Privacy Policy colitoto —
Data Protection Malaysia Members

This Privacy Policy is issued by colitoto, an online casino platform operating under the domain colitoto.onl. This document outlines our data protection practices and applies to all users who access the website, register an account, or use any services offered by colitoto.

We recognize that your trust is our most valuable asset. That is why we are committed to ensuring that every piece of personal information you share with us is handled with full integrity, transparency, and in line with internationally recognized data protection best practices.

This Privacy Policy may be amended from time to time. The latest version will always be available on this page and takes effect immediately upon publication. We encourage you to review this page periodically to stay informed about how we handle your data.

Colitoto collects personal information from you in various ways, depending on how you interact with our platform. The following are the categories of data we may collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data categories such as health information, biometric data, or political views unless required by applicable law.

Every piece of data collected by colitoto is used solely for legitimate purposes necessary to deliver the best service to you. Below are the primary purposes for which your personal data is used:

• Account Management: Processing registrations, verifying identity through KYC, and keeping your account secure and active.
• Transaction Processing: Ensuring deposits and withdrawals are processed accurately, promptly, and securely through your chosen payment method.
• Service Delivery: Providing access to slot games, Live Casino, bingo, and all colitoto platform features.
• Fraud Prevention & Security: Detecting suspicious activity, preventing money laundering, and maintaining platform integrity.
• Legal Compliance: Fulfilling reporting obligations, regulatory compliance, and cooperation with relevant authorities when required.
• Platform Improvements: Analyzing usage patterns to improve the user experience, technical performance, and game offerings.
• Service Communications: Sending important notifications related to your account, transactions, and security.
• Promotions & Bonuses: Informing you of relevant promotions and bonuses, where you have consented to receive them.

Colitoto does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our absolute commitment. However, there are limited situations where we may need to share your data:

• Service Providers: Third parties who help us operate the platform, such as payment processors, game software providers, and cloud service providers, all bound by strict confidentiality agreements.
• Authority: When required by law, court order, or to fulfil legitimate regulatory compliance obligations.
• Fraud Prevention: With fraud prevention agencies or legitimate regulatory bodies for identity verification and protection against illegal activities.
• Business Transfers: In the event of a merger, acquisition, or asset sale, where user data may be transferred as part of that process, subject to prior notice being given to you.

All data sharing is carried out with care and only to the extent necessary. Third parties who receive your data are required to handle it in accordance with data protection standards equal to or higher than our own.

Colitoto implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, disclosure, or unlawful modification.

• 256-bit SSL Encryption: All communications between your browser and colitoto servers are encrypted using industry-standard TLS/SSL protocols.
• Data-at-Rest Encryption: Sensitive data stored in our databases is protected with additional encryption.
• Strict Access Controls: Only authorized personnel with a legitimate business need may access user data, subject to role-based access controls.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any security threats promptly.
• Regular Security Audits: We conduct regular penetration testing and security audits to identify and address any system vulnerabilities.
• Two-Factor Authentication: colitoto supports two-factor authentication (2FA) to add an extra layer of protection to your account.

Colitoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the colitoto platform. Essential cookies cannot be disabled as they are required for the platform's core operations.

As the owner of your personal data, colitoto fully recognizes and respects your rights. You have the right to:

To exercise any of the above rights, please contact the colitoto support team via live chat or send us an email. We will process your request within a reasonable timeframe and notify you of our decision.

Colitoto retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active Account Data: Retained for the duration that your account remains active and in use on the colitoto platform.
• Transaction & KYC Data: Retained for a minimum of 5 years from the date of the transaction or account closure, in accordance with applicable anti-money laundering legal requirements.
• Technical Logs: Retained for 12 months for security and investigation purposes where required.
• Support Communication Data: Retained for 24 months for quality control and reference in the event of a dispute.

Once the retention period ends, data will be securely deleted or anonymised so that it can no longer be linked to you. The deletion process follows strict security procedures to ensure your data cannot be recovered.

The colitoto platform works with trusted third-party services to ensure smooth operations, including game software providers, payment processors, and technical infrastructure providers. Each provider is carefully selected based on their security track record and privacy policies.

Key things you need to know:

• Colitoto is not responsible for the privacy practices of any third-party websites or services you may access through links on our platform.
• We recommend that you read the privacy policy of any third-party service you use separately.
• All third-party providers we work with are required to sign data processing agreements ensuring your data is protected to the standards we set.
• Data transfers to other countries are only carried out with adequate safeguards and in compliance with applicable data protection requirements.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the colitoto privacy team is here to help.

You can reach us via:

• Official Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the corner of the platform.

We are committed to responding to all privacy-related inquiries within a reasonable timeframe. Data processing complaints are handled seriously and thoroughly in accordance with our internal procedures.