Privacy Policy Toti77

Toti77 takes personal data protection seriously. This Privacy Policy describes our practices regarding the collection, use, disclosure and protection of your personal information when you use the toti77.net platform, the toti77 mobile app and any related services.

This policy is formulated in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia and international data protection standards. By using the toti77 platform, you agree to the collection and use of your information as described in this policy.

If you have any questions about how we handle your data, you can reach the toti77 privacy team through the support channels provided. We are committed to responding to every enquiry within a reasonable timeframe.

Toti77 collects various types of personal information depending on how you interact with our platform. This information is divided into two main categories:

Information you provide directly:

• Full name as stated on your MyKad or passport
• Date of birth and gender
• Current residential address
• Malaysian identity card number (MyKad) or passport number
• Email address and mobile phone number
• Malaysian bank account details including bank name and account number
• KYC verification documents such as a copy of your MyKad and proof of address
• Identity verification selfie when required

Information collected automatically:

• IP address and IP-based geographic location
• Device type, operating system, and web browser used
• Activity logs including login times, logout times, and in-platform actions
• Wagering history and financial transactions
• Cookie data and session identifiers
• Toti77 mobile app usage information

We may also receive information about you from legitimate third-party sources such as identity verification agencies, fraud prevention databases, and certified KYC service providers, for the purposes of verifying your identity and preventing fraudulent activity.

Toti77 collects your personal information through a variety of channels. Understanding how data is collected helps you make more informed decisions about what information you share with us.

• Account registration — When you register a new account at toti77.net, you provide basic information such as your name, email, phone number and date of birth directly.
• KYC Process — During identity verification, you upload identification documents and proof of address. These documents are securely processed and stored in our protected systems.
• Financial transactions — Every deposit and withdrawal via FPX, DuitNow, Touch 'n Go eWallet, or bank transfer records the relevant transaction details.
• Platform usage — Our systems automatically log your activity, including games played, bets placed, and session duration.
• Support communications — When you contact the toti77 support team via live chat or email, the content of the conversation is stored for reference and service improvement purposes.
• Mobile app — The toti77 app you download may collect additional information such as device identifiers and app usage data.

Toti77 uses the personal information collected solely for lawful and transparent purposes. The following are the primary purposes for which your data is used:

• Account management — To register, verify, and maintain your user account on the toti77 platform.
• Transaction processing — To process deposits, withdrawals, and any other financial transactions associated with your account.
• Identity verification (KYC) — To meet legal compliance requirements including age verification and anti-money laundering obligations.
• Platform security — To detect and prevent fraud, account abuse, hacking, and suspicious activity.
• Customer Support — To provide technical support and resolve any queries or complaints you submit.
• Service improvement — To analyze usage patterns and improve the functionality, stability, and user experience of the toti77 platform.
• Service communications — To send important notifications related to your account, transactions, changes to terms, and security updates.
• Marketing (with consent) — To send promotional offers, exclusive bonuses, and new product information if you have consented to receive marketing communications.
• Legal compliance — To fulfill legal obligations, respond to court orders, or comply with requests from lawful authorities under Malaysian law.

Toti77 only shares your personal information in limited and responsible circumstances. We do not sell your personal data to any party for third-party advertising or marketing purposes.

Parties that may receive limited access to your data:

• Technology service providers — Companies providing infrastructure, cloud computing, security, and data processing services on behalf of toti77, subject to strict confidentiality agreements.
• Payment processors — Financial institutions, banks, and payment service providers such as FPX and DuitNow used to process your financial transactions.
• KYC providers — Certified third-party identity verification agencies that assist toti77 in conducting the required KYC checks.
• Game providers — Third-party gaming platforms (slot providers, Live Casino) may receive session data necessary for technical operations.
• Legal Authorities — Law enforcement agencies, regulatory bodies or courts when toti77 is legally required to do so.

If toti77 is involved in a merger, acquisition or asset sale, user information may be transferred as part of that transaction. You will be notified in advance if your data is involved in any such change of ownership.

Toti77 implements comprehensive technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration or destruction.

• 256-bit SSL/TLS encryption — All data transmitted between your device and toti77 servers is encrypted using industry-standard encryption protocols.
• Secure data storage — Sensitive data is stored in databases protected with additional encryption at the storage level.
• Internal access controls — Only toti77 staff who require access to specific data to perform their duties are permitted to do so, based on the principle of least privilege.
• 24/7 Monitoring — Security monitoring systems operate around the clock to detect and respond to any threats or suspicious activity.
• Regular security audits — toti77 conducts regular penetration testing and security audits by independent parties to ensure systems remain robust.
• Two-factor authentication (2FA) — Additional security features are available for all user accounts to prevent unauthorised access.

In the event of a security incident involving your personal data, toti77 is committed to notifying you within the timeframe required by applicable law, along with information about what occurred and the steps that have been taken.

Toti77 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance and maintain the security of your session.

Types of cookies used:

• Essential cookies — Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Performance cookies — To collect information on how users interact with the platform to help us improve site functionality and speed.
• Preference cookies — To save your preferences such as language, time zone, and display settings for future sessions.
• Analytics cookies — Used to understand platform traffic patterns and usage in aggregate, anonymised form for service improvement purposes.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality or user experience of the toti77 platform. By using our platform, you agree to the use of essential cookies required for platform operation.

Toti77 retains your personal information only for as long as necessary for the stated purposes or as required by applicable law in Malaysia.

• Active account data — Retained for as long as your account is active and for a defined period after account closure for audit and compliance purposes.
• Financial transaction records — Retained for a minimum of 7 years in line with Malaysia's tax and financial legal requirements.
• KYC Documents — Retained for a minimum of 5 years after account closure in accordance with anti-money laundering legal requirements.
• Support communication logs — Retained for 2 years for customer service reference and dispute resolution.
• Marketing data — Deleted when you withdraw your marketing consent or close your account, whichever comes first.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal information toti77 holds about you. toti77 is committed to respecting and facilitating the exercise of these rights.

• Right to access — You have the right to request a copy of the personal information toti77 holds about you.
• Right to rectification — You may request toti77 to correct any information that is inaccurate, incomplete or outdated.
• Right to object to processing — You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent — For processing that relies on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.
• Right to complain — You have the right to lodge a complaint with Malaysia's Personal Data Protection Department if you believe your data is not being processed in accordance with the law.

The toti77 platform is strictly restricted to individuals aged 18 years and above. toti77 does not intentionally collect or process personal information from individuals under the age of 18.

If we discover that personal information belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who become aware that their child has registered on the toti77 platform are urged to contact us immediately.

Toti77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or service improvements. The most recent update date will always be displayed at the top of this document.

For changes deemed significant, toti77 will notify you via email or an in-platform notification before the changes take effect. Continued use of the toti77 platform following any amendment constitutes your acceptance of the updated policy.

If you have any questions, concerns or requests regarding this Privacy Policy or how toti77 handles your personal data, please contact our privacy team through the following channels:

• Live Chat — Available 24 hours a day, 7 days a week via toti77.net
• Email — [email protected] (response time within 1 business day)

Our team will make every effort to resolve any privacy inquiries or concerns promptly and professionally. We value your trust and are committed to maintaining the highest level of data protection for all toti77 users in Malaysia.