Colatogel Privacy Policy – Your Personal Data Protection

1Introduction

Colatogel ("we", "our platform") takes the privacy of its members very seriously. This Privacy Policy explains how we collect, process, store, and protect your personal information when you use the colatogel platform, including the website, mobile app, and all related services.

This policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. By registering or using any part of the colatogel platform, you consent to the collection and processing of your personal data as described in this Privacy Policy.

We encourage you to read this Privacy Policy carefully. If any section raises questions or requires further clarification, the colatogel customer service team is available to assist you via Live Chat 24/7.

2Information We Collect

Colatogel collects several categories of information to ensure the platform operates securely, efficiently, and in compliance with regulatory requirements. Below is a detailed description of each category:

We also collect information automatically when you use the platform, including server log data, cookie information, and usage analytics. This information is used in aggregate and is not used to identify you individually except in security investigations.

3How We Use Your Data

Colatogel uses your personal information for the following purposes, all of which are based on legitimate service requirements, legal obligations, or your consent:

• Account Management: Creating and maintaining your account, processing registration, and verifying identity through the KYC process.
• Transaction Processing: Handling deposits, withdrawals, and all financial transactions securely and accurately.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, and other cybersecurity threats.
• Service Communications: Sending important notices related to your account, transactions, and policy changes via email or SMS.
• Marketing (with consent): Keeping you informed about colatogel promotions, bonuses, and latest offers — only if you have opted in to receive them.
• Legal Compliance: Fulfilling reporting obligations to relevant authorities in accordance with applicable laws.
• Service Improvement: Analysing usage patterns in aggregate to improve user experience and platform performance.
• Responsible Gaming: Monitoring wagering patterns to identify members who may need support related to problem gambling.

4Sharing Information with Third Parties

Colatogel does not sell or rent your personal data to any third party. However, under certain limited circumstances, we may share your information with the following parties:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with licensed payment providers such as FPX gateways, DuitNow, and supported e-wallet operators. This sharing is limited strictly to what is necessary to complete each transaction.
• Identity Verification Providers: For KYC purposes, your identity information may be processed by registered and approved third-party verification services.
• Statutory Authority: We will disclose required information to legal authorities, law enforcement, or regulatory bodies when required to do so by Malaysian law or a valid court order.
• Technology Partners: Cloud infrastructure providers, analytics services, and cybersecurity platforms we utilise may process data in a limited capacity as data processors on our behalf, subject to strict data protection agreements.

5Data Storage and Security

Colatogel implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, misuse, or disclosure:

• Data Encryption: All sensitive data is encrypted in transit (SSL/TLS 256-bit) and at rest using AES-256 encryption standards.
• Tiered Access Controls: Access to user data is restricted to colatogel staff who require it to perform their specific duties, with two-factor authentication (2FA) mandatory.
• Regular Audits: Our security systems are audited internally every quarter and by an independent external party at least once a year.
• 24/7 Monitoring: Our threat detection system operates around the clock to identify and respond to any suspicious activity.

Data retention periods are as follows: transaction records and KYC data are retained for a minimum of 7 years after account closure to meet legal requirements. Usage data not required for legal purposes will be deleted or anonymized once it is no longer relevant.

6Cookies and Tracking Technologies

The colatogel platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
• Preference Cookies: Saving your personal settings such as language, time zone, and display preferences for a smoother return experience.
• Analytics Cookies: Collecting anonymised information on how users interact with the platform to help us improve its design and performance.
• Security Cookies: Helping detect suspicious login attempts and protecting your account from unauthorised access.

You can manage cookie settings through your browser settings. Disabling certain cookies may affect the functionality of some parts of the colatogel platform. Please note that disabling essential cookies will prevent you from logging in to your account.

7Your Rights as a Data Subject

Under Malaysia's PDPA and the colatogel privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the colatogel customer support team via Live Chat or support email. We will process your request within 30 business days. Some requests may require additional identity verification before they can be processed.

8Child Data Protection

The colatogel platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of children under 18. If we discover that a child's data has been collected without our knowledge, that information will be deleted immediately and the associated account will be closed.

9Links to Third-Party Platforms

The colatogel platform may contain links to third-party websites or services for user convenience. colatogel is not responsible for the privacy practices or content of any such third-party websites. This Privacy Policy applies solely to the colatogel platform.

We encourage you to read the privacy policy of every third-party website you visit. Colatogel has no control over the collection or use of your data by external platforms and cannot be held responsible for any privacy implications arising from your use of those platforms.

10Cross-Border Data Transfers

In the course of its global operations, colatogel may transfer your personal data to servers or processing facilities located outside Malaysia. Any such transfer will only take place where adequate safeguards have been established, including:

• Transfers to countries with a level of data protection equivalent to or higher than Malaysia.
• Use of approved standard data transfer agreements that bind recipients to data protection standards comparable to Malaysia's PDPA.
• Obtaining explicit consent from you when other protection mechanisms are not available.

All cross-border data transfers carried out by colatogel comply with the requirements of Section 129 of Malaysia's PDPA 2010.

11Changes to This Privacy Policy

Colatogel reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to you via your registered email or a notice displayed on the platform at least 14 days before the changes take effect.

The date of the latest update will always be displayed at the top of this page. Continued use of the colatogel platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you may close your account and stop using the platform.

12Contact Us for Privacy Inquiries

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact the colatogel Data Protection Officer through the following channels: