Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how yotogel, operated through the domain yotogel.cam ("Platform", "we", "us", "our"), collects, uses, stores, discloses, and protects the personal data of individuals who register for or use yotogel's online casino and sports betting services ("you", "Player", "User").

Yotogel serves players primarily in Malaysia and takes its data protection obligations seriously. We are committed to handling personal information with transparency, proportionality, and respect for individual privacy rights. This Policy is written in plain English to ensure that every player — regardless of technical background — can understand exactly how their data is managed.

This Privacy Policy should be read alongside yotogel's Terms & Conditions, which incorporate this Policy by reference. By registering an Account with yotogel, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and location data.
• "Processing" — Any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, yotogel acts as the Data Controller.
• "Data Processor" — A third party that processes personal data on behalf of yotogel under a data processing agreement, such as a payment gateway or fraud detection provider.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their personal data for a defined purpose.
• "KYC Data" — Identity and verification documentation submitted by a Player as part of the Know Your Customer verification process, including government-issued identification, proof of address, and facial recognition data.
• "Sensitive Personal Data" — A subset of personal data warranting enhanced protection, including financial information, identification numbers, and biometric or verification data.
• "Cookie" — A small text file placed on a user's device by a website to store preference, session, or tracking information.

3 Data Controller Identity

Yotogel operates as the Data Controller for all personal data collected through the yotogel Platform at yotogel.cam. As Data Controller, yotogel determines the purposes for which personal data is collected and the means by which it is processed.

Where yotogel engages third-party service providers to process data on its behalf — such as payment processors, fraud prevention services, identity verification providers, and game studio partners — those parties act as Data Processors and are bound by data processing agreements that restrict their use of personal data to the specific purposes authorised by yotogel.

For all data-related queries, requests, and complaints, players may contact yotogel's data protection representative at: [email protected]

4 Personal Data We Collect

Yotogel collects personal data across several categories, depending on the nature of your interaction with the Platform. The principal categories are described below.

5 How We Collect Personal Data

Yotogel collects personal data through the following channels:

5.1 Direct Collection

Data you provide directly when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to platform surveys and promotions.

5.2 Automated Collection

Data collected automatically as you use the Platform, including technical data (IP address, device fingerprint, session logs) and gaming activity data (bet history, game session records). This data is captured by yotogel's platform infrastructure and, where applicable, by cookies and similar tracking technologies described in Section 11.

5.3 Third-Party Sources

Yotogel may receive or verify personal data from third-party sources including:

• Payment processors — to confirm the status of deposits and withdrawals via Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and cryptocurrency networks;
• Identity verification services — to cross-check KYC documents against national identity databases where permitted;
• Fraud detection providers — to assess whether account activity is consistent with risk indicators flagged across the industry;
• Responsible gambling registers — to identify players who have registered for national self-exclusion schemes.

6 Purposes of Data Processing

Yotogel processes your personal data for the following clearly defined purposes:

1. Account Creation and Management: To register your Account, verify your identity, maintain your player profile, and administer your relationship with the Platform.
2. Payment Processing: To facilitate deposits and withdrawals in MYR via your chosen payment method, and to maintain accurate financial records.
3. KYC and AML Compliance: To fulfil mandatory anti-money laundering, counter-terrorism financing, and Know Your Customer regulatory obligations.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent account activity, unauthorised access, and financial crime.
5. Platform Operation and Personalisation: To provide, maintain, and improve the yotogel Platform, including delivering a personalised experience based on your game history and preferences.
6. Responsible Gambling Compliance: To administer deposit limits, self-exclusion requests, cooling-off periods, and to monitor gaming behaviour for responsible gambling indicators.
7. Customer Support: To respond to enquiries, resolve complaints, and maintain records of support interactions.
8. Loyalty Programme Administration: To track Velvet Points accumulation, tier status, and reward redemptions.
9. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where a legitimate interest applies.
10. Legal and Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, or requests from competent authorities.

7 Legal Basis for Processing

Yotogel processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted upon registration — account management, payment processing, game provision, and dispute resolution.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, responsible gambling requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for yotogel's legitimate business interests, including fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for purposes requiring your affirmative consent, including direct marketing communications and certain analytics activities. You may withdraw consent at any time without affecting the lawfulness of prior processing.

8 Data Sharing & Disclosure

Yotogel does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

8.1 Service Providers (Data Processors)

We share data with trusted third-party service providers who process data on our behalf under binding contractual obligations, including: payment gateway operators (processing Touch 'n Go, Boost, DuitNow, FPX, bank transfers, and crypto transactions), identity verification services, fraud prevention platforms, IT infrastructure and cloud service providers, and customer support tools.

8.2 Game Studio Partners

Game studios and live dealer providers hosting games on the yotogel Platform may receive technical session data necessary to deliver their games and verify outcomes. This data does not include your full personal profile unless specifically required for a licensed service.

8.3 Regulatory and Legal Disclosure

Yotogel may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or other lawful demand. We will notify you of such disclosures where legally permitted to do so.

