Toto168 Privacy Policy – Malaysia Player Personal Data Protection

Toto168 takes our responsibility for every user's privacy seriously. This Privacy Policy is drafted to clearly and transparently explain how we handle your personal data from the moment you register an account until you close it.

As an online entertainment platform operating in Malaysia, we are subject to the Personal Data Protection Act 2010 (PDPA Malaysia) and comply with all its requirements wholeheartedly. Beyond mere legal compliance — we believe that protecting your data is a moral responsibility that cannot be compromised.

By using the toto168 platform, you agree to the collection and use of your personal information as described in this Privacy Policy. If you have any doubts or questions after reading this document, our support team is available to assist you 24 hours a day.

Toto168 collects your personal information through several channels — directly from you during registration, automatically through your use of the platform, and through the identity verification (KYC) process required by law. Below are the details of the information we collect:

Every piece of information we collect is used for a specific and legitimate purpose. toto168 does not use your data beyond the scope of the purposes stated below without first obtaining your additional consent.

• Account Management: Create, maintain and protect your toto168 account, including secure login processes and detection of suspicious activity.
• Transaction Processing: Securely and accurately process deposits, withdrawals and all financial transactions you make through the toto168 platform.
• Legal Compliance: Meet legal obligations under PDPA, AML (Anti-Money Laundering) and KYC regulations set by the relevant authorities.
• Customer Support: Provide effective support when you contact the toto168 support team with issues or enquiries.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need self-control support and offering appropriate assistance.
• Platform Improvements: Analyse usage data collectively and anonymously to improve the user experience, platform speed and new features.
• Marketing Communications: Send you promotional information and offers related to toto168 – you can unsubscribe at any time through your account settings.

Toto168 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a core principle we will not compromise on. However, there are limited situations where we need to share your information:

• Trusted Service Providers: Technical partners such as game software providers, payment processors, and infrastructure service providers are bound by strict confidentiality agreements.
• Legal Requirements: If required by a court order, directive from authorities, or applicable Malaysian law.
• Fraud Protection: Sharing information with industry bodies to prevent and detect fraud, money laundering, and other illegal activities.
• Change of Ownership: If toto168 undergoes a merger or acquisition, user data will be transferred to the new entity under the same or better protection terms.

All third-party service providers we work with have undergone rigorous security assessments and are bound by data processing agreements that require them to protect your data to the same standards as toto168.

Toto168 implements a range of technical and organizational measures to protect your personal data from unauthorized access, loss, alteration, or accidental disclosure. Data security is not just a feature — it is central to how we operate.

• 256-bit SSL Encryption: All communications between your device and toto168 servers are protected with internationally bank-grade encryption.
• Two-Factor Authentication (2FA): An additional security layer that ensures only you can access your account, even if your password is compromised.
• Continuous Monitoring: A threat detection system operating 24/7 to identify and respond to any suspicious activity.
• Data Segregation: Sensitive data such as financial information is stored separately with stricter access controls.
• Security Audit: Regular security assessments by independent parties to ensure our protection systems remain at the highest standard.
• Staff Training: All toto168 staff who handle user data undergo comprehensive data protection training on a regular basis.

Toto168 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small data files stored on your device when you visit our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session. These cookies cannot be disabled.
• Performance Cookies: Collect data on how you use the platform (anonymously) to help us improve speed and functionality.
• Functional Cookies: Remember your preferences such as language and display settings to deliver a more personalised experience.
• Analytics Cookies: Help us understand overall platform usage patterns for analytics and strategic planning purposes.

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the toto168 platform.

Under Malaysia's PDPA and as part of toto168's commitment to privacy protection, you have the following rights regarding the personal data we hold:

To exercise any of the rights above, contact the toto168 Data Protection Officer (DPO) team via our official email. We will process your request within 30 business days.

Toto168 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your account is active, plus the designated period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's AML legal requirements.
• KYC Records: Retained in accordance with the minimum requirements set by the relevant authorities.
• Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Analytics Data: Anonymised data is retained for a longer period for platform analytics purposes.

When data is no longer needed, it will be securely deleted or anonymised in accordance with approved data disposal procedures.

In operating the toto168 platform, some of your data may be processed on servers located outside Malaysia. This occurs when we use cloud services or international technology providers required to run the platform.

Toto168 ensures that any international data transfers are carried out with adequate safeguards, including contractual agreements that guarantee a level of protection equivalent to Malaysian standards. We do not transfer data to countries without adequate data protection without appropriate additional safeguards.

The toto168 platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that we have inadvertently collected personal data from a minor, we will immediately delete that information and suspend the account in question.

Toto168 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or new legal requirements. The update date at the top of this document will be revised whenever any changes are made.

For material changes, we will send a notification to your registered email at least 14 days before the changes take effect. Your continued use of the toto168 platform after the effective date indicates your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding how toto168 handles your personal data, you may contact us through the following channels:

• Data Protection Email: [email protected] – Response within 2 business days for privacy-related inquiries.
• Live Chat: Available 24/7 within the toto168 platform for general privacy-related inquiries.
• Telegram: Reach us through toto168's official support channels for a prompt response.

We are committed to addressing all privacy-related enquiries seriously and in a timely manner. Your satisfaction and trust are our top priority.