Privacy Policy CasinoToto – Malaysian User Data Protection

CasinoToto collects several categories of information when you use our platform. We only collect data that is genuinely necessary to provide you with a safe, compliant, and personalised service.

Data You Provide Directly

Information you provide during registration, KYC verification, when contacting customer support, or when filling in any details on the casinototo platform is collected directly from you.

Automatically Collected Data

While you use the platform, our systems automatically record technical information such as your IP address, device type, operating system, and navigation patterns. This data is used solely for security purposes and improving the user experience.

The data we collect is used for specific, identified purposes. CasinoToto is committed to not using your data for any purpose beyond what is stated here without your prior consent.

• Account management: Securely create, verify, and manage your casinototo account.
• Payment processing: Process deposits and withdrawals through your chosen payment method.
• Identity verification (KYC): Verify that you meet the age eligibility and identity requirements before any financial transactions are processed.
• Fraud detection: Identify and prevent any suspicious activity that could compromise your account security.
• Responsible gaming: Monitor usage patterns to identify signs of problem gambling and offer appropriate assistance.
• Customer support: Provide accurate and relevant assistance based on your account records and interaction history.
• Promotional communications: Send information about offers and promotions — you can unsubscribe at any time.
• Platform improvements: Analyse aggregated usage data to improve platform performance and experience.

CasinoToto does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, in the course of operating the platform, we may share limited data with the following categories of third parties:

• Payment processors: Payment service providers such as FPX, digital wallet providers, and banks required to process your transactions.
• Game software providers: Gaming partners that require minimal data to verify legitimate game sessions.
• KYC service providers: Third-party identity verification companies that help us process required background checks.
• Government authorities: Law enforcement agencies or regulatory authorities when required by law or court order.

All third-party service providers we work with are bound by strict data protection agreements and are only permitted to process your data for specified purposes.

We retain your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as your account remains active, whichever is longer. Specific retention periods are as follows:

• Identity and KYC data: Retained for 7 years after account closure in accordance with anti-money laundering (AML) legal requirements.
• Financial transaction records: Retained for 7 years in accordance with financial reporting and tax requirements.
• Game records: Retained for 3 years for customer support and dispute resolution purposes.
• Support communication logs: Retained for 2 years for training and quality control purposes.
• Technical data and system logs: Retained for 12 months for security and investigation purposes.

Once the retention period expires, your data will be securely deleted or anonymized so it can no longer be personally linked to you.

The casinototo platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform usage.

Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies: Collect data on how you use the platform to help us improve navigation and content presentation.
• Functional cookies: Remember your preferences and settings such as language and currency denomination for a more personalised experience.

You can manage cookie settings through your internet browser settings. However, disabling essential cookies may affect the functionality of the casinototo platform.

CasinoToto implements robust technical and organisational security measures to protect your personal data from unauthorised access, loss, modification, or disclosure.

• 256-bit SSL encryption for all data transfers between your device and our servers.
• Passwords are stored using one-way hashing algorithms that cannot be decrypted.
• Strict internal access controls — casinototo staff can only access data required for their specific roles.
• Continuous 24/7 security monitoring with automated intrusion detection systems.
• Regular penetration testing by independent third parties.
• Mandatory cybersecurity awareness training for all casinototo staff.

In the context of casinototo platform operations, some of your personal data may be processed or stored outside Malaysia, particularly when we work with international service providers such as game software vendors or cloud infrastructure platforms.

When such data transfers occur, casinototo ensures that protections equivalent to Malaysia's PDPA are applied through:

• Binding data processing agreements (DPA) with all overseas data recipients.
• Use of third-party companies that comply with internationally recognised data protection standards.
• Regular audits of overseas data processing partners.

The casinototo platform is exclusively for adult users aged 18 years and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that a child's data has been collected without valid parental or guardian consent, we will immediately take the following steps:

• Suspend the relevant account immediately.
• Delete all related data within 48 hours.
• Return any available funds in the account to the original user.

If you believe someone under the age of 18 has registered an account on casinototo, please contact our support team immediately via live chat.

CasinoToto may update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in how we protect your privacy.

When material changes occur, we will:

• Update the "last updated" date at the top of this page.
• Send notifications to registered users via email or in-platform notifications.
• Require re-confirmation of your consent if changes involve significant new processing activities.

If you have any questions, concerns, or wish to exercise any of your data protection rights, please contact the casinototo Data Privacy Officer (DPO) through the following channels:

• Live Chat: The fastest channel — available 24/7 directly within the casinototo platform. Use the keywords "Privacy" or "Personal Data" to be connected to our privacy team.
• Email: [email protected] (response time: 5–14 business days)
• General questions: Refer to the FAQ us for answers to frequently asked questions about privacy and account security.

We are committed to addressing all privacy-related inquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to file a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the Ministry of Domestic Trade and Consumer Affairs regarding PDPA matters.