Privacy Policy toti88 — Our Commitment to Protecting Your Data

This Privacy Policy describes toti88's practices regarding the collection, use, disclosure, and protection of personal information you provide when using toti88.win, the official toti88 mobile app, and all related services ("Platform").

Toti88 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and applicable international privacy standards. We are committed to ensuring that all personal information entrusted to us is handled with integrity, transparency, and the highest level of security.

This policy applies to all individuals who access or use the toti88 platform, including website visitors, registered members, and anyone who interacts with our customer support services.

Toti88 collects various types of information depending on how you interact with our platform. Below is a summary of the data collected:

Toti88 only collects data that is strictly necessary for legitimate purposes. We do not collect sensitive information such as health data, political views, or religious beliefs unless required by law.

Toti88 uses the personal data collected for the following purposes:

• Account management: Creating and managing member accounts, verifying identity and ensuring the security of your account.
• Transaction processing: Processing deposits, withdrawals and all financial transactions made through the platform.
• KYC verification: Meeting identity verification requirements and anti-money laundering (AML) compliance.
• Customer service: Responding to inquiries, resolving complaints and providing technical assistance to members.
• Marketing communications: Sending information about promotions, bonuses and the latest offers — only to members who have given their consent.
• Platform security: Detecting and preventing fraud, money laundering and platform abuse.
• Service improvement: Analyzing usage patterns to improve the interface, user experience and platform performance.
• Legal compliance: Fulfilling legal obligations, regulations and directives from relevant authorities.

Toti88 does not sell, rent, or trade members' personal information to any third party for marketing purposes. However, in certain limited situations, we may need to share data with the following parties:

• Payment service providers: To process deposits and withdrawals via FPX, Touch 'n Go eWallet, GrabPay, Boost, and other supported payment methods. These providers are bound by strict confidentiality obligations.
• Game providers: Only the minimum required information is shared with providers such as Pragmatic Play, Evolution Gaming and others, solely for game session management purposes.
• Legal authorities: toti88 will disclose information to authorities when required by law, court order, or to comply with valid legal processes.
• Technical service providers: Technology companies that assist us in managing IT infrastructure, cybersecurity, and platform analytics — all bound by strict data confidentiality agreements.

In all cases of data sharing, toti88 ensures that receiving parties handle the information with a level of protection equal to or higher than our own standards.

Toti88 continuously invests in security infrastructure to ensure members' personal data is always protected. Key security measures we have implemented:

• 256-bit SSL encryption: All data communications between your device and toti88's servers are encrypted using the latest TLS protocol.
• Two-factor authentication (2FA): Members can enable 2FA for an additional layer of protection on their account.
• Real-time threat monitoring: Our security system monitors the platform 24/7 to detect any suspicious activity or intrusion attempts.
• Internal access controls: Access to member data within the toti88 system is restricted to authorized personnel only, with full audit logs maintained.
• Regular security testing: Penetration testing and security audits are conducted regularly by independent third parties.
• Secure data backups: Data is regularly backed up to separate, encrypted locations to ensure recovery in the event of any incident.

As a toti88 member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act (PDPA):

To exercise any of the above rights, please contact the toti88 support team via live chat or our official email. We will process your request within 14 working days.

Toti88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our site.

Types of cookies used by toti88:

• Essential cookies: Required for core platform functions such as login sessions, security, and navigation. These cookies cannot be disabled.
• Performance cookies: Collecting anonymous information about how visitors use the platform to help us improve our services.
• Functional cookies: Remembering your preferences and settings such as language and region to deliver a more personalized experience.
• Analytics cookies: Helps us understand platform usage patterns for overall product improvement.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of some sections of the toti88 platform.

Toti88 retains your personal data for as long as necessary to fulfil the purposes stated in this privacy policy, or for as long as required by applicable laws and regulations.

• Active account data: Retained for as long as your account remains active on the toti88 platform.
• Financial transaction records: Retained for a minimum of 7 years after the transaction date in accordance with Malaysia's financial legal requirements.
• KYC documents: Retained for a minimum of 5 years after account closure to meet AML compliance requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Technical data and access logs: Retained for 12 months for security purposes and technical troubleshooting.

When data is no longer needed and there is no legal obligation to retain it, toti88 will securely and irreversibly delete or anonymize the data.

The toti88 platform is strictly for individuals aged 18 years and above. toti88 does not intentionally collect or process personal data of individuals under the age of 18.

Should we discover that personal information has been collected from a person under 18 years of age without proper verification, we will take immediate steps to delete that information and close the relevant account.

If you are a parent or guardian and discover that your child has registered on the toti88 platform, please contact our support team immediately via live chat for prompt action.

Toti88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be communicated to members via their registered email or in-platform notifications.

The "Updated" date at the top of this document indicates the latest version. We encourage you to review this policy from time to time to stay informed about how we protect your information.

For any questions, concerns, or requests regarding your personal data, please contact the toti88 Data Protection Officer (DPO) through our official customer support channels: