Privacy Policy

1 Introduction

Tototogel ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy (hereinafter "Policy") sets out in detail how we collect, use, store, share, and protect personal information in connection with the operation of our online sports betting and live casino platform.

This Policy is issued in accordance with applicable data protection legislation and reflects our obligations as a responsible operator. It should be read alongside our Terms and Conditions, which govern your overall use of the tototogel platform.

We take our data stewardship obligations seriously. Our approach to privacy is grounded in transparency: we tell you clearly what data we hold, why we hold it, how long we keep it, and what your rights are. If you have questions that this Policy does not answer, please contact us directly using the details in Section 15.

2 Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either alone or in combination with other information held by us.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in most cases, you as a registered Player.
• "Controller" means the entity that determines the purposes and means of Processing Personal Data. Tototogel acts as Controller in respect of all Personal Data collected through this platform.
• "Processor" means a third party that Processes Personal Data on behalf of the Controller under a data processing agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the Processing of their Personal Data.
• "Cookie" means a small text file stored on your device by the Platform for functionality, analytics, or preference purposes.
• "KYC" means Know Your Customer — the identity verification process required to open and maintain a fully functional Account.

3 Data We Collect

We collect the following categories of Personal Data in connection with the operation of tototogel:

3.1 Identity & Registration Data

• Full legal name
• Date of birth
• Gender (where provided)
• Nationality and country of residence
• Government-issued identification number (e.g., Malaysian MyKad number, passport number)
• Copies of identity documents submitted for KYC verification

3.2 Contact Data

• Email address
• Mobile telephone number
• Residential address (including postcode and state — e.g., Kuala Lumpur, Selangor, Penang, Johor)

3.3 Financial & Transaction Data

• Payment method details (e.g., masked bank account numbers, e-wallet account identifiers for DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, FPX)
• Deposit and withdrawal history
• Transaction amounts in MYR
• Cryptocurrency wallet addresses (where applicable)
• Source of funds documentation (where requested for compliance purposes)

3.4 Betting & Gaming Activity Data

• Wager history and outcomes
• Game session data (duration, stakes, wins, losses)
• Responsible gambling tool settings (deposit limits, self-exclusion elections)
• Bonus and promotion participation records

3.5 Technical & Device Data

• IP address
• Device type, model, and operating system
• Browser type and version
• Geolocation data (country/region level, used for access control)
• Session timestamps and duration

3.6 Communications Data

• Content of support communications via live chat, email, or other channels
• Dispute records and correspondence
• Marketing preference records (opt-in and opt-out records)

4 How We Collect Your Data

We collect Personal Data through the following channels and mechanisms:

4.1 Direct Collection

Data you provide directly when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile. This includes all form submissions and document uploads made through the Platform.

4.2 Automated Collection

Data collected automatically as you use the Platform, including IP addresses, device identifiers, session data, and browsing behaviour on tototogel pages. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 8.

4.3 Third-Party Sources

In certain circumstances, we may receive Personal Data about you from third parties, including:

• Payment processors and banking partners (e.g., transaction confirmation data from FPX, DuitNow, or e-wallet providers);
• Identity verification service providers engaged to assist with KYC processing;
• Fraud detection and anti-money laundering screening services;
• Publicly available sources, where we have a legitimate interest in verifying information you have provided.

5 Legal Basis for Processing

We process your Personal Data on one or more of the following legal bases:

Where we rely on consent as the legal basis, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any Processing carried out prior to withdrawal.

6 How We Use Your Data

We use Personal Data collected from you for the following purposes:

• Account management: To create, maintain, and secure your tototogel Account, including password reset, account verification, and session management.
• Service delivery: To process your bets and wagers, credit winnings, manage bonuses and promotions, and provide access to all Platform features.
• Payment processing: To process deposits and withdrawals via your chosen payment method — DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, or cryptocurrency.
• Identity verification: To conduct KYC checks as required for regulatory compliance and to prevent fraud and money laundering.
• Customer support: To respond to your enquiries, resolve disputes, and manage complaints through our live chat, email, and other support channels.
• Responsible gambling: To monitor betting behaviour for signs of problem gambling, enforce responsible gambling tools elected by you, and communicate relevant support information.
• Security: To detect and prevent fraudulent, abusive, or illegal activity on the Platform, including bot activity, account takeover attempts, and collusion.
• Legal compliance: To comply with applicable laws and regulatory requirements, including anti-money laundering obligations, data retention mandates, and responses to lawful government or law enforcement requests.
• Platform improvement: To analyse usage patterns, identify bugs, and improve the overall user experience for all players.
• Marketing (with consent): To send you promotional communications about tototogel offers, bonuses, and platform updates, where you have opted in to receive such communications. You may opt out at any time.

7 Data Sharing & Disclosure

We do not sell, rent, or trade your Personal Data to any third party for their own commercial or marketing purposes. We may share your Personal Data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

7.1 Service Providers & Processors

Third-party providers who process data on our behalf under binding data processing agreements, including payment processors (e.g., FPX, DuitNow network providers), identity verification services, fraud detection providers, cloud hosting and infrastructure providers, and customer support technology vendors. All such Processors are required to implement appropriate technical and organisational security measures.

