Lato99 Privacy Policy – Your Data Protection Is Our Priority

Lato99 only collects personal data that is strictly necessary to provide you with quality, secure, and legally compliant services. Data collection is carried out transparently and with your full knowledge.

You are not required to provide all of the information above. However, failure to provide certain information — such as KYC data — may prevent you from using specific features like fund withdrawal.

The personal data you provide to lato99 is used responsibly and only for the purposes stated at the time of collection. Below are the primary purposes for which your data is used.

• Account management: Creating and managing your lato99 account, including login, security settings, and profile updates.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately using your chosen payment method.
• Legal compliance: Fulfilling legal obligations including age verification, KYC, anti-money laundering (AML) reporting, and regulatory body requirements.
• Fraud prevention: Identifying and preventing fraudulent activity, multiple account usage, unauthorized account takeovers, and other security threats.
• Customer support: Providing effective assistance when you reach our support team via live chat or email.
• Service improvement: Analyzing usage patterns in aggregate and anonymized form to improve the platform, games, and overall user experience.
• Communication: Sending important notices regarding your account, terms changes, promotions you have opted in to receive, and security-related information.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering support to users who need it.

Lato99 does not sell or disclose your personal data to third parties for marketing purposes. However, there are limited situations where data must be shared to enable the platform to operate properly.

• Payment providers: Required financial data is shared with payment service providers such as FPX, DuitNow, Touch 'n Go, and GrabPay to process your transactions. All these providers are bound by strict confidentiality agreements.
• Game providers: Usernames and session information may be shared with third-party game providers that supply Live Casino and Slots content on the lato99 platform. This data is limited to the minimum required information only.
• Regulatory authorities: lato99 may disclose data to regulatory authorities, law enforcement agencies, or courts when required by Malaysian law or a valid court order.
• Technical service providers: Companies providing cloud hosting, analytics, and cybersecurity services may process your data as part of their services, subject to strict data processing agreements.

Lato99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

• Active account data: For as long as your account is active on the lato99 platform, all profile data and account information will be retained to ensure you have full access to our services.
• Data after account closure: After account closure, lato99 retains the necessary records for a minimum of 5 years to comply with AML, tax, and regulatory compliance requirements.
• Transaction logs: Records of all financial transactions are retained for 7 years as required by Malaysian financial law.
• Communication logs: Customer support chat history and email communications are retained for 2 years for quality control and dispute reference purposes.
• Technical data: Access logs and technical security data are retained for 12 months for security investigation and fraud detection purposes.

Once the retention period expires, data will be permanently deleted or securely anonymised in accordance with procedures established by the lato99 security team.

The security of your personal data is lato99's highest priority. We continually invest in the latest security infrastructure to ensure your data remains protected at all times.

• End-to-end encryption: All data transmitted between your device and lato99's servers is protected using TLS 1.3 protocol and AES-256 encryption — the highest standard in the cybersecurity industry.
• Two-factor authentication (2FA): lato99 supports two-factor authentication for all accounts to add an extra layer of security beyond passwords alone.
• 24/7 Monitoring: The lato99 security team continuously monitors platform activity around the clock to promptly detect any threats or suspicious activity.
• Penetration testing: lato99's technical infrastructure undergoes regular security audits by independent security auditors to ensure the system remains protected against emerging vulnerabilities.
• Secure data backup: User data is regularly backed up to separate, fully secured locations, ensuring no data is lost even in the event of a technical failure.

Lato99 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure the security of your session.

• Essential cookies (required): These cookies are required for core platform functions such as login, session validation, and security. The platform cannot operate properly without them.
• Preference cookies: These cookies store your personal preferences such as language, theme, and display settings to deliver a more personalized experience on every visit.
• Analytics cookies: We use aggregated and anonymised data to understand how users interact with the platform for continuous improvement purposes. This data cannot be linked to your personal identity.
• Security cookies: Used to detect suspicious login attempts, bot activity, and protection against CSRF attacks.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the lato99 platform.

The KYC (Know Your Customer) process is a mandatory requirement that helps lato99 ensure platform security, prevent money laundering, and comply with applicable regulatory requirements.

• Required documents: A copy of your identity card (MyKad), a selfie with your MyKad, and in some cases a bank statement or utility bill as proof of current address.
• Processing time: KYC verification is typically completed within 24 hours on business days. You will receive an email notification once verification is complete.
• Document security: All KYC documents are stored with full encryption and can only be accessed by qualified compliance personnel. Documents are not shared with any external party unless required by law.
• Periodic re-verification: lato99 may request re-verification if there are significant changes to account information or activities that require additional security review.

Lato99 maintains a zero-tolerance policy against the use of the platform by minors. We do not knowingly collect personal data from anyone under the age of 18.

• All users must verify that they are at least 18 years of age during registration. Age verification is carried out during the KYC process using official identification documents.
• If lato99 discovers that personal data of an individual under 18 years of age has been inadvertently collected, the account will be suspended immediately and the data will be deleted within 30 days.
• Parents or guardians who are concerned that their child has registered on the lato99 platform are encouraged to contact our support team immediately.

If you have any questions, concerns, or wish to exercise your privacy rights, lato99's Data Protection Officer (DPO) team is ready to assist you.

• Email: [email protected] — please include the subject line "Privacy Request" for faster processing.
• Live chat: Available 24 hours a day, 7 days a week via the support icon at the bottom-right corner of the lato99 platform.
• Response time: All privacy enquiries will be responded to within 3 business days. Formal privacy rights requests will be processed within 14 business days.

Lato99 reserves the right to update this Privacy Policy from time to time to reflect changes in practices, technology, or legal requirements. Any significant amendments will be communicated to you via email or an in-platform notice at least 7 days before taking effect.