Privacy Policy toti77 –
Protecting Your Data Is Our Priority

1 Information We Collect

Toti77 collects your personal information through several channels when you register, use the platform, or interact with our services. The information collected is divided into two main categories:

1.1 Information You Provide Directly

• Identity information: Full name, identity card number (MyKad), date of birth, and gender during the account registration and KYC verification process.
• Contact information: Active email address, mobile phone number, and current residential address.
• Financial information: Bank account number, bank name, e-wallet number (TNG, Boost), and deposit and withdrawal transaction details.
• Verification documents: Copies of identity documents, recent bank statements, or utility bills as proof of address during the KYC process.
• Communications: Records of conversations with the toti77 customer support team via live chat, email, or other communication channels.

1.2 Information Collected Automatically

• Technical data: IP address, web browser type, device operating system, screen resolution, and unique device identifier.
• Usage data: Pages visited, games played, session duration, clicks, and interactions within the toti77 platform.
• Location data: General location based on IP address for legal compliance and fraud prevention purposes.
• Cookie data: Session cookies, preference cookies, and analytics cookies that help us understand platform usage patterns.

2 How We Use Your Data

Toti77 uses collected personal information solely for lawful and transparent purposes. Below is a summary of how we use your data:

Toti77 will not use your data for any purpose other than those stated above without first obtaining your consent. You may withdraw consent for marketing communications at any time through your account settings.

3 Sharing Information With Third Parties

Toti77 takes its responsibility to protect your privacy seriously. We do not sell or trade your personal data. However, there are certain situations where we may need to share information with trusted third parties:

• Payment service providers: Transaction information is shared with authorised payment processors (FPX, TNG, Boost, bank transfers) solely for processing your deposits and withdrawals.
• Technical service providers: Cloud infrastructure providers, analytics systems, and customer support services that help us operate the toti77 platform may have limited access to certain data under strict confidentiality agreements.
• Regulatory bodies and law enforcement: toti77 will disclose the required information to the relevant authorities when mandated by a court order, warrant, or valid legal compliance requirement.
• Fraud prevention: In cases involving suspected fraud or illegal activity, relevant information may be shared with authorities or industry partners for investigation purposes.

4 Data Security

Toti77 invests seriously in data security infrastructure to ensure your personal information is always protected. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS Encryption: All data communications between your device and toti77's servers are encrypted using the latest industry-standard encryption protocols.
• Two-factor authentication (2FA): Internal access to databases and sensitive systems requires two-factor authentication for every authorised staff member.
• Regular vulnerability scanning: The toti77 security team conducts regular penetration testing and vulnerability scanning to identify and patch any weaknesses before they are exploited.
• Real-time monitoring: An intrusion detection system (IDS) continuously monitors toti77's network traffic and will trigger an immediate alert if any suspicious activity is detected.
• Data backups: User data is automatically backed up to a separate encrypted location to ensure data recovery in emergency situations.
• Staff training: All toti77 staff receive regular data security awareness training and are bound by strict confidentiality agreements.

5 Cookies and Tracking Technologies

Toti77 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies: These cookies are required for the basic operation of the toti77 platform, including login session authentication and security. They cannot be disabled.
• Preference cookies: Allows the toti77 platform to remember your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics cookies: Helps us understand how users interact with the toti77 platform, the most frequently visited pages, and overall usage patterns for continuous improvement.
• Marketing cookies: Used to deliver relevant promotions and offers to you based on your activity and gaming preferences. These cookies are only activated with your consent.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the toti77 platform.

6 Your Rights Regarding Personal Data

As a toti77 user, you have the following rights regarding your personal data that we hold. All data rights requests may be submitted to the toti77 support team:

7 Data Retention and Deletion

Toti77 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable law.

• Active account data: For as long as your account remains active on the toti77 platform, we retain all information necessary to provide our services to you.
• Financial transaction data: Deposit and withdrawal transaction records are retained for a minimum of 7 years in compliance with Malaysia's financial and tax legal requirements.
• KYC documents: Identity verification documents are retained for a minimum of 5 years after account closure, in compliance with anti-money laundering (AML) requirements.
• Communication logs: Customer support conversation records are retained for 2 years for quality control and dispute resolution purposes.
• Inactive account: Accounts inactive for more than 24 months will receive a notification before data is reduced to the minimum information required by law.

Once the retention period has expired or a valid deletion request has been processed, toti77 will securely delete or anonymise your personal data using certified deletion methods.

8 Changes to This Privacy Policy

Toti77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. We are committed to notifying you of any significant changes through the following means:

• In-app or toti77 website notifications explaining key changes, at least 14 days before the changes take effect.
• An email will be sent to the address registered on your account for any changes that materially affect how we handle your personal data.
• The "Updated" date at the top of this Privacy Policy page indicates the current version in effect.

Continued use of the toti77 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to request account closure and data deletion before the changes take effect.

9 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how toti77 handles your personal data, our data protection team is here to help.

• Data protection email: [email protected]
• General customer support: [email protected]
• Live chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the toti77 platform.
• Response time: All privacy enquiries will be responded to within 3 business days. Data rights requests will be processed within the timeframe specified according to the type of request.

Toti77 takes every privacy complaint seriously and will investigate and provide an appropriate response to every enquiry received. Your satisfaction and trust are our top priority.