Piktoto Privacy Policy – Malaysia Member Data Protection

1 Information We Collect

To provide a secure and seamless service, piktoto collects several categories of information from our members. These include:

Basic Personal Information — Full name, date of birth, ID card or passport number, email address, phone number, and residential address. This information is collected during account registration and the KYC verification process.

Financial Information — Bank account or e-wallet details used for deposits and withdrawals. We do not store full credit card numbers — only the minimum information required to process transactions.

Platform Usage Information — Activity data such as game history, transaction records, login frequency, and personal preference settings in your account.

Technical Information — IP address, device type, operating system, browser type, and cookie data collected automatically when you use the platform.

2 How We Use Your Data

The information we collect is used for the following purposes:

We do not use your data for purposes beyond those stated above. Should we need to use your data for a new purpose, you will be notified in advance and your consent will be sought where required.

3 Sharing Information with Third Parties

Piktoto does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are specific situations where we may need to share your information:

• Payment Providers: To process deposits and withdrawals, minimal transaction information is shared with verified payment providers operating under strict security standards.
• Game Providers: Certain game session data is shared with third-party game providers solely to ensure games function correctly and results are accurate.
• Regulatory Authorities: When required by law or court order, we will disclose the necessary information to the relevant authorities.
• Technical Services: Cloud infrastructure providers and technical service partners who help us operate the platform may have limited access to data in a strictly technical capacity only, and are bound by strict confidentiality agreements.

All third parties who receive your data are bound by data protection agreements that require them to handle your information with the same level of security we apply.

4 Security and Data Protection

Piktoto continually invests in security infrastructure to ensure your data remains protected at all times. Key security measures we employ include:

• 256-bit SSL Encryption for all data transmitted between your device and our servers.
• Two-Factor Authentication (2FA ) available to all member accounts to add an extra layer of security.
• Encrypted password storage — your password is never stored in plain text on any of our servers.
• 24/7 Monitoring against suspicious activity and unauthorized access attempts.
• Regular Security Audits by an internationally accredited independent party to identify and address any system vulnerabilities.
• Data Segregation — financial information and personal data are stored in separate systems with strict access controls.

While we do our utmost, no system can be guaranteed 100% secure. We encourage you to take precautions as well, such as using a strong password, not sharing your login details, and keeping your device up to date.

5 Cookies and Tracking Technologies

Piktoto uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and ensure security functions operate correctly. There are three categories of cookies we use:

• Essential Cookies: Required for basic platform operations such as login session verification and security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how members use the platform so we can improve the user experience. All data is collected in aggregate and does not identify individuals.
• Preference Cookies: Saving your preferences such as language, display theme, and game settings for convenience on future visits.

You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect platform functionality.

6 Data Retention Period

Piktoto retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active account data retained for the duration your account remains active and for a specified period following account closure for legal compliance purposes.
• Financial transaction records retained for a minimum of 5 years in accordance with anti-money laundering legal requirements.
• Support communication logs retained for 2 years after the last interaction.
• Technical data and security logs retained for 12 months for investigation purposes in the event of a security incident.

When data is no longer needed, it will be securely deleted or anonymised in accordance with established procedures.

7 Your Rights as a Member

As a piktoto member, you have the following rights regarding your personal data. We respect these rights and make it easy for you to exercise them:

To exercise any of the above rights, please contact our support team via the in-platform live chat. We will process your request within 30 business days.

8 Child Protection

Piktoto strictly does not accept registration or platform use by individuals under the age of 18. We do not knowingly collect personal data from children. Should we discover that a child's data has been collected without proper age verification, we will take immediate action to delete that data and close the account in question.

If you are a parent or guardian and believe your child has registered on our platform, please contact our support team immediately.

9 Privacy Policy Amendments

Piktoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Whenever a material change is made, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to members via their registered email or in-platform notifications.
• Clearly displaying a summary of key changes to help you understand them easily.

We encourage you to review this page periodically. Continued use of the piktoto platform after any amendments take effect will be considered acceptance of the updated policy.