in anonymized form after 2 years and may be retained longer for statistical purposes.

When your data is no longer needed, we will securely delete or anonymize it in accordance with our approved data deletion procedures.

08 Your Rights as a User

As a jacktoto platform user, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights:

To exercise any of the above rights, please contact our customer support team via live chat within the platform. We will process your request within 30 business days.

09 Cookies & Tracking Technologies

Jacktoto uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions — login, session security and account preferences. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use the platform to help us improve the user experience. All data is collected anonymously.
• Functional Cookies: Remembers your preferences such as language, display settings and other personal preferences.
• Analytics Cookies: Helps us understand aggregate usage patterns for continuous product improvement.

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the platform.

10 International Data Transfers

In certain circumstances, your personal data may be transferred to or processed in countries outside Malaysia. This may occur when we use cloud service providers or international technical infrastructure.

When such transfers occur, jacktoto ensures adequate protections are in place through:

• Data processing agreements requiring protection equivalent to Malaysia's standards.
• Data protection impact assessments for transfers to jurisdictions with different data protection laws.
• Use of approved transfer mechanisms including standard contractual clauses.

11 Child Protection

The jacktoto platform is exclusively for individuals aged 18 and above only. We do not intentionally collect personal data from minors.

If you believe we have collected data from someone under the age of 18, please contact us immediately. We will take the appropriate steps to delete such data and close the account without delay.

Parents and guardians are encouraged to monitor their children's online activity and use the parental control tools available on their devices.

12 Amendments to This Privacy Policy

Jacktoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. The "Updated" date at the top of this page indicates when the most recent revision was made.

For significant amendments, we will notify you via an in-platform notification or by email to the address registered with your account. Continued use of the platform following the amendment notice constitutes acceptance of the updated policy.