Privacy Policy Toto Slot —
Personal Data Protection for Malaysian Players

This Privacy Policy explains how Toto Slot, operated by Toto Slot Entertainment Sdn. Bhd., collects, uses, discloses, stores, and protects your personal data when you use our platform, whether via website, mobile device, or any other digital channel.

As an online casino platform operating in Malaysia and serving Malaysian players, Toto Slot subject to Malaysia's Personal Data Protection Act 2010 (PDPA). We regard compliance with data protection law not merely as a legal obligation, but as a moral responsibility to all our members.

This policy applies to all individuals who register an account, visit the website, use the services, or interact with the Toto Slot in any way whatsoever. This covers all related activities — from account registration, deposits via Touch 'n Go eWallet or DuitNow, slots and live casino gameplay, to communications with our support team.

Toto Slot collects your personal data through several means — information you provide directly, information collected automatically during use, and in some cases, information from legitimate third-party sources.

We do not collect unnecessary data. Every type of data collected has a clear and legitimate purpose, and we will not request sensitive information that is irrelevant to the services we provide.

The personal data you provide to Toto Slot used exclusively for the following purposes, all of which are lawful under Malaysia's PDPA:

• Account Management: Creating, verifying, and maintaining your Toto Slot account, including the KYC (Know Your Customer) process.
• Payment Processing: Processes deposits and withdrawals via your chosen Malaysian payment method — whether Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, or ShopeePay.
• Service Provision: Enables you to play slots, baccarat, roulette, lottery, live casino, jackpot, and all other games on the Toto Slot platform.
• Security & Fraud Detection: Identifying and preventing fraudulent activity, money laundering, and unauthorised account access.
• Customer Support: Resolving your enquiries, complaints, and support requests via live chat, email, or WhatsApp.
• Service Communications: Sending important notifications regarding your account, security, and changes to platform terms.
• Marketing (with consent): Sending promotional information, bonuses, and Malaysian festive offers — only if you have consented to receive marketing communications.
• Analytics & Improvement: Understanding platform usage patterns to improve the overall user experience.

Toto Slot does not sell, rent, or trade your personal data to third parties for their own commercial purposes. This is an absolute commitment. However, we may share your data in the following limited circumstances:

• Payment Processors: Required financial data is shared with payment service providers (such as Touch 'n Go, GrabPay, DuitNow, and FPX processors) solely for the purpose of processing your transactions.
• IT Service Providers: Server hosting, cybersecurity, and technical support companies that assist us in operating the platform — all bound by strict confidentiality agreements.
• Game Providers: Live casino and slots platform providers may require basic game session data to ensure game integrity.
• Legal Authorities: We will disclose data when required by Malaysian law, court order, or a valid request from a law enforcement authority.
• Fraud Prevention: Limited information may be shared with recognised fraud prevention agencies to protect the platform and other members.

Your data security is our greatest investment Toto Slot within our technical infrastructure. We employ multiple layers of protection in line with Malaysian banking industry standards:

• 256-bit SSL Encryption: All data transmitted between your device and Toto Slot's servers is encrypted using TLS 1.3 — the same technology used by Maybank and CIMB for online banking.
• Encrypted Data Storage: Personal data stored in our databases is encrypted at rest using AES-256.
• Strict Access Controls: Only staff with a legitimate need are permitted to access your personal data, and all access is logged and monitored.
• Regular Security Audits: We conduct penetration testing and security audits every 6 months through independent cybersecurity firms.
• Intrusion Detection: A 24/7 threat monitoring system that detects and responds to suspicious activity in real time.

Data Retention Period: Active account data is retained for the duration of the active account plus 7 years after account closure, in accordance with Malaysia's anti-money laundering requirements. Marketing data is deleted within 30 days of consent withdrawal.

Platform Toto Slot uses cookies and similar tracking technologies to enhance the user experience, maintain your login session, and analyse platform usage patterns.

You can manage or delete cookies through your browser settings. However, disabling session cookies may affect core platform functions such as auto-login and game session retention.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Toto Slot:

• Right to Access: You have the right to request a copy of the personal data we hold on you within 21 days of your request.
• Right to Rectification: If your data is inaccurate or outdated, you have the right to request a correction and we will update it within 14 days.
• Right to Withdraw Consent: You may withdraw consent for marketing data processing at any time without affecting your right to continue using the platform.
• Right to Request Restriction of Processing: In certain circumstances, you may request that we restrict how we process your data.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.

To exercise any of the above rights, submit a written request to our privacy officer at privacy@totoslot-jit.com including your full name, toto slot account number, and a copy of your MyKad for identity verification. We are committed to responding within 14 business days.

Platform Toto Slot is an adult service intended solely for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

Our registration system includes an age verification process. Any account found to belong to an individual under 18 will be terminated immediately, and all associated data will be deleted from our systems within 30 days.

In limited situations, your personal data may be transferred to or accessed from servers located outside Malaysia — for example, for technical support services or international casino game providers operating our live casino tables.

When such a data transfer takes place, Toto Slot ensure that:

• The recipient country or organisation provides a level of data protection comparable to Malaysia's PDPA.
• Legally binding standard data processing agreements are in place with all international data recipients.
• Only the minimum data necessary for the stated purpose is transferred.

Toto Slot has appointed a dedicated Data Protection Officer responsible for overseeing compliance with Malaysia's PDPA and handling all privacy-related enquiries.

• Privacy Email: privacy@totoslot-jit.com
• Support Email: support@totoslot-jit.com
• Response Time: Within 14 business days for general enquiries; 72 hours for urgent security complaints
• Language of Communication: Bahasa Melayu or English

When contacting us regarding data privacy, please include the following to help us process your request faster: your full name, Toto Slot account number, type of request (access, correction, deletion, etc.), and a brief description of your request.

Toto Slot reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in how we protect your data.

When material changes are made to this Privacy Policy:

• We will update the "Last Updated" date at the top of this document.
• Members will be notified via their registered email and in-platform notifications at least 14 days before the changes take effect.
• For highly material changes, we may request your renewed consent.

We encourage you to review this Privacy Policy periodically. The latest version is always available on this page. Continued use of the Toto Slot following any amendment coming into effect will be deemed acceptance of the revised terms.