Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by Yutogel ("we", "us", "our", "Platform") and applies to all individuals ("you", "Player", "User") who access, register with, or use the services available at https://yutogel.cam. Yutogel is an online gaming and sports betting platform serving adult players primarily located in Malaysia.

We are committed to protecting your personal data and to processing it transparently, lawfully, and in a manner consistent with your reasonable expectations as a player on our platform. This Policy sets out in plain and formal terms what personal information we collect, the purposes for which it is used, how it is stored, to whom it may be disclosed, and how long we retain it.

By registering an account with Yutogel or by continuing to use our Services after the effective date of this Policy, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not consent, you must discontinue your use of our Services and request account closure.

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify you as an individual, including your name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, Yutogel.
• "Data Processor" means any third party that processes Personal Data on behalf of Yutogel under written agreement and instruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC Documents" means identity and address verification documents submitted by you as part of the Know Your Customer verification process.
• "Cookies" means small text files placed on your device by the Yutogel platform to enable platform functionality, analytics, and session management.
• "Third-Party Service Provider" means any external company or individual engaged by Yutogel to perform services in connection with platform operations, such as payment processors, game providers, and analytics vendors.

Data We Collect

Yutogel collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with our platform, and in limited circumstances from verified third-party sources for identity and fraud verification purposes.

3.1 Registration and Account Data

When you create and maintain a Yutogel account, we collect:

• Full legal name
• Date of birth (for age verification purposes)
• Malaysian identification number (MyKad), passport number, or equivalent government-issued ID number
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)
• Email address
• Mobile phone number
• Username and encrypted password
• Account preferences and communication settings

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify player age and identity, we collect copies of government-issued identification documents, proof of address documents, and in some cases selfie photographs taken alongside your identity document. These documents are handled with heightened security controls and are accessed only by authorised personnel.

3.3 Financial and Transaction Data

We collect records of all financial transactions associated with your account, including deposit amounts and timestamps, withdrawal requests and payment destinations, bonus credits and wagering activity, and payment method identifiers (e.g., masked bank account details, e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong). We do not store full payment card numbers or full banking credentials.

3.4 Technical and Usage Data

We automatically collect the following technical information when you access our platform:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration and timestamps
• Pages visited, games accessed, and betting activity logs
• Referral source and marketing attribution data
• Cookie identifiers and similar tracking technologies

3.5 Support and Communications Data

When you contact Yutogel's customer support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, resolution notes, and any supporting documentation you provide. These records are used for quality assurance, dispute resolution, and regulatory compliance purposes.

How We Use Your Data

Yutogel processes your personal data only for the purposes set out in this Policy and only to the extent necessary to achieve those purposes. We do not process your data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which we use your data are described in the table below.

Legal Basis for Processing

Yutogel processes your personal data on the following legal bases, each of which applies to specific categories of processing activity as described above:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you — including maintaining your account, processing your deposits and withdrawals, and providing access to the games and betting markets you have chosen to use.
• Legal Obligation: Certain processing activities are mandatory for Yutogel to comply with applicable laws and regulations, including anti-money laundering requirements, identity verification obligations, age verification requirements, and any regulatory reporting duties imposed on the platform.
• Legitimate Interest: We process certain technical and usage data to operate and improve the platform, to detect and prevent fraud, and to monitor responsible gambling indicators — provided such processing does not override your fundamental privacy rights.
• Consent: Where we rely on consent as the legal basis for processing — primarily for optional marketing communications — you have the right to withdraw that consent at any time by updating your communication preferences within your account settings or by contacting our support team.

Data Sharing & Disclosure

Yutogel does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

6.1 Third-Party Service Providers

We share necessary personal data with trusted third-party service providers who assist us in delivering our Services. These providers are bound by written data processing agreements that restrict their use of your data to the specific services they perform on our behalf. Service provider categories include: payment processors and e-wallet operators, identity verification and KYC service providers, game software providers and live casino streaming operators, cloud hosting and data storage providers, and customer support platform operators.

6.2 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required or compelled to do so. In such circumstances, we will provide only the minimum data necessary to satisfy the legal requirement and will notify you of any such disclosure to the extent permitted by law.

6.3 Fraud Prevention and Anti-Money Laundering

Yutogel may share data with fraud prevention services and financial intelligence databases as part of our ongoing anti-money laundering compliance programme. Such sharing is conducted on the basis of legal obligation and legitimate interest in protecting the platform and its player community from financial crime.

6.4 Business Transfers

In the event that Yutogel undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide reasonable notice of any such transfer that materially affects the handling of your personal data.

Data Retention

Yutogel retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account with Yutogel and for a minimum of five (5) years following permanent account closure, in order to satisfy anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of last account activity or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years following the transaction date in accordance with financial record-keeping obligations.
• Customer Support Records: Retained for three (3) years from the date of the last support interaction, or until resolution of any active dispute or complaint.
• Cookie and Analytics Data: Retained for the period specified in our cookie consent settings, typically between 30 days and 24 months depending on the cookie category.
• Marketing Communication Data: Retained until you withdraw consent or until twelve (12) months of platform inactivity, whichever occurs first.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents identification of individual players.

