Privacy Policy aatoto — Our Commitment to Protecting Your Data

1. Introduction and Scope of This Policy

This Privacy Policy is published by aatoto ("we", "Platform" or "aatoto") and applies to all users who access or use aatoto's services through the official website, mobile app, or any other official channels.

By registering an account or using the aatoto platform, you acknowledge that you have read and understood this Privacy Policy and agree to the data collection and usage practices described herein. If you do not agree, please discontinue use of our platform.

This policy is to be read together with Terms and Conditions aatoto. In the event of any conflict between the two documents on matters of privacy, this Privacy Policy shall prevail.

2. Personal Data We Collect

Aatoto collects various types of personal data depending on how you interact with our platform. Data is collected directly from you, automatically through platform usage, or via authorised third parties.

Data You Provide Directly

• Registration information: Full name, date of birth, email address, phone number, password (in encrypted form)
• Identity verification information (KYC): ID card number, copy of official identification document, verification selfie
• Payment information: Bank account number, account holder name, e-wallet details used for deposits and withdrawals
• Communication with customer support: Records of conversations, complaints, inquiries and feedback

Automatically Collected Data

• Technical data: IP address, browser type, operating system, device identifier
• Usage data: Pages visited, games played, session duration, clicks and interactions within the platform
• Location data: General location information based on IP address for security and compliance purposes
• Cookies and tracking technologies: As described in the Cookies section below

3. Purpose of Personal Data Use

The personal data we collect is used solely for the following purposes. We will not use your data for any other purpose without first obtaining your consent:

4. Data Sharing with Third Parties

Aatoto does not sell or rent your personal data to any third party. However, in certain limited situations, we may need to share your data with the following parties:

• Payment service providers: To process your financial transactions securely and accurately.
• Game software providers: Minimum data required to integrate games within the aatoto lobby.
• Security solutions and fraud prevention: Technology providers that help detect suspicious activity.
• Legal authorities: When required by law or a valid court order.
• Auditors and legal advisors: In the context of internal audits or legal advice subject to professional confidentiality.

All third parties receiving data from aatoto are required to comply with strict data security standards and may only use that data for permitted purposes.

5. Cookies and Tracking Technologies

Aatoto uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage patterns, and maintain the security of your session. Cookies are small files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collects information about how you use the platform to help us improve our services.
• Functional Cookies: Stores your preferences such as language, theme and display settings to enhance your experience.
• Analytics Cookies: Helps us understand traffic and user behavior in aggregate and anonymously.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of the aatoto platform.

6. Data Security and Protection

Aatoto invests seriously in security infrastructure to ensure your personal data is always protected. The security measures we have implemented include:

• 256-bit SSL encryption for all data in transit between your device and aatoto servers
• Encryption of sensitive data stored in our databases
• Strict access controls — only authorized personnel can access user data
• Continuous 24/7 security threat monitoring
• Regular security audits by independent parties
• Two-factor authentication (2FA) available for all user accounts
• Tested incident response procedures to address any data breaches

7. Your Rights as a User

As an aatoto platform user, you have the following rights regarding your personal data. To exercise any of these rights, please contact our customer support team:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request a correction if any of your personal data is inaccurate or incomplete.
• Right to Deletion: In certain circumstances, you may request that your personal data be deleted from our systems.
• Right to Restrict Processing: You may request that we restrict how we process your data in certain circumstances.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request that your data be transferred in a machine-readable format.

We will process your request within a reasonable timeframe, typically within 30 business days. In certain cases where deletion requests conflict with our legal obligations (such as financial record retention), we will inform you of the relevant limitations.

8. Data Retention Period

Aatoto retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law. The following are general guidelines for our data retention periods:

• Active account data: Retained for as long as your account is active and for a reasonable period after account closure.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with financial regulatory requirements.
• KYC documents: Retained for the period required by the relevant authorities, typically five (5) to seven (7) years.
• Support communication logs: Retained for three (3) years for reference and dispute resolution purposes.
• Analytics and technical log data: Retained for a maximum of two (2) years in anonymised form.

9. Child Protection

Aatoto platform is exclusively for individuals aged 18 years and above only. We do not knowingly collect or process personal data from children under the age of 18. Should we discover that we have collected data from a child without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

If you believe someone underage has registered on our platform, please contact our support team immediately.

10. Changes to This Privacy Policy

Aatoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. Any significant changes will be communicated to you via email or a prominent notice within the platform.

The "Effective Date" at the bottom of this policy indicates when it was last updated. Continued use of the aatoto platform after changes are published constitutes your acceptance of the revised policy.