Goltogel Privacy Policy

Goltogel ("we", "us", "the Platform", or "the Company") operates the online gambling and sports betting platform accessible at https://goltogel.lat. We are committed to protecting the personal data of all individuals who interact with our services, including registered members, prospective users, and visitors to our website.

This Privacy Policy sets out the basis on which Goltogel processes personal data collected from or about you in the course of providing, maintaining, and improving our platform. It has been prepared in accordance with internationally recognised data protection principles and reflects our genuine commitment to transparent, responsible data handling.

By registering an account on Goltogel, making a deposit, or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or indirectly, including name, identification number, location data, email address, IP address, or factors specific to that individual's physical, economic, or social identity.
• "Data Controller" means Goltogel, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of Goltogel under a written data processing agreement.
• "Processing" means any operation or set of operations performed on personal data, including collection, storage, use, disclosure, alteration, or deletion.
• "Consent" means any freely given, specific, informed, and unambiguous indication of agreement by which a data subject signifies acceptance of the processing of their personal data.
• "KYC" means Know Your Customer — the identity and eligibility verification process applied to registered members prior to unlocking full account features.
• "Sensitive Data" means special categories of personal data that warrant a higher degree of protection, including identification document data, financial account details, and any information pertaining to a Member's gambling behaviour or account health.

Goltogel collects the following categories of personal data in the course of providing its services:

Goltogel collects personal data through the following methods:

4.1 Direct Collection

You provide data directly to us when you: register an account; complete the KYC identity verification process; make a deposit or withdrawal; contact our customer support team via live chat, WhatsApp, or email; or submit a form or feedback on the Platform.

4.2 Automated Collection

When you access and use the Goltogel platform, we automatically collect certain technical and usage data through server logs, cookies, and similar tracking technologies. This data is collected to ensure platform security, personalise your experience, and improve our services. For more detail, please refer to Clause 11 (Cookies & Tracking).

4.3 Third-Party Sources

We may receive data about you from third-party sources in limited circumstances, including from our licensed payment processing partners (for transaction verification), identity verification service providers (for KYC), and fraud detection services. All third parties are required to handle your data lawfully and are subject to appropriate contractual safeguards.

Goltogel processes personal data for the following specific purposes:

• Account Creation and Management: To register, authenticate, and administer your Goltogel member account, including applying account settings, VIP tier progression, and preference configurations.
• Identity Verification (KYC): To verify that you meet our eligibility requirements — including the minimum age requirement of 21 years — and to comply with anti-money laundering (AML) obligations.
• Payment Processing: To facilitate deposits and withdrawals through your chosen payment method, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency channels.
• Service Delivery: To provide access to all Platform features including sports betting, live casino, slots, lottery, arcade games, and live football markets.
• Regulatory Compliance: To comply with applicable legal obligations including AML requirements, record-keeping obligations, and licensed operator requirements under our international gaming licence.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited activities, and to protect the security and integrity of the Platform.
• Customer Support: To respond to your enquiries, process complaints, and provide assistance through our multilingual support channels (English, Bahasa Melayu, and Chinese).
• Responsible Gambling: To monitor gambling behaviour where self-exclusion, deposit limits, or other responsible gambling controls are in place, and to identify accounts that may require proactive support outreach.
• Platform Improvement: To analyse usage patterns, conduct internal research, and improve the functionality, security, and user experience of the Platform.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and platform updates by email or messaging, where you have opted in to such communications. You may opt out at any time.

Goltogel processes your personal data on the following legal grounds, applied contextually to each processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered member — including account management, KYC verification, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML reporting obligations and record-keeping requirements under our gaming licence.
• Legitimate Interests: Processing necessary for our legitimate business interests — including fraud prevention, platform security, and internal analytics — where these interests are not overridden by your rights.
• Consent: Processing for purposes where we have obtained your freely given, specific, informed consent — most notably for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Goltogel does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the limited circumstances described below:

• Licensed Payment Processors: We share necessary financial data with our payment processing partners (including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking partners Maybank, CIMB, Public Bank, and Hong Leong) to facilitate transactions.
• Identity Verification Providers: We engage licensed KYC and identity verification service providers who process identity document data on our behalf under strict data processing agreements.
• Fraud Prevention and AML Services: We may share data with licensed fraud detection, anti-money laundering screening, and financial crime prevention services where required to protect the integrity of the Platform.
• Technology and Infrastructure Providers: We use cloud hosting, database management, and IT infrastructure providers who may process data on our behalf as data processors. All such providers are bound by appropriate contractual safeguards.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or government authorities where required to do so by applicable law, court order, or lawful request.
• Business Restructuring: In the event of a merger, acquisition, or sale of all or part of the Company's assets, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

Goltogel operates under an international gaming licence and uses cloud infrastructure and technology service providers that may be located outside of Malaysia. As a result, your personal data may be transferred to and processed in countries other than Malaysia.

