Toto99 is committed to protecting the privacy and security of every member's personal data. This Privacy Policy clearly explains how we collect, use, store and protect your information on our Malaysia online casino platform.
Your privacy is not merely a legal obligation to us — it is a core commitment that underpins every technology and operational decision at toto99.
All data transmitted between your device and toto99's servers is protected with banking-grade 256-bit SSL encryption. This ensures your login credentials, bank account details and personal data cannot be intercepted by unauthorised parties.
Toto99 will not sell, rent or disclose your personal information to any third party for marketing or commercial purposes. Your data belongs to you alone.
Our identity verification (KYC) process uses secure, encrypted channels. Documents you submit are stored in a restricted-access environment and can only be viewed by specially trained authorised staff for this purpose.
Access to members' personal data within the toto99 organisation is strictly restricted on a need-to-know basis. All access is logged and regularly audited to ensure no internal misuse occurs.
You have the right to access, correct, or request deletion of your personal data at any time. Through your toto99 account settings or by contacting support, you have full control over the information we hold.
In the event of any data security incident, toto99 has an immediate response procedure in place. Affected members will be notified within the stipulated timeframe and remedial action will be implemented without delay to minimise any impact.
To provide a safe, high-quality and responsible online casino service, toto99 needs to collect certain information from our members. This data collection is carried out transparently and covers only the information genuinely required for our platform's operations.
Information you provide directly:
Information collected automatically during use:
Please note: toto99 will never ask for your password via email, SMS or chat. If you receive any such request, it is a phishing attempt and you should report it to our support team immediately.
Every piece of information we collect has a clear and legitimate purpose. toto99 does not use your data for purposes unrelated to platform operations or that you did not agree to at the time of registration.
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Account management and verification | Name, email, phone number, KYC documents | Contract fulfilment |
| Processing of deposits and withdrawals | Banking information, transaction records | Contract fulfilment |
| Fraud prevention and anti-money laundering | IP, device data, activity patterns | Legitimate interest / legal obligation |
| Service communication and support | Email, phone number | Contract fulfilment |
| Marketing & promotions (with consent) | Email, game preferences | Your consent |
| Platform analytics and improvements | Anonymised usage data | Legitimate interest |
You may withdraw consent to receive marketing communications at any time by updating your notification settings in your toto99 account or by contacting our support team. Withdrawing marketing consent will not affect the core services you use.
Toto99 understands that your trust is our most valuable asset. We will not sell or disclose your personal information to third parties except in very limited circumstances and for legitimate purposes, as follows:
Our guarantee: All third parties we work with are bound by data protection agreements that require them to handle your information at a level of security equal to or higher than toto99's own standards. We do not permit them to use your data for their own purposes.
Toto99 continually invests in cybersecurity infrastructure to ensure your data remains protected against increasingly sophisticated online threats. The technical and organisational security measures we implement include:
Multi-layered security: While no system can guarantee 100% absolute security, toto99 employs a defence-in-depth approach that combines the latest technology, strict operational procedures and ongoing staff training to minimise risks to your data.
If you suspect your account has been accessed without authorisation, change your password immediately and contact the toto99 support team, available 24 hours a day, 7 days a week. We will investigate and take remedial action as quickly as possible.
Toto99 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.
Once the retention period ends, your data will be securely deleted or anonymised so that it can no longer be linked back to your identity.
As a toto99 member, you have several important rights regarding your personal information, all of which we fully respect:
Request a copy of all personal data we hold about you.
Request that we correct inaccurate or outdated data.
Request deletion of your data subject to legal obligations.
Object to the use of your data for direct marketing purposes.
Receive your data in a machine-readable format.
Request that we restrict data processing in certain situations.
To submit any request relating to the rights above, contact the toto99 Data Protection team via our platform's live chat. We will process your request within 30 business days in accordance with applicable legal requirements.
Toto99 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how our platform is used. The types of cookies we use are as follows:
You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the toto99 platform and your gaming experience.
In operating an online platform, your personal data may need to be transferred to and processed on servers located in countries other than Malaysia. toto99 ensures that any such data transfers are carried out with adequate safeguards, including:
By using the toto99 platform, you acknowledge and agree to the transfer of your personal data as described in this section. If you have specific concerns regarding this matter, please contact our support team for further information.
Toto99 services are exclusively for individuals aged 18 and above. We do not intentionally collect, process, or store personal information from individuals under the age of 18.
If we discover that personal information belonging to a minor has been collected without proper age verification, we will take immediate action to delete that information and close the account in question. Parents or guardians with concerns about this matter may contact us directly through toto99 customer support.
Responsible Gaming: toto99 uses age verification technology during registration and the KYC process to ensure our platform is not accessed by minors. Read more on the Responsible Gaming us.
Toto99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements or improvements in how we handle data. All amendments will be published on this page with a clear effective date.
For material or significant amendments, we will notify you via your registered email or an in-platform notification on toto99 at least seven (7) days before the amendment takes effect. Continued use of the platform after the effective date will be considered acceptance of the updated terms.
We encourage you to review this Privacy Policy page regularly to stay informed about how toto99 protects your personal data. If you do not agree with any amendments, you have the right to close your account before the changes take effect.
Have a question about your privacy? The toto99 Data Protection Team is available to assist you 24/7 via live chat within the platform. We are committed to addressing every privacy enquiry thoroughly and within the stipulated timeframe.