Policy Privacy & Data Protection toto77

Toto77 ("we", "the platform", "us") cares about the privacy of every individual who uses our online betting and casino platform at toto77.fun. This Privacy Policy explains in detail how we collect, use, store, protect, and in certain circumstances, disclose your personal information when you interact with our platform.

This document applies to all toto77 platform users — whether you are browsing our website without registering, in the process of registering, or an active member who regularly uses our services. It also covers use of the toto77 mobile app available for iOS and Android devices.

This Privacy Policy is compiled in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia, which governs how companies and online platforms handle users' personal data in Malaysia. We are fully committed to complying with all relevant legal provisions and continuously update our practices in line with regulatory changes.

If you disagree with any part of this Privacy Policy, we encourage you to discontinue use of the platform and contact our support team with any questions before making a decision.

Toto77 collects various categories of information depending on how you interact with our platform. Below is a detailed breakdown of the types of information we collect:

Registration and Identity Information

• Full name as it appears on your official identification document.
• Identity card number (MyKad) or passport number.
• Date of birth for age verification.
• An active and reachable email address.
• Registered Malaysian mobile phone number.
• Current residential address including postcode and state.

Financial Information

• Bank account number and bank name (for withdrawal processing).
• E-wallet account number (DuitNow, Touch 'n Go, Boost, GrabPay).
• Records of deposit and withdrawal transactions.
• Betting history and gaming activity within the platform.

Technical and Usage Information

• The IP address of the device used to access the platform.
• Device type, operating system, and web browser version.
• Access logs including login time, logout time, and session duration.
• General geolocation data (state/city only, not precise GPS coordinates).
• Cookie data and related tracking technologies (see Section 6).

Every piece of information we collect is used for clear and legitimate purposes. Below is a summary table of data usage purposes and their corresponding legal basis:

We will not use your data for any other purpose without notifying you in advance and, where required, obtaining your consent again. If you have previously consented to receiving marketing communications, you may withdraw that consent at any time through your account settings or by contacting our support team.

Toto77 does not sell, rent, or trade your personal data to any third party for their own commercial interests. However, there are limited situations where we may need to share your information with other parties:

Trusted Service Providers

We work with third-party service providers who help us operate the platform — including payment processors, cloud service providers, and analytics platforms. All such providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes agreed upon.

Legal Requirements and Enforcement

Toto77 may be required to disclose your personal information to government authorities or law enforcement agencies if compelled to do so by a valid court order, writ of inquiry, or written directive from a relevant Malaysian enforcement agency. In such cases, we will endeavour to notify you in advance where the law permits us to do so.

Business Transfer

In the event of any acquisition, merger, or transfer of toto77 business assets, user data may form part of the transferred assets. We will ensure the new recipient adheres to data protection standards equivalent to or higher than this Privacy Policy.

Toto77 invests seriously in cybersecurity infrastructure to ensure your personal data is always protected from unauthorised access, loss, misuse, or unintentional disclosure.

Technical Protection Layer

• Data encryption in transit: TLS 1.3 protocol ensures all communications between your device and toto77 servers are fully encrypted.
• Data encryption at rest: Sensitive data such as financial information and identity documents is encrypted using AES-256 when stored in our database.
• Two-factor authentication (2FA): Available to all member accounts to add an extra layer of security during login.
• 24/7 Monitoring: Our threat detection system operates around the clock to identify and respond to any suspicious activity.
• Regular penetration testing: Our security infrastructure undergoes regular audits and technical testing by independent security experts.

Operational and Staff Measures

• Mandatory data protection training for all staff with access to user data.
• "Need-to-know" principle — access to user data is granted only to staff who genuinely require it for their duties.
• Full audit logs for every access to sensitive user data.

Toto77 uses cookies and similar tracking technologies to enhance user experience, understand platform usage patterns, and maintain the security of your session. Below are the types of cookies we use:

Essential Cookies (Required)

These cookies are required for the platform to function properly. They enable you to log in, maintain your session, and use the platform's core features. You cannot opt out of these cookies without affecting platform functionality.

Performance & Analytics Cookies

We use this type of cookie to collect information about how visitors use our platform — such as which pages are visited most frequently and time spent in each section. This information helps us continuously improve the platform's design and content. Data collected is in aggregated form and does not personally identify individuals.

Functional Cookies

These cookies remember your preferences and settings — such as your preferred language, time zone, and display settings — so you do not need to reconfigure them each time you use the platform.

Managing Cookie Preferences

You can control or delete cookies through your web browser settings at any time. However, please note that blocking all cookies may affect certain functions within the toto77 platform. For more information on managing cookies, please refer to your web browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and toto77's internal policies, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If any of your data is inaccurate or out of date, you have the right to request an immediate correction.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data from our systems.
• Right to Restriction of Processing: You may request that we restrict how we process your data in certain situations.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
• Right to Data Portability: You may request that your personal data be delivered to you in a machine-readable format.
• Right to Withdraw Consent: If processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the above rights, please contact our data protection team by email at [email protected] or via the platform's live chat. We will process your request within 14 business days and notify you of the outcome.

Toto77 does not retain your personal data longer than necessary for the original purpose it was collected, or as required by applicable Malaysian law.

General Retention Period

• Active account data: Retained for as long as your account is active and for 7 years after account closure (for financial and legal compliance purposes).
• Financial transaction records: Retained for 7 years in line with Malaysian legal requirements relating to financial records and anti-money laundering.
• Security and audit logs: Retained for 2 years for security incident investigation purposes if required.
• Customer support communication data: Retained for 3 years for historical reference and quality training.
• Non-essential cookie data: Automatically deleted within 13 months.

When your personal data is no longer needed and the mandatory retention period has expired, we will securely delete or anonymise that data using methods recognised by the information security industry.

The toto77 platform is exclusively for adults aged 18 and above. We do not intentionally collect, process, or store any personal information from individuals under the age of 18.

If we discover that personal data belonging to someone under the age of 18 has been collected without proper knowledge or consent, we will take immediate steps to delete that data from our systems and close the account in question.

Parents or guardians who suspect that their child or ward may have registered an account on this platform are asked to contact our support team immediately at [email protected] so that immediate action can be taken.

Toto77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new technological developments, or changes in applicable legal and regulatory requirements.

When we make significant amendments to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the platform's home page for at least 14 days after an amendment is published.
• Sending email notifications to all registered members if an amendment involves significant changes to how we handle your personal data.

Continued use of the toto77 platform after a Privacy Policy amendment is published will be considered as your acceptance of the latest version of the policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how toto77 handles your personal data, you may reach us through the following channels:

• Privacy Email: [email protected] (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the toto77 platform or mobile app.
• Official Telegram: Official toto77 channels as listed in the mobile app.

Our data protection team will handle every inquiry seriously and provide a response within 3–5 business days. For more complex complaints requiring in-depth investigation, the response period may take up to 14 business days.