Privacy Policy ovostoto – Your Data Protection

Ovostoto ("we", "our platform") values the privacy of every player who uses our services. This Privacy Policy is designed to ensure you fully understand what information we collect, why it is collected, how it is used, and the protective measures we take to keep your data secure.

As a digital entertainment platform operating in Malaysia, ovostoto complies with applicable data protection legal requirements, including Malaysia's Personal Data Protection Act 2010 (PDPA). We do not collect more data than necessary and are always transparent about how your data is used.

Ovostoto collects personal data through several channels – during account registration, during platform use, and through your interactions with our support team. Below is an overview of the types of data we collect:

2.1 Data We Do Not Collect

• Full credit or debit card numbers – we do not store complete payment card details.
• Passwords in plain text — all passwords are stored in a secure hashed format.
• Biometric data such as fingerprints or facial scans.

Every piece of data collected by ovostoto has a specific and legitimate purpose. We don't collect data simply because we can – each piece of information plays a role in ensuring a safe, fair, and seamless platform experience for you.

• Identity Verification (KYC): Identity data is used to verify that you are 18 years of age or older and to prevent fraud and money laundering.
• Account Operations: Contact information is used for account management, transaction notifications, and important account-related communications.
• Payment Processing: Financial data is required to process deposits and withdrawals to your bank account accurately and securely.
• Service Improvement: Activity and technical data help us understand how players use the platform and identify areas for improvement.
• Platform Security: Technical data such as IP addresses helps us detect and prevent fraudulent activity, unauthorised access, and account misuse.
• Legal Compliance: Some data must be retained to meet applicable legal reporting and compliance requirements.

Ovostoto does not share, sell, or transfer your personal data to third parties except in specific, legitimate, and necessary circumstances. Below are situations in which data sharing may occur:

4.1 Service Providers

We work with trusted third-party service providers to operate platform functions — including game software providers, payment processors, and technical infrastructure providers. All such providers are bound by strict confidentiality agreements and may only use your data for the purposes we specify.

4.2 Legal Requirements

Ovostoto may be required to disclose your personal data to the relevant authorities when mandated by law, court order, or regulatory compliance requirements. This includes investigations related to fraud or illegal activity.

4.3 Protection of Rights and Safety

Data may be shared where necessary to protect the rights, property, or safety of ovostoto, its users, or the public — including exchanging information with other companies and organisations for fraud protection purposes.

Protecting your personal data is more than a legal obligation for ovostoto – it is a commitment we take seriously. We invest in robust security infrastructure to ensure your data remains protected at all times.

• 256-bit SSL: All communications between your device and ovostoto's servers are protected by industry-grade SSL encryption. Data in transit cannot be intercepted or read by unauthorised parties.
• Stored Data Encryption: Sensitive data stored in our databases, including personal and financial information, is encrypted using current encryption standards.
• Strict Access Controls: Access to players' personal data within our internal systems is restricted to staff who genuinely need that information to carry out their duties.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect any suspicious activity or unauthorized access attempts.
• Two-Factor Authentication (2FA): Players can enable two-factor authentication for an additional layer of protection on their account.
• Regular Security Audits: The ovostoto platform undergoes regular independent security audits to identify and address any vulnerabilities.

Ovostoto uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and deliver more relevant content.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform operations such as login sessions and account preferences. The platform cannot function properly without these cookies.
• Analytics Cookies: Helps us understand how players interact with the platform – which pages are visited most frequently, how long play sessions last, and more. This data is used in aggregate form and is not used to identify individuals.
• Functional Cookies: Stores your preferences such as selected language, display settings, and game preferences so you do not need to reset them each time.

6.2 Cookie Controls

You can manage cookie settings through your internet browser preferences. Please note that disabling certain cookies may affect specific features on the ovostoto platform. Essential cookies cannot be disabled as they are required for the platform's core operations.

As a data subject, you have certain rights regarding the personal information held by ovostoto. We respect these rights and will process any requests within a reasonable timeframe.

To exercise any of the above rights, please contact the ovostoto customer support team via live chat or our support email. Requests will be processed within 30 business days.

Ovostoto only retains your personal data for as long as necessary to fulfil the purpose of collection or as required by applicable law.

• Active account data is retained for as long as your account remains active and for the required period after account closure to meet legal obligations.
• Financial transaction records are retained for the minimum period required under Malaysian financial laws.
• KYC documents are retained for the period stipulated by anti-money laundering (AML) compliance requirements.
• Customer support communication logs are retained for a reasonable period for quality assurance and dispute resolution purposes.
• Aggregated analytics data may be retained for longer periods in a form that cannot identify any individual.

The ovostoto platform is intended exclusively for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

Ovostoto reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform operations. You will be notified of any material amendments via platform notifications or email.

The "Updated" date shown at the top of this page reflects the latest version of the Privacy Policy. Continued use of the ovostoto platform after any amendments means you accept the updated version of the policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ovostoto handles your personal data, please contact our team:

• Via the live chat available at the bottom of the ovostoto platform – available 24 hours a day, 7 days a week.
• Via our support email at [email protected]

Our team will endeavour to respond to your enquiry within 2 business days and resolve any concerns within 30 days.