Privacy Policy manadototo –
Your Personal Data Protection

1. Information We Collect

To provide you with a safe, personalised, and high-quality gaming experience, manadototo collects several categories of information from our users. This collection is carried out transparently and only to the extent necessary for legitimate purposes.

Data Categories	Example Information	Requirements
Personal Identity	Full name, IC/passport number, date of birth, gender	Mandatory
Contact Information	Email address, phone number, residential address	Mandatory
Financial Information	Bank account number, bank name, account holder name	Mandatory
Verification Data (KYC)	IC copy, utility bill, selfie verification photo	Mandatory
Platform Activity Data	Betting history, game logs, deposit/withdrawal transactions	Automatic
Technical Data	IP address, device type, operating system, web browser	Automatic
User Preferences	Language settings, game preferences, responsible gaming limits	Options

We do not collect any sensitive information such as biometric data, health information, political views, or religious beliefs unless specifically required by applicable law.

---

2. How We Collect Data

Manadototo collects information through several distinct channels, all designed to ensure a seamless user experience while maintaining maximum data protection:

• Account Registration: When you complete the registration form and KYC process, we collect your identity and contact information required to create a valid and secure account.
• Platform Usage: Every interaction you have with the platform — including games played, bets placed, and financial transactions — is automatically recorded in our system for security and audit purposes.
• Support Communications: When you contact our support team via live chat or email, the content of that communication is stored to help us provide better assistance and resolve disputes effectively.
• Cookies & Tracking Technologies: Our platform uses session cookies, preference cookies, and analytics cookies to improve performance and user experience. Further details are explained in Section 7.
• Third-Party Sources: In certain cases, we may receive information from trusted third-party identity verification providers or fraud prevention agencies for KYC and security purposes.

---

3. Purpose of Data Use

Manadototo uses collected data solely for legitimate and transparent purposes. We never use your personal data for purposes unrelated to the provision, improvement, or security of our services.

• Verification & KYC: Ensuring every user is a real individual who meets the required age and eligibility criteria, and preventing identity fraud.
• Transaction Processing: Enabling deposits and fund withdrawals to be processed accurately, securely, and to the correct account.
• Account Security: Detecting suspicious activity, protecting your account from unauthorized access, and preventing money laundering.
• Legal Compliance: Meeting the reporting and record-keeping requirements set by Malaysian law and relevant regulatory bodies.
• Service Improvement: Analyzing usage patterns in aggregate (not individually) to improve platform performance, user interface, and the range of games offered.
• Service Communications: Sending transaction notifications, security alerts, and important updates related to your account.
• Marketing (with Consent): If you have given your consent, we will send you information about promotions, bonuses, and the latest offers relevant to your preferences.

---

4. Sharing Information with Third Parties

Manadototo does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, in the context of normal platform operations, we may share limited information with the following categories of parties:

• Payment Service Providers: Payment gateways and financial institutions that process your deposit and withdrawal transactions. They receive only the information necessary to process the relevant transaction.
• KYC Verification Providers: Identity verification technology companies that help us verify the authenticity of identification documents submitted.
• Game Providers: Game studios providing games to the manadototo platform may require non-identifiable player identifiers for technical purposes.
• Regulatory Bodies and Law Enforcement: When required by law, court order, or a legitimate request from authorities, we will disclose the necessary information.
• Analytics Services: An analytics platform that helps us understand technical performance and usage patterns at an aggregate level, not at an individual user level.

All third parties with whom we share data are bound by strict confidentiality agreements and are required to meet data security standards equivalent to manadototo's own.

---

5. Data Security Measures

The security of your personal data is manadototo's top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against ever-evolving threats.

• End-to-End Encryption: All data transmitted through the platform is protected by TLS 1.3 protocol with AES-256-bit encryption, ensuring no third party can intercept your communications.
• Two-Factor Authentication (2FA): Users are encouraged and able to enable two-factor authentication for an additional layer of protection against unauthorized access.
• Real-Time Threat Monitoring: Our security monitoring system operates 24/7 to detect and respond to any suspicious activity or intrusion attempts immediately.
• Regular Penetration Testing: We conduct regular penetration testing by independent cybersecurity experts to identify and patch any vulnerabilities before they can be exploited.
• Internal Access Controls: Access to users' personal data within our organisation is restricted on a need-to-know basis only. All access is logged and audited regularly.
• Secure Data Backup: Data is regularly backed up to geographically separate locations with the same level of encryption to ensure service continuity in the event of an emergency.

