Privacy Policy — altogel

This Privacy Policy ("Policy") is issued by altogel ("altogel", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with your use of the altogel platform, accessible at altogel.cam (the "Platform"), including its online casino, sports betting, live dealer, and associated services.

By registering an account, depositing funds, or otherwise accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the overarching legal framework governing your relationship with altogel and should be read alongside our Terms & Conditions.

We are committed to protecting the privacy and security of all players on the Platform, including those accessing the service from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations across Malaysia. We handle all personal information with the diligence and transparency that our players deserve.

For the purposes of this Privacy Policy, the following terms shall bear the meanings ascribed below:

altogel collects Personal Data across several categories, depending on how you interact with the Platform. The categories and specific data points we may collect include the following:

Identity and Contact Data:

• Full legal name as it appears on government-issued identification.
• Date of birth (required for age verification — minimum age 21 years).
• Residential address, including postcode and country.
• Email address and, where provided, mobile telephone number.
• National Registration Identity Card (IC) number or passport number.

Financial and Payment Data:

• Bank account details associated with FPX or DuitNow transactions (Maybank, CIMB, Public Bank, Hong Leong, and other participating institutions).
• eWallet identifiers associated with Touch 'n Go eWallet, Boost, or GrabPay transactions.
• Cryptocurrency wallet addresses used for BTC or USDT deposits and withdrawals.
• Transaction history, including deposit amounts, withdrawal requests, and bonus redemptions.

Technical and Usage Data:

• Internet Protocol (IP) address and derived geolocation data.
• Browser type, version, and operating system.
• Device identifiers and hardware model information.
• Pages visited, session duration, click-path behaviour, and in-game activity logs.
• Login timestamps and session records.

Communications Data:

• Records of correspondence with our customer support team, including live chat transcripts and email exchanges.
• Responses to surveys, feedback requests, or promotional campaigns, where voluntarily provided.

altogel collects Personal Data through the following mechanisms:

• Direct submission: When you complete the account registration form, submit KYC documentation, make a deposit or withdrawal request, or contact our support team.
• Automated technical collection: Through cookies, web server logs, and analytics tools that record your interactions with the Platform as you browse and play.
• Payment processors: Transaction data is passed to and returned from payment service providers including eWallet operators, FPX-participating banks, and cryptocurrency network integrations.
• KYC and identity verification partners: Where identity document verification is conducted by a specialist third-party provider, data may be shared with and returned from that provider as part of the verification workflow.
• Fraud prevention services: Our risk management systems may cross-reference submitted data against third-party fraud detection databases to identify potentially suspicious activity.

altogel processes your Personal Data for the following purposes:

altogel processes your Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing is required to perform the contract between you and altogel — specifically, to operate your account, process transactions, and deliver the services you have requested.
• Compliance with legal obligations: Processing required to meet our KYC, anti-money laundering, and fraud prevention obligations.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud, and improve our services — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your freely given consent — in particular for marketing communications and certain cookie uses — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

altogel does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: Malaysian banking institutions participating in FPX and DuitNow, eWallet operators (Touch 'n Go, Boost, GrabPay), and cryptocurrency network processors, to facilitate your deposits and withdrawals.
• KYC and identity verification providers: Specialist third-party services engaged to conduct document authentication and age verification as part of our KYC process.
• Fraud prevention and risk management services: Services that help us identify and investigate potentially fraudulent accounts, unusual transaction patterns, and coordinated abuse.
• Technology and infrastructure providers: Cloud hosting, database management, and content delivery providers who process data on our behalf under strict contractual data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, we may disclose Personal Data to competent authorities. We will take steps to notify you of such disclosure where legally permitted.

All third-party recipients are required to process your Personal Data only for the specific purpose for which it was shared, and to maintain appropriate technical and organisational security measures.

altogel retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or reporting obligations.

As a general guide, our retention periods are as follows:

• Active account data: Retained for the duration of your account's active status on the Platform.
• Account and transaction records following closure: Retained for a period of at least five (5) years after account closure, in line with standard financial record-keeping requirements and anti-money laundering compliance obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Customer support correspondence: Retained for a period sufficient to resolve any outstanding disputes and for operational improvement purposes, typically up to three (3) years.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

altogel implements a comprehensive set of technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform's servers.
• Encryption at rest for all Personal Data stored in our databases.
• Role-based access controls ensuring that personnel can only access Personal Data necessary for their specific job function.
• Two-factor authentication (2FA) available for all player accounts and mandatory for internal system access by staff.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Comprehensive audit logging of access to sensitive data and administrative operations.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, altogel will take prompt action to contain and mitigate the breach and will notify affected individuals in accordance with applicable obligations.

The altogel Platform uses cookies and similar tracking technologies to provide, maintain, and improve the service. Cookies are small text files placed on your device by the Platform's web server when you visit. They do not contain executable code and cannot access other files on your device.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled without breaking core functionality.
• Performance and Analytics Cookies: Used to measure how players interact with the Platform — which pages are visited most frequently, where sessions originate, and how features are used. This data is aggregated and anonymised where possible.
• Functional Cookies: Store your preferences such as language settings, display configuration, and previously played game categories to personalise your experience on return visits.
• Marketing Cookies: Used where consent has been given to track activity across sessions for the purposes of delivering relevant promotional content. These are only active where you have opted in.

You may manage or disable non-essential cookies through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality and performance of the Platform. For detailed information on managing cookies in your specific browser, refer to your browser provider's documentation.

Subject to applicable data protection law, you have the following rights in relation to your Personal Data held by altogel. To exercise any of these rights, please contact us at [email protected] with a clear description of your request.

The altogel Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21. Age verification is conducted as part of our KYC process, and accounts found to belong to individuals under this minimum age threshold will be suspended immediately and all associated data handled in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor has provided Personal Data to altogel without your consent, please contact us immediately at [email protected] and we will take prompt steps to investigate and, where appropriate, delete the relevant data.

In the course of operating the Platform, your Personal Data may be transferred to and processed in countries outside of Malaysia. This may occur, for example, where we use cloud infrastructure providers or KYC partners whose servers or processing operations are located in other jurisdictions.

Where such transfers take place, altogel ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that which it would receive if it remained within Malaysia. These safeguards typically take the form of contractual data processing agreements with the receiving entity, incorporating internationally recognised data protection standards.

altogel may send you promotional communications, bonus notifications, platform updates, and other marketing materials by email or in-platform notification — but only where you have provided explicit consent to receive such communications during the registration process or subsequently through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email we send you.
• Adjusting your communication preferences within your account settings.
• Contacting our support team at [email protected] with a clear opt-out request.

Please note that opting out of marketing communications does not affect the delivery of transactional messages — such as deposit confirmations, withdrawal updates, KYC notifications, and security alerts — which are necessary for the operation of your account.

altogel reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The "Last updated" date at the top of this page will be revised to reflect when changes were made.

Where a change is material — for example, a new category of data collection or a new sharing arrangement — we will endeavour to notify active players by email or in-platform notification before the change takes effect. Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this page periodically to stay informed of how altogel protects and handles your personal information.

If you have questions, concerns, or wish to exercise any of your data subject rights in relation to the Personal Data altogel holds about you, please contact us using the details below. We aim to acknowledge all data-related requests within two (2) business days and to resolve them within a reasonable timeframe.

Please note: the email address above is displayed as plain text only and is not a clickable link. Please copy it manually into your email client. We do not accept unsolicited marketing or commercial correspondence.