Privacy Policy Rupiahtoto – Protecting Your Data

This Privacy Policy ("Policy") describes the privacy practices of Rupiahtoto ("Platform", "we") regarding the collection, use, disclosure, and protection of your personal information when you use our platform at rupiahtoto.vin. This policy applies to all users and members of the platform, regardless of the access method used — whether via web browser or mobile app. By using the Rupiahtoto platform, you agree to the practices described in this Privacy Policy.

At Rupiahtoto, we understand that entrusting your personal information to an online platform requires a high degree of confidence. That is why we have built our data protection system on robust principles: transparency, security, and user control.

As a trusted online gaming platform, we comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international security standards. Every decision regarding your data is made with your best interests and privacy as a member at the forefront.

We never sell, rent, or trade your personal data to third parties for their own marketing purposes. The data you provide is used exclusively to improve your experience on the rupiahtoto platform and to ensure the security of your transactions at all times.

Rupiahtoto collects your personal information through several different means, depending on how you interact with our platform. Below is a detailed breakdown of the types of information we collect:

There is also information we collect automatically when you visit our platform, including device information, session cookies, and analytics data that help us understand how our platform is used so we can continually improve it for your convenience.

Every piece of information we collect is used for a clear and lawful purpose. We do not use your data for purposes not stated in this Privacy Policy without first obtaining your consent.

• Account Management: Processing registrations, verifying identity through KYC, managing logins, and providing secure access to your account on the rupiahtoto platform.
• Transaction Processing: Processing deposits and withdrawals securely, verifying payments, detecting fraud, and maintaining accurate transaction records for audit and compliance purposes.
• Platform Improvements: Analysing usage patterns to improve the user experience, develop new features, and maintain optimal platform performance at all times.
• Service Communications: Sending important notifications regarding your account, transactions, policy changes, and relevant security updates.
• Marketing (With Consent): Sending promotional information, bonus offers, and the latest news about rupiahtoto only if you have consented to receive them. You may unsubscribe at any time.
• Legal Compliance: Fulfilling legal obligations, including anti-money laundering (AML) requirements, and reporting suspicious activity to the relevant authorities when required by law.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and providing appropriate intervention through our responsible gaming programme.

Rupiahtoto is very careful about who your data is shared with. We only share your personal information in the limited circumstances outlined below, and always with appropriate safeguards in place:

• Trusted Service Providers: Companies that assist us in operating the platform, including payment providers, licensed gaming platforms, cloud service providers, and cybersecurity firms. All such third parties are bound by strict confidentiality agreements.
• Legal Requirements: Government authorities, regulatory bodies, or law enforcement agencies when we are legally required to do so under Malaysian law or a valid court order.
• Fraud Detection: A fraud prevention agency and industry information-sharing platform designed to protect users from security threats and online fraud.
• Business Transfers: In the event of a merger, acquisition, or business asset transfer, your data may be transferred to the successor entity, subject to equivalent privacy protections.

The security of your personal data is our absolute top priority. rupiahtoto continuously invests in the latest security infrastructure to ensure your information remains protected against increasingly sophisticated threats in today's digital landscape.

• 256-bit SSL Encryption: All data transmitted between your device and rupiahtoto's servers is protected by 256-bit SSL encryption — the same highest-grade security standard used by international banking institutions.
• Stored Data Encryption: Sensitive data stored in our databases, including financial information and identification documents, is encrypted using the AES-256 algorithm.
• Strict Access Control: Only authorised personnel who genuinely need access to your data to perform their duties are permitted. All access is logged and continuously monitored.
• Periodic Security Testing: Our platform undergoes regular penetration testing and security audits by independent cybersecurity firms to identify and patch any vulnerabilities.
• Two-Factor Authentication: 2FA is available and strongly encouraged for all members to add an extra layer of protection to your account beyond just a password.
• 24/7 Real-Time Monitoring: Our security team monitors the platform around the clock using automated threat detection systems capable of detecting and responding to suspicious activity within seconds.

While we take all reasonable steps to protect your data, no security system in the world is 100% impenetrable. We encourage you to also take precautions on your end, such as using a strong, unique password and not sharing your login credentials with anyone.

Rupiahtoto uses cookies and similar tracking technologies to enhance your experience, analyse platform performance, and maintain your session security. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the platform's core functions, such as maintaining your login session and ensuring transaction security. They cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform, such as the most frequently visited pages. This data is used in aggregate form and does not personally identify you.
• Functionality Cookies: Allows the platform to remember your preferences such as language, display settings, and personal preferences to deliver a more personalised experience.
• Analytics Cookies: Used to understand overall user behaviour to help us improve platform design and content. Data is collected anonymously.

You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality and your experience on the Rupiahtoto platform. More information on managing cookies is available in your browser settings.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. Rupiahtoto is committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 14 working days.
• Right to Rectification: If your data is inaccurate or out of date, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data ("right to be forgotten"), subject to our legal obligations to retain certain records.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, and we will stop immediately.
• Right to Restriction: You may request that we restrict how we process your data in certain circumstances, such as while a complaint investigation is ongoing.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

To exercise any of these rights, please contact our support team via Live Chat or email. We may need to verify your identity before processing your request in order to protect your account security.

Rupiahtoto only retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration your account remains active, plus any legally required period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with financial reporting and anti-money laundering (AML) requirements in Malaysia.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with AML/KYC compliance requirements set by the relevant authorities.
• Communication Logs: Customer support chat and email records are retained for 2 years for service quality purposes and reference in the event of a dispute.
• Analytics Data: Anonymised usage data may be retained for longer periods for trend analysis and platform improvement purposes, as it can no longer be linked to any specific individual.

When your personal data is no longer needed, it will be securely deleted or anonymised in accordance with strict data disposal procedures. You may request information on specific retention periods for certain data types by contacting us.

The rupiahtoto platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If we discover that we have inadvertently collected data from someone under the age of 18, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who believe their child has registered on our platform without authorisation may contact us immediately for action.

The rupiahtoto platform may contain links to third-party websites or services, including game provider sites and payment platforms. This Privacy Policy applies solely to the rupiahtoto platform and does not cover those third-party websites or services.

We encourage you to read the privacy policy of every third-party website you visit. rupiahtoto is not responsible for the privacy practices or content of such third-party websites, even if links to them appear on our platform.

Rupiahtoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The "Last Updated" date at the top of this page will always indicate the most current version.

For material and significant amendments, we will notify you via email to the address registered in your account, or through a prominent notification on the platform before the changes take effect. Continued use of the platform after changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly. Our privacy and customer support team is available to assist you 24 hours a day, 7 days a week.

• Live Chat: The fastest way to get immediate help. Available at the bottom-right corner of the platform with an average response time of under 2 minutes.
• Email: [email protected] — for privacy-related enquiries, please include "Privacy Enquiry" in the subject line of your email.
• Telegram: Reach our support team via rupiahtoto's official Telegram channel for fast, convenient assistance.

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex or sensitive issues, we may require additional time to conduct a thorough investigation before providing you with a comprehensive response.