toto121 Privacy Policy

1.1. For the purposes of this Privacy Policy, the data controller is the operator of the toto121 platform, accessible at toto121.asia. References to "toto121", "we", "us", and "our" refer to this entity.

1.2. Questions, requests, or concerns relating to this Privacy Policy should be directed to support@toto121.asia. We will endeavour to respond to all data-related enquiries within 10 business days.

2.1. Registration data: When you create a toto121 account, we collect your full name, date of birth, email address, residential address, and username. This data is required to establish your account, verify your identity, and comply with our licensing obligations.

2.2. Identity verification data: To comply with Know Your Customer (KYC) and anti-money-laundering (AML) obligations, toto121 may request copies of government-issued photo identification (such as a Malaysian MyKad, passport, or driving licence) and proof of address (such as a utility bill or bank statement). This is mandatory before withdrawal processing for all accounts.

2.3. Financial data: We collect information about the payment methods you use to deposit and withdraw funds, including e-wallet identifiers (Touch 'n Go eWallet, Boost), bank account details (Maybank, CIMB, Public Bank), and cryptocurrency wallet addresses where applicable. We do not store full payment card numbers.

2.4. Transactional data: We maintain records of all deposits, withdrawals, bets placed, game outcomes, and bonus activities associated with your toto121 account. This data is retained for audit, compliance, and dispute resolution purposes.

2.5. Technical data: When you access the toto121 platform, we automatically collect technical information including your IP address, browser type and version, operating system, device type, session timestamps, and referring URL. This data is used for security monitoring, fraud detection, and platform optimisation.

2.6. Communications data: If you contact toto121 support, we retain records of the communication including any personal information contained therein. This applies to live chat, email, and any other support channel.

2.7. Responsible gaming data: Where you have set deposit limits, loss limits, session time limits, or applied for self-exclusion, we retain records of these settings and any associated correspondence. This data is used to enforce your responsible gaming preferences.

3.1. Account management: To create, maintain, and administer your toto121 account, including authentication, wallet management, and account settings.

3.2. Payment processing: To process deposits and withdrawals, verify payment method ownership, and prevent fraudulent transactions.

3.3. Legal and regulatory compliance: To comply with our gaming licence conditions, KYC and AML obligations, and any applicable laws and regulations. This includes reporting obligations to relevant regulatory and law enforcement authorities.

3.4. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the platform.

3.5. Customer support: To respond to your enquiries and resolve disputes relating to your toto121 account.

3.6. Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance and functionality of the toto121 platform.

3.7. Marketing communications: To send you promotional offers, bonus notifications, and news about toto121 products and services, where you have not opted out of receiving such communications. You may unsubscribe from marketing emails at any time by contacting support@toto121.asia.

3.8. Responsible gaming: To enforce your stated responsible gaming preferences, including deposit limits, self-exclusion, and cooling-off periods.

4.1. toto121 processes your personal data on the following legal bases: (a) contractual necessity — processing required to perform our obligations under the player account agreement; (b) legal obligation — processing required by gaming licence conditions, AML legislation, and other applicable laws; (c) legitimate interests — processing for fraud prevention, security, and platform improvement; and (d) consent — for marketing communications where consent has been given.

5.1. toto121 does not sell your personal data to third parties.

5.2. We may share your personal data with the following categories of third parties, strictly as required for the purposes described in this policy:

(a) Payment service providers: Including Touch 'n Go eWallet, Boost, and banking partners, for the purpose of processing transactions.
(b) Identity verification services: Third-party KYC and AML screening providers used to verify your identity and screen for sanctions.
(c) Game software providers: Game studios whose products are available on the toto121 platform may receive anonymised session data for the purpose of game performance monitoring.
(d) Regulatory and law enforcement authorities: Where required by law, our gaming licence conditions, or court order.
(e) IT and infrastructure providers: Cloud hosting, security, and platform service providers operating under data processing agreements with toto121.

5.3. All third parties with whom toto121 shares personal data are required to process that data in accordance with applicable data protection obligations and only for the purposes specified.

6.1. toto121 retains personal data for as long as your account is active and for such additional period as is required by our gaming licence conditions, AML obligations, and applicable law. In most cases, this means account data is retained for a minimum of five years following account closure.

6.2. Technical and log data is retained for a shorter period unless specific circumstances — such as an ongoing investigation or dispute — require longer retention.

6.3. Where data is no longer required for any purpose described in this policy and retention is not otherwise mandated, toto121 will securely delete or anonymise that data.

7.1. The toto121 platform uses cookies and similar technologies to maintain login sessions, remember user preferences, and collect anonymised analytics data. Cookies used by toto121 fall into the following categories: (a) essential cookies — required for the platform to function, including session management and security; (b) analytics cookies — used to understand how players interact with the platform in aggregate.

7.2. You may configure your browser to refuse cookies or to alert you when cookies are being sent. Disabling essential cookies will impair your ability to log in and use the toto121 platform.

8.1. toto121 implements technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption of all data in transit, encryption of sensitive data at rest, access controls limiting employee access to personal data on a need-to-know basis, and regular security assessments.

8.2. No method of data transmission or storage is completely secure. While toto121 takes reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

9.1. Subject to applicable data protection law, you may have the following rights in relation to your personal data held by toto121:

(a) Right of access — to obtain confirmation of whether we process your personal data and to receive a copy of that data;
(b) Right to rectification — to request correction of inaccurate or incomplete personal data;
(c) Right to erasure — to request deletion of your personal data, subject to our retention obligations;
(d) Right to restriction — to request that we restrict processing of your data in certain circumstances;
(e) Right to object — to object to processing based on legitimate interests, including direct marketing;
(f) Right to data portability — to receive your personal data in a structured, machine-readable format.

9.2. To exercise any of these rights, please contact toto121 at support@toto121.asia. We will respond within 30 days and may request verification of your identity before acting on your request.

9.3. Where toto121's processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10.1. The toto121 platform is strictly for individuals aged 21 and above. toto121 does not knowingly collect personal data from individuals below this age. If we become aware that personal data has been collected from an underage individual, we will close the relevant account and delete the associated data promptly.

11.1. toto121 may update this Privacy Policy from time to time. The revised policy will be posted on this page with a revised "Last updated" date. Where changes are material, we will notify registered players via their registered email address where practicable. Continued use of the platform following notification constitutes acceptance of the revised policy.

12.1. For any questions, complaints, or requests relating to this Privacy Policy or toto121's data practices, please contact us at support@toto121.asia. We take data protection seriously and will address all correspondence promptly.