Privacy Policy latoto — User Data Protection

Latoto ("we", "our platform") is an online gaming service provider operating under the domain latoto.wine. We understand that user trust is our most valuable asset, and protecting your personal data is an absolute priority in every business decision we make.

This Privacy Policy applies to all users who browse the Latoto website, register an account, conduct financial transactions, or interact with any part of our platform — whether via desktop browser or mobile device. This document clearly outlines what data we collect, why we need it, how it is used, and the steps we take to protect it.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adhere to widely adopted international data protection standards. If you disagree with any part of this Privacy Policy, please discontinue use of our platform and contact our team for further guidance.

Latoto collects various categories of personal data depending on how you interact with our platform. The following are categories of data we may collect:

Latoto does not collect sensitive personal data such as health information, political affiliations, or religious beliefs unless required by applicable law. All data we collect is the minimum necessary to provide a safe and compliant service.

Your personal data is collected through several key channels when you interact with the Latoto platform:

• Account Registration: Information you provide directly when creating a new account, including your name, email address, and phone number.
• KYC Verification: Identity documents and proof of address submitted during the identity verification process.
• Financial Transactions: Bank account details and payment information shared during the deposit or withdrawal process.
• Platform Activity: Data automatically generated while you use the platform, such as activity logs, game preferences, and session duration.
• Cookies & Similar Technologies: Technical information collected via cookies, tracking pixels, and similar web technologies when you browse our platform.
• Customer Support: Communication records and information you share when interacting with our support team via Live Chat or other communication channels.
• Third Parties: In some cases, we may receive verification information from approved KYC service providers or financial institutions.

Latoto uses collected personal data solely for legitimate purposes directly related to the provision of our platform services. Every use of data has a clear legal justification, and you may request further clarification at any time.

• Creating, managing, and maintaining your user account on the latoto platform.
• Carrying out identity verification (KYC) processes as required by gaming and financial regulations.
• Processing deposits, withdrawals, and all financial transactions related to your account.
• Detecting, investigating, and preventing fraud, money laundering, and other illegal activities.
• Providing responsive and effective customer support.
• Sending important account-related communications such as transaction confirmations, security notices, and service terms updates.
• Sending promotional information and exclusive offers — only with your consent and cancellable at any time.
• Improving the user experience on the platform through analysis of usage patterns that do not identify individuals.
• Complying with legal obligations and regulations applicable to our operations.

Latoto does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, in the course of operating our platform, your data may be shared with the following categories of parties under limited and protected circumstances:

• Payment Providers: Approved payment processors and banking institutions to facilitate your deposit and withdrawal transactions.
• KYC Services: Independent identity verification providers that assist us in authenticating documents and verifying user identities.
• Technology Providers: IT infrastructure and cloud service providers supporting the technical operations of our platform — bound by strict confidentiality agreements.
• Regulatory Body: Government authorities or regulatory bodies when required by law, court order, or official investigation.
• Analytics Services: Anonymised and aggregated data used for platform performance analysis — cannot be used to identify individuals.

The security of your personal data is our top technical and operational priority. latoto implements multiple layers of protection to ensure your data is always safeguarded against unauthorized access, loss, or damage.

Our technical security measures include:

• 256-bit SSL encryption for all data in transit between your device and our servers.
• Encryption of sensitive data (including passwords and financial information) at rest using strong hashing algorithms.
• A multi-tier access control system ensuring only authorised personnel can access user data.
• 24/7 system monitoring with automated intrusion detection.
• Regular data backups to geographically separate locations for disaster recovery.
• Regular security testing and audits conducted by independent cybersecurity experts.

Data Retention Period: latoto stores your personal data for as long as your account is active or as long as necessary to provide our services. Following account closure, certain data may be retained for a minimum period of 5 years to meet legal obligations related to anti-money laundering and financial records. After this period, data will be securely deleted or anonymized.

Latoto uses cookies and similar tracking technologies to enhance your experience on our platform, understand how users interact with our website, and ensure security functions operate correctly.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Preference Cookies: Saving your personal settings such as preferred language and display preferences so you do not need to reconfigure them each time.
• Analytics Cookies: Collecting anonymized data on how users interact with our platform to help us improve our services. This data cannot personally identify you.
• Security Cookies: Helping detect and prevent fraudulent activity, automated bots, and unauthorized access attempts to user accounts.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect core platform functionality. For more information on managing cookies, refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act (PDPA) and international best practices, you have the following rights regarding your personal data held by Latoto:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your data is inaccurate or outdated, you have the right to request that we correct it.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data — subject to legal retention obligations.
• Right to Restrict Processing: You may ask us to restrict how we use your data in certain circumstances permitted by law.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request your data in a structured, machine-readable format for transfer to another service.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the above rights, contact our data protection team via Live Chat or our official email. We will process your request within 30 business days and may require identity verification before proceeding.

Latoto is a gaming platform designed exclusively for adults aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

If we determine that personal data of a minor has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

Latoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. Each updated version of the Privacy Policy will state the "Last Updated" date at the top of the document.

For material amendments that significantly affect your privacy rights, we will provide advance notice through:

• A prominent notice on the latoto platform homepage at least 7 days before an amendment comes into effect.
• Notification email to your registered email address for highly material amendments.
• An in-account notice when you log in to the platform for the first time after an amendment takes effect.

Continued use of the latoto platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the Latoto data protection team is ready to assist you.

You can reach us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Live Chat icon on our platform.
• Official Email: [email protected] — response within 1–2 business days.
• Help Center: Visit page FAQ us for answers to commonly asked privacy questions.