Your privacy is something we take seriously. This document explains exactly what data we collect, why we need it, how it's protected, and your rights as an exototi platform user.
Updated: January 2026All personal and financial information is encrypted with 256-bit SSL during transmission and storage.
Exototi has never sold, rented, or shared your personal data with advertisers or data brokers.
You have the right to request a copy of your personal data or request account deletion at any time.
We use cookies to ensure the platform functions properly and to understand how users engage with our services.
Any marketing communications from exototi can be disabled through your account settings.
For any privacy-related enquiries, the exototi support team is available via live chat at any time.
Note: This Privacy Policy applies to all users of the Exototi platform, including the website, Android and iOS mobile apps, and all related services provided under the Exototi brand.
Exototi is fully committed to protecting the privacy of all its users. This Privacy Policy describes our practices for collecting, using, storing, and protecting the personal information you provide to us when using Exototi services.
As a platform serving users in Malaysia, we comply with all applicable data protection requirements and continuously strive to exceed the minimum standards set. We believe user trust is our most valuable asset, and protecting your data is how we uphold it.
By registering or using any Exototi service, you give your consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform. We encourage you to read this document in full and contact us if any section is unclear.
Exototi only collects data that is strictly necessary to provide a safe, legitimate, and fully functional service. Below is a complete overview of the types of data we collect:
| Data Category | Example Information | Collection Method |
|---|---|---|
| Personal Identity | Full name, date of birth, MyKad/passport number | Account Registration & KYC |
| Contact Information | Email address, phone number | Account registration |
| Financial Data | Bank account number, bank name, transaction history | Deposit & withdrawal |
| Technical Data | IP address, device type, browser, operating system | Automatically during use |
| Behavioural Data | Game history, wagering activity, active session time | Automatically during use |
Every piece of data exototi collects is used for a specific, legitimate purpose. We do not use user data for purposes unrelated to the provision of our services.
You can withdraw consent for marketing communications at any time through your account settings or by contacting our support team.
Exototi does not sell, rent, or commercialise users' personal data in any form. Data sharing only occurs in limited and lawful circumstances as described below.
All third parties receiving exototi user data are required to meet data protection standards equal to or stricter than our own. Legally binding data protection agreements are signed with all third-party partners.
Exototi invests seriously in data security infrastructure. We use a combination of technology, procedures, and policies to ensure your data remains protected from unauthorised access, disclosure, modification, or destruction.
While we take every reasonable precaution, no security system is one hundred percent perfect. We encourage you to use a strong, unique password and enable two-factor authentication for maximum protection.
Exototi uses cookies and similar tracking technologies to ensure the platform functions correctly, remember your preferences, and help us understand how users interact with our services.
| Cookie Types | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for core platform functions such as login sessions and security | Session / 24 hours |
| Preference Cookies | Remember your preference settings such as language and display | 30 days |
| Analytics Cookies | Helps us understand platform usage for continuous improvement | 90 days |
| Security Cookies | Detect and prevent fraudulent activity and unauthorized access | 7 days |
You can manage or delete cookies through your web browser settings. Please note that deleting essential cookies may affect platform functionality and your login experience.
Exototi retains users' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable laws and regulatory obligations.
When data is no longer needed, it is securely deleted or anonymised using certified data deletion procedures. Account deletion requests will be processed within 30 business days, subject to applicable mandatory retention requirements.
As an exototi user, you have certain rights regarding your personal data. We respect these rights and will help you exercise them within a reasonable timeframe.
Request a copy of all personal data we hold about you
Request correction of inaccurate or incomplete data
Request data deletion under certain circumstances permitted by law
Object to data processing for direct marketing purposes
To exercise any of the above rights, contact the exototi support team via in-platform live chat, clearly stating your request. We will process your request within 30 business days and notify you if additional time is required.
Exototi is a platform designed exclusively for adults aged 18 and above. We do not intentionally collect personal data from individuals under 18 years of age.
If you find that a minor has accessed the Exototi platform or registered an account, please notify us immediately through customer support. We will take immediate action to close the account and delete all associated data.
Parents and guardians are encouraged to use parental control software and discuss with their children the risks of accessing online gaming platforms. Exototi fully supports efforts to ensure this platform is only used by eligible and qualified users.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact us.
Exototi reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. You will be notified of material changes via in-platform notifications. The date of the latest revision is always displayed at the top of this document.
Privacy protection isn't just about legal compliance — it's about respecting the trust you place in us.
All sensitive data — from login credentials to bank account details — is encrypted using 256-bit SSL during transmission and AES-256 at rest. No data travels in plain text anywhere within our systems.
Exototi has never, and will never, sell or rent users' personal data to data brokers, advertisers, or third parties for commercial purposes. Your data belongs entirely to you.
Only Exototi staff with a legitimate business need may access user data, and only the portion of data relevant to their role. All access is logged and regularly audited.
Data used for platform analytics and product improvement is fully anonymised before processing. This means no information that can individually identify you is present in our analytics.
Exototi's data security infrastructure is regularly tested by independent security experts through penetration testing and code audits. Vulnerabilities identified are addressed promptly in accordance with our incident response protocol.
You can review, amend, or request deletion of your personal data at any time. Privacy settings and communication preferences can be managed directly from your account without needing to contact support.
Every exototi user has rights that we take seriously and are ready to help you exercise
View the data we hold about you
Correct inaccurate or incorrect data
Request data deletion under eligible circumstances
Restrict data processing in certain situations
Receive your data in a machine-readable format
Object to processing for direct marketing