Privacy Policy Piktoto – Personal Data Protection for Malaysia Users

This Privacy Policy describes the personal data collection and processing practices of piktoto ("Platform", "We") when you use the piktoto.top website and the piktoto mobile app. It covers all your interactions with our platform, including during registration, daily use, financial transactions, and communications with our support team.

Piktoto operates in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We take the privacy of every user seriously and handle your personal data with the highest level of confidentiality and security.

By using the piktoto platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us for assistance in closing your account.

Piktoto collects your personal data through various means when you use our platform. Below are the types of data we collect and the reasons they are required:

Data is collected through three main methods: (1) information you provide directly during registration and platform use, (2) information automatically collected by our systems while you use the platform, and (3) information received from legitimate third parties such as payment providers for verification purposes.

Piktoto uses collected personal data for lawful and transparent purposes only. We do not use your data for any purpose unrelated to the delivery of platform services to you.

The primary purposes for which your data is used are as follows:

• Account management: To verify your identity, process registration and manage your account at Piktoto.
• Transaction processing: To manage deposits, withdrawals and all financial transactions securely and accurately.
• Platform security: To detect and prevent fraud, money laundering, and suspicious activity.
• Legal compliance: To fulfil obligations under Malaysia's PDPA and applicable financial regulations.
• Service improvement: To analyse usage patterns and improve platform features and user experience.
• Support communications: To respond to your enquiries and complaints through customer support channels.
• Relevant promotions: To inform you of offers and bonuses that may interest you, subject to your communication preference settings.

Piktoto does not sell, rent or transfer your personal data to third parties for their own marketing purposes. However, there are certain situations where we need to share your data with selected parties:

• Payment providers: Required data is shared with payment processors and financial institutions to enable deposit and withdrawal transactions to be processed securely.
• Game providers: Account information required to be shared with the game software providers we use, in order to grant you access to their games.
• Lawful authorities: Piktoto will disclose data when required by law, court order, or a competent regulatory authority.
• Technical services: Technical infrastructure providers who assist us in operating the platform, subject to strict confidentiality agreements.

The security of your personal data is our highest priority. piktoto implements multiple layers of technical and organisational security to ensure your data is always protected against unauthorised access, disclosure, alteration, or destruction.

Piktoto's security infrastructure includes:

• 256-bit SSL encryption for all communications between your device and Piktoto's servers – data remains unreadable even if intercepted.
• Encryption at rest for all personal and financial data stored in our databases.
• Strict access controls – only specifically authorised personnel may access user data, and all access is logged and audited.
• 24/7 security monitoring to detect and respond to any threats immediately.
• Regular security audits conducted by our internal security team and independent auditors to identify and patch vulnerabilities.
• A detailed incident response plan to ensure any data breach is addressed promptly and effectively.

Piktoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage cookie usage through your web browser settings. Please note that disabling essential cookies may affect certain features of the piktoto platform, including the ability to log in securely.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by piktoto:

Piktoto retains your personal data for as long as your account is active and for the period required thereafter to fulfil legal obligations and legitimate business purposes.

Specifically:

• Active account data is retained for the entire duration your account remains active on piktoto.
• Financial transaction records are retained for a minimum of 7 years from the date of the transaction, in accordance with Malaysia's financial regulatory requirements.
• After account closure, personal data is retained for 5 years for legal compliance purposes, then securely deleted or anonymised.
• Security log data is retained for 2 years to enable investigation in the event of a security incident.

Piktoto reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. Any material changes will be communicated to you via in-platform notifications or email at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically. The "Updated" date at the top of the page indicates when this policy was last modified. Continued use of the platform after changes take effect constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the piktoto privacy team is ready to assist you.

You can reach us via:

• Privacy Email: [email protected] (response within 2 business days)
• General Customer Service: [email protected] or Live Chat 24/7 within the platform

We are committed to taking every privacy-related inquiry seriously and providing a clear, helpful response within a reasonable timeframe.