Privacy Policy exo123 – User Personal Data Protection

1. Introduction

Exo123.fun ("exo123", "we", "our platform") is an online gaming and betting platform operating in Malaysia. We respect the privacy of every user and are committed to protecting the personal data entrusted to us. This Privacy Policy describes our practices regarding personal information we collect through the exo123.fun website, mobile app, and all related services we offer.

This document is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and covers the full lifecycle of your personal data — from initial collection through to deletion. We encourage you to read this Privacy Policy carefully and contact us if any section is unclear.

This Policy applies to all registered users, website visitors, and any individuals who interact with the exo123 platform through any official channel. It is to be read in conjunction with Terms and Conditions which forms part of the overall agreement between you and exo123.

2. Personal Data We Collect

We only collect data necessary to provide a safe, efficient, and responsible platform service. The following are the categories of data we collect:

2.1 Identity Data

• Full name as per identity card or passport
• Date of birth and gender
• National identity card number (MyKad) or passport number
• Current residential address
• Nationality and country of residence

2.2 Contact Data

• Active email address
• Mobile phone number
• Platform username

2.3 Financial Data

• Bank account number and bank name
• Deposit and withdrawal transaction records
• Win and loss records in games
• Payment methods used (FPX, DuitNow, e-wallet)

2.4 Technical & Usage Data

• IP address and IP-based geographic location
• Device type, operating system, and web browser version
• Platform activity logs (login, games played, session duration)
• Cookie and online tracker data

Data Category	Example	Primary Purpose
Identity Verification	Name, IC number, date of birth	KYC & age verification
Contact	Email, phone	Communication & account security
Financial	Bank account number, transactions	Deposit & withdrawal processing
Technical	IP address, device, activity logs	Platform security & improvement

3. How We Collect Data

Exo123 collects personal data through several lawful and transparent methods:

• Account registration: Information you provide when opening a new account on our platform.
• KYC process: Identity documents you upload for identity verification purposes prior to your first withdrawal.
• Platform usage: Data automatically generated when you log in, play, or carry out transactions.
• Customer support: Information you share when contacting our team via live chat or email.
• Cookies and tracking technologies: Technical data automatically collected by your web browser or app.
• Authorised third parties: In certain cases, we may receive data from approved third-party payment service providers or identity verification providers.

4. Purpose of Data Use

We use your personal data for legitimate purposes directly related to the provision of exo123 platform services. The following are the primary purposes for data use:

• Account management: Creating, managing, and maintaining your user account.
• Identity verification (KYC): Ensuring you meet the minimum age requirement and verifying your identity before withdrawals are processed.
• Transaction processing: Processing deposits, withdrawals, and all financial activities on the platform.
• Legal compliance: Meeting our obligations under the PDPA, anti-money laundering (AML) laws, and other applicable regulations.
• Platform security: Detecting and preventing fraud, account abuse, and unauthorised access.
• Service communications: Sending important notifications related to your account, transactions, and security.
• Product improvement: Analysing usage patterns to improve platform quality and user experience.
• Customer support: Helping to resolve enquiries, complaints, and technical issues you report.

5. Data Sharing & Disclosure

Exo123 does not sell users' personal data to any third party. However, in certain limited situations, we may share your data with the following parties:

5.1 Third-Party Service Providers

We work with trusted service providers to help operate the platform, including payment gateway providers, KYC services, game providers, and cloud infrastructure services. All providers are bound by strict confidentiality agreements and may only process your data for purposes we specify.

5.2 Legal Requirements

Exo123 will disclose personal data to government authorities or law enforcement when required by a valid court order, regulatory directive, or applicable legal obligation. In such situations, we will notify you where permitted by law.

5.3 Protection of Vital Interests

In exceptional circumstances where data disclosure is necessary to protect an individual's life or to prevent serious crime, exo123 reserves the right to share relevant information with the appropriate authorities.

6. Data Storage & Security

The security of your personal data is exo123's highest priority. We implement comprehensive technical and organisational measures to protect your data from unauthorised access, loss, or misuse.

6.1 Technical Security Measures

• 256-bit SSL/TLS encryption for all transmitted data
• Database encrypted with AES-256 standards
• Two-factor authentication (2FA) system for internal access
• Multi-layer firewall and intrusion detection system (IDS)
• Regular penetration testing by independent external parties

6.2 Data Retention Period

Your personal data is retained for as long as your account is active and for the period required by applicable law. Specifically:

• Financial transaction data: retained for a minimum of 7 years in accordance with AML legal requirements
• KYC and identity verification data: retained for 5 years after account closure
• Platform activity logs: retained for 2 years for security and dispute resolution purposes
• Customer support communication data: retained for 3 years

Once the specified retention period has ended, your data will be securely deleted or anonymised using industry-standard procedures.

7. Cookies & Tracking Technologies

Exo123 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as secure login and session management. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Saving your preferences such as language, time zone, and display settings for a more personalised experience.
• Analytics cookies: Helping us understand how users interact with the platform so we can make continuous improvements.
• Security cookies: Used to detect suspicious activity, prevent fraud, and ensure the security of your account.

You can manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect your ability to use certain features of the exo123 platform.

8. Your Rights as a User

Under Malaysia's PDPA and exo123's privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will process your request within 21 business days in accordance with PDPA requirements.

9. Protection of Children's Data

The exo123 platform is a service intended exclusively for individuals aged 18 and above. We do not accept registrations from underage individuals and do not knowingly collect personal data from children.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account. Parents or guardians who suspect their child has registered on the exo123 platform are requested to contact us immediately through our customer support channels.

10. Changes to Privacy Policy

Exo123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our platform practices, legal requirements, or the latest industry standards. Any material changes will be communicated to registered users via email or in-platform notification at least 14 days before the changes take effect.

The "Updated" date shown at the top of this page indicates the latest version of this policy. Your continued use of the exo123 platform after the effective date of any changes constitutes your acceptance of the latest version of this Privacy Policy.

We encourage you to revisit this page periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the exo123 website or mobile app
• Email: [email protected] (responded within 24 hours)
• FAQ: Visit page FAQ for instant answers

For more serious privacy issues or formal complaints, you also have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia appointed under the PDPA 2010.