Privacy Policy toto77 — Your Data, Our Responsibility

Toto77 is an online gaming platform committed to protecting the privacy and personal data security of every member. As a platform operating in the Malaysian market, we adhere to internationally recognised personal data protection principles across all aspects of our operations.

This Privacy Policy explains how toto77 collects, uses, stores, discloses, and protects the personal information you provide to us during registration, platform use, or through any interaction with our services. It also outlines the rights you hold regarding your personal data.

This document should be read together with Terms and Conditions toto77 forms part of the overall agreement between you and our platform. Should any conflict arise between these documents, the Privacy Policy shall prevail on all matters relating to personal data.

Toto77 collects various types of data depending on how you interact with our platform. Below are the data categories collected, along with their purposes and sources:

We only collect data that is strictly necessary for the stated purposes. toto77 does not collect sensitive information such as biometric data, medical records, or religious information unless required by applicable law.

The personal data we collect is used solely for legitimate and transparent purposes. toto77 uses your data for the following:

• Account management — registers your account, verifies your identity, and enables secure access to the platform.
• Transaction processing — processes deposits, withdrawals, and bonus payments accurately and promptly.
• KYC & AML Compliance — fulfils Know Your Customer and anti-money laundering legal requirements.
• Customer support — handles enquiries, complaints, and support requests effectively.
• Platform security — detects and prevents fraud, unauthorised access, and suspicious activity.
• Service improvement — analyses usage behaviour to improve the overall gaming experience.
• Marketing communications — delivers promotions, exclusive offers, and platform updates (only if you have opted in).
• Responsible gaming — monitors gaming behaviour to identify signs of problem gambling and offer appropriate assistance.

Toto77 will not use your data for any purpose beyond those stated without first obtaining your explicit consent. You have the right to withdraw consent for marketing purposes at any time via your account settings.

Toto77 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, we may share your data in the following limited circumstances:

• Third-party service providers — including payment processors, identity verification service providers, and technical infrastructure providers that support our operations. All such third parties are bound by strict confidentiality agreements.
• Legal requirements — when required by competent authorities, court orders, or regulations relating to anti-money laundering and counter-terrorism financing.
• Protection of rights and safety — when necessary to protect the rights, property, or safety of toto77, our members, or the public.
• Business transfer — in the event of a merger, acquisition, or asset sale, your data may be transferred to a new entity, subject to prior notice being given to you.

Protecting your personal data is a top priority at toto77. We implement multiple layers of technical and organisational safeguards to keep your data secure at all times:

• 256-bit SSL Encryption — all data transmitted between your device and our servers is protected with military-grade encryption.
• Encryption of stored data — sensitive data stored in our databases is encrypted using the latest encryption standards.
• Two-factor authentication (2FA) — an additional security layer to protect your account from unauthorised access.
• 24/7 Monitoring — automated monitoring systems run around the clock to detect any unusual activity or intrusion attempts.
• Regular security audits — our platform undergoes regular independent security audits by third-party cybersecurity experts.
• Internal access controls — only authorised personnel with a legitimate operational need may access member personal data.

While we take all reasonable precautions, no security system can be guaranteed to be completely flawless. In the event of any data security incident involving your personal data, toto77 will notify you within the timeframe required by applicable law.

Toto77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential cookies — required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies — gathers information on how visitors use our website to help us improve it.
• Functional cookies — saves your preferences such as language and display settings to enhance ease of use.
• Analytical cookies — helps us understand aggregated, anonymised platform usage patterns for improvement purposes.

You can manage or disable cookies at any time through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of some parts of the toto77 platform.

As the owner of your personal data, you have the following rights, which may be exercised at any time by contacting the toto77 support team:

Toto77 retains your personal data for as long as necessary to fulfil the purposes stated in this policy, for as long as your account remains active, or as required by applicable law.

• Active account data — retained for the duration your account is active and for the prescribed period following account closure.
• Financial transaction records — retained for a minimum of 5 years to comply with anti-money laundering legal requirements.
• Support Communication Log — retained for 2 years for reference and dispute resolution purposes.
• Technical data and system logs — retained for 12 months for security and fraud detection purposes.
• Marketing data — retained until you withdraw consent or close your account, whichever comes first.

Once the retention period expires, your data will be securely deleted or permanently anonymised so that it can no longer be associated with you. toto77 follows data deletion procedures that comply with recognised information security standards.

The toto77 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

Should we discover that personal data of a child or minor has been collected without valid age verification, we will take immediate steps to delete such data and close the account in question. If you have reason to believe that an individual under the age of 18 has registered on our platform, please contact our support team immediately.

Toto77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service improvements. All amendments take effect immediately upon publication on the website with a revised update date.

For material and significant amendments, toto77 will endeavour to notify members via an in-platform notice or email at least 14 days before the changes take effect. Continued use of the platform after the amendment date will be considered acceptance of the updated Privacy Policy.

We encourage you to review this page periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or wish to submit a request related to your personal data, the toto77 privacy team is ready to assist you. We are committed to responding to all privacy-related inquiries transparently and within a reasonable timeframe.

• Live chat — the fastest way to get an immediate response, available 24/7 within the toto77 platform.
• Support email — [email protected] (please include "Privacy Enquiry" in the subject line).
• Response Time — general enquiries are answered within 24–48 hours; data rights requests are processed within 30 business days.