Privacy Policy ClotGaming – Malaysia Member Personal Data Protection

ClotGaming takes the personal data privacy of our members extremely seriously. We understand that your trust in us depends not only on the quality of the gaming services we offer, but also on how we handle the sensitive information you entrust to us.

This Privacy Policy applies to all users who register, visit, or use the ClotGaming platform in any capacity — whether through the website, mobile app, or any other channel operating under the ClotGaming brand. It clearly explains what data we collect, why we need it, how long it is retained, and the rights you hold as the owner of that data.

We are committed to being fully transparent about our privacy practices. If at any time you have questions or concerns about how we handle your data, the ClotGaming support team is available to assist you via in-platform live chat.

ClotGaming collects your personal information in several different ways, depending on how you interact with our platform:

2.1 Data You Provide Directly to Us

2.2 Automatically Collected Data

When you use the ClotGaming platform, our systems automatically record certain technical information for security and service improvement purposes. This includes your IP address, browser and device type, pages visited within the platform, session time and duration, and any technical errors that occur during use.

ClotGaming uses your personal data solely for legitimate purposes necessary to operate the platform and deliver the best possible service to you. We never use your data for purposes unrelated to your use of the platform.

The primary purposes for which your data is used are as follows:

• Account management: Creating, verifying, and managing your ClotGaming account
• Transaction processing: Processing deposits, withdrawals, and all financial activity on the platform
• KYC verification: Meeting legal requirements for member identity verification
• Security: Detecting and preventing fraud, unauthorised access, and suspicious activity
• Service communications: Sending important notifications related to your account, transactions, and security
• Product improvement: Analysing aggregated usage patterns to improve the platform
• Legal compliance: Fulfilling regulatory obligations and applicable legal requirements
• Customer support: Helping you resolve any account-related issues or enquiries

ClotGaming does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. This is a core principle we have never compromised since the very first day our platform launched.

However, there are certain situations where we need to share some of your information with specific parties to enable the platform to function properly:

4.1 Authorised Service Providers

We work with technical service providers that help operate certain platform functions — including payment processors, cloud infrastructure providers, and security software vendors. All parties are bound by strict confidentiality agreements and are prohibited from using your data for any purpose beyond their designated tasks.

4.2 Regulatory and Legal Requirements

ClotGaming may be required to disclose certain information to government authorities or regulatory bodies when mandated by law. This includes investigations related to anti-money laundering (AML), fraud, or other illegal activities. In such cases, we will comply with the relevant legal requirements while ensuring members' rights are protected to the fullest extent permitted.

Protecting your personal and financial data is a technical priority that we invest significant resources in to ensure it remains robust at all times. ClotGaming's security approach employs multiple integrated layers of protection to deliver maximum coverage.

• Encryption of data in transit: All communication between you and our servers uses TLS 1.3 protocol with SSL 256-bit encryption
• Encryption of data at rest: Sensitive data such as KYC information and financial details are stored in encrypted format within our database
• Two-factor authentication (2FA): Available and recommended for all accounts to protect against unauthorised access
• 24/7 secure monitoring: An active anomaly detection system monitors suspicious activity around the clock
• Data segregation: Personal data is stored separately from technical data and system logs
• Restricted access: Only staff who genuinely require access to specific data to perform their duties are permitted to do so
• Regular security audits: Our systems undergo regular security testing and independent third-party audits

The ClotGaming platform uses cookies and similar technologies to enhance your experience. Cookies are small files stored on your device that help the platform remember your preferences and enable certain features to function smoothly.

6.1 Types of Cookies We Use

• Essential cookies: Required for core platform functions such as secure login and session management. Cannot be disabled.
• Functional cookies: Storing your preferences such as language and display settings for a smoother experience.
• Performance cookies: Collecting information about how you use the platform to help us improve our services.
• Analytics cookies: Used to understand aggregated usage patterns and does not identify individuals.

6.2 Cookie Management

You can manage your cookie settings through your web browser. Please note, however, that disabling certain cookies may affect platform functionality, including the ability to stay logged in or save your preferences.

As a clotgaming member whose data we process, you have the following rights under applicable data protection laws. We are committed to making it easy for you to exercise these rights freely and without unnecessary obstacles:

The ClotGaming platform is strictly for individuals aged 18 and above. We do not knowingly collect or process any personal data of minors. If we discover that data belonging to someone under the age of 18 has been collected without our knowledge, that data will be deleted immediately and the account in question will be closed.

If you believe that your child or underage dependent has registered an account at ClotGaming, please contact us immediately via live support. We will act promptly to address the situation.

9.1 Cross-Border Data Transfers

Some of the technical services used by clotgaming may involve processing data outside Malaysia, including at data centres located in other countries. In all such cases, clotgaming ensures that protection equivalent to Malaysia's standards is applied to safeguard your data, including binding data processing agreements with all relevant service providers.

9.2 Data Retention Period

ClotGaming retains your personal data for as long as necessary to fulfil the purpose for which it was collected or to meet legal requirements. General data retention guidelines are as follows:

• Financial transaction data: Minimum 7 years for regulatory compliance purposes
• KYC documents: For the duration of the active account and 5 years after account closure
• Customer support communication logs: 2 years from the date of interaction
• Technical data and access logs: 12 months for security purposes
• Marketing data: Until you withdraw consent

Once the defined retention period has elapsed, your data will be securely deleted or irreversibly anonymised across all our systems.

If you have any questions, concerns, or complaints about how ClotGaming handles your personal data, our privacy team is here to help. We encourage you to contact us through official support channels before filing a complaint with the relevant regulatory authority.

The easiest way to reach us is through the live chat feature available on the ClotGaming platform, which operates 24 hours a day, 7 days a week. You may also raise privacy concerns via the support ticket section in your account. All privacy-related enquiries will be handled with high priority and responded to within 48 working hours.

We will also notify you if a security incident occurs that may affect your personal data, in accordance with applicable legal requirements. This notification will be sent to your registered email address as soon as possible after the incident is identified and assessed.