Privacy Policy Colatogel —
Security of Your Personal Data

Colatogel ("we", "Platform" or "company") operates the website colatogel.vin along with all related services. We understand that your personal data is a trust placed in us, and we take this responsibility with the utmost seriousness.

This Privacy Policy explains in detail how we collect, process, store, and protect your personal information each time you interact with the Colatogel platform — whether through our website, mobile app, or customer support channels.

This document is drawn up in compliance with Malaysia Personal Data Protection Act 2010 (PDPA) and the best international data protection principles. We are committed to ensuring your data is handled in a transparent, fair, and secure manner at all times.

We collect various types of information depending on how you interact with the Colatogel platform. The following are the main categories of data we collect:

We only collect information that is strictly necessary for the stated purpose. Principle of data minimisation — collecting only the minimum data necessary — serves as our guiding principle in every data collection process.

Colatogel uses collected personal data for lawful and transparent purposes. We will not use your data for any other purpose without obtaining your consent beforehand.

• Account management: Create and manage your account, process registration, and verify your identity.
• Transaction processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
• Service delivery: Allow you to access all games, promotions, and features on the Colatogel platform.
• Security and fraud detection: Monitor suspicious activity, prevent money laundering, and ensure platform integrity.
• Legal compliance: Fulfil legal obligations under the PDPA, anti-money laundering (AML) regulations, and KYC requirements.
• Service communications: Send important notices regarding your account, transactions, and service changes.
• Customer support: Resolve your enquiries, complaints, and assistance requests more efficiently.
• Platform enhancement: Analyse usage patterns to improve user experience, performance, and system reliability.
• Marketing (with consent): Send promotional information and exclusive offers where you have consented to receive them.

Colatogel does not sell or trade your personal data. However, there are certain situations where we need to share information with specific parties to ensure smooth service operations:

• Payment providers: Required transaction information is shared with payment service providers such as banks and verified digital wallet operators to process your deposits and withdrawals.
• Technology provider: Technical infrastructure providers that assist in operating the platform, such as server hosting services and cybersecurity providers, are subject to strict confidentiality agreements.
• Legal authorities: We will disclose information to the relevant authorities when required by law, court order, or official investigation.
• Analytics provider: Aggregated and non-identifiable data is used for platform performance analytics — no personally identifiable information is shared with these third parties.

The security of your data is our top priority. Colatogel continuously invests in cutting-edge security infrastructure to ensure your personal and financial information is always protected.

• 256-bit SSL/TLS Encryption: All communications between your device and our servers are protected with the highest industry-grade security encryption.
• Data encryption at rest: Sensitive data stored in our databases is further protected with an additional encryption layer to prevent unauthorised access.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account login process.
• 24/7 security monitoring: Our systems are continuously monitored to detect and respond to any security threats promptly.
• Periodic security audits: The colatogel platform undergoes regular penetration testing and independent security audits to identify and address any vulnerabilities.
• Role-based access control: Only staff who require access to specific data to carry out their duties are granted permission, with a complete audit log maintained.

While we take all reasonable precautions, no digital system can guarantee 100% absolute security. In the event of a security incident involving your personal data, we will notify you and the relevant authorities within the timeframe required by law.

The colatogel platform uses cookies — small text files stored on your device — to improve your experience and ensure the platform runs smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information about how visitors use the platform to help us identify areas for improvement. All data is collected in aggregate and anonymised form.
• Functional Cookies: Allow the platform to remember your preferences such as language, currency, and display settings for a more personalised experience.
• Analytics Cookies: Used by verified third-party analytics tools to understand usage patterns and improve our services.

You may manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect specific platform functions. Session cookies are automatically deleted when you close your browser.

Under the Malaysia Personal Data Protection Act 2010 (PDPA) and the privacy principles we uphold, you have the following rights regarding your personal data:

Colatogel retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. In general, our retention principles are as follows:

• Active account data: Retained for as long as your account remains active and for the required period following account closure for audit and legal compliance purposes.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and accounting legal requirements.
• KYC documents: Retained for the period mandated by applicable anti-money laundering laws.
• Communication logs: Customer support interaction records are retained for three (3) years for quality assurance and dispute resolution purposes.
• Technical data and system logs: Access and security logs are retained for twelve (12) months for security and fraud detection purposes.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be re-identified. Deletion is carried out in accordance with industry-standard security procedures.

The colatogel platform may contain links or integrations with third-party services such as payment providers and game suppliers. It is important to understand the following:

• Colatogel's Privacy Policy applies only to our own platform and does not cover the privacy practices of any third parties.
• When you access third-party services through our platform, you are subject to the privacy policies of those third parties.
• We encourage you to read the privacy policy of every third-party service you use.
• Colatogel is not responsible for the privacy practices or content of any third-party websites or services.

All game providers integrated with the colatogel platform have undergone a security assessment process and are required to comply with the data protection standards set as a condition of partnership.

Colatogel reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material changes are made, we will:

• Update the "Last Updated" date at the top of this document.
• Display a prominent notice on the platform's home page for a specified period.
• Send email notifications to all registered members for significant changes.

Continued use of the Colatogel platform after changes take effect will be considered acceptance of the updated terms. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, the colatogel privacy team is ready to assist you through the following channels:

• 24/7 Live Chat: The fastest way — use the Live Chat button available on all pages of our platform.
• Email: Submit your written enquiry to [email protected] with the subject line "Privacy Enquiry" for prompt action.
• Help Centre: Visit the FAQ for answers to frequently asked questions about privacy and account security.

We are committed to responding to all privacy-related enquiries within three (3) business days. For formal data subject rights requests, please include appropriate identity verification to expedite the process.