Lunatoge Privacy Policy – Malaysia User Personal Data Protection

Lunatoge ("we", "Platform") values the privacy of every user on our platform. This Privacy Policy is written to provide a clear and straightforward explanation of how we handle your personal information — not in convoluted legal language, but in plain terms anyone can understand.

This policy applies to all users of the lunatoge.pro platform, including unregistered visitors, registered members, and users accessing the platform via mobile or desktop browser. It covers all personal data you provide directly to us as well as data collected automatically when you use our services.

Lunatoge operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We take our responsibility to protect your data seriously and continuously work to keep our data protection standards current.

Below is a summary of the types of data we collect and the purposes for collecting them:

We only collect data that is strictly necessary for the stated purposes. lunatoge does not collect sensitive data such as health information or biometric data unless required by law.

Every piece of data we collect has a clear and legitimate purpose. We process your personal data for the following purposes:

• Registration and Account Management: Allowing you to register, log in, and securely manage your lunatoge account.
• Identity Verification (KYC): Verifying that you meet the age and legal eligibility requirements to use our services, and preventing fraud and money laundering.
• Payment Processing: Facilitating deposits and withdrawals through your preferred payment methods securely and accurately.
• Customer Support: Enabling our support team to handle your inquiries, complaints, and requests efficiently.
• Platform Security: Detecting and preventing fraudulent activity, hacking, and platform abuse.
• Responsible Gaming: Monitoring gameplay patterns to identify users who may need support or self-control tools.
• Legal Compliance: Meeting legal and regulatory obligations applicable to our operations.
• Communications and Promotions: Sending platform updates, promotional information, and important news — only if you have given consent to receive them.

Lunatoge invests seriously in data security infrastructure. The following are concrete protection measures we have implemented:

• 256-bit SSL Encryption: All communication between your browser and lunatoge's servers is protected with the highest-grade SSL encryption, ensuring no third party can intercept transmitted data.
• Stored Data Encryption: Sensitive information such as passwords and financial data is stored in encrypted form using modern encryption algorithms. Even our internal staff cannot view your password in plain text.
• Layered Access Controls: Only staff who require access to specific data to perform their duties are permitted to do so, and all access is logged in detail.
• Continuous Monitoring: Our systems are monitored 24 hours a day, 7 days a week for suspicious activity, intrusion attempts, and any security anomalies.
• Regular Security Testing: lunatoge conducts regular penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.
• Fund Segregation: Financial data and player funds are stored in systems separate from operational data, with additional access controls in place.

Lunatoge does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our absolute commitment. However, there are limited situations where we need to share your data:

• Payment Service Providers: Data required to process deposit and withdrawal transactions is shared with approved payment providers such as DuitNow and e-wallet operators. They are bound by their own strict privacy policies.
• Game Providers: Usernames and game records required for game operations are shared with third-party game providers integrated with our platform.
• Regulatory Authority: lunatoge complies with lawful requests from Malaysian statutory authorities when required by law, including in investigations involving financial crime or money laundering.
• Technical Service Providers: Cloud infrastructure and technical service providers involved in our platform's operations, all of whom are bound by strict confidentiality agreements.

In all cases of data sharing, we share only the minimum data necessary for the specific purpose, and we ensure that recipients are bound by data protection obligations equal to or stricter than our own policy.

Lunatoge uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login session verification and security. These cookies cannot be disabled.
• Functional Cookies: Remembering your preferences such as display language and interface settings for your convenience.
• Performance Cookies: Collecting anonymized information about how users interact with the platform to help us make improvements.
• Analytics Cookies: Enabling our team to understand overall platform traffic and usage patterns for optimization purposes.

We do not retain your data longer than necessary. Our data retention policy is as follows:

• Active Account Data: Retained for the duration your account is active and for a reasonable period after account termination for operational purposes.
• Financial Records: Retained for a minimum of 7 years in compliance with Malaysia's legal requirements for financial record-keeping.
• KYC Data: Retained for a minimum of 5 years after the business relationship ends, in line with anti-money laundering laws.
• Security Log Data: Retained for 12 months for security investigation purposes if required.
• Communication Data: Emails and customer support records are retained for 2 years for reference in the event of a dispute.

Once the defined retention period has elapsed, your data will be securely deleted or anonymized so it can no longer be linked to your identity.

Under Malaysia's Personal Data Protection Act 2010 and lunatoge's policy, you have the following rights regarding your personal data:

The lunatoge platform is strictly prohibited for individuals under the age of 18. We do not knowingly collect personal data from minors or individuals who have not reached the legal gambling age.

Lunatoge enforces a strict age verification process through our KYC system to ensure only adult users can access our platform. If we suspect or confirm that a user is underage, the account will be terminated immediately and all related data will be deleted in accordance with applicable laws.

If you are a parent or guardian and believe your underage child may have accessed our platform, please contact our support team immediately for follow-up action.

Lunatoge reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. Any changes will be posted on this page with an updated effective date.

For significant changes that affect how we use your data, we will endeavor to notify you via in-platform notifications or your registered email. You are encouraged to review this page periodically to stay informed about how we handle your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, you can reach our dedicated privacy team through the following channels:

• Live Chat: The fastest channel — available 24/7 directly within the lunatoge platform.
• Support Email: [email protected] — for inquiries that require a detailed written response.

Our team is committed to responding to all privacy-related inquiries within 3 business days. For more complex requests such as data deletion or full access requests, please allow up to 30 business days for a thorough and careful process.