Colatogel Privacy Policy – Malaysian Player Personal Data Protection

1Introduction & Scope of This Policy

Colatogel ("we", "Platform", or "company") respects the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, process, store, and protect your personal data when you use colatogel.my and all related services.

This policy applies to all users of the Colatogel platform, including visitors browsing our website without registering, prospective members in the process of registering, and registered members actively using our services. It covers all your interactions with our platform, whether through a web browser, mobile app, or any other channel we provide.

We encourage you to read this Privacy Policy together with Terms and Conditions us for a full overview of the rights and responsibilities of all parties.

2Types of Personal Data We Collect

Depending on how you interact with the Colatogel platform, we may collect various types of personal information. Below is a full overview of the data categories we collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as your medical information, religious beliefs, or political views.

3How We Use Your Personal Data

The personal data we collect is used exclusively for the following legitimate purposes necessary for the operation of the Colatogel platform:

• Account management: Creates and maintains your account, verifies your identity, and handles registration securely.
• Transaction processing: Processes deposits, withdrawals, and all other financial transactions quickly and accurately.
• Service delivery: Enables you to access all games, promotions, and platform features on offer.
• Security & fraud prevention: Detects, investigates, and prevents fraudulent activity, money laundering, and platform abuse.
• Legal compliance: Fulfills reporting and compliance obligations to relevant regulatory bodies and authorities.
• Service communications: Sends important notifications regarding your account, transactions, and policy changes.
• Customer support: Resolves your inquiries, complaints, and support requests effectively.
• Platform improvements: Analyzes usage patterns to improve user experience and the quality of our services.
• Marketing (with consent): Sends information about promotions, bonuses, and the latest offers — only if you have given your consent.

We will not use your data for any purpose beyond those stated above without first obtaining your fresh consent.

4Legal Basis for Data Processing

Every instance of personal data processing we carry out is based on at least one of the following legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: You have given explicit consent for the processing of your data for specific purposes, such as receiving marketing communications.
• Contract performance: Processing is necessary to fulfil the service contract between you and Colatogel, including the processing of financial transactions.
• Legal obligation: Processing is required to comply with legal obligations applicable to Colatogel, including KYC and AML requirements.
• Legitimate interest: Processing is necessary for the legitimate interests of colatogel, such as security and fraud prevention purposes, provided it does not override your fundamental rights.

5Data Sharing & Disclosure to Third Parties

Colatogel takes a highly cautious approach to data sharing. We do not sell your personal data to anyone. Your data is only shared in the following limited situations:

• Service providers: Third parties that assist us in platform operations such as payment processing, cloud computing, and analytics services. All such providers are bound by strict confidentiality agreements.
• Regulatory authorities: Where required by law, we will disclose the necessary information to regulatory bodies, law enforcement agencies, or courts.
• Fraud investigation: In cases of suspected fraud or financial crime, we reserve the right to share information with authorities and industry partners for investigation purposes.
• With your consent: In any other situation, we will obtain your explicit consent before sharing your personal data.

All third parties that receive your data from Colatogel are required to handle it in accordance with data protection standards at least equivalent to those we maintain.

6Data Retention Period

Colatogel retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. Our general data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active plus 5 years after account closure, to meet audit and compliance requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Support communication logs: Retained for 2 years from the date of last interaction for reference and dispute resolution purposes.
• Technical data & system logs: Retained for 12 months for security and threat detection purposes.
• KYC documents: Retained for the period stipulated by the relevant regulatory body, typically 5 years after the business relationship ends.

Once the retention period expires, your personal data will be securely deleted or anonymised using methods that ensure the data cannot be recovered.

7Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

To exercise any of the rights above, please contact our support team via live chat. We will process your request within 14 business days. Please note that there are certain situations where we may not be able to fulfil your request in full due to legal obligations or legitimate interests that take precedence.

8Data Security Measures

Colatogel continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. The technical and organisational measures we have in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Data encryption at rest for all sensitive information, including financial details and identity documents.
• Enterprise-grade firewall and an intrusion detection and prevention system (IDS/IPS) active 24/7.
• Strict role-based access control — only staff who need access to carry out their duties are permitted to view user data.
• Two-factor authentication (2FA) for all access to Colatogel's internal systems.
• Regular security audits and penetration testing by independent experts to identify and address vulnerabilities.
• Mandatory privacy and data security training programmes for all Colatogel staff.
• A comprehensive incident response plan to address any data breaches swiftly and effectively.

While we take all reasonable precautions, no security system is entirely impenetrable. We encourage you to also play your part in keeping your account secure by practising good digital habits.

9Use of Cookies & Tracking Technologies

The colatogel website uses cookies and similar tracking technologies to enhance your experience and analyze platform usage. Below are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance cookies: Collects information about how you use our website to help us improve its speed and stability.
• Functional cookies: Remembers your preferences and settings such as language and display preferences for a more comfortable experience.
• Analytics cookies: Helps us understand platform usage patterns in aggregate and anonymized form for continuous improvement.
• Marketing cookies: Used to show you relevant promotional content based on your interests, with your consent only.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect specific features of the Colatogel platform.

10Cross-Border International Data Transfers

In the course of its operations, Colatogel may need to transfer your personal data to servers or service providers located outside Malaysia. This may occur in the context of cloud computing services, international payment processing, or technical support.

When such data transfers occur, we ensure that:

• The recipient country or organization maintains a level of data protection equivalent to or higher than Malaysia.
• Appropriate data transfer agreements, such as standard contractual clauses, have been put in place to ensure adequate protection.
• Transfers are only carried out based on legitimate operational necessity and do not exceed what is required.

By using the Colatogel platform, you understand and agree that your personal data may be transferred, stored, and processed outside Malaysia in accordance with the terms of this Privacy Policy.

11Child Protection

The Colatogel platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that we have collected personal data from a child without valid parental or guardian consent verification, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who become aware that their child has provided personal data to Colatogel are encouraged to contact us immediately.

12Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how we handle your personal data, or wish to exercise any of your privacy rights, please contact the Colatogel privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
• Support email: [email protected] (displayed as information, not a clickable link)
• FAQ Page: Visit the FAQ us for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related inquiries within 3 business days. For more complex complaints, we will provide a realistic resolution timeline and keep you informed of your case progress at all times.

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory body in your jurisdiction.