Privacy Policy LuanTogel – Your Personal Data Protection

Luantogel collects your personal data through several means — directly when you fill in a registration form, automatically when you use our platform, and through trusted third parties such as payment providers. The following are the categories of data we collect:

For users undergoing the KYC process, we will also collect copies of valid identity documents such as MyKad or passport, as well as proof of residential address such as a recent bank statement or utility bill. These documents are stored in a secure environment separate from standard profile data.

The personal data we collect is used responsibly and only for legitimate purposes. The following are the primary purposes for which your data is used on the luantogel platform:

• Account management: Create, manage, and maintain your member account, including the login process and identity verification.
• Transaction processing: Process deposits, manage withdrawals, and resolve any financial disputes.
• Platform security: Detect and prevent fraud, money laundering, and other suspicious activities that could compromise the safety of the platform and other members.
• Service communication: Send important notifications related to your account, such as transaction confirmations, security updates, and policy changes.
• Service improvement: Analyse usage patterns to improve platform design, speed, and overall user experience.
• Legal compliance: Fulfil reporting obligations to relevant authorities under applicable law.
• Customer support: Enables our support team to understand the context of your issue and provide more effective assistance.

Luantogel will not use your data for third-party marketing purposes or sell your usage profile to any external company. If you have agreed to receive promotional communications from luantogel itself, you may withdraw that consent at any time through your account settings.

Luantogel does not sell your data. However, in certain limited situations, we may need to share some of your information with trusted third parties for legitimate operational purposes:

• Payment providers: Required transaction information is shared with integrated payment providers such as FPX, e-wallets, and card processing networks solely for the purpose of completing your transaction.
• Game providers: Usernames (not full identity information) may be shared with third-party game providers to allow you to access their games through the luantogel platform.
• Lawful authorities: We will disclose required information to legal authorities or regulators if mandated by law, court order, or a financial crime investigation.
• Technical service providers: Cloud infrastructure providers and cybersecurity service providers that help us operate the platform may have limited access to data for technical purposes only.

All third parties who receive your data are bound by strict confidentiality agreements and must comply with the data security standards set by luantogel. We have zero tolerance for any misuse of data by third parties and will take immediate action in the event of a breach.

Luantogel invests seriously in security infrastructure to ensure your personal data is always protected. The following are the security layers we employ:

• Transit encryption: All data transmitted between your browser and luantogel servers is protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Storage encryption: Sensitive data such as financial information and identity documents is stored encrypted at rest using AES-256 standards.
• 24/7 monitoring: Our cybersecurity team continuously monitors platform activity to detect intrusion attempts, unauthorised access, or anomalies in usage patterns.
• Penetration testing: We conduct regular security testing (penetration testing) by independent third parties to identify and address vulnerabilities before they can be exploited.
• Two-factor verification: Logging in from a new device requires OTP verification. Users are also encouraged to enable 2FA for added protection.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. Should a data breach occur that affects your information, luantogel will notify you within the timeframe required by law and take immediate steps to mitigate the impact.

The luantogel platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining your login session. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collect information about how you use the platform — pages visited, time spent, and links clicked — to help us improve the user experience.
• Preference cookies: Remember your settings and preferences — such as language, time zone, and display options — for your convenience on future visits.
• Security cookies: Helps us identify suspicious sessions and prevent unauthorised access to your account.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality or experience of the luantogel platform. We do not use third-party cookies for advertising purposes.

As a luantogel member in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010:

Luantogel retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law. The following are our data retention guidelines:

• Active account data: Retained for the duration your account is active, plus 5 years after account closure, for legal compliance purposes.
• Transaction records: Retained for 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• KYC Documents: Retained for 5 years after the business relationship ends or the date of the last transaction, whichever is later.
• Security logs: Retained for 12 months to assist with security incident investigations if required.
• Marketing data: Deleted immediately once you withdraw consent to receive marketing communications.

Once the retention period expires, your data will be securely deleted using methods that make recovery impossible. luantogel runs a scheduled data purge process every quarter.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, the luantogel data protection team is ready to assist you.

For privacy-related requests, please include the following information in your message so we can process your request more efficiently:

• Your full name and luantogel account username
• Type of request (access, correction, deletion, etc.)
• Specific data details related to your request