Privacy Policy SlotToto – Personal Data Protection for Malaysian Players

1. Introduction & Scope of This Policy

SlotToto takes the privacy and personal data protection of our players very seriously. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards in handling all information entrusted to us.

This Privacy Policy applies to all users who access the SlotToto website, mobile app (Android and iOS), and all digital services we offer. It covers data collected during registration, platform use, financial transactions, and communications with our support team.

We understand that your trust is our most valuable asset. Every decision involving your personal data is made with your interests and safety as the top priority.

2. Types of Personal Data We Collect

We collect several categories of personal data depending on how you interact with the slottoto platform:

3. How We Use Your Personal Data

SlotToto uses your personal data only for legitimate purposes necessary to operate our services:

• Account management: To create, verify, and manage your account, including the KYC process required for regulatory compliance.
• Transaction processing: To process deposits, withdrawals, and all financial activities accurately and securely.
• Platform security: To detect and prevent fraud, unauthorised access, money laundering, and other suspicious activities that could compromise the security of the platform and other players.
• Service improvements: To analyse usage patterns in aggregate (not individually) in order to improve platform performance, add new features, and resolve technical issues.
• Service communications: To send important information related to your account, such as transaction confirmations, security notifications, and policy updates.
• Legal compliance: To fulfil applicable legal and regulatory obligations, including reporting requirements to the relevant authorities.

4. Information Sharing & Disclosure

SlotToto does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, under the following limited circumstances, your data may be shared:

• Payment processors: Required financial information is shared with payment service providers (such as FPX providers and e-wallet gateways) who are contractually obligated to protect your data.
• Technical service providers: Our hosting, cybersecurity and technical infrastructure service providers may have limited access to certain data, subject to strict confidentiality agreements.
• Legal requirements: We may be required to disclose information to the relevant authorities (such as the Royal Malaysia Police, Bank Negara Malaysia) upon receiving a valid court order or legal notice.
• Rights protection: To detect, prevent, or address fraud, security breaches, or serious technical issues.

5. Data Security & Protection

We continually invest in the latest security infrastructure to ensure your personal data is always protected against internal and external threats:

• Transit encryption: All communications between your device and our servers are protected by TLS 1.3 encryption – the latest security protocol that ensures data cannot be intercepted in transit.
• Storage encryption: Sensitive data such as financial information and identity documents are encrypted at rest in the database using AES-256.
• Internal access controls: Access to player personal data by internal staff is restricted to those who genuinely require it for their duties, governed by a role-based access control (RBAC) system.
• Threat monitoring: Our security monitoring system operates 24/7 to detect suspicious activity, intrusion attempts or anomalies in data access patterns.
• Regular security testing: Our platform undergoes regular penetration testing and security audits by independent parties to identify and address vulnerabilities.

6. Cookies & Tracking Technologies

SlotToto uses cookies and similar technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects anonymous information about how you use the platform (pages visited, time on page) to help us improve performance.
• Functional cookies: Saves your preferences such as language, display theme and other settings so you do not have to reset them every time you log in.

7. Your Rights Over Personal Data

As a slottoto player, you have the following rights regarding your personal data. All requests are processed within 14 business days:

8. Data Retention Period

SlotToto retains your personal data only for as long as necessary for the purposes stated in this privacy policy or as required by law:

• Active account data: Retained for as long as your account is active and in use.
• Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC and identity verification data: Retained for 5 years after account closure for anti-money laundering (AML) compliance purposes.
• Support communication data: Customer support interaction records are retained for 2 years for quality control and dispute resolution purposes.
• Technical data and logs: System logs and technical data are retained for a maximum of 90 days before being automatically deleted.

Once the retention period expires, your data will be securely deleted or permanently anonymised so it can no longer be linked to you.

9. Child Protection

SlotToto has a zero-tolerance policy on platform use by individuals under 18 years of age. We take this responsibility extremely seriously:

• All new players are required to verify their age during registration.
• Our KYC process verifies date of birth using official documents.
• If we detect that a user under 18 has accessed our platform, the account in question will be terminated immediately and all data will be securely deleted in accordance with applicable laws.
• Parents and guardians who discover their child has accessed this platform are asked to contact our support team immediately.

10. Changes to This Privacy Policy

SlotToto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When significant changes occur:

• We will update the "Updated" date at the top of this document.
• Notifications will be displayed within the slottoto platform or app.
• For changes that are material to your privacy rights, we will send a notification via email or an in-account notice.

Continued use of the platform after a policy update is published constitutes your acceptance of the latest version of this policy.

11. Contact Us for Privacy Inquiries

If you have any questions, concerns, or wish to exercise your rights regarding personal data, our team is ready to help:

• Live Chat: 24/7 support via in-platform chat or the SlotToto app — the fastest way to get immediate assistance.
• Privacy email: [email protected] – for privacy-related enquiries and official requests regarding your personal data.
• Frequently Asked Questions: Check FAQ page for answers to common questions about your account and data privacy.