Toto casino Privacy Policy — Data Protection for Malaysian Players

This Privacy Policy ("Policy") is published by Toto Casino ("we", "the platform") and applies to all users who access or register an account on totocasino.best. This document transparently explains how Toto Casino handles your personal information — how it is collected, how it is used, who it may be shared with, and how it is protected.

By registering an account with toto casino, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you are advised not to use toto casino's services and to contact us at support@totocasino.best before proceeding.

This Policy applies alongside Terms & Conditions Toto Casino and the Responsible Gaming us. In the event of any conflict, the Terms & Conditions shall prevail unless otherwise stated.

Toto casino collects personal data from players through several channels. The table below outlines the data categories, collection methods, and purpose of collection for each category:

Personal data collected by toto casino is used solely for legitimate and necessary purposes. Below is a comprehensive list of how player data is used on our platform:

• Account management: Registering new accounts, verifying player identity, processing logins, and maintaining the security of your account.
• Transaction processing: Securely and efficiently processes deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX.
• Gaming service provision: Running slots, Live Casino, table games, and Sports Betting in accordance with player preferences and history.
• Legal compliance: Meeting anti-money laundering (AML) requirements, KYC obligations, and reporting duties to the relevant authorities.
• Platform security: Detecting and preventing fraud, account abuse, multiple-account usage, and other security threats.
• Customer support: Responding to enquiries, resolving complaints, and providing technical support to players.
• Platform improvement: Analyzing aggregated usage patterns (without identifying individuals) to improve the overall toto casino user experience.
• Service communications: Sends important notices regarding your account, policy changes, security information, and platform updates — not unsolicited advertisements.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need assistance and to fulfill responsible gaming obligations.

Toto casino does not use player data for third-party marketing purposes, does not sell player profiles to advertisers, and does not use data for any purpose outside the list above without the explicit consent of the player concerned.

Toto Casino never sell players' personal data to any third party. However, there are limited circumstances in which we need to share certain information with the following parties in order to operate the platform lawfully and securely:

• Payment processors: Transaction details are shared as required with e-wallet providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) and FPX banking services to process deposits and withdrawals. These processors are bound by strict confidentiality agreements.
• Game providers: Only the minimum technical data required to run the games (such as session IDs) is shared with licensed game providers like Evolution and Pragmatic Play. Full names and financial details are never shared.
• Identity verification services: Where KYC verification is required, identity documents may be processed through accredited third-party verification services, subject to strict data processing agreements.
• Competent authorities: toto casino will disclose necessary information to government authorities or law enforcement agencies where required by law, court order, or regulatory obligation.
• Professional consultants: Legal advisors, accountants, or auditors may be granted limited access to data required to perform their professional services, subject to their professional confidentiality obligations.

Toto casino implements comprehensive technical and organisational security measures to protect players' personal data from unauthorised access, loss, misuse, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between the platform and players' devices.
• Encryption of data at rest for all sensitive information stored in our databases.
• Role-based access control (RBAC) ensuring that only authorized personnel can access player data, strictly in line with their job responsibilities.
• Round-the-clock 24/7 security monitoring to detect and respond to any threats or suspicious activity.
• Regular security assessments by independent third parties to identify and address system vulnerabilities.
• A clear incident response plan to ensure any security breach is handled swiftly and effectively.

Toto casino retains players' personal data for as long as necessary to fulfill the purposes set out in this Policy, or as required by law. Once the retention period expires, data will be securely deleted or anonymized in accordance with established procedures.

The standard retention periods at toto casino are as follows: active account records are kept for the duration of the account and for any legally required period after closure; transaction records are retained for the period mandated by applicable financial regulations; support communication records are kept for two years from the date of interaction.

Toto casino uses cookies and similar tracking technologies to enhance the user experience and operate the platform more effectively. Cookies are small text files stored on your device when you visit our platform.

Types of cookies used by toto casino:

• Essential Cookies: Required for the core operation of the platform — including maintaining your login session, securing transactions, and ensuring the platform functions correctly. These cookies cannot be disabled without affecting essential platform functionality.
• Preference Cookies: Saving your personal preferences — such as interface language, favorite game types, and display settings — to deliver a more personalized experience on future visits.
• Analytics Cookies: Collecting aggregated information on how players use the platform — including the most visited pages, time spent in each section, and navigation patterns — to help us improve the overall user experience.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect player accounts from unauthorized access.

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect platform functionality and your gaming experience at toto casino.

As a toto casino player, you have the following rights regarding your personal data held by the platform. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact the toto casino privacy team by email at support@totocasino.best, stating the right you wish to exercise along with your account details for identity verification. We will respond within a reasonable timeframe from the date your request is received.

Toto casino services are strictly for individuals aged 21 and above. Our platform does not target underage children or teenagers, and we do not knowingly collect any personal information from individuals under the age of 21.

Should toto casino discover that personal data has been inadvertently collected from an individual who does not meet the minimum age requirement, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who believe a minor in their care has registered an account with toto casino are urged to contact us immediately at support@totocasino.best.

In operating the Toto Casino platform, player data may be processed by servers or service providers located outside Malaysia — particularly for international game providers and cloud server infrastructure. This is standard practice for online platforms operating on a global scale.

When data is transferred outside Malaysia, toto casino ensures that:

• Data recipients are bound by data processing agreements that require a level of protection equivalent to that provided under this Privacy Policy.
• Such transfers are carried out on a lawful basis under applicable data protection legislation.
• Data transferred is limited to the minimum necessary for the specific purpose — nothing more.

Information about the regions where your data may be processed is available upon request by contacting us at support@totocasino.best.

Toto casino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or player feedback. Players will be notified of any significant amendments via an in-platform notice or email at least 14 days before the changes take effect.

We encourage players to review this Privacy Policy page periodically. The effective date of the latest version will always be displayed at the top of this document. Continued use of the Toto Casino platform after the effective date of any amendment constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way Toto Casino handles your personal data, please contact us through the following channels:

• Email: support@totocasino.best — for privacy and data-related requests, please include "Privacy Request" in the subject line of your email.
• Live Chat: Available on the toto casino platform 24/7 for general privacy and account security inquiries.

Our team will endeavour to respond to all privacy-related enquiries within a reasonable timeframe. For formal data rights requests, we aim to respond within 30 calendar days of receipt, depending on the complexity of the request.

We value the trust that Malaysian players place in toto casino and are committed to upholding high data protection standards across all aspects of our platform operations. Your privacy is not merely a legal obligation to us — it is a responsibility we take seriously in order to ensure a safe and trustworthy gaming experience at toto casino.