Pulitoto Privacy Policy – Your Personal Data Protection

Pulitoto takes seriously its responsibility to protect the privacy of all users on our platform. This Privacy Policy explains in detail how pulitoto collects, stores, processes, uses, and protects your personal data when you visit, register, or use any services offered through the pulitoto.fun platform and all its subdomains.

This document is drafted in accordance with international data protection standards and best practices in the online gaming industry. We are committed to ensuring your personal information is handled with full integrity, responsibility, and in line with the trust you place in us.

This Privacy Policy applies to all individuals who interact with the pulitoto platform, including visitors without a registered account, active or inactive registered members, and anyone who contacts our support team. If you do not agree with any part of this policy, you are advised to stop using the pulitoto platform.

Pulitoto only collects personal data that is genuinely necessary to provide you with high-quality service. We do not collect excessive or irrelevant information. The following are the categories of data we collect:

In addition to data you provide directly, we also automatically collect technical data when you use our platform. This includes information about how you interact with the platform, the pages you visit, and the time you spend in each section.

The personal data we collect is used solely for legitimate and reasonable purposes to ensure you enjoy the best, safest, and most responsible gaming experience on pulitoto. The following are the specific purposes for which your data is used:

• Account Management: Creating, verifying, and maintaining your pulitoto account, including the registration process, login, and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions on our platform securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, and unauthorised access to your account.
• Customer Support: Providing effective technical assistance and support whenever you reach out to our team with any enquiry or complaint.
• Legal Compliance: Fulfilling legal obligations related to operating an online gaming platform, including any mandated reporting requirements.
• Product Improvement: Analysing usage patterns in aggregated, anonymised form to improve platform design, performance, and the overall user experience.
• Communications: Sending important account-related notifications, service terms updates, and promotional information (only if you have consented to receive them).
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offering appropriate support tools to users who need them.

We do not use your data for any purpose outside the scope stated above without first obtaining your explicit consent. Any new use of your data that differs from the original purpose of collection will be communicated to you separately.

Pulitoto does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. However, there are limited situations where we may need to share your data with trusted parties:

• Payment Service Providers: Payment platforms such as FPX, Touch 'n Go eWallet, Boost, and GrabPay receive only the transaction information strictly necessary to process your payment securely. They are bound by strict confidentiality agreements.
• Technical Service Providers: Companies providing server infrastructure, cybersecurity services, and system maintenance that help us operate the platform. They have only limited access to data necessary for their tasks.
• Regulatory Body: Relevant authorities may require access to certain data for legal compliance purposes, financial crime prevention, or legitimate investigations. We comply with all valid court orders and lawful requests.
• Independent Auditor: Third-party audit firms conducting security and compliance reviews may access data in anonymised format for technical review purposes.

Pulitoto uses cookies and similar technologies to enhance platform functionality, remember your preferences, and ensure your gaming sessions run smoothly. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies: Required for basic platform functions such as maintaining your login session, saving language preferences, and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how users interact with the platform in aggregated, anonymised format. This data helps us identify areas for improvement.
• Functional Cookies: Remembering your personal preferences and settings — such as preferred font size, display settings, and game preferences — to provide a more comfortable experience.
• Session Cookies: Used to verify your identity during an active session and automatically deleted when you close your web browser.

You can manage cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the pulitoto platform.

Protecting your personal data from unauthorised access, modification, disclosure, or destruction is pulitoto's highest priority. We continually invest in sophisticated security infrastructure to ensure the strongest level of protection for every user.

Technical and operational security measures we have implemented:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols for all communications between browser and server.
• Encryption of data stored in the database using AES-256 algorithms for all sensitive information.
• Two-factor authentication (2FA) is available and encouraged for all user accounts as an added layer of protection.
• Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) operating around the clock.
• Role-based access control (RBAC) ensures that only authorised staff can access specific data categories.
• Regular data backups at secure, separate locations for disaster recovery.
• Penetration testing conducted by independent security experts every quarter.
• Mandatory cybersecurity awareness training for all pulitoto staff who handle user data.

As a pulitoto user, you have clearly defined and protected privacy rights. We are committed to respecting and facilitating the exercise of these rights without unnecessary inconvenience.

To exercise any of the above rights, please contact our support team via the in-platform 24/7 live chat or email us at [email protected]. We will process your request within 30 days of the date of receipt.

Pulitoto retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. Once the retention period has expired, your data will be securely deleted or anonymised.

• Active Account Data: Retained for the duration your account is active plus the minimum legal period after account closure.
• Financial Transaction Records: Retained for 7 years in compliance with financial reporting and audit legal requirements.
• Security Logs: Retained for 12 months for security incident investigation purposes if required.
• Support Communication Data: Conversation records with the customer support team are retained for 24 months.
• Session Cookie Data: Automatically deleted when the session ends or within a maximum period of 30 days.

If you close your pulitoto account, we will initiate the data deletion process within 30 days, subject to applicable legal retention requirements.

Pulitoto strictly prohibits any individual under the age of 18 from registering, using, or accessing our platform. We do not knowingly collect, store, or process any personal data from minors.

Steps we take to protect minors:

• Strict age verification process during new account registration.
• Identity document verification as part of the KYC process to confirm user age.
• Immediate account suspension where there is evidence that a user is underage.
• No marketing content targeted at minors.

If you suspect that someone under the age of 18 is using the pulitoto platform, please notify us immediately. We will take prompt action to investigate and block the account in question.

Pulitoto reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new service features. Any significant changes will be communicated to you via:

• In-platform notifications on pulitoto at least 7 days before changes take effect.
• Email notification to the address registered in your account.
• Update the "Last Updated" date at the top of this document.

Your continued use of the pulitoto platform after changes take effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding how pulitoto handles your personal data, or if you wish to exercise any of your privacy rights, our team is ready to assist you.

How to contact us:

• Live Chat: Available 24 hours a day, 7 days a week directly within the pulitoto platform — the fastest way to get a response.
• Privacy Email: [email protected] — for written enquiries requiring a detailed response.
• Response Time: We are committed to responding to all privacy-related enquiries within a maximum of 5 business days.

For privacy complaints that cannot be resolved through our internal channels, you have the right to refer the matter to the relevant data protection authority in your jurisdiction.