Toto12 Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

Toto12 collects the personal information necessary to provide a safe, fair, and compliant online betting platform that meets industry verification requirements. We only collect data that is strictly needed — nothing more.

Data You Provide Directly

• Registration Information: Your full name, date of birth, Malaysian identity card number (MyKad), email address, and phone number as provided when registering your toto12 account.
• Verification Documents: A copy of your MyKad, passport, or other official identification document as requested during the KYC (Know Your Customer) process.
• Payment Information: Your e-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) or banking information (DuitNow, FPX, Maybank2u, CIMB Clicks) that you use for deposits and withdrawals.
• Communications: Messages you send to the toto12 support team via Live Chat, email or any other communication channel.

Automatically Collected Data

• Technical Data: IP address, web browser type, operating system, screen resolution, and device information used to access toto12.
• Activity Data: Pages visited, games played, login and logout times, as well as betting and winnings records.
• Cookie Data: Session information, language preferences and display settings stored in your browser to make the platform easier to use.

Every piece of data that toto12 collects is used for a specific and legitimate purpose. Below is a full explanation of how your information is used in the day-to-day operation of our platform.

Primary Purposes of Data Use

• Account Management: Creating and maintaining your toto12 account, processing logins, managing account settings, and keeping your account secure.
• Transaction Processing: Processing deposits from Touch 'n Go, GrabPay, DuitNow, and other Malaysian payment methods, as well as handling your winnings withdrawals accurately and promptly.
• Identity Verification: Verifying your age (minimum 18 years) and identity as required by industry standards, and to prevent fraud and the creation of multiple accounts.
• Customer Support: Providing accurate and effective assistance when you contact the toto12 support team via Live Chat or email in Bahasa Melayu.
• Platform Security: Detecting and preventing fraudulent activity, multiple account usage, bot activity or any security threats to the platform and other players.
• Service Communications: Sends you important notifications about your account, changes to terms, security updates, and relevant bonus information.
• Product Improvement: Analysing usage patterns on an aggregate (not individual) basis to improve platform design, add popular games, and enhance the overall user experience.

Toto12 firmly believes that your personal data belongs to you. We do not sell, rent or transfer your data to third parties for commercial purposes. However, there are limited situations where data may be shared, and we explain each one transparently here.

Situations Where Data May Be Shared

• Payment Providers: Required transaction information is shared with Malaysian payment providers such as Touch 'n Go, GrabPay, and participating banks solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Providers: Limited game session information (without full personal details) is shared with licensed game providers such as Evolution Gaming and Pragmatic Play to ensure game integrity and resolve any technical disputes.
• Legal Requirements: toto12 will disclose data to authorities or law enforcement bodies when required by a valid court order or legally binding obligation.
• Fraud Prevention: In certain cases involving fraud, money laundering, or criminal activity, relevant information may be shared with the appropriate authorities.

In all of the above cases, data shared is limited to only what is strictly necessary for that purpose. toto12 does not grant any party full access to your account data without a valid and substantiated reason.

Toto12 invests seriously in security infrastructure to ensure that every Malaysian player's personal and financial data is protected at all times. Below are the security measures we have in place.

Toto12 Data Protection Layers

• Encryption in Transit (SSL/TLS 256-bit): All data transmitted between your device and toto12's servers is encrypted using 256-bit SSL/TLS protocols. This ensures that no third party can intercept or read your data while it is in transit over the internet.
• Static Encryption: Sensitive data stored in toto12's databases — including identity information, IC numbers, and payment details — is encrypted at rest using robust encryption algorithms.
• Internal Access Controls: Access to player data within the toto12 system is strictly role-based. Customer support staff can only view information necessary to assist you, and all access is logged for audit purposes.
• 24/7 Monitoring: toto12's security systems are monitored around the clock to detect any suspicious activity, unauthorised access attempts, or unusual patterns in account usage.
• Two-Factor Authentication (2FA): toto12 offers two-factor authentication for your account – an added layer of security that ensures only you can log in, even if your password is compromised.
• Regular Security Audits: The toto12 platform undergoes regular independent security audits by cybersecurity experts to ensure data protection standards remain up to date against current threats.

Toto12 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit a website.

