Privacy Policy toto55 — Personal Data Protection for Malaysia Players

1. Introduction

This Privacy Policy ("Policy") is published by toto55 ("Platform", "we") and applies to all users who access or use the toto55 platform via the website, Android mobile app, iOS app, or any other interface we provide.

We understand that privacy is a serious matter. When you register and play at toto55, you entrust us with your personal information — and we do not take that responsibility lightly. This policy is written in plain, straightforward language so you truly understand what happens with your data, not just legal jargon that is hard to follow.

This Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. By using the toto55 platform, you consent to the collection and use of your personal data as described in this Policy.

2. Information We Collect

Toto55 collects your personal information through two main methods — information you provide directly, and information collected automatically while you use the platform.

Information you provide directly:

• Full name as shown on official identification documents.
• National Identity Card (MyKad) or passport number.
• Date of birth for age verification.
• Email address and mobile phone number.
• Current residential address.
• Bank account or eWallet details for deposit and withdrawal purposes.
• Photo or copy of identity document for KYC verification.
• Information you provide when contacting customer support.

Information collected automatically:

• Your IP address and network information.
• Device type, operating system, and web browser version.
• Login session data including time, approximate location, and session duration.
• History of gaming activity and transactions within the platform.
• Cookie data and similar tracking technologies.
• Information related to app performance and technical error reports.

3. How We Use Your Data

The personal data we collect is used solely for legitimate purposes necessary to operate the toto55 platform. We do not sell, rent, or transfer your personal data to any third party for their own marketing purposes.

• Verifying your identity during registration and the KYC process to comply with applicable legal requirements.
• Processing deposits and fund withdrawals securely and accurately.
• Providing effective and relevant customer support services.
• Sending important notices related to your account, transactions, and security.
• Detecting and preventing fraud, money laundering, and other illegal activities.
• Improving platform performance and user experience based on usage patterns.
• Fulfilling applicable legal and regulatory obligations.
• Sending relevant promotional information and offers — provided you have not opted out of receiving them.

4. Information Sharing

Toto55 does not share your personal information with outside parties except in the following limited and controlled circumstances:

• Service providers: Companies that help us operate the platform — such as payment processors, cloud service providers, and analytics tools — all bound by strict confidentiality agreements.
• Legal requirement: When required by law, court order, or a lawful request from law enforcement authorities.
• Fraud prevention: In situations where data sharing is necessary to investigate or prevent fraudulent activity affecting the platform or other players.
• Business transfers: In the event of a merger, acquisition, or sale of company assets — players will be notified in advance.

5. Data Security

Protecting your personal data is a technical priority at toto55. We implement multiple layers of security to ensure your information is safeguarded against unauthorized access, use, or disclosure.

• 256-bit SSL encryption for all communications between your device and toto55 servers.
• Sensitive data such as bank account numbers is stored in encrypted form and cannot be read without the correct key.
• Two-factor authentication (2FA) is available and encouraged for all player accounts.
• 24/7 security monitoring with an automated intrusion detection system.
• Security penetration testing is conducted regularly by independent third-party experts.
• Internal access to player data is restricted using the principle of least privilege — only staff who need it have access.
• System activity logs are retained for audit and security investigation purposes.

6. Cookies & Tracking Technologies

Toto55 uses cookies and similar tracking technologies to enhance the user experience and gather analytical information about how the platform is used.

• Essential cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
• Preference cookies: Saving your preferences such as language, theme, and display settings.
• Analytics cookies: Helps us understand how players use the platform for continuous improvement purposes.
• Security cookies: Used to detect suspicious activity and protect player accounts.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the overall functionality of the platform.

7. Data Retention Period

Toto55 retains your personal data for as long as your account is active or as long as necessary for the purposes stated in this Policy. Specific retention periods are as follows:

• Account and identity information: Retained for the duration of the active account plus 5 years after account closure — to comply with applicable legal requirements.
• Financial transaction records: Retained for 7 years in accordance with financial reporting and audit requirements.
• Customer support communication logs: Retained for 2 years from the date of the last interaction.
• Technical and security log data: Retained for 90 days for security analysis purposes.
• Marketing information: Deleted within 30 days after you opt out of receiving marketing communications.

After the retention period ends, your personal data will be securely deleted or anonymized in accordance with established procedures.

8. Your Rights as a Player

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data. toto55 respects and facilitates the exercise of all these rights:

9. Third-Party Links

The toto55 platform may contain links to third-party websites or services in certain contexts — such as game provider pages or payment method information. This Privacy Policy does not apply to those third-party sites.

Toto55 is not responsible for the privacy practices or content of third-party websites. We recommend reading the privacy policy of each website you visit separately.

10. Changes to the Privacy Policy

Toto55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. The last updated date is always displayed at the top of this page.

If a material change occurs — meaning a change that significantly affects how we use your data — we will notify you via an in-platform notice or your registered email at least 14 days before the change takes effect.

Your continued use of the toto55 platform after any amendment takes effect will be considered your acceptance of the updated Policy. We recommend reviewing this page periodically.

11. Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the toto55 team is ready to assist:

• Live Chat: Available 24 hours a day directly within the toto55 platform — the fastest way to get answers to general enquiries.
• Privacy Email: [email protected] — dedicated to personal data complaints and requests. Response time within 3 business days.
• FAQ Page: Privacy and data FAQs are available at our FAQ page.

For more information about your rights under the Personal Data Protection Act 2010, you may refer to the Department of Personal Data Protection (JPDP) Malaysia.