Privacy Policy ometoto — Your Information Is Safe With Us

Ometoto is committed to protecting the privacy of every individual using our platform. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the ometoto website at https://ometoto.vu as well as any related services we offer.

As an online wagering platform serving users in Malaysia and the region, we understand that your trust is our most valuable asset. Every decision we make regarding data handling always prioritises the interests and security of our members.

By registering or using ometoto's services, you agree to the practices described in this Privacy Policy. If you do not agree, please stop using the platform and contact us to request deletion of your data.

Ometoto collects various types of information to ensure our platform operates smoothly, securely, and delivers the best experience to every member. The data we collect falls into three main categories:

Information you provide directly:

• Full name as it appears on a valid identity document.
• Date of birth for minimum age verification of 18 years.
• Active email address used as the primary account identifier.
• Mobile number for two-factor authentication and important notifications.
• Complete and up-to-date residential address.
• Bank account or digital wallet details for processing deposits and withdrawals.
• Identity document (such as MyKad or passport) during the KYC process.

Automatically collected information:

• Your device's IP address when accessing the platform.
• Device type, operating system, and web browser version used.
• Wagering activity data including games played, bet amounts, and outcomes.
• Deposit and withdrawal transaction history.
• Login timestamps and session activity logs.
• Approved cookie and tracking technology data.

Information from approved third parties:

• Identity verification data from the KYC service providers we use.
• Payment processing information from approved payment gateways.
• Fraud prevention data from the security services we use.

The information we collect is used solely for legitimate purposes directly related to the delivery of ometoto services. We will not use your data for purposes not stated in this Privacy Policy without obtaining your consent first.

• Account management: Create, verify, and maintain your member account, including secure login and password recovery.
• Transaction processing: Process all deposits and withdrawals quickly and securely via your chosen payment method.
• Legal compliance: Fulfil legal requirements including anti-money laundering (AML) laws, identity verification, and reporting obligations mandated by the authorities.
• Platform security: Detect and prevent fraudulent activity, account misuse, unauthorised access, and other security threats.
• Service improvements: Analyse usage patterns to improve the interface, platform speed, and overall experience for ometoto members.
• Service communications: Send important notifications regarding your account, transactions, policy updates, and security information you need to know.
• Customer support: Provides effective assistance when you contact the ometoto support team by understanding your account context and issue.
• Relevant promotions: Where you have given consent, we will send you information about offers, bonuses, and promotions relevant to your activity on ometoto.

Ometoto does not sell, rent, or trade members' personal information to third parties for commercial purposes. However, there are certain situations where we need to share your data with trusted parties to enable our services to function properly:

• Payment service provider: Payment gateways and transaction processors we use to enable deposits and withdrawals to be processed securely. They are bound by strict confidentiality agreements.
• KYC service provider: The third-party identity verification company we use to fulfil KYC requirements. Data shared is limited to the information necessary for verification only.
• Game software provider: Game developers that produce slots, live casino, and other games on the ometoto platform may receive non-identifiable statistical game data.
• Legal authorities: We are required to disclose information to law enforcement agencies, regulatory bodies, or courts when mandated by applicable law.
• Cybersecurity provider: A threat detection and fraud prevention service that helps us identify and block suspicious activity before it affects your account.

Ometoto implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

• 256-bit SSL encryption: All data transmitted between your browser and ometoto's servers is protected by bank-grade 256-bit SSL encryption, ensuring no one can intercept or read your information in transit.
• Two-factor authentication (2FA): An additional security layer requiring verification via OTP sent to your registered mobile number each time you log in from a new device.
• Stored data encryption: Sensitive information such as passwords is stored in a hashed format that cannot be decrypted. We do not store passwords in plain text.
• 24/7 Monitoring: Our automated monitoring system operates around the clock to detect suspicious activity and immediately alert our security team.
• Internal access controls: Only ometoto staff who require access to your data for legitimate work purposes are granted permission, and every access is recorded and audited.
• Regular security testing: We conduct regular penetration testing and security audits to identify and address any potential vulnerabilities.

Ometoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for basic platform functions such as maintaining your login session. These cookies cannot be disabled as they affect core website functionality.
• Performance cookies: Helps us understand how members interact with the platform — the most frequently visited pages, load times, and errors encountered.
• Functional cookies: Store your preferences such as language, display settings, and saved login details for a smoother repeat experience.
• Analytics cookies: Use analytics services to collect anonymous statistical data for the continuous improvement of the ometoto platform.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the ometoto platform.

As an ometoto member, you have several important rights regarding the personal information we hold about you. We are committed to making it easy and straightforward for you to exercise these rights.

• Right of access: You have the right to request a copy of all personal information we hold about you in a readable format.
• Right to rectification: If any information we hold is inaccurate or out of date, you have the right to request an immediate correction.
• Right to Erasure: Under certain circumstances permitted by law, you have the right to request the deletion of your personal data from our systems.
• Right to restrict processing: You have the right to request that we restrict how we use your data while any dispute is being resolved.
• Right to data portability: You may request your personal data in a structured format that can be transferred to another platform.
• Right to object: You may object to the processing of your data for specific purposes such as direct marketing at any time.
• Right to Withdraw Consent: Where you have provided consent for a particular type of processing, you may withdraw that consent at any time.

To exercise any of the above rights, please contact the ometoto privacy team via our support email. We will process your request within 30 business days from the date we receive your completed request.

Ometoto only retains your personal information for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. Retention periods vary depending on the type of data:

• Active account data: Retained for the duration your account is active and for an additional period specified by legal requirements after account closure.
• Financial transaction records: Retained for a minimum of 7 years after the transaction occurs, in line with Malaysia's financial and taxation legal requirements.
• KYC documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering legal requirements.
• Support communication logs: Retained for 2 years for reference purposes and resolution of any disputes that may arise.
• Anonymous analytics data: May be retained for a longer period as this data cannot identify individuals.

Once the designated retention period has expired, your data will be securely deleted or anonymised using approved procedures.

The Know Your Customer (KYC) process is a mandatory requirement that helps ometoto maintain platform security, prevent money laundering, and protect all members. KYC may be required during registration, before your first withdrawal, or when certain limits are reached.

• Identity document: A clear copy of your MyKad (both sides), passport, or identity document officially recognised by Malaysian authorities.
• Proof of address: Utility bill, bank statement, or official letter displaying your name and address within the last 3 months.
• Payment method verification: Proof of ownership of the bank account or digital wallet used for deposits and withdrawals.
• Verification selfie: A selfie holding your identity document for additional identity verification if required.

All KYC documents you submit are processed through a fully encrypted system. Our trained KYC team will verify your documents within the specified timeframe, and you will be notified via your registered email regarding the verification status.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, the ometoto privacy team is ready to assist you.

• Reach us via support email: [email protected]
• Use the live chat function available on the ometoto platform for immediate assistance.
• For official privacy-related complaints, please include "Privacy Complaint" in the subject line of your communication so it can be routed to the correct team.

Ometoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or new legal requirements. Any significant changes will be communicated to you via your registered email or in-platform notification at least 7 days before taking effect.