Privacy Policy toto878 — Your Data Protection

1 Introduction and Scope of This Policy

Toto878 takes our responsibility to every player's privacy seriously. This Privacy Policy applies to all personal information collected through the website toto878.vu, the toto878 mobile app, and all related services we offer to players in Malaysia.

"Personal information" in this policy refers to any information that can be used to identify you directly or indirectly — including your name, email address, phone number, financial details, and platform usage data.

This policy also outlines your rights as a data subject and how you can exercise them. We encourage you to read this document in full and reach out to our team if you have any questions or concerns.

2 Types of Personal Data We Collect

Toto878 collects your personal information through several methods: directly from you during registration and platform use, automatically via tracking technologies, and in some cases from approved third parties.

We only collect information that is genuinely necessary to deliver our services properly and comply with relevant legal requirements. No excessive or irrelevant data collection takes place on the toto878 platform.

3 Purpose of Personal Information Use

Toto878 uses the personal information collected for the following purposes, all of which are necessary to provide a safe and quality platform service:

• Identity Verification (KYC): To verify that all players meet age and eligibility requirements and to prevent identity fraud that could compromise the safety of our player community.
• Transaction Processing: To verify deposits, process withdrawals, and ensure all financial transactions are completed smoothly and securely.
• Account Management: To maintain player accounts, process support requests, and ensure a quality user experience across the platform.
• Platform Security: To detect and prevent fraud, money laundering, multi-account abuse, and other security threats that could harm other players.
• Service Improvement: To analyse platform usage patterns for the purpose of improving game quality, interface design, and the overall player experience.
• Service Communications: To send players important notifications related to their account, bonuses, promotions, and relevant platform updates.
• Legal Compliance: To fulfil legal obligations, reporting requirements, and requests from competent authorities.

Toto878 will not use your personal information for any purpose other than those stated above without first obtaining your explicit consent.

4 Data Sharing and Disclosure

Toto878 does not sell, rent, or disclose players' personal information to any third party for marketing or commercial purposes. However, in the course of platform operations, we may share certain information with the following parties on a limited and purposeful basis:

• Payment Service Providers: Transaction information required is shared with approved payment gateways and financial institutions solely to process your deposits and withdrawals.
• Technology Service Providers: We work with technology vendors who help operate the platform — all parties are bound by strict confidentiality agreements and are not permitted to use player data for their own purposes.
• Regulatory Bodies & Authorities: Where required by law, we will disclose information to the relevant authorities, such as law enforcement agencies or financial regulatory bodies.
• Audits & Certifications: Information required for independent security audits and gaming certification processes may be shared with recognised third-party audit bodies.

5 Data Security Measures

The privacy of player personal data is an absolute priority at toto878. We continuously invest in security infrastructure and apply a multi-layered data protection approach that combines the latest technology with rigorous operational practices.

• 256-bit SSL Encryption: All data transmitted between your device and toto878 servers is encrypted using banking-grade TLS/SSL protocols that cannot be intercepted by unauthorised parties.
• Strict Access Controls: Access to player personal data is restricted to staff with a legitimate business need only. All access is logged and continuously monitored.
• Two-Factor Authentication: Two-factor authentication (2FA) is available and encouraged for all player accounts to add an extra layer of security.
• 24/7 Monitoring: The toto878 cybersecurity team monitors the platform around the clock to detect any suspicious activity and respond swiftly to threats.
• Data Segregation: Sensitive data such as banking details and identification numbers are stored separately in encrypted format.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent experts to ensure our systems remain up to date.

While we take all reasonable steps to protect your data, no security system can be guaranteed to be completely foolproof. In the event of a material data breach, we will notify affected players within the timeframe required by applicable law.

6 Data Retention Period

Toto878 retains players' personal information only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory requirements. Once the retention period expires, data will be securely deleted or anonymised.

• Active Account Data: Retained for as long as your account is active and for an additional period after account closure to meet legal requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years after a transaction occurs, in line with financial and anti-money laundering legal requirements.
• Support Communication Logs: Retained for three (3) years for reference purposes and resolution of any disputes that may arise.
• Technical Data & Logs: Retained for twelve (12) months for security and technical troubleshooting purposes.
• KYC Documents: Retained for the period required by applicable law, typically no less than five (5) years.

Players may request early deletion of their personal data ahead of the standard retention period, subject to our legal obligations. Any such request will be processed within thirty (30) business days.

7 Player Rights Over Personal Data

As a toto878 player, you have the following rights regarding the personal data we hold. All requests relating to these rights can be submitted to our privacy team via the support email:

To exercise any of the rights above, please contact our privacy team at [email protected] stating the type of request and the information required. All valid requests will be processed within thirty (30) business days from the date of receipt.

8 Cookies, Analytics and Tracking Technologies

Toto878 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to analyse how players use the platform for improvement purposes — including the most frequently visited pages and time spent.
• Functional Cookies: Store user preferences such as display settings, preferred language and login information for your convenience.
• Analytics Cookies: Help us understand platform usage patterns in aggregate for product development and improvement purposes.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect your ability to use certain features of the toto878 platform properly.

9 International Data Transfers

As part of operating a global platform, toto878 player data may be transferred to and stored on servers located outside your home country. This includes our server operations, which may be hosted across multiple locations to ensure optimal platform performance and availability.

Any cross-border international data transfers are carried out with adequate safeguards to ensure security standards that are equivalent to or higher than those required in Malaysia. These safeguards include legally binding data transfer agreements with all parties involved.

Toto878 ensures that all international data transfers comply with recognised data protection principles and only take place to destinations that provide an adequate level of protection for our players' personal data.

10 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how toto878 handles your personal data, please contact our privacy team. We are committed to responding promptly and thoroughly to all privacy-related inquiries.

• Privacy Email: [email protected]
• Email Subject: Please use the subject line "Privacy Inquiry" to expedite processing
• Response Time: Within 72 hours for general inquiries, 30 days for data rights requests
• Service Languages: Malay and English