Privacy Policy toto33 –
Personal Data Protection for Malaysia Players

Toto33 understands that player trust begins with how we handle their personal data. This Privacy Policy ("Policy") describes the collection, use, storage, and protection practices for personal information you provide to us when using the toto33.wine platform.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. Our commitment is clear: your data is used only for the stated purposes, nothing more.

This policy applies to all users who access the toto33.wine website, use the toto33 mobile app, or interact with any of our services. Any third parties working with toto33 are also bound by the same data protection standards.

Toto33 collects your personal data through several channels — directly when you register or contact us, and automatically when you use the platform. The following are the types of information we collect:

Every piece of data we collect has a specific and limited purpose. toto33 uses your personal information only for the following purposes:

• Account Management: Create, verify, and manage your account securely, including mandatory KYC processes
• Transaction Processing: Process deposits, withdrawals, and bonus payments accurately and promptly
• Platform Security: Detect and prevent fraudulent activity, money laundering, and unauthorised use
• Service Improvement: Analyse usage patterns to improve the overall user experience
• Service Communications: Send important account-related notifications, relevant promotions, and platform updates
• Legal Compliance: Comply with reporting and compliance requirements mandated by regulatory authorities
• Customer Support: Resolve enquiries and complaints more efficiently based on your account records

We do not use your data for any marketing purpose without your explicit consent. You may withdraw consent to receive marketing communications at any time through your account settings.

Toto33 implements multiple layers of technical and organizational protection to keep your personal data secure at all times. This is not merely a formality — it is an ongoing investment we take seriously.

Data Encryption: All data transmitted between your device and toto33 servers is protected using 256-bit SSL/TLS encryption — the same standard used by major financial institutions. This means that even if a party were to intercept the communication, the data cannot be read without the correct encryption key.

Secure Storage: Your personal data is stored on secured servers with strict access controls. Only staff with a legitimate business need are permitted to access sensitive information, and all access is logged and audited regularly.

Two-Factor Authentication: The toto33 system supports two-factor authentication for player accounts, adding an extra layer of protection to ensure only you can access your account.

Toto33 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is an absolute commitment we do not compromise on.

However, there are limited situations where we may need to share certain information:

• Payment Service Providers: Transaction data required to process your deposits and withdrawals is shared with approved payment providers, subject to strict data protection agreements
• Game Providers: Only the minimum information required to let you play is shared with toto33 licensed game providers
• Legal Requirements: We may be required to disclose information to relevant authorities when ordered by a court or applicable law
• Fraud Prevention: In cases of suspected fraud or illegal activity, relevant information may be shared with law enforcement agencies

All third parties working with toto33 are required to sign data protection agreements that bind them to the same security standards we uphold.

Toto33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login and game sessions. Cannot be disabled as they are essential to platform operation
• Performance Cookies: Collect information on how you use the platform to help us improve it. This data is aggregated and does not identify any individual specifically
• Functional Cookies: Save your preferences such as language and display settings so you do not need to configure them each time
• Security Cookies: Help detect suspicious activity and protect your account from unauthorised access

As a toto33 user, you have certain rights regarding your personal data under Malaysia's data protection laws. toto33 fully respects and facilitates the exercise of these rights.

To exercise any of these rights, contact the toto33 privacy team via live chat or our support email. We are committed to responding to all privacy rights requests within a reasonable timeframe.

Toto33 does not retain your personal data longer than necessary for the stated purposes. Retention periods vary according to the type of data and applicable legal requirements.

• Active Account Information: Retained for the duration your account is active and for 7 years after account closure for compliance requirements
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial reporting legal requirements
• Security Logs: Retained for 12 months for the purpose of detecting and investigating security incidents
• Support Communication Records: Retained for 3 years for reference and service quality improvement
• Marketing Data: Deleted immediately upon withdrawal of your consent to receive marketing communications

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to your identity.

Toto33 services are strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that we have collected data from a person under the age of 18, the account in question will be closed immediately and all related data will be permanently deleted from our systems.

Toto33 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological improvements we implement.

When material changes occur, we will notify you via:

• Email to the address registered in your account
• Notices displayed prominently within the toto33 platform
• Notifications within the toto33 mobile app

The "Updated" date at the top of this document will always reflect the date of the most recent changes. Continued use of the platform following any amendments constitutes acceptance of the updated Policy.

If you have any enquiries, concerns, or wish to exercise your privacy rights, the toto33 team is ready to assist you in a timely manner.

Ways to contact us regarding privacy matters:

• Live Chat: The fastest method — available 24/7 directly within the toto33 platform
• Privacy Email: [email protected] with the subject line "Privacy Request"
• FAQ: Visit FAQ page for answers to frequently asked questions about privacy

We are committed to responding to all privacy-related inquiries within 5 business days. For more complex requests such as data access or deletion requests, the response period is 14 business days.