Cookies & Tracking Technologies

Yutogel uses cookies and similar tracking technologies to enable platform functionality, analyse usage patterns, and in limited cases to support optional personalisation features. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load balancing identifiers. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Enable enhanced features such as remembering your display preferences, language settings, and deposit currency selection. These cookies persist between sessions for your convenience.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the platform — including pages visited, time spent, and feature usage — to help us improve performance and user experience. These cookies are subject to your consent.
• Marketing and Attribution Cookies: Used to track the source of your registration (e.g., referral programme, promotional campaign) for the purpose of accurately attributing bonuses and affiliate commissions. These cookies are subject to your consent.

You may manage your cookie preferences at any time through your browser settings or through the cookie consent panel available on the platform. Disabling strictly necessary cookies will impair your ability to use the platform.

Data Security

Yutogel employs a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive personal data stored on our servers, including KYC documents and financial records.
• Role-based access control ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Continuous automated monitoring for anomalous account activity, suspicious login patterns, and potential data breach indicators.
• Two-factor authentication (2FA) available for player accounts and mandated for all internal administrative access.
• Regular security audits and penetration testing conducted by qualified information security professionals.
• Secure data centre infrastructure with physical access controls, redundant storage, and disaster recovery provisions.

Notwithstanding these measures, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, we will notify you without undue delay and will take all reasonable steps to mitigate the impact of the breach.

Your Rights

As a player on the Yutogel platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the details in Section 14 of this Policy.

10.1 Right of Access

You have the right to request a copy of the personal data we hold about you. Upon receipt of a verified access request, we will provide a structured summary of your data within 30 calendar days.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly within your account settings; for changes to identity or KYC data, please contact support.

10.3 Right to Erasure

You may request the deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you have withdrawn consent and there is no other legal basis for continued processing; or (c) the data has been unlawfully processed. Please note that erasure requests may be limited where retention is required by applicable law — for example, KYC and transaction records must be retained for regulatory compliance regardless of erasure requests.

10.4 Right to Restrict Processing

You have the right to request a temporary restriction on the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection to processing is being evaluated.

10.5 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another data controller where technically feasible.

10.6 Right to Object

You have the right to object to the processing of your personal data on the grounds of legitimate interest, including profiling for direct marketing purposes. Where you object to marketing processing, we will cease such processing immediately upon receipt of your objection.

10.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Children's Privacy

Yutogel's Services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Any registration by a person under 21 years of age is a breach of our Terms and Conditions and will result in immediate account closure and forfeiture of any funds or winnings accumulated.

If we become aware that personal data has been collected from an individual under the age of 21 — whether through a registration, a KYC submission, or any other means — we will immediately delete that data and close the associated account. If you believe that a minor has registered an account on our platform, please report this to our support team immediately.

Third-Party Services

The Yutogel platform integrates with a number of third-party service providers to deliver full platform functionality, including game software providers, live streaming operators, payment gateway services, and identity verification platforms. While these providers are selected carefully and are bound by contractual data protection obligations, Yutogel is not responsible for the independent privacy practices of third-party entities.

The following categories of third-party services operate within or alongside the Yutogel platform and may process your personal data as described:

• Payment Service Providers: Process deposit and withdrawal transactions on our behalf. Access is limited to the payment identifiers and amounts necessary to execute the transaction.
• Game Software Providers: Deliver game content and RNG-verified outcome data to the platform. Game provider systems may collect anonymised session and wagering data for their own certification and performance purposes.
• KYC Verification Platforms: Process identity documents and conduct biometric checks to verify your identity. These providers operate under strict data processing agreements and do not retain your documents beyond the verification period.
• Analytics Providers: Receive anonymised usage data to assist us in understanding platform performance and user experience patterns. No personally identifiable information is shared with analytics providers.

Policy Amendments

Yutogel reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform functionality. Any material changes to this Policy will be communicated to registered players via in-platform notification and/or email to the registered address, at least 7 days prior to the effective date of the change, except where immediate updates are required for legal or security reasons.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Yutogel platform following the effective date of a revised Policy constitutes your acknowledgement of and agreement to the revised terms. We encourage you to review this Policy periodically to stay informed of how your data is being handled.

If you do not agree with any revised version of this Privacy Policy, you must stop using the platform and request account closure before the revised Policy takes effect.

Contact Us

If you wish to exercise any of your data rights, have questions about how your personal data is handled, or wish to raise a privacy concern or formal complaint, please contact the Yutogel support team through the following channels:

• Live Chat: Available 24 hours daily, 7 days a week via your account portal. Live chat is the fastest channel for account-related data requests. Typical response time is under 5 minutes.
• Email: [email protected] — Please include your registered account username, the nature of your request, and any relevant reference numbers. Allow up to 5 business days for a response to formal privacy requests submitted by email.
• Subject Line for Privacy Requests: To ensure your request is routed to the correct team, please use the subject line "Privacy Request – [Your Username]" when submitting by email.
• Response Timeframe: We will acknowledge receipt of your request within 5 business days and aim to resolve all data rights requests within 30 calendar days. For complex requests, this period may be extended by a further 30 days with notice.