Privacy Policy Colatogel – Data Protection Member Privacy

Colatogel collects members' personal information solely to provide a safe, reliable, and high-quality service. We do not collect information beyond what is strictly necessary for platform operations. The following are the types of information we collect when you interact with our platform:

We may also automatically collect information as you browse the platform, including server log data, session information, and application performance data. All such automatic data collection is intended solely to ensure the technical stability and security of the platform, not to excessively monitor your personal activity.

All information we collect is used solely for the stated and legitimate purposes. colatogel does not use your data for any purpose outside the following scope without first obtaining your additional consent:

• Account Management: Create, verify, and securely maintain your member account, including processing registration and KYC identity verification.
• Transaction Processing: Process deposits and withdrawals accurately and promptly, ensuring every transaction reaches the correct party.
• Service Communications: Send important account-related notifications, security updates, and promotional information that you have agreed to receive.
• Fraud Detection: Monitor suspicious activity, protect accounts from unauthorized access, and prevent money laundering.
• Platform Improvements: Analyze usage patterns in aggregate to improve overall performance, stability, and user experience.
• Legal Compliance: Fulfill the reporting and record-keeping obligations set by applicable laws and regulatory bodies.
• Responsible Gaming: Use usage data to identify concerning gameplay patterns and offer appropriate support to members who need it.

Colatogel upholds strict confidentiality principles. We do not share, sell, or disclose members' personal information to outside parties except under the following clearly defined circumstances:

• Trusted Payment Providers: Only the minimum required information is shared with payment processors and e-wallet providers to facilitate the completion of financial transactions. All payment partners are bound by strict confidentiality agreements.
• Technology Service Providers: Third-party companies that assist us in providing technical infrastructure, cloud services, and platform support may have limited access to data for technical purposes only.
• Legal Requirement: We may need to disclose information to law enforcement authorities, courts, or regulatory bodies when required by Malaysian law or a valid court order.
• Financial Crime Prevention: In cases suspected to involve money laundering, terrorist financing, or fraud, we reserve the right to disclose information to the relevant law enforcement agencies.
• With Your Consent: In any other circumstances not listed above, we will obtain your explicit consent before sharing any personal information.

All third parties with whom we share data have signed comprehensive data protection agreements and are not permitted to use that information for any purpose other than what has been agreed with colatogel. We also conduct regular audits of our partners' security practices.

We continuously invest in the latest security infrastructure to ensure your personal data always remains in a safe environment. Our security approach is multi-layered, meaning that even if one layer of protection is breached, subsequent layers continue to safeguard your data.

• End-to-end encryption using 256-bit SSL/TLS standards for all data communications between your device and colatogel servers.
• Member passwords are stored using the bcrypt hashing algorithm, which is irreversible — even our technical team cannot view your original password.
• An intrusion detection system (IDS) active 24 hours a day, 7 days a week to monitor any suspicious activity across our network.
• Multi-layered firewalls that prevent unauthorised access to internal databases and servers.
• Automated data backups performed at regular intervals to geographically separate secure locations, ensuring data recovery in the event of an emergency.
• Independent security audits conducted periodically by certified third-party cybersecurity experts.
• Mandatory information security training for all colatogel staff with access to member data.

Colatogel uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you when you return to the platform and personalise your experience based on your previous preferences.

We use four main types of cookies on the colatogel platform:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information on how you use the platform to help us identify and fix technical issues and improve loading speed.
• Functional Cookies: Remember your preferences such as language, currency, and display settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Help us understand usage patterns in aggregate and anonymized form for product improvement purposes. Analytics data is not linked to your personal identity.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of our platform. We recommend keeping at least necessary and functional cookies enabled for the best experience.

As a colatogel member, you have certain rights regarding your personal data that we fully respect. These rights can be exercised at any time by contacting our support team through official channels:

We will process every request within 30 business days of receipt. For complex cases, this period may be extended up to 60 days with advance notice to you. We do not charge any fee for your first request within a 12-month period; excessive repeat requests may incur a reasonable administrative fee.

Colatogel retains members' personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations. Retention periods vary by data type:

• Active Account Data: Retained for the duration your account remains active and for any additional period required following account closure to meet legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's financial reporting and tax requirements.
• KYC Documents: Retained for 5 years after the business relationship ends in accordance with the Anti-Money Laundering Act 2001.
• Communication Logs: Retained for 2 years for dispute resolution and customer service quality assurance purposes.
• Technical Data & Logs: Retained for 90 days for technical troubleshooting and security analysis purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

When the retention period expires or you submit a valid deletion request, your data will be securely erased using methods that ensure it cannot be recovered. This includes secure deletion from all backup systems and archives within a reasonable timeframe.

Colatogel reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable legal requirements, or improvements to the services we offer. All changes take effect upon publication of the updated version on our official website.

For material or significant changes that affect your privacy rights, we will take the following proactive steps:

• Send email notifications to the address registered in your account at least 14 days before changes take effect.
• Display a clear notice on the platform's home page and Login page for a minimum of 30 days.
• Update the "Last Updated" date shown at the top of this document.
• Provide a summary of key changes in plain language alongside the full updated version.

Continued use of the colatogel platform after a change notice is considered your acceptance of the updated terms. If you disagree with any changes, you have the right to close your account and stop using our services before those changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The version history of this document is retained and can be requested through our support team.