Privacy Policy Abutigel — Your Personal Information Is Always Protected

Abutigel ("we", "Platform") is committed to protecting the privacy and personal information of all users of our services. This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and protection of your personal information when you use the abutigel website, our mobile app, or any services provided under the abutigel brand.

This policy applies to all registered users and general visitors of the abutigel platform. By registering an account or continuing to browse our platform, you agree to the practices described in this privacy policy. This policy should be read together with Terms and Conditions platform.

We respect your privacy rights as protected under Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable legal provisions. If you have any questions about how we handle your personal data, you may reach us through the support channels provided.

Abutigel collects your personal information through several means — directly from you during registration, automatically as you use the platform, and occasionally from legitimate third-party sources such as licensed payment providers.

We does not collect your credit or debit card details directly — card payment data is handled entirely by a PCI-DSS Level 1 compliant third-party payment processor. abutigel only receives an authentication token confirming a successful transaction, not your full card number.

Every piece of data we collect has a specific and legitimate purpose. We do not use your data for unrelated purposes without your consent. The following are the primary purposes for which data is used:

• Account Management: Creating, verifying, and managing your account, including the KYC process required by law.
• Transaction Processing: Processing deposits, withdrawals, and any financial transactions you carry out on the platform.
• Service Provision: Ensuring all platform features function correctly, including Slot Games, Sports Betting, and Live Casino.
• Security & Fraud Prevention: Detecting and investigating any suspicious activity, including fraud attempts or money laundering.
• Platform Improvements: Analyzing usage patterns in aggregate (without identifying individuals) to improve the user experience.
• Communications: Sending important notifications about your account, transactions, and policy updates. With your consent, we may also send promotional information.
• Legal Compliance: Fulfilling legal obligations and complying with directives from the relevant authorities.

Abutigel only shares your personal information in limited circumstances and under strict controls. Third parties that may receive your data are:

• Licensed Payment Providers: FPX, Touch 'n Go, GrabPay, Boost, ShopeePay and other payment processors used to handle your deposits and withdrawals. They receive only the minimum data necessary to complete each transaction.
• Game Software Providers: Third-party game providers may receive a user's pseudonym and game session data to allow games to function correctly. They do not receive your full identifying information.
• Technical Service Providers: Cloud infrastructure, CDN, and security providers that help operate the platform. All providers are bound by strict data confidentiality agreements.
• Legal Authority: When required by law, court order, or a legitimate law enforcement agency, we will disclose the necessary information.

Every third party working with abutigel is required to comply with privacy standards equivalent to this policy and is not permitted to use your data for any purpose beyond what has been agreed upon.

The security of your personal data is abutigel's highest priority. We implement a range of technical and administrative security measures to protect your information from unauthorized access, modification, disclosure, or destruction:

• Encryption in Transit: All data transmitted between your device and abutigel's servers is encrypted using TLS 1.3 with AES-256 encryption — the same standard used by Malaysia's leading banking institutions.
• Encryption at Rest: Sensitive data such as passwords and financial information is stored encrypted in the database. Passwords are never stored in plain text — only cryptographic hash values are stored.
• Internal Access Control: Only abutigel staff with a legitimate business need are permitted to access user data, and all such access is logged and monitored.
• Regular Backups: Data is backed up in real time to a secure, geographically separate location to prevent data loss.

Data retention periods are determined based on legal and operational requirements. Financial records are kept for a minimum of 7 years in accordance with legal requirements. Data that is no longer needed is deleted using secure, non-recoverable procedures.

Abutigel uses cookies and similar tracking technologies to ensure the platform functions correctly, improve user experience, and analyze platform usage. The types of cookies we use are as follows:

You can manage cookie settings through your web browser. However, disabling essential cookies may affect your ability to log in and fully use the features of the abutigel platform. Optional analytics cookies can be declined without affecting your gaming experience.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by abutigel. We are committed to respecting and facilitating the exercise of these rights within 72 hours for standard requests:

Abutigel is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from children or minors.

If we find that a child's personal information has been collected unintentionally — for example through registration using falsified age details — we will immediately take the following steps:

• Suspending the account in question immediately.
• Deleting all related personal data from our systems.
• Freezing any account balance while an investigation is conducted.
• Reporting the incident to the relevant authorities where necessary.

Parents or guardians who have reason to believe their child has registered an account at abutigel are encouraged to contact our support team immediately via 24/7 live chat or our official email.

As an online platform, some of your personal information may be stored or processed on servers located outside Malaysia — particularly in the context of the multi-zone cloud infrastructure used by abutigel to ensure high platform performance and availability.

When your data is transferred outside Malaysia, abutigel ensures that:

• The recipient country or entity provides a level of data protection comparable to or exceeding the standards required in Malaysia.
• Legally binding and appropriate data processing agreements have been signed with all data recipients.
• Consistent technical security measures — including encryption and access controls — are applied regardless of the physical location of the server.

Abutigel does not transfer data to jurisdictions known to have inadequate data protection standards without appropriate additional safeguards in place.

If you have any questions, concerns, or wish to exercise any of your privacy rights, the abutigel team is ready to assist through the following channels:

• 24/7 Live Chat: The fastest way to get an immediate response. Our support agents can handle basic privacy requests directly.
• Email Privacy: For more detailed or sensitive requests, send an email to [email protected] with the subject line "Data Privacy Request". We will respond within 72 hours.

For requests involving data access, correction, or deletion, you may be asked to verify your identity before the request is processed — this is a security measure to ensure we do not disclose your data to unauthorised parties.