7.2 Regulatory & Legal Authorities

Where required by applicable law or a valid legal order, we may disclose Personal Data to regulatory bodies, law enforcement agencies, courts, or other governmental authorities. We will notify you of such disclosures where permitted to do so by law.

7.3 Fraud Prevention & AML Screening

We may share Personal Data with fraud prevention networks and anti-money laundering screening services to the extent necessary to detect and prevent financial crime. This may involve cross-referencing your data against watchlists and databases maintained by such services.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business assets, your Personal Data may be transferred to the relevant successor entity. We will notify you of any such transfer and the applicable privacy terms before the transfer takes effect.

8 Cookies & Tracking Technologies

Tototogel uses cookies and similar tracking technologies on the Platform. These technologies help us deliver a functional and personalised experience, analyse platform performance, and maintain account security.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without affecting core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and responsible gambling tool configurations.
• Analytics Cookies: Help us understand how Players navigate the Platform — which pages are visited most, where sessions start and end, and how long features take to load. This data is aggregated and anonymised.
• Security Cookies: Used to detect and mitigate fraudulent activity, bot behaviour, and suspicious login attempts.

8.2 Cookie Management

You can manage your cookie preferences through your browser settings. Most browsers allow you to view, delete, and block cookies. Please note that disabling Strictly Necessary Cookies will prevent you from logging in to your tototogel Account. Disabling other cookie types may limit certain Platform features but will not prevent basic access.

We do not use cross-site tracking cookies or share cookie-derived data with third-party advertising platforms.

9 Data Retention

We retain Personal Data for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with you. Data retained solely for legal compliance purposes is accessed only when required for that specific purpose.

10 Data Security

Tototogel implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, and unlawful disclosure. These measures include:

• Encryption in transit: All communications between your device and the tototogel Platform are encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive data fields including identity document details and financial information are encrypted in our databases.
• Access controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. All staff with data access undergo security awareness training.
• Two-factor authentication: Available for Player Accounts; mandatory for internal administrative access.
• Penetration testing: Regular third-party security assessments are conducted on our infrastructure.
• Monitoring: Automated anomaly detection systems monitor for unusual access patterns and potential security incidents around the clock.

Despite these measures, no system is completely immune to security risks. In the event of a security incident affecting your Personal Data, we will notify you without undue delay and take all reasonable steps to mitigate the impact.

11 International Data Transfers

Some of our service providers and infrastructure partners are located outside Malaysia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Malaysia, we take appropriate safeguards to ensure that your data remains protected. These safeguards may include contractual clauses binding the recipient to equivalent data protection standards.

We conduct due diligence on all third-party providers to whom Personal Data is transferred internationally, and we require all such providers to adhere to data security standards consistent with this Policy.

12 Your Rights

Subject to applicable law, you have the following rights in respect of your Personal Data held by tototogel:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that we delete your Personal Data. This right is subject to our legal retention obligations — we may not be able to erase data that we are required by law to retain.
• Right to Restrict Processing: You may request that we limit how we process your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request a copy of the Personal Data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to our Processing of your Personal Data where we rely on legitimate interest as the legal basis, including for direct marketing purposes.
• Right to Withdraw Consent: Where we process your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect prior lawful processing.

To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to verified requests within a reasonable timeframe, typically within 30 days. We may ask you to verify your identity before processing your request.

13 Children's Privacy

Tototogel is an adult platform intended solely for users aged 21 and above. We do not knowingly collect Personal Data from individuals under 21 years of age. Our registration process includes an age declaration, and we conduct KYC age verification on all Accounts before processing any financial transactions.

If we become aware that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the relevant Account, invalidate any wagers placed, and delete the associated Personal Data in accordance with our data retention policies. Any funds deposited by an underage user will be refunded to the originating payment method following verification.

Parents or guardians who believe that their child may have registered an Account on tototogel should contact our support team immediately.

14 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the services we offer. Where changes are material — meaning they significantly affect your rights or how we use your data — we will notify you by email or by a prominent notice on the Platform at least 14 days before the changes take effect.

Non-material changes (such as typographical corrections or minor clarifications) may take effect immediately upon publication. The "Last Updated" date at the top of this page will always reflect when the most recent version was published.

We encourage you to review this Policy periodically. Continued use of the tototogel Platform after an updated Policy takes effect constitutes your acceptance of the revised terms. If you do not accept the revised Policy, please cease using the Platform and contact us to arrange Account closure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tototogel handles your Personal Data, please reach out to us through any of the following channels:

• Live Chat: Available 24/7 on the tototogel website. This is the fastest channel for privacy-related queries — average response time 3–5 minutes. Support available in English, Bahasa Melayu, and Mandarin.
• Email: [email protected] — please use the subject line "Privacy Request" for data-related enquiries. Responses within 24 hours during standard business days.

For formal data subject rights requests (access, rectification, erasure, portability), please contact us via email with the subject line "Data Subject Request" and include your full registered name and the email address associated with your Account. We will verify your identity before processing the request.

We take all privacy concerns seriously and aim to resolve them promptly and fairly. If you are not satisfied with our response, you may have the right to escalate your concern to the relevant data protection authority in your jurisdiction.