Privacy Policy

Privacy Policy exo123
Malaysia Player Data Protection

Exo123 takes your privacy seriously. This document explains exactly how we collect, use, store, and protect your personal information — without confusing legal language.

Updated: 1 January 2026
256-bit
SSL Encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
48 hours
Data Request Response Time

Welcome to the Privacy Policy page exo123. At exo123, we understand that privacy is more than a legal requirement — it is the trust you place in us every time you register, log in, or make a transaction. We do not take that trust lightly.

This Privacy Policy applies to all players using the exo123 platform, whether via the website or mobile app. By using our services, you agree to how we handle your personal data as described in this document.

Quick summary: exo123 collects only necessary data, uses it for clearly defined purposes, stores it securely, and never sells it to anyone.

01 Introduction & Scope of This Policy

This Privacy Policy is published by exo123 ("we", "Platform", or "exo123") and describes our privacy practices regarding the collection, use, storage, disclosure, and protection of your personal information ("data").

This policy applies to all individuals who interact with exo123 in any capacity, including website visitors, registered players, and those who contact our support team. If you do not agree with any part of this Privacy Policy, please discontinue use of the exo123 platform.

We comply with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). In the event of any conflict between this policy and local legal requirements, local law shall take precedence.

02 Personal Data We Collect

We only collect data that is strictly necessary to provide you with a safe and seamless service. The categories of data we collect are as follows:

Data Categories Examples of Information Primary Purpose
Identity Data Full name, date of birth, identity card / passport number KYC verification & fraud prevention
Contact Data Email address, phone number, residential address Account communications & verification
Financial Data Bank account details, e-wallet account numbers Deposit & withdrawal processing
Technical Data IP address, device type, browser, operating system Account security & fraud detection
Usage Data Game history, betting records, login activity Service improvement & responsible gaming
Communication Data Live Chat records, support tickets, emails Customer support & audit records
KYC Biometric Data

During the KYC process, we may request a selfie to verify your identity. This image is stored with full encryption and used solely for verification purposes — nothing else.

03 How We Use Your Data

Exo123 uses your personal data responsibly and only for legitimate purposes. Below is a full list of how your data is used:

  • Registration & Account Management: Creating and maintaining your player account securely.
  • Identity Verification (KYC): Verifying that you are a genuine individual eligible to use the platform.
  • Transaction Processing: Verifying and processing deposits and withdrawals accurately and promptly.
  • Fraud Prevention: Identifying and blocking suspicious activity that could compromise your account.
  • Customer Support: Providing effective assistance when you contact our team.
  • Legal Compliance: Fulfilling reporting obligations to the relevant authorities when required by law.
  • Responsible Gaming: Monitoring playing habits to identify players who may need self-control assistance.
  • Platform Improvement: Analysing usage patterns to improve the overall gaming experience.
  • Marketing Communications: Sending relevant promotions and offers (only to players who have agreed to receive such communications).

We will not use your data for any purpose not stated above without obtaining your consent first. If we wish to use your data for a new purpose, we will notify you and seek your consent again.

04 Data Sharing & Disclosure

Exo123 does not sell, does not rent, and does not trade your personal data to any third party for their own commercial purposes. Full stop. However, there are limited situations where we need to share your data:

  • Payment Service Providers: Transaction information is shared with integrated payment processors (such as FPX, Touch 'n Go, GrabPay) solely for the purpose of processing your deposits and withdrawals.
  • KYC Service Providers: Identity verification documents may be processed by certified third-party KYC service providers bound by strict confidentiality agreements.
  • Game Provider: Minimal technical data (such as player ID and currency) is shared with game providers to ensure smooth gameplay sessions.
  • Statutory Authority: exo123 will disclose required information to law enforcement or regulatory bodies when mandated by applicable law.
  • Business Transfers: In the event of a merger, acquisition, or sale of company assets, player data may be transferred — however, players will be notified in advance and their rights remain fully protected.
Our Commitment

Every third-party partner we work with has undergone security vetting and is bound by strict data protection agreements. They are only permitted to use your data for purposes we have specified.

