Privacy Policy Ulartoti – Protecting Your Personal Data Is Our Priority

Ulartoti collects various types of information from members to ensure the platform operates correctly and consistently delivers a quality user experience. Below is a summary of the data we collect and its purpose:

The personal data we collect is used solely for the following purposes. Ulartoti will not use your data for any other purpose without obtaining your consent first:

• Account management — creating, verifying, and maintaining your member account on the ulartoti platform
• Transaction processing — securely processing deposits, withdrawals, and all financial transactions
• Identity verification (KYC) — meeting compliance requirements and preventing fraud and money laundering
• Customer support — resolving enquiries, complaints, and technical issues you report
• Platform security — detecting and preventing unauthorised access, fraud, and illegal activity
• Service enhancement — analysing usage patterns to improve features and user experience
• Service communications — sending important notifications related to your account, transactions, and policy updates

If we wish to use your data for marketing purposes, you will be asked to provide separate consent. You may withdraw that consent at any time.

Ulartoti does not sell or transfer your personal data to third parties for marketing purposes. However, there are limited circumstances in which data may be shared:

• Payment service providers — to process deposit and withdrawal transactions. These providers are bound by strict confidentiality agreements.
• Platform technology providers — companies that provide the technical infrastructure, cloud services, and software used to operate ulartoti.
• Regulatory bodies and enforcement agencies — when required by law, court order, or official investigation by a legitimate authority.
• Identity verification services — third-party providers that assist us in conducting the KYC process securely and in compliance with regulations.

Protecting member personal data is ulartoti's highest priority. We continuously invest in security infrastructure to ensure your data remains safe at all times:

• 256-bit SSL Encryption protecting all communications between your device and our servers
• Static data encryption — sensitive data stored in our databases is encrypted using industry standards
• Two-factor authentication (2FA) available and recommended for all member accounts
• 24/7 Monitoring — our systems are continuously monitored to detect and respond to any security threats
• Regular penetration testing conducted by independent security experts to identify and close system vulnerabilities
• Strict access controls — only authorised personnel may access sensitive data, and all access is recorded and audited

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by ulartoti:

To exercise any of the above rights, please contact the ulartoti support team via live chat or email. We will respond within 14 business days.

Ulartoti uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies (Required) — cookies required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Preference Cookies — saving your preferences such as language, theme, and display settings for a consistent experience on return visits.
• Analytics Cookies — helps us understand how members use the platform so we can make meaningful improvements. This data is collected in aggregate and without identifying individuals.
• Security Cookies — detecting unusual usage patterns that may indicate fraud attempts or unauthorised access.

Ulartoti retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law:

• Active account data — retained for as long as your account is active and for a set period after account closure
• Financial transaction records — retained for at least 7 years in accordance with Malaysia's financial regulatory requirements
• KYC records — retained for at least 5 years from the date of last verification
• Security logs — retained for 12–24 months for investigation purposes if required
• Marketing data — retained until you withdraw consent or request deletion

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

If you have any questions, concerns or complaints regarding this privacy policy or how we handle your personal data, we encourage you to contact us directly.

The ulartoti privacy team is ready to assist you with:

• Enquiries about the personal data we hold in relation to your account
• Request to access, correct or delete your data
• Complaints regarding how your data is processed
• Request to withdraw consent for data processing
• Any other matter relating to privacy and data security

You can reach us via:

• Email: [email protected]
• Live Chat: Available 24/7 on the ulartoti platform
• FAQ Page: Visit our FAQ page

We are committed to responding to all privacy inquiries within 14 working days.