Marontoto Privacy Policy – Malaysia Member Personal Data Protection

1. Information We Collect

Marontoto collects various types of personal information from members to provide a secure, efficient, and personalized service. Data collection is carried out directly through registration forms, in-platform activity, and our communication channels.

The types of information we collect are as follows:

Data Categories	Example Information	Primary Purpose
Personal Identity	Full name, identity card number, date of birth	KYC verification, age restriction
Contact Information	Phone number, email address, residential address	Account communications, notifications
Financial Data	Bank account number, deposit/withdrawal records	Transaction processing
Technical Data	IP address, device type, web browser, access logs	Security, fraud detection
Activity Data	Game records, betting history, game preferences	Service improvement, promotions

2. How We Use Your Data

Every piece of information we collect is used for clear and lawful purposes. marontoto will not use your data for any purpose not stated in this Privacy Policy without obtaining your consent first.

The primary purposes for which your personal data is used are:

• Account management — processes registrations, verifies identities, and maintains your account records.
• Transaction processing — handles deposits, withdrawals, and all financial activities securely and accurately.
• Platform security — detects and prevents fraud, money laundering, and unauthorized account access.
• Service communications — sends important notifications relating to your account, system updates, and security alerts.
• Experience improvement — analyzes usage patterns to improve platform quality and the user interface.
• Legal compliance — meets the reporting and oversight requirements mandated by the relevant authorities.
• Promotions and offers — delivers relevant promotions based on your preferences and activity (you may opt out at any time).

3. Data Sharing with Third Parties

Marontoto understands that your trust in us depends entirely on how we handle your data. As such, we only share your personal data under very limited circumstances and for legitimate purposes.

Third parties that may receive your data are:

• Payment processing providers — such as FPX, Touch 'n Go, and GrabPay gateways, to enable financial transactions to be processed securely.
• Technology infrastructure providers — such as server hosting companies and cloud services that store data in a secure and trusted environment.
• Relevant authorities — when required by law or court order, we will disclose the necessary information to law enforcement agencies.
• Identity verification service providers — for KYC process requirements to verify member eligibility and authenticity.

All third parties working with marontoto are required to sign strict confidentiality agreements and are only permitted to use your data for specific, defined purposes. They are not allowed to use your data for any other purpose or share it with any other party.

4. Data Security and Protection

The security of your personal data is marontoto's top technical priority. We continuously invest in the latest cybersecurity infrastructure to ensure your information is always protected.

The security measures we implement include:

• 256-bit SSL Encryption for all communications between your device and marontoto servers, ensuring data in transit cannot be intercepted.
• Encryption of data at rest — all data stored on our servers is protected with an additional layer of encryption.
• Two-factor authentication (2FA) available for all member accounts to prevent unauthorized access even if a password is compromised.
• 24/7 security monitoring by our cybersecurity team, who will respond to any threats in real time.
• Regular security audits by independent third parties to identify and address any system vulnerabilities.
• Strict internal access controls — only authorized personnel may access members' personal data, and every access is logged and monitored.

While we take all reasonable precautions, no system can guarantee absolute security. In the event of a significant data breach, we will notify affected members within a reasonable timeframe through their registered communication channels.

5. Data Retention Period

Marontoto retains your personal data for as long as your account is active or as long as it is needed to provide services to you. When an account is closed or after a certain period of inactivity, your data will be managed according to the following guidelines:

• Financial transaction data is retained for seven (7) years to meet legal and tax compliance requirements.
• Customer support communication records are retained for three (3) years for reference and dispute resolution.
• Technical logs and activity data are retained for twelve (12) months for security and troubleshooting purposes.
• Marketing data and promotional preferences are deleted within 30 days after you opt out of marketing communications.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

6. Use of Cookies

The marontoto platform uses cookies and similar tracking technologies to enhance the user experience, maintain login sessions, and understand platform usage patterns.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies — collects information on how you use the platform to help us improve it. All data is collected anonymously.
• Functional Cookies — remembers your preferences such as language, currency, and display settings for a more personalized experience.
• Analytics Cookies — helps us understand which pages are most popular and the navigation paths commonly used by members.

You may manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect certain platform functions.

7. Your Rights as a Data Owner

As a marontoto member, you have clear and enforceable rights regarding your personal data. We are committed to making it easy for you to exercise these rights without any unnecessary obstacles.

8. Child Protection

Marontoto does not accept registrations from individuals under 18 years of age. We take active measures through our KYC verification process to ensure all members meet this age requirement.

If we discover that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate action to delete that data and terminate the relevant account. If you believe a minor has registered on our platform, please contact our support team immediately.

9. Updates to the Privacy Policy

Marontoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. The effective date of the latest version will always be displayed at the top of this document.

For significant and material changes, we will notify members via in-platform notifications or registered email at least seven days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated terms.

10. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the marontoto privacy team via:

• Live Chat — available 24/7 directly within the marontoto platform for immediate response.
• Email — [email protected] for written inquiries requiring detailed clarification.
• FAQ Page — visit our FAQ page for answers to the most frequently asked questions.

Our team will endeavour to respond to all privacy-related enquiries within 72 hours working.