toto88d Privacy Policy

1. Who We Are / Data Controller

toto88d is the data controller responsible for personal data collected and processed through the toto88d.org platform. When this Privacy Policy refers to "toto88d", "we", "us", or "our", it refers to the operating entity behind the toto88d platform.

toto88d operates as a licensed online gaming platform under applicable international gaming authority licensing. Our processing of personal data is consistent with the requirements applicable to licensed gaming operators, including anti-money laundering (AML) obligations and know-your-customer (KYC) requirements mandated by our regulatory framework.

For any privacy-related enquiries, contact details are provided in Section 14 of this document.

2. What Data We Collect

toto88d collects the following categories of personal data from Players and platform visitors:

toto88d does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes.

3. How We Collect Your Data

toto88d collects personal data through the following means:

• Direct collection: Information you provide when registering a toto88d account, completing KYC verification, making a deposit or withdrawal, submitting a support request, or otherwise communicating with us.
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, browser identifiers, device data, session cookies, and behavioural analytics.
• Third-party providers: Identity verification data from KYC/AML service providers; payment data from payment processing partners (Touch n Go, DuitNow, Boost, FPX bank gateways, USDT processors); fraud scoring data from fraud prevention services.
• Publicly available sources: Where legally permitted, toto88d may verify information against publicly available databases as part of AML screening.

4. How We Use Your Data

toto88d uses the personal data it collects for the following purposes:

• To create, manage, and maintain your toto88d account.
• To verify your identity and age in compliance with our 21+ policy and applicable licensing requirements.
• To process deposits and withdrawals through Malaysian payment methods including Touch n Go eWallet, DuitNow, Boost, and FPX.
• To detect and prevent fraud, money laundering, and other financial crimes.
• To comply with legal obligations, including AML reporting, sanctions screening, and responses to lawful regulatory requests.
• To provide and improve customer support, including live chat and email correspondence.
• To send transactional communications such as account verification, withdrawal confirmations, and security alerts.
• To send promotional communications where you have opted in to receive them — you may opt out at any time.
• To monitor gaming patterns for responsible gaming purposes, including identifying signs of problem gambling behaviour.
• To analyse Platform usage and improve the toto88d user experience.
• To resolve disputes and enforce our Terms & Conditions.

5. Legal Basis for Processing

toto88d processes personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our contract with you as a toto88d Player — including account management, game provision, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML legislation, gaming licensing conditions, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your specific consent has been obtained. You may withdraw consent at any time.

6. Data Sharing & Third Parties

toto88d does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors: Financial data is shared with payment service providers (Touch n Go, DuitNow, Boost, FPX-connected banks, and USDT processors) solely for the purpose of processing deposits and withdrawals.
• KYC / Identity verification providers: Identity documents and personal data are shared with accredited third-party KYC service providers to complete identity and age verification.
• AML / Fraud prevention services: Transaction data may be shared with AML screening and fraud scoring providers as part of our regulatory compliance obligations.
• Regulatory and legal authorities: toto88d will disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law or a valid legal order.
• Technology service providers: Platform hosting, database management, analytics, and security service providers who process data on toto88d's behalf under strict data processing agreements.
• Game studio providers: Limited technical data (e.g., Player session tokens) may be shared with game providers such as Evolution Gaming, Pragmatic Play, and Microgaming to facilitate game session delivery. These providers do not receive your identity data.

All third parties with whom toto88d shares personal data are contractually obligated to process such data only for the specified purpose and to maintain appropriate security standards.

7. International Data Transfers

toto88d's primary server infrastructure is located within data centres operating under toto88d's licensing jurisdiction. Some of our third-party service providers, including KYC providers and game studios, may process data in jurisdictions outside Malaysia. Where such transfers occur, toto88d ensures that appropriate safeguards are in place — including contractual data protection clauses equivalent in standard to those required under applicable data protection law.

By using toto88d, you acknowledge that your data may be transferred to and processed in countries outside Malaysia where different data protection laws may apply. toto88d takes reasonable steps to ensure that all such transfers are conducted securely and in compliance with our data protection obligations.

8. Data Retention

toto88d retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data: Retained for the duration of the active account relationship, plus a minimum of 5 years following account closure, as required under AML legislation applicable to licensed gaming operators.
• KYC documents: Retained for a minimum of 5 years following the end of the business relationship, in accordance with AML regulatory requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of last interaction, unless longer retention is required for dispute resolution.
• Technical / log data: Typically retained for 12 months for security and fraud prevention purposes.

Data that is no longer required for any legitimate purpose and is not subject to a mandatory retention requirement will be securely deleted or anonymised.

9. Cookies & Tracking Technologies

toto88d uses cookies and similar tracking technologies on the toto88d.org platform. Cookies are small text files stored on your device that help us deliver a functional, secure, and personalised experience. The types of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, last-visited game lobby, and display preferences. Disabling these may reduce platform convenience.
• Analytics cookies: Collect anonymised usage data to help us understand how Players use toto88d, which pages are visited most frequently, and where errors occur. This data is used to improve the Platform.
• Marketing cookies: Used where you have consented to receive promotional content. These track whether you have previously visited toto88d to deliver relevant promotions.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the toto88d Platform.

10. Your Rights

Depending on your jurisdiction of residence, you may have the following rights regarding your personal data held by toto88d:

• Right of access: Request a copy of the personal data toto88d holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where there is no overriding legal basis for continued retention. Note that mandatory AML and licensing retention requirements may apply.
• Right to restrict processing: Request that toto88d restrict how it processes your data in certain circumstances.
• Right to data portability: Receive a copy of data you provided to toto88d in a machine-readable format.
• Right to object: Object to processing based on legitimate interests, including direct marketing. Marketing opt-outs take effect within 10 business days.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact toto88d's support team via live chat or at the email address provided in Section 14. toto88d will respond to data subject requests within 30 days. Identity verification may be required before processing certain requests to protect account security.

11. Security Measures

toto88d implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and toto88d's servers.
• Password hashing using industry-standard algorithms — toto88d staff cannot retrieve or view your account password in plain text.
• Two-factor authentication (2FA) available for all accounts via SMS OTP to your registered Malaysian mobile number.
• Access controls restricting employee access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of platform infrastructure.
• Encrypted databases with access logging for all administrative operations involving personal data.

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, toto88d will notify affected Players and the relevant regulatory authority within the timeframe required by applicable law.

12. Children's Privacy

toto88d is strictly an adult gaming platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this requirement.

If toto88d discovers that an account has been created by a person under 21, the account will be immediately closed, all funds returned to the payment method on file, and all associated personal data deleted (subject to any mandatory retention requirements for fraud or AML purposes). If you believe a minor has registered on toto88d, please contact our support team immediately.

13. Changes to This Policy

toto88d may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform functionality. When material changes are made, we will notify registered Players via the email address on file or through a prominent notice on the Platform.

The "Last Updated" date at the top of this document indicates when the policy was most recently revised. Your continued use of the toto88d Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically. Archived versions of previous policies are available upon request from our support team.

14. Contact & Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by toto88d, please contact us through the following channels:

• Live Chat: Available 24/7 via the toto88d Platform. First response under 90 seconds for privacy and data queries.
• Email: [email protected]

When submitting a data access or deletion request via email, please include your registered email address and a description of your request. toto88d may require identity verification before processing data subject requests to ensure account security.

toto88d aims to respond to all privacy-related enquiries within 5 business days and to fully resolve data subject requests within 30 calendar days of receipt.