Privacy Policy toto121 — Your Personal Data Protection

Toto121 collects your personal information solely for the purpose of providing a safe, seamless, and responsible online gaming platform service. We only collect data that is strictly necessary and will not collect information beyond what is required for the platform's operations.

The categories of information we collect include the following:

Every piece of information we collect is used for specific, legitimate, and transparent purposes. toto121 will not process your personal data for any purpose other than those stated in this Privacy Policy without first obtaining your consent.

The primary purposes for which your data is used are as follows:

• Account Management: Creating, verifying, and managing your member account — including the KYC process, identity verification, and account recovery where necessary.
• Transaction Processing: Processing all deposits, withdrawals, and fund transfers within your account securely and accurately. Your financial data is used solely for this purpose.
• Gaming Services Provision: Enabling you to access over 1,000 games on the toto121 platform, maintain gaming records, and ensure a smooth and fair gaming experience.
• Security and Fraud Prevention: Monitoring and analysing account activity to detect anomalies, fraud attempts, or suspicious behaviour in order to protect the security of all members.
• Legal Compliance: Fulfilling our obligations under applicable Malaysian laws, including Anti-Money Laundering (AML) requirements and reporting obligations set by the relevant authorities.
• Service Communications: Sending important notifications related to your account, security updates, transaction confirmations, and relevant service information.
• Targeted Marketing: With your consent, we may send you promotional information, bonus offers, and marketing content tailored to your interests and gaming habits. You may unsubscribe at any time.
• Platform Improvements: Analysing aggregate usage patterns (without identifying individuals) to improve service quality, user interface, and the overall toto121 platform experience.
• Responsible Gaming: Using gaming activity data to identify early signs of problem gambling and provide appropriate assistance or intervention in line with toto121's commitment to responsible gaming.

Toto121 processes your personal data on a solid legal basis in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that every instance of data processing has a legitimate and defensible justification.

• Contract Performance: Processing required to fulfil the service agreement between you and toto121 — including account management, transaction processing, and provision of access to gaming services.
• Legal Obligation: Processing required to comply with applicable Malaysian legal requirements, including obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Legitimate Interest: Processing required for toto121's legitimate interests, such as fraud prevention, platform security, and service improvement — provided these interests do not override your fundamental rights and freedoms.
• Consent: For certain purposes such as marketing communications, we will only process your data based on your explicit consent, which may be withdrawn at any time.

Toto121 does not share your personal data with third parties except in the limited circumstances set out below. In all data-sharing situations, toto121 ensures that the receiving party adheres to data protection standards equivalent to or stricter than our own.

• Payment Service Providers: Minimal financial information necessary to be shared with FPX providers, e-wallets, and partner banks to securely process your deposit and withdrawal transactions.
• Game Providers: Technical data required to enable access to games from software providers partnered with toto121. These providers are bound by strict data protection agreements.
• Technical Service Providers: Companies that provide IT infrastructure, cloud services, and technical support for the toto121 platform's operations. All such providers are bound by data confidentiality contracts.
• Legal Authority: When required by law, court order, or directive from a legitimate Malaysian authority — toto121 will disclose the necessary information in accordance with our legal obligations.
• Professional Advisors: Lawyers, accountants, or auditors appointed by toto121 may need to access certain data within the scope of their professional work, subject to their professional confidentiality obligations.

Toto121 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure account security, and understand how users interact with our website. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for the platform's core functions, including maintaining your login session, saving language preferences, and ensuring security during navigation. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymised information on how visitors use our website — which pages are visited most, time spent, and errors encountered. This helps us improve platform performance.
• Functional Cookies: Remembering your preferences such as saved username, display settings, and preferred language to provide a more personalised experience on your next visit.
• Analytics Cookies: Helping us understand aggregate usage patterns through recognised analytics tools. This data is used to make evidence-based decisions on platform improvements.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect core toto121 platform functionality and you may be unable to log in or use the service properly.

Toto121 implements a comprehensive range of technical and organizational security measures to protect your personal data from unauthorized access, loss, alteration, or accidental disclosure.

• 256-bit SSL Encryption: All data transmitted between your device and toto121's servers is protected with 256-bit SSL encryption — the highest security standard used by leading financial institutions worldwide.
• Data-at-Rest Encryption: Sensitive data stored in our databases — including financial information and KYC documents — is encrypted using industry-recognised encryption algorithms.
• Layered Access Control: Access to members' personal data is strictly limited to staff who genuinely require it to perform their duties. All access is logged and continuously monitored.
• Two-Factor Authentication (2FA): toto121 supports two-factor authentication for member accounts as an additional layer of protection beyond a standard password.
• Continuous Security Monitoring: Our automated monitoring system operates 24 hours a day to detect and respond to any security threats or suspicious activity in real time.
• Regular Security Testing: toto121 conducts regular security audits and penetration testing by independent third parties to identify and address any system vulnerabilities.

Toto121 retains your personal data for as long as necessary to fulfil the collection purposes stated in this Privacy Policy, or for as long as required under applicable Malaysian law — whichever is longer.

• Active Account Data: For as long as your account remains active or you continue using toto121's services.
• Financial Transaction Records: Minimum 7 years from the transaction date, in compliance with Malaysian financial and taxation legal requirements.
• KYC Documents: Minimum 5 years after the termination of the business relationship, or longer if required under applicable AML laws.
• Support Communication Logs: 2 years from the date of interaction to allow reference for any complaints or enquiries previously made.
• Marketing Data: Until you withdraw your consent or request data deletion, whichever comes first.
• Closed Account: After account closure, your data will be retained for the minimum period required by law before being securely deleted from our systems.

Once the applicable retention period has expired, toto121 will securely delete or anonymize your data in accordance with established data deletion procedures.

As a toto121 user, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010. toto121 fully respects and facilitates the exercise of these rights:

Toto121 is an online gaming platform intended exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from children under the age of 18.

All registrants are required to confirm they are 18 years of age or older at the point of registration. Our rigorous KYC process — which requires MyKad verification — is designed as the primary mechanism to prevent underage registration.

Should toto121 discover or be informed that we have collected data from a child without the knowledge and consent of a parent or legal guardian, we will take immediate action to:

• Suspending and closing the relevant account immediately
• Deleting all personal data associated with the account
• Refunding any deposited funds to the original account where identifiable
• Reporting the incident to the relevant authorities where required

If you have reason to believe that a minor has registered on toto121, please contact our support team immediately via live chat or any support channel available within the platform.

Toto121 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or developments in our platform's services. All amendments take effect immediately upon publication on the toto121 website.

When we make significant amendments to this Privacy Policy, we will:

• Updating the "Last Updated" date displayed at the top of this page
• Displaying a clear notification notice on the platform's home page for a minimum of 14 days
• Sending direct notifications to the email address or phone number registered with us
• For highly significant amendments, we may request your renewed consent before continuing to process your data

We encourage you to review this Privacy Policy periodically so you remain informed about how toto121 protects your information. Continued use of toto121 services after any amendments are published will be considered your acceptance of those changes.