Where such international transfers occur, Goltogel takes appropriate measures to ensure that your personal data receives a level of protection consistent with internationally recognised data protection standards. These measures may include contractual clauses requiring the recipient to protect the data to an equivalent standard, or reliance on the recipient's participation in an approved data protection framework.

Goltogel retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory, and operational obligations. The following retention periods apply as general guidance:

• Active Account Data: Retained for the duration of your active account relationship with Goltogel.
• Closed Account Data: Following account closure, core identity and transaction records are retained for a minimum of five (5) years to comply with AML record-keeping requirements and gaming licence obligations.
• KYC Documents: Retained for the duration of your account plus five (5) years post-closure, in accordance with applicable AML and licensing requirements.
• Customer Support Records: Retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained for three (3) years from the date consent was last given or confirmed.
• Technical and Usage Data (Logs): Retained for twelve (12) months from collection for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data management procedures.

Goltogel implements a comprehensive suite of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security framework includes, but is not limited to:

• Encryption in Transit: All data transmitted between your device and the Goltogel platform is encrypted using industry-standard 256-bit SSL/TLS encryption. The presence of "https://" and the padlock icon in your browser confirms this protection is active.
• Encryption at Rest: Sensitive data stored on our servers, including identity documents and financial records, is encrypted at rest using strong encryption standards.
• Access Controls: Personal data is accessible only to authorised personnel with a legitimate need to access it for operational or compliance purposes. Access is governed by role-based permissions and is logged and audited.
• Secure KYC Portal: All identity document uploads are processed through a dedicated, secure verification portal. Goltogel support agents will never request document submission through live chat, social media, or general email.
• Fraud Detection Systems: Automated systems monitor transactions and account behaviour for anomalies indicative of fraud, money laundering, or account compromise.
• Regular Security Reviews: We conduct periodic internal security reviews and work with specialist security providers to assess and strengthen our defences.

Goltogel uses cookies and similar tracking technologies to operate and improve the Platform, maintain your session state, and gather aggregate analytical data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled.
• Functional Cookies: Enable personalisation features such as remembering your language preference, game history, and display settings.
• Analytical Cookies: Collect aggregate, anonymised data about how members use the Platform — including pages visited and time spent — to help us improve user experience. No personally identifiable data is shared with analytics providers.
• Marketing Cookies (opt-in only): Used to deliver relevant promotional content if you have opted in to marketing communications. You may opt out at any time through your account settings.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

As an individual whose personal data is processed by Goltogel, you hold the following rights, which you may exercise at any time by contacting us through the channels described in Clause 15:

Goltogel will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days with notice to you. Identity verification may be required before a request can be processed, to prevent disclosure to unauthorised parties.

The Goltogel platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. Our KYC verification process is specifically designed to prevent underage individuals from registering and accessing real-money gambling services.

If Goltogel discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, securely delete the personal data collected, and notify the relevant parties as appropriate.

If you believe that a minor has created an account on the Goltogel platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action without delay.

Goltogel reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform functionality. When material changes are made, we will notify registered members via email or an in-platform notification prior to the revised policy taking effect.

The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made. We encourage all members to review this Policy periodically. Your continued use of the Goltogel platform following any update constitutes your acceptance of the revised Privacy Policy.

If you wish to exercise any of your data rights, raise a concern about our data practices, make a privacy complaint, or simply ask a question about how your personal data is handled, please contact the Goltogel Data Protection team through the following channels:

• Email: [email protected] — Please mark your email subject line with "Privacy Request" or "Data Rights" for prioritised routing.
• Live Chat: Available 24/7 via the live chat feature on the Platform. Average response time 3–5 minutes.
• Languages: We handle privacy enquiries in English, Bahasa Melayu, and Mandarin Chinese.

We take all privacy concerns seriously and aim to acknowledge receipt within 24 hours and provide a substantive response within 30 days. For responsible gambling related matters, please visit our Responsible Gambling page for dedicated resources and self-help tools.