Privacy Policy Lakuroto –
How We Protect Your Data

Lakuroto ("we", "Platform", "company") takes user privacy very seriously. This Privacy Policy describes our practices for collecting, using, storing, and protecting the personal information you provide when using the lakuroto.net platform and our mobile app.

As an online gaming platform operating in Malaysia, we comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means every piece of data we collect has a clear purpose, is stored securely, and is not used beyond the defined scope without your consent.

We believe transparency is the foundation of trust. That is why we have written this Privacy Policy in plain, easy-to-understand language — not convoluted legal jargon — so you truly know what happens with your data at Lakuroto.

Lakuroto collects various types of information depending on how you interact with our platform. Below is a summary of the data collected and its purposes:

We do not collect information that is unnecessary for platform operations. The data collected is the minimum required to deliver a safe and quality service.

Your personal data is used solely for the following purposes and will not be used outside this scope without your consent:

• Account management: Create and maintain your Lakuroto account, including the identity verification and KYC process.
• Transaction processing: Verify and process deposits and withdrawals securely and accurately.
• Platform security: Identify and prevent fraud, money laundering, unauthorized access, and suspicious activity.
• Customer support: Helps resolve complaints, inquiries, and technical issues you encounter.
• Product improvement: Analyze usage patterns to improve the gaming experience and platform features.
• Marketing communications: Send promotional offers and updates — only if you have consented to receive them.
• Legal compliance: Fulfills reporting obligations to authorities in accordance with PDPA 2010 requirements.

Lakuroto does not sell, rent, or trade your personal data to any third party for marketing purposes. This is our absolute commitment.

However, in some limited situations, your data may be shared with the following third parties, subject to strict confidentiality agreements:

• Payment provider: Financial institutions, e-wallet operators (Touch 'n Go, GrabPay, Boost), and payment processors that help us process your transactions securely.
• Technology service provider: Hosting companies, cloud services, and technical infrastructure providers that support platform operations.
• KYC verification service provider: Third parties that assist in verifying user identity to comply with anti-money laundering requirements.
• Legal authorities: When required by court order, law enforcement investigation, or legitimate reporting obligations.

Lakuroto continually invests in security technologies and procedures to ensure your personal data is always protected. Key security measures we implement include:

• 256-bit SSL encryption: All data transmitted between your device and lakuroto servers is encrypted using bank-level TLS/SSL protocols.
• Database protection: User data is stored in databases secured with multi-layered firewalls and strict access controls.
• Two-factor authentication (2FA): Additional security features you can enable in your account settings to protect your login.
• 24/7 security monitoring: Automated monitoring systems that detect and alert about suspicious activity in real time.
• Regular security audits: Penetration testing and security audits are conducted regularly by independent third parties.
• Internal access controls: Only staff with specific authorization may access user data, and all access is carefully logged.

Lakuroto uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and deliver relevant content. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, secure sessions, and navigation. Cannot be disabled.
• Performance Cookies: Collect information on how users use the website to help us improve functionality and experience.
• Functional Cookies: Remember your preferences such as language, display settings, and saved login.
• Analytics Cookies: Helps us understand overall usage patterns for product improvement purposes.

You can manage or delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of the Lakuroto platform.

Lakuroto retains your personal data for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active account data: Retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements.
• Support communication logs: Retained for 3 years for reference and complaint resolution purposes.
• Analytics data and technical logs: Retained for a maximum of 12 months in aggregated form that cannot identify individuals.

After the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data held by Lakuroto:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to update or correct any inaccurate or outdated data.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data.
• Right to Object to Processing: You can opt out of your data being used for direct marketing purposes at any time.
• Right to Data Portability: You can request your data in a machine-readable format for transfer.

To exercise any of the above rights, please contact the lakuroto support team via live chat or email at [email protected]. We will process your request within 30 working days.

The lakuroto platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data from individuals under 18 years of age.

If we discover that a child's personal data has been inadvertently collected, we will take immediate action to delete such information and close the associated account. Parents or guardians who believe their child has registered or used the lakuroto platform are urged to contact us immediately.

Lakuroto reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any material amendments will be communicated to users via in-platform notifications or email at least 14 days before they take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. The "Last Updated" date at the top of this document indicates when the last changes were made.

For any questions, complaints, or privacy-related requests, you may contact us via:

• Live Chat: Available 24/7 in the lakuroto app and website.
• Email: [email protected]
• Telegram: Official lakuroto support channels.