At exototo, your privacy is not merely a legal obligation — it is a core value we uphold. This document transparently explains how we collect, use, store, and protect your personal data at all times.
Six core principles that guide how we manage your personal information with full trust and transparency.
All data transmitted between your device and exototo servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions worldwide.
Exototo never sells, rents, or shares your personal data with third parties for marketing purposes. Your information belongs entirely to you.
You may access, amend, or request deletion of your personal data at any time through your account settings or by contacting our support team.
Your personal data is stored in data centres protected by multi-layered physical and digital access controls. Only authorised personnel may access it.
We retain data only for as long as required by legal and operational needs. Data that is no longer needed will be deleted securely and irreversibly.
In the event of any security incident involving your data, exototo will notify you within 72 hours in accordance with the established incident response procedure.
Welcome to exototo. This Privacy Policy explains in detail how we — as the platform operator — collect, process, store, and protect your personal data when you use the platform, mobile app, or any services provided by exototo. We deeply value the trust you place in us and are committed to managing your information in a transparent, responsible manner that complies with international data protection standards.
This Privacy Policy applies to all users who access or register an account on the exototo platform, including the official website and mobile app. It covers all personal data collected during registration, day-to-day platform use, customer service interactions, and financial transaction activities.
By registering or continuing to use the exototo platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you are advised to stop using the platform and contact us to request account deletion.
We adhere to internationally recognised data protection principles, including ensuring data is collected lawfully, used only for stated purposes, and not retained longer than necessary. Every data processing activity we carry out has a sound legal basis, whether grounded in your consent, contractual necessity, or binding legal obligations.
Exototo collects various types of data depending on how you interact with our platform. The following are the main categories of data we collect:
| Data Category | Primary Purpose | Legal Basis |
|---|---|---|
| Identity Information | KYC Verification & fraud prevention | Legal Obligation |
| Financial Information | Transaction processing | Contract performance |
| Technical Data | Security & Service Improvement | Legitimate Interest |
| Usage Data | Analytics & experience personalisation | User consent |
| Location Data | Region verification & compliance | Legal Obligation |
Your personal data is used solely for legitimate and clearly stated purposes. exototo will not use your data for any other purpose without first obtaining your additional consent.
Exototo does not sell or rent your personal data to any third party for commercial purposes. However, in certain limited and defined circumstances, we may share your data with the following parties:
We work with trusted third-party service providers to operate the platform, including payment service providers, licensed game providers, identity verification companies, and cloud infrastructure providers. All such providers are bound by strict confidentiality agreements and may only use your data for purposes we specify.
Exototo may disclose personal data to government authorities, law enforcement agencies, or courts where required by law, court order, or to protect the legitimate rights of the platform and its users. We will notify you of any such disclosure unless prohibited from doing so by law.
If exototo is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. We will notify all affected users before the data is transferred and before any different privacy policy takes effect.
Exototo uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and ensure platform security. Understanding how we use these technologies helps you make more informed decisions about your privacy.
You can manage cookies through your web browser settings. Disabling certain cookies may affect the functionality of some parts of the platform. Further details on managing cookies are available in your browser's privacy settings.
Exototo implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse. Our security systems are designed on a "defence-in-depth" principle to ensure well-rounded protection.
Access to user data at exototo is restricted to staff who require it to perform their duties only (need-to-know principle). All staff undergo mandatory background checks and data protection training before being granted access to sensitive systems.
Exototo recognises and respects your rights regarding personal data. These rights may be exercised at any time by contacting our support team or through your account settings.
You have the right to obtain a copy of all personal data we hold about you in a readable format.
You may request correction of any personal data that is inaccurate, outdated, or incomplete in our records.
You may request deletion of your personal data, subject to legal obligations that require us to retain certain records.
You may request that we restrict the processing of your data under certain circumstances permitted by law.
You have the right to receive your personal data in a structured, machine-readable format for transfer to another service.
You may object to the processing of your data for direct marketing purposes or where processing is based on our legitimate interests.
In the course of its operations, exototo may need to transfer your personal data to servers or service providers located outside your country of residence. All cross-border data transfers are carried out in accordance with strict legal requirements.
For every international data transfer, exototo ensures that:
The exototo platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that data from an underage user has been inadvertently collected, we will take immediate action to delete that data and close the account in question.
Parents or guardians who have reason to believe their child has registered an account on our platform are encouraged to contact us immediately through our customer support channels. We will investigate and address such matters with the highest priority.
Exototo reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. All amendments take effect from the effective date stated in the latest version of this policy.
When we make significant changes to this policy, we will:
Continued use of the exototo platform after the effective date of any amendment constitutes your acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:
Exototo believes users should have full control over their personal data. Below is a summary of your key rights at a glance.