Privacy Policy Evostoto — Malaysia Member Data Protection

Evostoto ("we", "Platform") values the privacy of every individual who uses our services. This Privacy Policy clearly and transparently explains how we manage your personal data — from how it is collected and how it is used, to who may access it and how you can control your own information.

This policy applies to all users of the evostoto platform, including those accessing the website at evostoto.vu, the official evostoto mobile app, and any other services or products operated by evostoto. By registering an account or using any of our services, you agree to the practices described in this Privacy Policy.

We collect your personal data through several means — directly from you during registration or platform use, automatically via tracking technologies, and occasionally from trusted third-party sources for identity verification purposes.

We only collect data that is strictly necessary to provide you with high-quality service. Sensitive information such as passwords is stored in cryptographically hashed form and cannot be read by anyone, including evostoto staff.

Every piece of data we collect is used for a clear and legitimate purpose. The following are the primary purposes for which evostoto uses your personal data:

• Account management: Create and maintain your evostoto account, including secure login processes and two-factor authentication.
• Service provision: Process your deposits and withdrawals, manage bonuses and promotions, and provide access to all games available on the platform.
• Identity verification (KYC): Meet legal compliance requirements and prevent fraud, money laundering and other unlawful activities.
• Platform improvements: Analyse usage patterns to improve the user experience, introduce new features and resolve technical issues.
• Service communications: Send important notifications regarding your account, security updates and transaction information.
• Marketing (with consent): Send promotional information, bonuses and special offers — only if you have given consent to receive such communications.
• Legal compliance: Fulfil legal obligations, regulatory requirements and relevant directives from authorities.

Evostoto does not sell or disclose your personal data to third parties without a legitimate basis. However, there are limited situations in which we may share your data with specific parties:

• Payment service providers: Required transaction information is shared with licensed and trusted payment processors to complete your deposits and withdrawals.
• Integrated technology providers: Game software providers, security platforms and hosting services that support evostoto's operations may have limited access to data required for their functions.
• Regulatory authority: When required by law, court order, or a relevant regulatory authority, evostoto will disclose the necessary information.
• Fraud prevention: In cases of suspected fraudulent activity, relevant data may be shared with security agencies or other platforms within a recognised fraud prevention network.

All third parties receiving your data from evostoto are bound by strict confidentiality agreements and are permitted to use that data solely for the specified purposes.

Protecting your personal data is a responsibility we take very seriously. evostoto implements multiple layers of technical and operational security to ensure your data remains protected at all times:

• 256-bit SSL Encryption: All data transmitted between your device and evostoto servers is protected by 256-bit SSL encryption, the highest security standard in the industry.
• Secure data storage: Personal data is stored on servers protected by strict access controls, multi-layered firewalls, and intrusion detection systems.
• Two-factor authentication (2FA): An additional security layer is available for member accounts to prevent unauthorised access even if your password is compromised.
• Continuous monitoring: The evostoto security team monitors our systems around the clock to detect and respond to any security threats in real time.
• Regular security audits: Penetration testing and independent security audits are conducted regularly to identify and address any potential vulnerabilities.

The evostoto platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining your login session and ensuring transaction security. These cookies cannot be disabled.
• Performance cookies: Collect information about how you use the platform to help us improve the overall user experience.
• Functional cookies: Remember your preferences such as language, display settings and other choices to deliver a more personalised experience.
• Analytics cookies: Helps us understand platform usage patterns on an aggregated, anonymised basis for product development purposes.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the evostoto platform. For more information on managing cookies, refer to your web browser's help section.

As an evostoto member, you have full rights over your personal data. We respect and uphold the following rights:

To exercise any of the above rights, please contact the evostoto customer support team via live chat or email. We will process your request within 30 business days.

Evostoto retains your personal data only for as long as necessary to fulfil the purposes stated in this privacy policy or as required by applicable law.

• Active account data: Retained for the duration your account remains active and for a reasonable period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC verification documents: Retained for a minimum of 5 years after the business relationship ends to comply with anti-money laundering regulations.
• Support communication logs: Retained for 3 years for reference and dispute resolution.
• Technical data and logs: Retained for 12 months for security and operational analytics purposes.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with approved data disposal procedures.

Evostoto strictly does not provide services to individuals under the age of 18. Our platform is not designed for or targeted at children. We do not knowingly collect personal data from minors.

If we determine that we have collected personal data from an individual under the age of 18 without valid parental consent verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child may have registered at evostoto are encouraged to contact us immediately.

If you have any questions, concerns or requests regarding this Privacy Policy or how evostoto handles your personal data, do not hesitate to reach out to us through the following channels:

• Live Chat: The fastest way — available 24/7 via the chat icon at the bottom corner of the evostoto platform.
• Privacy Email: [email protected] (displayed as plain text, not a clickable link).
• Help Centre: Visit page FAQ us for answers to frequently asked questions about privacy and data security.

Evostoto reserves the right to amend this Privacy Policy from time to time. Any significant changes will be communicated to members via in-platform notifications or email. We encourage you to review this page periodically to stay up to date with our latest privacy policy.