05 Data Security & Technical Protection

We invest seriously in security infrastructure to ensure your data is always protected. The technical and organisational measures we implement include:

  • 256-bit SSL Encryption: All data transmitted between your device and exo123 servers is encrypted using the highest industry standards.
  • Stored Data Encryption: Sensitive information such as passwords and financial details is stored in encrypted form using bcrypt and AES-256 algorithms.
  • Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an additional layer of security on their accounts.
  • 24/7 Monitoring: Our security system continuously monitors all account activity to detect any signs of unauthorised access.
  • Regular Penetration Testing: Independent security experts conduct regular vulnerability testing to ensure there are no gaps in our systems.
  • Internal Access Controls: Only specifically authorised staff may access player data, and every access is logged and monitored.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. Should any data breach occur that affects you, we are committed to notifying you within 72 hours of becoming aware of it.

06 Cookies & Tracking Technologies

Exo123 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Here are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information about how you use the platform (pages visited, time spent) to help us improve our service. All data is anonymised.
  • Functionality Cookies: Saving your preferences such as language, currency, and display settings so you do not need to reset them every time you log in.
  • Analytics Cookies: Helping us understand overall usage patterns to make better product development decisions.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect platform functionality, including your ability to log in to your account.

Managing Your Cookies

To manage cookies in Chrome: Settings → Privacy and Security → Cookies. For Firefox: Options → Privacy & Security → Cookies and Site Data. Cookie changes on mobile browsers also affect the exo123 app.

07 Your Rights Over Personal Data

As an exo123 player, you have the following rights regarding your personal data. We respect and facilitate the exercise of all these rights:

Right of Access

You may request a copy of all personal data we hold about you at any time.

Right to Rectification

If any of your data is inaccurate or outdated, you have the right to request that we correct it promptly.

Right to Erasure

You may request the deletion of your data, subject to certain legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing or analytics purposes at any time.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another platform.

Right to Restriction

In certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

To submit any request related to the above rights, contact our privacy team via Live Chat or email. We will respond within 48 hours and fulfil your request within 30 days.

08 Data Retention & Deletion Period

Exo123 retains your personal data for as long as needed to fulfil the original purpose of collection and meet related legal obligations. Below are our data retention guidelines:

  • Active Account Data: Retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for 7 years in accordance with financial reporting and tax requirements.
  • KYC Documents: Retained for 5 years after the business relationship ends, in accordance with anti-money laundering (AML) requirements.
  • Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes.
  • Technical & Log Data: Automatically deleted after 12 months.
  • Marketing Data: Deleted immediately upon withdrawal of your consent to receive marketing communications.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you. This deletion process follows established security standards.

09 Child Protection

The exo123 platform is strictly for individuals aged 18 years and above. We do not intentionally collect or store any personal data from individuals under the age of 18.

If we discover that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that information and close the account in question.

Parents & Guardians: If you discover that your child who is under age has registered an account at exo123, please contact us immediately via Live Chat. We will treat this as a priority and delete all related data within 24 hours.

10 Changes to This Privacy Policy

Exo123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements.

When we make significant changes, we will notify you through the following channels:

  • A prominent notice on the exo123 platform's home page for a minimum of 7 days.
  • Notification email to all registered players.
  • A pop-up notification will appear at your next login after changes take effect.

The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. Continued use of the exo123 platform after any changes are published constitutes your acceptance of the updated terms.

11 Contact Us — Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the exo123 privacy team is ready to assist.

  • Live Chat: The fastest way — available 24/7 directly from the exo123 platform.
  • Privacy Email: [email protected] — for written enquiries requiring official documentation.
  • Response Time: We guarantee a response within 48 hours for all privacy enquiries.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country.

Why Your Data Secure With exo123?

Six tangible commitments we uphold every day to ensure the privacy and security of your information.

High-Level Encryption

256-bit SSL technology protects every bit of data transmitted between you and our servers — the same standard used by leading banks in Malaysia.

Secure & Efficient KYC

Our identity verification process uses a secure, integrated KYC system. Your documents are processed quickly and fully encrypted — never stored as plain text.

No Data Sales

Exo123 never sells, rents, or trades players' personal data to advertisers or third-party companies. Your data is not our product.

Continuous Threat Monitoring

Our security team monitors the platform 24 hours a day, 7 days a week. Any unusual activity is automatically identified and blocked in real time.

Malaysia PDPA Compliance

All our data handling practices comply with Malaysia's Personal Data Protection Act 2010. We fully respect your legal rights.

Full Control in Your Hands

You can access, correct, download, or request deletion of your data at any time. Your privacy rights are not just a promise — they are enforceable.

Ready to Play Safe?

Privacy Guaranteed, Worry-Free Gaming

Register your exo123 account today and play with peace of mind. Your data is protected, your transactions are secure, and your wins are guaranteed to be paid out.

Bahasa Melayu