Sesetoto Privacy Policy – Member Personal Data Protection

1Introduction and Our Commitment

Sesetoto understands that privacy is more than just words — it is a fundamental right of every individual. As a trusted online entertainment platform in Malaysia, we take great responsibility in ensuring that every piece of information you entrust to us is handled with full integrity, transparency, and accountability.

This Privacy Policy is drafted in compliance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia and the highest international data protection standards. We never take member privacy lightly — this is not merely a legal obligation, but a core value of Sesetoto.

This document is designed to be easily understood by all members without requiring a legal background. We believe you have the right to know exactly what happens to your personal data from the moment you register to after your account is closed.

2Personal Data We Collect

Sesetoto only collects personal data that is strictly necessary to provide quality, secure services in compliance with legal requirements. We do not collect excessive or irrelevant data beyond what our platform operations require.

The categories of data we collect are as follows:

For KYC (Know Your Customer) purposes, we may also request supporting document copies such as your national identity card (MyKad), passport, driving licence, or utility bill as proof of address. All such documents are handled to the highest security standards and accessed only by authorised personnel.

3How We Collect Personal Data

Personal data is collected through various channels depending on how you interact with the Sesetoto platform. Generally, collection takes place through the following methods:

• Account Registration: Basic information you provide when creating a new account, including your name, email address, phone number, and password.
• KYC Process: Identity documents and proof of address uploaded during the identity verification process.
• Financial Transactions: Details provided during the deposit and withdrawal process, including bank account or e-wallet information.
• Platform Usage: Data generated automatically when you browse, play, or place bets on the Sesetoto platform.
• Support Communications: Information you share through live chat, email, or other support channels.
• Cookies and Tracking Technologies: Technical data such as IP address, browser type, operating system, and usage patterns collected automatically.

4Personal Data Usage Purposes

Every piece of data we collect has a clear and legitimate purpose. sesetoto does not use your data for purposes unrelated to the provision of platform services. Below is a summary table of data usage purposes:

If sesetoto intends to use your data for any new purpose not stated above, we will notify you in advance and, where required, obtain your renewed consent.

5Data Sharing and Disclosure

Sesetoto does not sell, rent, or trade your personal data to any third party for commercial purposes. This is our absolute commitment and it is non-negotiable.

However, in certain situations, sesetoto may share data with trusted parties for legitimate purposes:

• Service Providers: Payment gateway providers, e-wallet platforms, cloud storage services, and technical infrastructure providers supporting Sesetoto's operations — all bound by strict confidentiality agreements.
• Authorities: Regulatory authorities, law enforcement agencies, or courts when required by applicable Malaysian law.
• Fraud Prevention: Identity verification agencies or services that assist Sesetoto in detecting and preventing fraud and money laundering.
• Business Operations: In the event of a merger, acquisition, or sale of business assets, data may be transferred to the new entity subject to equivalent privacy protections.

6Data Security and Protection

Protecting your personal data is Sesetoto's highest technical and organisational priority. We continuously invest in the latest security infrastructure to ensure your information remains safe at all times — whether stored, processed, or transmitted.

The security measures we implement include:

• 256-bit SSL Encryption: All communication between your browser and sesetoto's servers is protected by bank-grade encryption.
• Data-at-Rest Encryption: Sensitive data stored on our servers is encrypted using AES-256 algorithms.
• Two-Factor Authentication (2FA): An additional layer of security available to all Sesetoto member accounts.
• Strict Access Control: Only authorised staff with a legitimate need may access member personal data.
• 24/7 Monitoring: The threat detection and security monitoring system operates around the clock without interruption.
• Regular Security Audits: Penetration testing and security audits are conducted periodically by independent experts.
• Automatic Data Backup: Data is automatically backed up and stored in a secure location to prevent data loss.

7Cookies and Tracking Technologies

Sesetoto uses cookies and similar tracking technologies to enhance user experience, analyse usage patterns, and ensure platform security. Cookies are small text files stored on your device when you visit the sesetoto platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functionality such as login session authentication and security. These cookies cannot be disabled.
• Preference Cookies: Stores your personal settings such as language, layout, and display preferences to enhance your browsing experience.
• Analytics Cookies: Collects aggregated data on how members use our platform to help us continuously improve our services.
• Security Cookies: Helps Sesetoto's systems detect suspicious activity, unauthorised login attempts, and unusual usage patterns.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the Sesetoto platform and your overall user experience.

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data. Sesetoto fully respects and facilitates the exercise of these rights.

9Data Retention Period

Sesetoto retains your personal data only for as long as it is needed for the stated purpose or as required by applicable Malaysian law. We do not retain data beyond the necessary period.

• Active Account Data: For as long as your account remains active and for the required period following account closure.
• Financial Transaction Records: Minimum 7 years in line with Malaysia's tax and financial legal requirements.
• KYC Documents: Minimum 5 years after the end of the business relationship, in accordance with anti-money laundering regulations.
• Support Communication Logs: 2 years from the date of last interaction.
• Cookie and Analytics Data: 12 to 24 months depending on the type of cookie.

Upon expiry of the designated retention period, your data will be securely deleted or anonymised in accordance with established procedures. Anonymised data cannot be re-linked to you and may be used for aggregate analytical purposes.

10Child Protection

The Sesetoto platform is exclusively for users aged 18 years and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

All account registrations go through a strict age verification process. Should sesetoto discover that a minor's personal data has been collected without our knowledge, we will immediately take steps to delete that data and close the account in question.

11Amendments to the Privacy Policy

Sesetoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. All amendments will be published on this page with a clear effective date.

For significant and material amendments, we will notify members via in-platform notifications or registered email at least 14 days before the amendment takes effect. Continued use of the sesetoto platform after the effective date of any amendment constitutes your acceptance of the updated policy.

12Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by Sesetoto, our Data Protection Officer (DPO) team is ready to assist.

You can reach us by email at [email protected] with the subject line "Privacy Inquiry" or via the live chat channel available 24 hours a day, 7 days a week on the sesetoto platform.

We are committed to responding to all privacy-related inquiries within 3 business days and resolve all formal requests within 21 business days as stipulated by the PDPA.