Privacy Policy totobet – Our Commitment to Protecting Your Personal Data

1Introduction

Totobet ("we", "Platform" or "totobet") respects the privacy of every individual who uses our platform. This Privacy Policy clearly explains how we collect, store, use and protect your personal information when you register as a member or use any of our services.

We operate in line with recognised data protection principles and are committed to ensuring your information is handled responsibly. Protecting your data is not merely a legal obligation for us – it is a core value that shapes how TotoBet operates every day.

This policy applies to all users of the TotoBet platform, including website visitors, registered members, and former members whose data is still within the designated retention period.

2Types of Personal Data We Collect

Totobet collects your personal data through various interaction points on the platform. Here is an overview of the data we collect and why:

Data you voluntarily provide through registration forms, the KYC process, and communications with the support team is our primary source of information. In addition, we also collect technical data automatically when you use the platform for security and performance purposes.

3How We Use Your Personal Data

Totobet uses your personal data for legitimate and transparent purposes. We do not use your data for purposes beyond what is stated below without your prior consent:

• Service provision: Allow you to register, log in, make deposits, play, and make withdrawals on the totobet platform.
• Identity verification (KYC): Verify your identity and confirm you meet the platform's age requirement.
• Payment processing: Process deposit and withdrawal transactions securely and swiftly via DuitNow, FPX, eWallet, and other supported payment methods.
• Account security: Detect unusual activity and prevent fraud, money laundering, and multi-account usage.
• Customer support: Assist in resolving inquiries, complaints, and technical issues you report.
• Important communications: Send security notifications, policy updates, and critical account information.
• Legal compliance: Meet the reporting and record-keeping obligations required by applicable law.
• Platform improvement: Analyze usage patterns in aggregate (not individually) to improve the user experience and platform performance.

4Data Sharing with Third Parties

Totobet does not sell, rent or disclose your personal data to third parties for marketing purposes. However, there are limited situations where we need to share data for legitimate operational purposes:

• Payment providers: Required data is shared with payment service providers such as banks, DuitNow operators, and eWallet providers solely to process your transactions.
• IT service providers: Companies providing cloud infrastructure, cybersecurity and related technical services bound by strict confidentiality agreements.
• Game providers: Minimum technical information required is shared with third-party game providers to ensure games function correctly.
• Regulatory authorities: Data is shared with relevant authorities when required by law or a valid court order.

All third parties we work with are bound by data protection agreements that require them to handle your information at a level of security equal to or higher than our own standards.

5Data Security Measures

Data security is an ongoing investment at totobet. We implement multiple layers of technical and organizational protection to safeguard your personal data:

• Transit encryption: All communications between your device and totobet's servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Storage encryption: Sensitive data stored in our databases is encrypted using robust encryption algorithms.
• Layered access controls: Access to members' personal data is restricted to authorised staff only, with access logs audited on a regular basis.
• 24/7 Monitoring: Our cybersecurity systems monitor traffic and activity in real time to detect and respond to threats.
• Penetration testing: We conduct regular security assessments and penetration testing by independent security experts.
• Two-factor authentication: Members are encouraged to enable two-factor authentication (2FA) for an extra layer of account security.

6Cookies & Tracking Technologies

Totobet uses cookies and similar tracking technologies to enhance user experience and platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collect information on how the platform is used (pages visited, time spent) to help us improve our services. This data is collected in aggregate and does not identify you individually.
• Functional Cookies: Remember your preferences such as language, display settings, and login details for your convenience.
• Security Cookies: Help us identify suspicious sessions, prevent fraud, and keep your account secure.

You can manage or disable certain cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the TotoBet platform.

7Your Rights as a Data Owner

As a totobet member, you have the following rights regarding your personal data. We respect and facilitate the exercise of these rights:

8Children's Data Protection

The totobet platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we discover that a child's personal data has been collected without our knowledge, that data will be deleted immediately and the associated account will be terminated. Parents or guardians who believe their child may have registered using false information are encouraged to contact us right away.

9Cross-Border Data Transfers

In the course of platform operations, your personal data may be processed or stored on servers located outside Malaysia. When this occurs, TotoBet ensures that such data transfers are carried out with adequate safeguards through:

• Data processing agreements with robust protection terms in place with all recipient parties.
• Use of recognized data transfer mechanisms that meet protection standards equal to or higher than Malaysia's requirements.
• Periodic assessments of the data protection practices of our international partners.

Regardless of where your data is processed, the same protection standards as set out in this Privacy Policy continue to apply.

10Changes to This Privacy Policy

Totobet reserves the right to update this Privacy Policy from time to time in line with changes in law, technology or how we handle data. Any updates will be posted on this page with the latest revision date.

For material changes that significantly affect your privacy rights, we will provide notice via your registered email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision.

Continued use of the totobet platform after the effective date of any Privacy Policy changes constitutes acceptance of the updated terms.

11How to Contact Us About Privacy

If you have any questions, concerns, or wish to submit a request regarding your personal data, the totobet team is ready to assist through the following channels:

• Live Chat: The fastest method – available 24/7 within the TotoBet platform.
• Email: [email protected] – we aim to respond within 2 business days.

For formal requests relating to personal data rights such as access, correction or deletion, please clearly state the type of request and the information required to verify your identity for security purposes.