Privacy Policy toto777 – Our Commitment to Protecting Your Data

Toto777 ("we", "Platform") values the privacy of every user who uses our services. This Privacy Policy explains in detail how we collect, process, store and protect your personal information when you use the toto777.vin website or the toto777 mobile app.

This policy applies to all users who register, access, or interact with any feature of the toto777 platform, including casino games, sports betting, the VIP programme, and all our customer support channels.

Toto777 operates in accordance with international data protection principles and complies with all requirements related to the handling of personal data for online platforms. Your privacy is not merely a legal obligation to us — it is a core value we uphold in every operational decision.

Toto777 only collects information that is strictly necessary to provide you with a safe and orderly service. The following are the categories of information we collect:

Information You Provide Directly

• Registration information: full name, date of birth, email address, mobile number and password.
• Identity information (KYC): copy of MyKad or passport, proof of address, payment method information.
• Financial information: bank account number, e-wallet details used for transactions.
• Contact us: records of live chat conversations, emails and any complaints submitted.

Automatically Collected Information

• Technical data: IP address, device type and operating system, browser version.
• Usage data: pages visited, session duration, games played and betting history.
• Cookie data: preference data and settings stored on your device to enhance the user experience.

Collected personal information is used for clear and limited purposes. toto777 does not use your data for unstated purposes without your prior consent.

• Account verification & security: verifies your identity and protects your account from unauthorised access.
• Transaction processing: processes deposits, withdrawals and bonus payments securely and accurately.
• KYC & legal compliance: fulfils applicable compliance and regulatory requirements.
• Service improvement: analyses usage patterns to enhance the platform experience.
• Customer support: resolves queries, complaints and technical issues effectively.
• Account-related communications: sends important notifications about your account, security and platform updates.
• Fraud detection: monitors suspicious activity to protect you and the platform.
• Marketing (with consent): sends promotional offers and relevant toto777 updates if you have given your consent.

Every personal data processing activity we carry out is backed by a clear legal basis. toto777 processes your data based on:

• Contract performance: processing required to provide the services you requested upon registration.
• Legal obligation: compliance with anti-money laundering (AML), KYC and online gambling legal requirements.
• Legitimate interests: fraud prevention, platform security and service improvement.
• Consent: marketing communications and non-essential cookie usage require your explicit consent.

toto777 does not sell your personal information to any third party. That is an unwavering commitment. However, there are limited situations where we need to share data to keep the platform running properly:

• Payment providers: banks, credit card companies and e-wallet operators that process your transactions — only information necessary for the transaction is shared.
• Game providers: companies such as Pragmatic Play, Evolution Gaming and others that provide games within the toto777 platform.
• KYC compliance services: certified third-party identity verification service providers.
• Statutory authorities: when required by law, court order, or direction from a lawful authority.
• Infrastructure services: cloud and hosting service providers acting as data processors under strict confidentiality agreements.

Toto777 continuously invests in high-grade security infrastructure to keep your data safe at all times. Key security measures we employ:

• 256-bit SSL Encryption for all data transmitted between your device and toto777 servers.
• Data encryption at rest uses AES-256 encryption for all sensitive data stored in our databases.
• Two-factor authentication (2FA) available and encouraged for all user accounts.
• 24/7 Monitoring by our cybersecurity team to detect and respond to threats.
• Regular security audits by independent security firms to identify and patch vulnerabilities.
• Strict access controls — only authorised personnel may access sensitive user data, and every access is logged for review.

Toto777 retains your personal information only for as long as necessary for the stated purposes or as required by applicable law.

• Active account data: retained for the duration your account remains active.
• Financial transaction data: retained for a minimum of 7 years in line with financial compliance and anti-money laundering requirements.
• Support communication data: retained for 3 years from the date of last communication.
• Technical log data: retained for 12 months for security and fraud detection purposes.
• Closed accounts: basic data is retained for 5 years after account closure for legal compliance before being securely deleted.

When data is no longer needed and there is no legal obligation to retain it, toto777 will securely delete or anonymize that data.

As a toto777 user, you have full rights over your personal data. These rights can be exercised by contacting our privacy team:

Toto777 uses cookies and similar tracking technologies to enhance your experience on the platform. There are several types of cookies we use:

• Essential cookies: required for core platform functions such as login authentication and session security. Cannot be disabled.
• Performance cookies: helps us understand how users interact with the platform for improvement purposes.
• Functional cookies: remembers your preferences such as language, theme and display settings.
• Analytics cookies: used to analyse traffic and usage patterns in aggregate and anonymised form.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the toto777 platform.

In the course of its operations, toto777 may transfer your personal data to servers or service providers located outside Malaysia. Any such transfer is only carried out when:

• The transfer destination provides an adequate level of data protection.
• Appropriate data processing agreements have been signed.
• Recognised protection mechanisms such as standard contractual clauses are applied.

Toto777 ensures your data receives equivalent protection regardless of where it is stored or processed.

The toto777 platform is strictly for users aged 18 and above. We do not knowingly collect personal information from individuals under 18 years of age.

Toto777 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or new platform features. When material changes are made, we will notify you via:

• In-platform notifications after login.
• Email to the address registered on your account.
• Update the "Updated" date at the top of this document.

Continued use of the toto777 platform after Privacy Policy changes take effect constitutes your acceptance of the amended policy. We encourage you to review this page periodically.