Privacy Policy toto777 – Our Commitment to Protecting Your Personal Data

This Privacy Policy ("Policy") is published by toto777 ("we", "Platform") and applies to all registered members, users browsing the toto777.ws website, and any individual who interacts with our services through any channel, including the website, mobile app, Live Chat, email, or WhatsApp.

Toto777 is committed to protecting the privacy of every individual who uses our platform. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and take our responsibilities seriously as a data controller to ensure your personal data is handled with care, kept secure, and used only for legitimate purposes.

This Policy should be read together with Terms & Conditions toto777. In the event of any conflict between the two documents on matters of privacy, this Privacy Policy shall prevail.

Toto777 only collects data that is strictly necessary to deliver safe, fair services and to meet applicable legal requirements. The following are the categories of data we may collect:

Toto777 does not collect sensitive data unrelated to the provision of our services. We do not request information regarding religion, racial background, political views, or health records unless specifically required by applicable Malaysian law.

Toto777 uses collected personal data solely for legitimate purposes directly related to providing our platform services to Malaysian members. The primary purposes are as follows:

• Account Management: Create, verify, and maintain your toto777 member account, including the Know Your Customer (KYC) process required to process withdrawals.
• Transaction Processing: Securely and swiftly process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks).
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and platform misuse.
• Service Communications: Send you important notifications regarding your account, transactions, policy updates, and relevant security information.
• Personalise Your Experience: Personalising platform content, game recommendations (slots, football, baccarat, e-sports), and promotional offers based on your preferences.
• Legal Compliance: Fulfilling reporting and compliance obligations under Malaysia's PDPA 2010 and other applicable laws.
• Analytics & Improvement: Analyse usage patterns to improve the performance, usability, and security of the toto777 platform.

Toto777 does not sell, rent, or trade members' personal data to any third party for their own marketing purposes. This is a commitment we will never compromise on.

However, there are limited circumstances in which toto777 may need to share your data with certain parties, namely:

• Payment Service Providers: Transaction information required to process deposits and withdrawals via Malaysian payment methods (Touch 'n Go, GrabPay, DuitNow, FPX) is shared with the respective providers solely for processing purposes.
• Licensed Game Providers: Minimal game session data may be shared with licensed game providers (Pragmatic Play, NetEnt, Microgaming, JILI Games) to ensure games function correctly from a technical standpoint.
• Identity Verification Providers: KYC documents may be shared with licensed identity verification services to fulfil anti-money laundering (AML) requirements.
• Malaysian Authorities: toto777 will disclose data to the relevant authorities (PDRM, BNM, or other authorised bodies) when required by Malaysian law or a valid court order.

All third parties that receive toto777 member data are bound by strict data processing agreements and are required to uphold data protection standards equivalent to those set out in this Privacy Policy.

Toto777 continually invests in security infrastructure to ensure our members' personal data is protected to the highest standard. The following are the key security measures we have implemented:

• 256-bit SSL Encryption: All data transmitted between your browser or app and toto777's servers is encrypted using TLS 1.3 with 256-bit SSL keys – the industry standard for protecting data in transit.
• Stored Data Encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted using AES-256 at rest.
• Two-Factor Authentication (2FA): toto777 provides and encourages the use of 2FA for all member accounts to prevent unauthorised access, even in the event of a compromised password.
• 24/7 Security Monitoring: toto777's cybersecurity team continuously monitors platform activity using automated threat detection systems and regular security audits.
• Internal Access Controls: Only toto777 staff with a legitimate need to access members' personal data are permitted to do so, and all access is logged for audit purposes.
• Regular Security Testing: toto777 conducts penetration testing and vulnerability assessments on a quarterly basis to identify and address potential system weaknesses.

Toto777 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit the toto777 website.

We use three main types of cookies:

• Essential Cookies (Required): Required for core platform functions such as maintaining your login session, processing transactions securely, and enabling security features to operate. These cookies cannot be disabled.
• Analytics Cookies: Help us understand how members use the platform – which pages are visited most, how long gaming sessions last, and where technical issues occur. This information is used in aggregate and is never used to identify individuals.
• Preference Cookies: Saving your preferences — such as language, display settings, and game preferences — to deliver a more personalised experience each time you return to the toto777 platform.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, please refer to your browser settings.

As a toto777 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

Toto777 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under applicable Malaysian law.

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure, in accordance with Malaysia's anti-money laundering (AML) compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Security Log Data: Retained for 2 years for security investigation and fraud detection purposes.
• Support Communication Records: Retained for 3 years for customer service reference and improvement purposes.
• Analytics Cookie Data: Deleted or anonymised 13 months after the date of collection.

Toto777's primary servers storing Malaysian members' data are housed in secure data centres. Any necessary data transfers to other jurisdictions (for example, for technical service providers) are carried out with appropriate safeguards and valid data processing agreements in place.

Toto777 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements, or improvements to our platform. The "Last Updated" date at the top of this page will always indicate when the most recent revision was made.

For significant amendments that affect how we use your personal data, toto777 will provide at least 14 days' notice before the changes take effect via:

• In-platform notifications on toto777 when you log in.
• Sent to your registered email address.
• A prominent update notice on this Privacy Policy page.

Continued use of the toto777 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account and contact us to request data deletion.

Toto777 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and handling privacy-related enquiries from our members.

If you have any questions, concerns, or complaints regarding how toto777 handles your personal data, or if you wish to exercise any of the rights outlined in Section 7, please contact us via:

• Email: support@toto777.ws (please state "Privacy Enquiry" in the subject line)
• Live Chat: Available 24/7 on the toto777 platform – select the "Privacy & Data" category
• Target Response Time: We will respond to all privacy enquiries within 3 business days, and resolve more complex requests within 21 business days.