Privacy Policy lakutito — Our Commitment to Protecting Your Personal Data

This Privacy Policy ("Policy") is published by Lakutito ("we", "Platform") and describes how we collect, use, disclose, and protect your personal information when you use our platform via the lakutito.net website or the Lakutito mobile app.

We are committed to protecting the privacy of all our users in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By accessing or using lakutito's services, you agree to the collection and use of your information as described in this Policy.

This Policy applies to all individuals using the Lakutito platform, including website visitors, registered users, and former members whose data is still retained in accordance with legal requirements. If you have any questions regarding this Policy, please contact our support team.

Lakutito collects various types of data depending on your interactions with our platform. Below is a summary of the data types we collect and their purposes:

Data is collected through three main channels: information you provide directly during registration or use of the platform; data collected automatically as you use our services; and data we may receive from trusted third parties such as identity verification providers.

Lakutito uses your personal data for legitimate and necessary purposes in operating our platform. Our use of data includes:

• Account management: Creating and managing your account, processing registrations, and handling secure logins
• Transaction processing: Processing deposits, withdrawals, and bonus payments accurately and promptly
• Identity verification (KYC): Verifying your identity to prevent fraud and comply with regulatory requirements
• Platform security: Identifying and preventing fraud, hacking, and other suspicious activity
• Service communications: Sending transaction alerts, policy updates, and important security notifications
• Customer support: Resolving enquiries, complaints, and technical support requests
• Platform improvement: Analyzing usage patterns to improve the interface and user experience
• Legal compliance: Fulfilling legal obligations, regulations, and requests from lawful authorities

Lakutito does not sell your personal data. However, in certain circumstances, we may share your data with selected third parties for legitimate purposes. This includes:

• Service providers: Companies that help us operate the platform, such as game providers, payment processors, and cloud services, all of which are bound by strict confidentiality agreements
• Identity verification: Registered and trusted KYC service providers for document verification purposes
• Legal authorities: Law enforcement agencies, courts, or regulatory bodies when required by law or court order
• Business transfer: In the event of a merger, acquisition, or sale of business assets, data may be transferred to the acquiring party with equivalent privacy protections

Every instance of data sharing is carried out on a minimum-necessity basis — we only share data that is strictly required for a specific purpose, never in bulk or without clear justification. All our third-party partners are required to uphold data protection standards equivalent to lakutito's Privacy Policy.

Lakutito continuously invests in security infrastructure to protect your personal data from unauthorized access, disclosure, alteration, or destruction. The security measures we implement include:

• Data in transit encrypted with TLS 1.3 and stored data encrypted with AES-256
• Role-based access control (RBAC) ensuring staff can only access data required for their specific duties
• Continuous security monitoring and intrusion detection system (IDS) active 24/7
• Regular penetration testing and independent security audits conducted on a scheduled basis
• Regular data backups with encryption, stored at secure and geographically separate locations
• Security awareness training for all lakutito staff who handle user data

Lakutito uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you access our website.

We use three main categories of cookies:

• Essential Cookies: Required for core platform functions such as maintaining your login session and ensuring security. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Helping us understand how users interact with our platform, which pages are visited most frequently, and any technical issues that may exist. This data is collected in aggregate and does not personally identify you.
• Preference Cookies: Remembering your preferences and settings such as preferred language and display preferences to deliver a more personalized experience.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality or your experience on the Lakutito platform.

Lakutito retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by applicable law. Our principle is to never retain data longer than needed.

• Active account data: Retained for the duration your account is active and for a reasonable period after account closure
• Transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements
• KYC Documents: Retained for the duration of the active account and up to 5 years after account closure in accordance with AML requirements
• Support communication logs: Retained for 3 years for dispute resolution purposes
• Analytics and technical log data: Retained for 12 months in individually identifiable form, after which this data is anonymised

When data is no longer needed, we ensure it is securely deleted or anonymised using industry-standard methods.

As a lakutito user and data subject under Malaysia's data protection laws, you have the following rights, which you may exercise at any time:

• Right of Access: You may request a copy of the personal data we hold about you. We will process this request within 21 days.
• Right to Rectification: If you find that any data we hold is inaccurate or outdated, you may request that we correct it.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. However, such requests may be limited by our legal obligations to retain certain data.
• Right to Object: You may object to the processing of your data for specific purposes such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.
• Right to Data Portability: You may request that we provide your data in a machine-readable format for transfer to another service.

The lakutito platform is exclusively for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a minor's data has been collected without proper consent, we will take immediate steps to delete that data and close the relevant account.

If you believe that a minor under the age of 18 has registered an account on lakutito, please contact our support team immediately with relevant proof so we can take the appropriate action.

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our privacy team takes all enquiries seriously and will respond within a reasonable timeframe.

You can reach the Lakutito support team through the following channels available on the platform:

• In-platform live chat (available 24 hours, 7 days a week)
• Support email: [email protected]
• In-account support ticket system

If you are not satisfied with our response, you have the right to file a complaint with the Malaysia Personal Data Protection Department or the relevant regulatory authority in your area of residence.

Lakutito reserves the right to update this Privacy Policy from time to time. Any material changes will be communicated via in-platform notifications or email, and the latest update date will be displayed at the top of this document.