8.4 Corporate Restructuring

In the event of a merger, acquisition, or business sale involving yotogel, personal data held by yotogel may be transferred to the successor entity. Such transfers will be subject to equivalent privacy protections.

9 International Data Transfers

Yotogel's operational infrastructure and certain third-party service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, yotogel ensures that appropriate safeguards are in place, including:

• Transfers to jurisdictions recognised as providing adequate data protection standards;
• Standard contractual clauses or equivalent binding instruments with Data Processors in jurisdictions without adequacy recognition;
• Technical security measures — including encryption and access controls — applied to all cross-border data flows regardless of destination jurisdiction.

Players based in Malaysia should note that yotogel operates with full awareness of Malaysian personal data protection principles and applies equivalent standards across all processing activities, whether conducted domestically or internationally.

10 Data Retention

Yotogel retains personal data for only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your Account, plus a minimum of five (5) years following Account closure to meet AML and regulatory record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission or last Account activity, whichever is later, in compliance with AML legislation.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Customer Support Records: Retained for three (3) years from the date of last interaction, to facilitate dispute resolution and quality assurance.
• Marketing Data: Retained until you withdraw consent or opt out, after which it is deleted within 30 days.
• Technical/Log Data: Retained for up to twelve (12) months for security and fraud monitoring purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or rendered irrecoverable. Anonymised data from which individuals cannot be re-identified may be retained for aggregated analytical purposes without limitation.

11 Cookies & Tracking Technologies

Yotogel uses cookies and similar technologies on its Platform to provide core functionality, improve user experience, and analyse usage patterns. The following categories of cookies are in use:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary or functional cookies may impair the Platform's core functionality, including login and payment processing. Yotogel does not use third-party advertising cookies to track users across unrelated external websites.

12 Your Data Rights

As a player whose personal data is processed by yotogel, you hold the following rights in relation to your personal information. Requests may be submitted to [email protected] and will be addressed within 30 calendar days.

13 Security Measures

Yotogel implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data in transit is protected by TLS 1.3 encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted using AES-256 or equivalent standards;
• Access Controls: Personal data is accessible only to yotogel staff and authorised processors on a strict need-to-know basis, enforced through role-based access control systems;
• Infrastructure Security: Platform infrastructure is hosted in certified, physically secured data centres with multi-layered network security including firewalls, intrusion detection systems, and DDoS protection;
• Regular Audits: Yotogel conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities;
• Incident Response: A documented data breach response procedure is in place. In the event of a breach likely to result in risk to affected individuals, yotogel will notify relevant parties in accordance with applicable notification obligations;
• Staff Training: All personnel with access to personal data receive regular training on data protection obligations and security best practices.

Notwithstanding these measures, no digital transmission or storage system can be guaranteed as completely secure. Players are encouraged to use strong, unique passwords for their Accounts and to report any suspected security incident to [email protected] immediately.

14 Children, Minors & Age Verification

The yotogel Platform is strictly restricted to individuals aged 21 years and above. Yotogel does not knowingly collect personal data from persons under the age of 21, and does not permit individuals under 21 to register an Account or access any gambling service on the Platform.

Age verification is conducted as part of the mandatory KYC process. Any Account found to belong to a person under 21 will be immediately suspended, all personal data associated with that Account deleted (except where retention is required by law), and the matter escalated as appropriate.

If you become aware that a minor has registered on yotogel using false information, please notify us immediately at [email protected].

15 Marketing Communications

Where you have provided consent during registration or subsequently opted in, yotogel may send you marketing communications including promotional offers, bonus notifications, new game announcements, and platform updates via email or in-platform notification.

15.1 Opt-Out

You may withdraw consent for marketing communications at any time by: clicking the unsubscribe link included in any marketing email; or updating your communication preferences in your Account settings; or contacting support at [email protected].

Opt-out requests will be processed within seven (7) business days. Please note that operational and transactional communications — such as deposit confirmations, withdrawal notifications, security alerts, and required KYC requests — will continue to be sent regardless of marketing opt-out status, as these are necessary for Account management.

15.2 Personalisation

Yotogel may use your gaming activity history and Platform behaviour data to personalise in-Platform promotional content — for example, surfacing slot titles related to your recent game history. This personalisation is based on legitimate interests and does not involve the sharing of your data with external marketing platforms.

16 Amendments to This Policy

Yotogel reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material amendments will be communicated to registered players via in-platform notification and, where practicable, by email, at least seven (7) days before taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the yotogel Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, you should cease using the Platform and request Account closure in accordance with the Terms & Conditions.

17 Contact Us

For all privacy-related enquiries, data subject rights requests, complaints, or to report a suspected data breach, please contact yotogel's data protection team:

Yotogel is committed to resolving all privacy concerns fairly, transparently, and in a manner that respects your rights as a data subject. If you are not satisfied with our response to a privacy complaint, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.