Privacy Policy Toto77 — Our Commitment to Protecting Malaysian Players' Data

This Privacy Policy is published by Toto77 and applies to all users who access or use the toto77.ws platform, including the website, mobile interface, and all services offered through our platform. It outlines the types of information we collect, the purposes for collection, how that information is used and protected, and your rights as a user.

Toto77 is an online betting platform offering a wide range of games including live casino (baccarat, roulette, poker), Sports Betting (Malaysia Super League, EPL, cricket, badminton), slots, and more to players across Malaysia. In operating this platform, we collect and process certain personal data to ensure our services run smoothly, securely, and in compliance with applicable legal requirements.

We are committed to ensuring all data processing is carried out lawfully, transparently, and proportionately for clearly defined purposes. This policy is reviewed and updated regularly to reflect changes in our business practices and current legal requirements.

Toto77 collects several categories of information depending on how you interact with our platform. Below is a detailed breakdown of the data types collected and their respective purposes:

Toto77 collects only the data strictly necessary for the stated purposes. We do not collect sensitive data categories such as health information, religion, or political views unless required by law.

Toto77 uses collected information solely for operational, security, and service improvement purposes. We never use your data for any other purpose without your consent. Here is how we use the information:

• Account Operations: Creating and managing your account, processing registrations, and ensuring secure access to the Toto77 platform.
• Transaction Processing: Verifying and processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), as well as handling your winnings withdrawals.
• Identity Verification (KYC): To meet anti-money laundering (AML) requirements and know-your-customer (KYC) obligations as mandated by the relevant authorities.
• Fraud Prevention: Detecting and preventing fraudulent activity, collusion, money laundering, or any misuse of the Toto77 platform.
• Customer Support: Helping you resolve issues, answer enquiries, and receive efficient support through live chat and email.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need assistance related to responsible gambling.
• Service Communications: Sends important notices regarding your account, security, or policy changes — not for marketing without your consent.
• Platform Improvement: Analyses aggregated and anonymised usage data to understand how players interact with the Toto77 platform and to drive improvements.

Toto77 processes your personal data only where a valid legal basis exists. Depending on the type of processing involved, we rely on one or more of the following bases:

• Contract Performance: Processing necessary to deliver the services you have requested — such as processing deposits, handling bets, and managing your account.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement purposes that does not override your rights and freedoms.
• Legal Obligation: Processing required under applicable Malaysian law, including AML/KYC requirements and reporting obligations to legitimate authorities.
• Consent: For certain activities such as optional marketing communications, we obtain your explicit consent, which you may withdraw at any time.

Toto77 does not sell, rent, or trade your personal information to third parties for commercial purposes. However, there are limited circumstances under which we may share your information:

• Third-Party Service Providers: We work with trusted service providers including payment processors (to facilitate Touch 'n Go, GrabPay, and FPX transactions), cloud service providers, and analytics companies. All such providers are bound by strict confidentiality agreements and may only use your data for specified purposes.
• Legal Requirements: Where required by Malaysian law or a valid court order, Toto77 may be obligated to disclose certain information to the relevant authorities. We will always endeavour to notify you in advance unless prohibited from doing so by law.
• Fraud Prevention: In cases involving fraud, money laundering, or other illegal activity, we may share the necessary information with the relevant law enforcement agencies or financial regulatory bodies.
• Protection of Vital Interests: In certain circumstances involving a serious threat to someone's safety, we may be required to disclose relevant information.

Toto77 does not share your data with advertisers, social media platforms, or third-party analytics companies for tracking or targeted marketing purposes without your explicit consent.

Toto77 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, or damage. These measures include:

• End-to-End Encryption: All communications between your device and Toto77's servers are protected by TLS 1.3 with AES-256 encryption, ensuring data cannot be read by third parties even if intercepted.
• Layered Access Controls: Only Toto77 staff who require access to specific data to perform their authorised duties are permitted to do so. All access is logged and reviewed on a regular basis.
• Two-Factor Authentication: Toto77's internal systems use multi-factor authentication to prevent unauthorised access to user databases.
• Regular Security Audits: Toto77 undergoes regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.
• 24/7 Monitoring: Automated monitoring systems are active around the clock, tracking any suspicious activity or anomalies within our systems.
• Data Backup: Critical data is regularly backed up to secure, geographically separate server locations to ensure recovery in the event of a system failure.

Toto77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. Toto77 uses three main types of cookies:

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the Toto77 platform. For analytics and preference cookies, you may opt out without impacting your gaming experience.

Toto77 does not retain your personal data longer than necessary for the purposes outlined in this policy. Retention periods vary depending on the type of data:

• Active Account Data: Retained for as long as your account is active on Toto77 and for the required period following account closure.
• Financial Transaction Records: Retained for 7 years from the transaction date in accordance with Malaysian accounting and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 Years following account closure in accordance with AML/KYC requirements.
• Security Logs: Retained for 90 days for fraud detection and security incident investigation purposes.
• Customer Support Data: Retained for 3 years to enable us to provide ongoing support and resolve any disputes.
• Marketing Data (with consent): Retained until you withdraw your consent or request deletion.

Once the applicable retention period has ended, data will be securely deleted or permanently anonymised so that it can no longer be linked back to your identity.

As a Toto77 platform user, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at support@toto77.ws. We will process your request within 14 business days.

Toto77 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, technology, or legal requirements. When material changes occur, we will notify users via:

• A prominent notice on the Toto77 platform homepage
• Email notification to all registered users
• An in-app notification pop-up when you log in to your account after changes take effect

Continued use of the Toto77 platform after a change notice is posted constitutes acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account.

Contact Us for Privacy Enquiries