Privacy Policy toto8

Toto8 ("we", "Platform") operates in toto8.vin and is committed to protecting the privacy of every individual who uses our services. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your personal information when you register, log in, or use any part of the toto8 platform.

This document is drawn up in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international standards pertaining to data protection. By using the toto8 platform, you agree to the terms set out in this Privacy Policy.

Toto8 only collects personal data that is genuinely necessary for platform operations and legal compliance. The following are the categories of data we collect:

Your personal data is collected through several transparent and lawful methods:

• Account Registration: When you complete the toto8 registration form, you provide us directly with basic information such as your name, email address, and date of birth.
• KYC Process: To meet compliance requirements, we request copies of identity documents such as a national ID or passport during the identity verification process.
• Financial Transactions: Information related to deposits and withdrawals is collected automatically when you carry out transactions through the platform.
• Platform Usage: Our systems automatically record technical and behavioural data when you browse and use the toto8 platform.
• Communications with Us: Any enquiries, complaints, or feedback you submit to the customer support team are also stored as part of your interaction records.
• Cookies and Similar Technologies: toto8 uses cookies and similar tracking technologies to collect session data and user preferences. Further details are available in the Cookies section of this document.

Toto8 uses collected personal data only for legitimate and specific purposes, as outlined below:

• Account Operations: Creating, managing, and maintaining your member account on the toto8 platform.
• Payment Processing: Processing deposits, withdrawals, and other financial transactions securely and accurately.
• Identity Verification: Carrying out legally mandated KYC procedures to prevent fraud and money laundering.
• Platform Security: Detecting, investigating, and preventing fraudulent activity, unauthorised access, and platform misuse.
• Customer Support: Providing effective technical support and troubleshooting to members.
• Service Communications: Sending important notifications related to your account, including transaction confirmations and security alerts.
• Platform Improvements: Analysing usage patterns to improve overall platform performance, interface, and user experience.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate assistance.
• Legal Compliance: Meeting reporting and compliance obligations to relevant authorities as required by law.

Toto8 does not disclose members' personal data to external parties except under the following legitimate and controlled circumstances:

• Payment Service Providers: Required information is shared with approved payment processors (such as FPX, DuitNow, and e-wallet providers) solely for the purpose of processing your transactions.
• Gaming Technology Providers: toto8's game providers may receive the minimum technical data required for smooth game operation.
• Regulatory Authority: toto8 is required to disclose information to government authorities, law enforcement bodies, or regulatory agencies when mandated by applicable law.
• Auditors and Professional Advisors: Third parties involved in audit processes, legal consultation, or accounting may access data within the limited scope required, subject to strict confidentiality agreements.
• Business Transfer: Should toto8 be involved in a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction, with prior notice given to members.

Protecting your personal data is a top priority for toto8. We implement comprehensive technical and organisational security measures to prevent unauthorised access, loss, destruction, or disclosure of your data:

• Transit Encryption: All communications between your browser and toto8's servers are encrypted using TLS 1.3 protocol with AES-256 encryption.
• Storage Encryption: Sensitive data such as passwords and financial information is stored in encrypted format using irreversible one-way hashing algorithms.
• Multi-Layer Access Control: Access to the toto8 user database is restricted to authorised personnel only, based on the principle of least privilege.
• Continuous Security Monitoring: Automated monitoring systems operate 24/7 to detect and respond to any security threats or anomalies.
• Regular Security Audits: toto8 conducts regular penetration testing and security audits carried out by qualified independent parties.
• Incident Response Plan: toto8 has detailed incident response procedures in place to ensure any data breach is promptly identified and addressed.

Toto8 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal obligations:

• Active Account Data: Retained for the duration your account remains active on the toto8 platform.
• Financial Transaction Data: Retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's financial legal requirements.
• KYC Data: Retained for a minimum of 5 years after account closure, in line with AML/CFT compliance requirements.
• Security Logs: Retained for 12 months for the purpose of investigating security incidents where required.
• Inactive Account: Account data that has been inactive for more than 3 years may be archived or deleted in accordance with secure data disposal procedures.

Upon expiry of the retention period, your personal data will be permanently deleted or anonymised using methods that comply with industry standards.

Toto8 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login session authentication and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us identify and resolve performance issues.
• Functional Cookies: Saving your preferences such as language, display settings, and login information for convenient repeat use.
• Analytics Cookies: Helping us understand platform usage patterns in aggregate and anonymised form for continuous improvement purposes.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some areas of the toto8 platform.

As a data subject, you have the following rights regarding your personal data held by toto8:

To exercise any of the above rights, please contact the toto8 privacy team via email [email protected]. We will process your request within 30 working days.

The toto8 platform may contain links or references to third-party websites or services. This Privacy Policy applies solely to the toto8 platform and does not cover the privacy practices of any third-party websites.

Toto8 is not responsible for the content, privacy policies, or security practices of any third-party websites. We encourage you to read the privacy policy of each website you visit separately.

The toto8 platform is exclusively for users aged 18 and above. toto8 does not knowingly collect, process, or store personal data from individuals under the age of 18.

If we determine that a child's personal data has been inadvertently collected, we will take immediate steps to delete that data and close the account in question. If you believe your child has registered on the toto8 platform, please contact us immediately at [email protected].

Toto8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform practices, legal requirements, or security technology in use.

When material changes are made, toto8 will:

• Updating the "Last Updated" date at the top of this document.
• Displaying clear notices on the platform regarding any changes that take place.
• Sending email notifications to registered members if the changes materially affect their privacy rights.

Your continued use of the toto8 platform following any amendments to the Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

If you have any enquiries, concerns, or complaints regarding this Privacy Policy or how toto8 handles your personal data, our team is ready to assist:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the toto8 platform

We are committed to addressing every privacy-related inquiry seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions.