Privacy Policy toto121 — Data Protection Malaysian Players

01Introduction & Scope of Privacy Policy

This Privacy Policy is published by toto121 ("we", "toto121") and applies to all users and players who access or use the toto121.wine platform, the toto121 mobile app, and all related services offered under the toto121 brand.

As an online wagering entertainment platform trusted by over 500,000 Malaysian players, toto121 takes data protection responsibilities extremely seriously. We believe that privacy is not merely a legal obligation — it is the foundation of trust that builds a lasting relationship between toto121 and our players.

This Privacy Policy transparently explains how toto121 collects, processes, stores, discloses, and protects your personal information. It also outlines your rights as a data subject and how to exercise them. Please read this document carefully as it forms part of the Terms and Conditions toto121 binding.

02Personal Data We Collect

Toto121 collects various types of personal data depending on how you interact with our platform. The following is a complete breakdown of the data collected:

Data You Provide Directly:

• Full name as per identity card or passport.
• Date of birth and gender for age verification purposes.
• Active email address used for account communications.
• A valid Malaysian mobile phone number.
• Current residential address including postcode and state.
• Bank account or e-wallet details (Touch 'n Go eWallet, GrabPay, Boost) for processing deposits and withdrawals.
• Identity verification (KYC) documents such as a copy of MyKad or passport during the verification process.

Automatically Collected Data:

• IP address of the device used to access the platform.
• Browser type and version, and device operating system.
• Device information including phone model, screen resolution and unique device identifiers.
• Session data including pages visited, visit duration, and actions taken within the platform.
• Country- or state-level geolocation data (not precise GPS coordinates).
• Logs of gaming activity and financial transactions within the platform.

Transaction & Financial Data:

• Records of all deposits and withdrawals including amounts, dates and times.
• Wagering history and gaming activity within the toto121 platform.
• Information related to bonuses and promotions claimed.

03How We Use Your Personal Data

Toto121 uses collected personal data solely for legitimate and necessary purposes in order to deliver the best experience to our players. The following is a detailed breakdown of how data is used:

• Account Management: Creating, verifying and managing your toto121 player account, including the KYC process and age verification.
• Transaction Processing: Processing all deposits, withdrawals and other financial transactions on the platform securely and accurately.
• Service Communications: Sending important account-related notifications such as deposit confirmations, withdrawal status updates, password resets and security alerts.
• Platform Improvements: Analyzing aggregate usage patterns to improve the design, functionality and performance of the toto121 platform.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account use and platform abuse.
• Legal Compliance: Fulfilling reporting and compliance obligations to relevant regulatory bodies in Malaysia.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support.
• Marketing (With Consent): Sending promotional information, bonus offers and platform updates to players who have given consent to receive marketing communications.

04Data Sharing & Disclosure to Third Parties

Toto121 does not sell, rent or trade player personal data for any commercial purpose. However, in certain limited situations, toto121 may share personal data with the following parties:

• Payment Service Providers: Banking institutions, FPX providers, and e-wallet providers (Touch 'n Go eWallet, GrabPay, Boost) that process your financial transactions — limited to the minimum data required for payment processing.
• Game Software Providers: Licensed game providers supplying slots, sports betting, live casino and other games — to ensure smooth gameplay and resolution of technical disputes.
• KYC Service Providers: A third-party identity verification platform that assists toto121 in conducting KYC checks in accordance with legal compliance requirements.
• Analytics Service Providers: Analytics tools that help toto121 understand platform usage patterns — only anonymized data is shared.
• Legal Authority: Malaysian law enforcement agencies, courts, or government bodies when required by law or court order.

All third parties receiving data from toto121 are required to sign a data processing agreement that sets strict data protection standards and prohibits the use of data for any purpose other than those specified.

05Cookies, Pixels & Tracking Technologies

Toto121 uses cookies and similar tracking technologies to enhance your gaming experience and ensure account security. The following are the types of cookies used:

• Essential Cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled as they are essential to platform operation.
• Performance Cookies: Collecting information on how players use the platform to help us identify areas for improvement. All data is collected anonymously.
• Functional Cookies: Saving your preferences such as language, display settings and game preferences to ensure a personalized experience each time you log in.
• Analytics Cookies: Used to understand traffic patterns and platform usage for toto121's internal product improvement purposes.

You can manage and delete cookies at any time through your browser settings. However, disabling certain cookies may affect the functionality of the toto121 platform. For more information on managing cookies, refer to the documentation of your browser.

06Data Security & Protection Measures

Toto121 continuously invests in the latest security infrastructure to ensure player personal data is always protected. Key security measures we have implemented include:

• 256-Bit SSL Encryption: All communications between your device and toto121 servers are protected by TLS 1.3 protocol with AES-256 encryption — the same security standard used by Malaysia's major banks.
• Two-Factor Authentication (2FA): toto121 offers and encourages the use of two-factor authentication for all player accounts as an additional layer of security.
• 24/7 Security Monitoring: The toto121 security team monitors all platform activity around the clock using real-time threat detection systems.
• Strict Access Controls: Access to player personal data within toto121 is restricted to staff who require it to perform their duties, with comprehensive audit logs maintained.
• Regular Penetration Testing: toto121 undergoes regular independent security testing to identify and patch any vulnerabilities before they can be exploited.
• Secure Data Backup: Player data is automatically backed up across multiple secure, encrypted locations to ensure no data loss under any scenario.

07Data Retention & Deletion

Toto121 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are our data retention period guidelines:

• Active Account Data: Retained for the duration your account is active plus 7 years after account closure, to comply with financial record requirements under Malaysian law.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's tax and AML (Anti-Money Laundering) legal requirements.
• Security Log Data: Retained for 90 days for security incident investigation and fraud detection purposes.
• Marketing Data: Retained until you withdraw consent to receive marketing communications.
• KYC Data: Retained for 5 years after the end of the business relationship in accordance with AML compliance requirements.

Upon expiry of the designated retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity. The deletion process employs methods that meet industry security standards and ensures data cannot be recovered.

08Your Rights as a toto121 Player

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by toto121:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data ("right to be forgotten"), subject to toto121's legal obligations.
• Right to Restriction of Processing: You have the right to request that toto121 restrict how we process your data under certain circumstances.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and transfer it to another service provider.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, contact the toto121 data protection team via email at [email protected] or through the in-platform 24/7 Live Chat. toto121 will process your request within 14 business days.

09Children's Data Protection

The toto121 platform is exclusively for individuals aged 18 and above only. toto121 does not knowingly collect, process or store personal data of individuals under the age of 18.

Should toto121 discover that personal data of a minor has been collected without our knowledge, the account in question will be terminated immediately and all related data will be promptly deleted from our systems.

Parents or guardians who suspect their child or dependent has registered or used the toto121 platform are urged to contact our support team immediately via 24/7 Live Chat or email [email protected] for prompt action.

10Amendments to This Privacy Policy

Toto121 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements or service improvements. When material changes are made, toto121 will:

• Displaying clear notices within the toto121 platform at least 14 days before changes take effect.
• Sending notifications to players' registered email addresses for significant changes.
• Updating the "Last Updated" date at the top of this document.

Continued use of the toto121 platform after the effective date of any Privacy Policy changes will be considered full acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 8.

Previous versions of this Privacy Policy are available upon request by contacting the toto121 support team.

11Contact toto121's Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or the way toto121 handles your personal data, please contact us through the following channels:

If you are not satisfied with toto121's response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant authority under PDPA 2010.