Privacy Policy Abutogel — Your Data, Our Protection

This Privacy Policy ("Policy") is published by Abutogel ("we", "Platform") and applies to all users who access or use the abutogel.vu website, the Abutogel mobile app, and all related services. This Policy transparently explains how we handle your personal data.

At abutogel, we believe privacy is more than a legal obligation — it is our moral responsibility to every member who entrusts us with their personal information. We are therefore committed to ensuring your data is handled with the utmost care, transparency, and respect.

By registering or continuing to use the abutogel platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any provision herein, please discontinue use of the platform and contact us for further enquiries.

Abutogel only collects personal data that is strictly necessary to operate the platform and deliver the best possible service to you. The data we collect falls into the following categories:

Registration & Identity Data

• Full name as it appears on your identification document.
• National identity card number (MyKad) or passport for KYC verification purposes.
• Date of birth to verify that you meet the minimum age requirement of 18 years.
• Active email address and mobile phone number.
• Current residential address.

Financial & Transaction Data

• Payment method details used (bank name, e-wallet type).
• Deposit and withdrawal history in your abutogel account.
• Internal platform transaction records, including bets and wins.

Technical & Device Data

• IP address and approximate location at login.
• Device type, operating system, and web browser version in use.
• Cookie data and session identifiers to maintain your login state.
• In-platform activity logs including pages visited and session duration.

Communication Data

• Records of live chat conversations with the abutogel support team.
• Emails and messages sent to us for investigation or support purposes.
• Feedback and reviews you voluntarily provide.

The personal data we collect is used solely for legitimate and permitted purposes. Below are the primary ways we use your information:

Abutogel processes your personal data on one or more of the following legal bases, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contractual Performance: Processing required to fulfil the service agreement between you and abutogel, including account management and transaction processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/KYC requirements and regulatory authority directives.
• Legitimate Interest: Processing required for abutogel's legitimate interests, such as platform security, fraud prevention, and service performance analysis.
• Consent: For certain activities such as marketing communications, we rely on your explicit consent, which may be withdrawn at any time.

Abutogel does not sell your personal data to any third party. However, we may share data in the following limited circumstances:

• Trusted Service Providers: Technical and operational partners such as payment processors, cloud service providers, and KYC verification platforms that help us run the platform. All third parties are bound by strict data protection agreements.
• Legal Authorities: Where required by law, court order, or lawful directive from a regulatory authority, we will disclose the necessary data to the relevant authorities.
• Fraud Investigators: In cases of suspected fraud or money laundering, data may be shared with the relevant investigative agencies to assist in their investigation.
• Business Transfer: In the event of a merger, acquisition, or sale of abutogel assets, player data may be transferred to the new entity subject to equivalent privacy protections.

Abutogel implements multiple layers of technical and organisational security to protect your personal data against unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL Encryption for all data transmitted between your browser and our servers.
• Encryption of Stored Data for sensitive information stored in our databases.
• Tiered Access Control — only staff who require access to specific data for their role are authorised to do so.
• 24/7 Security Monitoring by automated systems and our internal cybersecurity team.
• Penetration Testing conducted periodically by independent third parties to identify and address system vulnerabilities.
• Incident Response Procedures established to handle any security breach swiftly and effectively.

While we take all reasonable precautions, no security system can guarantee absolute protection. We encourage you to take personal measures as well, such as using a strong, unique password and never sharing your login credentials.

Abutogel retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. Our general data retention guidelines are as follows:

• Active Account Data: Stored for as long as your account remains active on the abutogel platform.
• Terminated Account Data: Stored for a minimum of 5 years after account closure to comply with AML and tax legal requirements.
• Financial Transaction Records: Stored for a minimum of 7 years in line with Malaysia's financial regulatory requirements.
• Support Communication Logs: Stored for 2 years for reference and service quality improvement purposes.
• Cookie Data: Expires according to the retention period set for each cookie type (see Section 9).

When data is no longer needed, we will delete or anonymise it using secure, irreversible procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by abutogel:

We will respond to all valid requests within 30 calendar days. If your request is complex or involves a large volume of data, we may require up to an additional 60 days and will notify you in advance.

Abutogel uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how visitors interact with the platform, which pages are visited most frequently, and where technical issues occur.
• Functional Cookies: Saves your preferences such as language, region, and display settings to provide a more personalised experience.
• Marketing Cookies: Used with your consent to display relevant advertisements and promotions. These cookies can be disabled through your browser settings.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some areas of the Abutogel platform.

In the course of platform operations, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs when we use cloud services or technology partners based in other countries.

Whenever your personal data is transferred outside Malaysia, we ensure equivalent protection is provided through:

• Data processing agreements that comply with international data protection standards.
• Selection of technology partners that comply with ISO 27001 or equivalent standards.
• Standard contractual clauses requiring data protection equivalent to Malaysia's PDPA.

The abutogel platform is exclusively for users aged 18 and above only. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that personal data of a child has been collected without the knowledge and consent of a parent or legal guardian, we will immediately take the following steps:

• Suspend the account in question immediately.
• Delete all associated personal data.
• Return any available financial balance in accordance with established procedures.

Parents or guardians who discover that their minor child has registered on abutogel are requested to contact our support team immediately at [email protected].

Abutogel reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. All amendments take effect immediately upon publication on our website.

For material changes — such as changes to how we use your data or new categories of data we collect — we will notify you via in-platform notification or email at least 14 days before the amendments take effect.

The "Last Updated" date at the top of this document always reflects the date of the latest version of this Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or wish to exercise your personal data rights, we are here to help through the following channels:

• Privacy Email: [email protected] — for all enquiries regarding your personal data and rights.
• Live Chat: Available 24/7 on the abutogel platform — for general enquiries and immediate support.
• FAQ: Visit the page FAQ us for answers to the most frequently asked questions.

We are committed to addressing every privacy-related enquiry seriously and within a reasonable timeframe. Your trust is our most valued asset at abutogel.