Types of Cookies We Use

• Essential Cookies: These cookies are required for the toto12 platform to function properly. They store your login session information, language preferences, and basic security settings. These cookies cannot be disabled as they are essential for the platform's core operations.
• Performance Cookies: Helps us understand how players use the toto12 platform — which pages are visited most, time spent in each section, and any technical errors that occur. This data is used in aggregated form to improve the platform.
• Functional Cookies: Stores your personal preferences such as preferred text size, in-game sound settings, and display configurations so you do not need to reconfigure them each time you log in.

Managing Your Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note that disabling certain cookies may affect the functionality of the toto12 platform — for example, you may need to log in again each time or lose preferences you have previously saved.

Toto12 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable laws and industry regulations.

Data Retention Period

• Active Account Data: For as long as your toto12 account remains active, we retain all account data necessary to provide our services to you.
• Financial Records: Financial transaction records (deposits and withdrawals) are retained for a minimum of 7 years, as required under Malaysian law governing financial records.
• Security Logs: Access logs and security activity records are retained for 12 months for investigation purposes in the event of a security incident.
• Communication Data: Customer support communication records are retained for 2 years for reference and service improvement purposes.
• After Account Closure: When your account is closed at your request, your personal data will be deleted or anonymised within 90 days, except for records that must be retained to meet legal requirements.

How to Request Data Deletion

If you wish to request the deletion of your personal data from toto12's systems, you can do so by contacting our support team at support@toto12.cash. Requests will be processed within 30 days, subject to any applicable legal retention requirements.

As a toto12 player in Malaysia, you have certain rights regarding your personal data. toto12 is committed to respecting and facilitating the exercise of these rights.

• Right of Access: You have the right to request and receive a copy of all personal data that toto12 holds about you. This request can be made through your account settings or by contacting our support team.
• Right to Rectification: If you find that any personal data we hold is inaccurate or out of date, you have the right to request a correction. For details such as your full name and date of birth, supporting documentation will be required.
• Right to Erasure: Under certain circumstances, you have the right to request that toto12 delete your personal data. This right is subject to legal retention requirements that we are obligated to observe.
• Right to Data Portability: You have the right to request a copy of your personal data in a machine-readable format (such as CSV) for transfer to another platform, should you wish to do so.
• Right to Object: You have the right to object to the processing of your data for specific purposes, particularly for optional marketing communications. You can unsubscribe from promotional emails at any time.
• Right to Restrict Processing: In certain circumstances, such as during a dispute investigation, you may request that toto12 restrict how your data is processed while the matter is being resolved.

To exercise any of the rights above, please contact the toto12 support team via Live Chat or email at support@toto12.cash. We will respond within 30 days of receiving your request.

As an operator of a global platform, toto12 may need to process or store data in locations outside Malaysia — particularly in the context of cloud server infrastructure and international game provider integrations.

When your personal data needs to be transferred outside Malaysia, toto12 ensures that such transfers are protected by appropriate mechanisms. This includes ensuring that data recipients are bound by data processing agreements that meet or exceed international data protection standards equivalent to those required in Malaysia.

All game and technology providers that toto12 works with — including Evolution Gaming, Pragmatic Play, and PG Soft — maintain their own privacy and data security policies that comply with international standards. Data shared with them is strictly limited to the technical information needed to ensure proper game functionality.

The toto12 platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

All account applicants are required to confirm that they are at least 18 years of age during the registration process. Should toto12 discover that personal data has been inadvertently collected from an underage user, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who suspect that their underage child has registered an account on toto12 are urged to contact our support team immediately at support@toto12.cash so that prompt action can be taken to close the account and delete all associated data.

Toto12 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data practices, technology, legal requirements, or platform operations. The date of the most recent amendment will always be displayed at the top of this document.

Amendment Notice

• For major changes that affect how we handle your personal data, toto12 will provide at least 14 days' notice before the changes take effect, via email or in-platform notification.
• Continued use of the toto12 platform after any amendments to the Privacy Policy take effect will be considered acceptance of the updated policy.
• If you disagree with any changes, you have the right to close your account and request deletion of your data before those changes take effect.

Contact toto12's Privacy Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how toto12 handles your personal data, please contact us:

• Email: support@toto12.cash (Use the subject line: "PRIVACY ENQUIRY")
• Live Chat: Available on the toto12 platform – 24 hours a day, 7 days a week in Bahasa Malaysia

We aim to respond to all privacy-related enquiries within 5 business days. For more complex requests such as data transfers or record deletion, processing may take up to 30 days.