---

6. Your Rights as a User

As a manadototo user, you have clear and enforceable rights regarding your personal data. We are committed to facilitating the exercise of these rights as efficiently as possible.

To exercise any of the above rights, contact the manadototo support team via live chat on the platform. Requests will be processed within 14 working days from the date of receipt. In complex cases, this period may be extended by up to 30 days with notice to you.

---

7. Cookies and Tracking Technologies

The manadototo platform uses cookies and similar tracking technologies to enhance functionality, security, and the overall platform experience. Cookies are small text files stored on your device when you visit our platform.

• Session Cookies: Required to maintain your login during an active session. This cookie is automatically deleted when you close your web browser. It is the most essential cookie for basic platform functionality.
• Preference Cookies: Saving your personal settings such as language preference, display theme, and other configurations so you do not need to reconfigure them each time you log in.
• Security Cookies: Used to detect unauthorised access attempts, Cross-Site Request Forgery (CSRF) attacks, and other suspicious activity to protect your account.
• Analytics Cookies: Helping us understand how users interact with the platform in aggregate — which pages are most popular, time spent on each section, and general navigation flows. This data is used solely for platform improvement.

You can manage or block cookies through your web browser settings. However, blocking session and security cookies may affect platform functionality and your account security.

---

8. Cross-Border Data Transfers

In the course of platform operations, your personal data may be processed or stored on servers located outside Malaysia. This occurs primarily in the context of cloud services and global data centre infrastructure that we utilise.

Manadototo ensures that any cross-border data transfers are carried out with adequate safeguards, including:

• Use of internationally recognized Standard Contractual Clauses (SCC) with overseas service providers.
• Selecting partner providers that hold recognized data security certifications such as ISO 27001 and SOC 2 Type II.
• A data security risk assessment is conducted before any new service is integrated into our platform ecosystem.

---

9. Data Retention Period

Manadototo retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by applicable law.

• Active Account Data: Retained for as long as your account is active and for 5 years after account closure, in line with financial compliance and anti-money laundering requirements.
• Transaction Records: Records of all financial transactions are retained for a minimum of 7 years in accordance with Malaysia's accounting and taxation legal requirements.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Security Logs: Access and security activity logs are retained for 12 months for incident investigation and security audit purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

---

10. Child Protection

Manadototo is an online gambling platform exclusively dedicated to adult users aged 18 and above. We have a zero-tolerance policy against the participation of underage individuals in any activity on our platform.

We do not knowingly collect or process any personal data of individuals under the age of 18. Strict KYC and age verification processes are implemented during registration to ensure compliance. Should we discover that a child's data has been inadvertently collected, we will take immediate steps to delete that data and close the account in question.

Parents and guardians who are concerned that their minor child may have registered on our platform are encouraged to contact our support team immediately.

---

11. Amendments to This Privacy Policy

Manadototo reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending you notifications via email or in-platform notice at least 14 days before changes take effect, where those changes materially affect your rights.
• In cases of significant changes, we may request your consent again before continuing to process your data.

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of the manadototo platform after any amendments take effect constitutes your acceptance of the updated policy.

---

12. How to Contact Us

If you have any questions, concerns, or wish to exercise any of your privacy rights stated in this policy, there are several ways to reach the manadototo team:

• Live Chat: The fastest way — click the live chat button on the platform to connect with our support team, available 24/7.
• Privacy Email: Send your privacy-related enquiries to [email protected] (displayed as plain text, not a link).
• FAQ Page: Check FAQ page for answers to the most frequently asked questions about privacy and account security.

Our team is committed to responding to all privacy-related inquiries within 3 working days. For official requests regarding user rights (access, deletion, etc.), please clearly state the type of request so we can process it faster and more accurately.