Privacy Policy Abutogek – Your Data, Our Responsibility

Abutogek ("Company," "we," "Platform") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect the personal information you provide when using the Abutogek platform, including our website and mobile app.

This document applies to all users who register, browse, or use any services provided by Abutogek. By using our platform, you agree to the collection and use of your personal information as described in this policy.

We developed this policy in compliance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia, which governs how organisations handle individuals' personal information. If you have any questions about how we handle your data, our customer support team is available via live chat 24 hours a day.

Depending on how you interact with the Abutogek platform, we may collect the following categories of personal data:

2.1 Identity & Contact Data

• Full name as per MyKad
• MyKad or passport number
• Date of birth
• Email address
• Malaysia mobile phone number
• Residential address

2.2 Financial Data

• Bank account details (bank name, account number)
• Registered digital wallet information (Touch 'n Go, GrabPay, etc.)
• Deposit and withdrawal transaction history
• Source of funds (for AML compliance purposes)

2.3 Technical & Usage Data

• IP address and approximate location
• Device type, operating system and browser
• Login history and account activity
• Gaming data and betting history
• Game preferences and account settings

Abutogek collects personal data through the following channels:

Abutogek uses your personal data only for legitimate and necessary purposes. We will not use your data for any purpose outside the scope stated here without obtaining your consent first.

• Account Management – To create, verify, and maintain your account
• Payment Processing – To process deposits, withdrawals, and related transactions
• Identity Verification (KYC) – To fulfil AML/CTF legal obligations
• Customer Service – To provide assistance and respond to your enquiries
• Platform Security – To detect and prevent fraud and unauthorized access
• Product Improvement – To analyze usage patterns and improve the platform
• Service Communications – To send important notifications related to your account
• Legal Compliance – To fulfill legal and regulatory obligations

Abutogek does not sell, rent, or trade your personal data. However, in operating the platform, we may share necessary data with a limited number of trusted third parties in the following situations:

• Payment Providers – Payment processors (FPX, Touch 'n Go, GrabPay) requiring minimum transaction data to complete payments
• Identity Verification Providers – Third-party KYC services that help us verify member identities
• Game Providers – Game software providers requiring minimum player identification for technical purposes
• Legal Authorities – When required by law or court order
• Cloud Infrastructure Provider – For secure data storage and processing

All third parties we work with are required to meet data protection standards equal to or higher than our own. A formal data processing agreement is signed with every third-party service provider.

The abutogek website and app use cookies and similar tracking technologies to enhance your user experience. Cookies are small text files stored on your device when you browse our website.

6.1 Types of Cookies We Use

• Essential Cookies – Required for core platform functions such as login verification and session security
• Preference Cookies – Stores your preference settings such as language and game preferences
• Analytics Cookies – Helps us understand how players use the platform for improvement purposes
• Security Cookies – Helps detect suspicious activity and protect your account

You can manage cookie settings through your browser. However, disabling essential cookies may affect the functionality of the Abutogek platform.

Abutogek continuously invests in security technologies and procedures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data communications
• Password storage using strong hashing algorithms (bcrypt)
• Two-factor authentication (2FA) for account access
• 24/7 security monitoring and intrusion detection system
• Regular security audits by independent third parties
• Role-based access controls for internal staff
• Encryption of data at rest
• Comprehensive incident response plan

Abutogek retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with legal requirements. Our data retention guidelines are as follows:

• Active Account Data – Throughout the period your account is active plus 7 years after closure
• Financial Transaction Records – Minimum 7 years in line with Malaysian legal requirements
• KYC & Verification Data – Minimum 5 years after the business relationship ends
• Support Communication Logs – 3 years from the date of last interaction
• Analytics & Cookie Data – Maximum 2 years

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be personally linked to you.

Under Malaysia's Personal Data Protection Act 2010 and Abutogek's privacy policy, you have the following rights regarding your personal data:

We will respond to all data rights requests within 30 working days from the date of receipt. For complex requests, this period may be extended with notification to you.

The Abutogek platform is strictly for individuals aged 18 years and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we find that we have collected personal data from a minor without proper age verification, we will take immediate steps to delete the relevant data and close the account in question. Parents or guardians who suspect their child has registered on our platform are urged to contact us immediately.

Abutogek reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. Any changes take effect immediately upon publication of the updated version on this website.

For material changes, we will provide you with reasonable notice via in-platform notification or email before the changes take effect. Continued use of the platform after such notice constitutes acceptance of the amended policy.

We recommend checking this page periodically to stay informed about how we protect your information. The date of the most recent update is always displayed at the top of this document.

If you have any questions, concerns or complaints about how we handle your personal data, or if you wish to exercise any of the rights outlined in this policy, please contact us through the following channels:

You may also refer to Frequently Asked Questions (FAQ) for answers to general privacy-related enquiries.