Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how toto171 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data relating to users ("you", "User", "Member", "Player") of the online gaming and sports betting services provided at toto171.cam and all associated interfaces.

toto171 is committed to handling personal data responsibly, transparently, and in compliance with applicable data protection obligations. We recognise that when you create an account on toto171, you are trusting us with information about yourself — that trust is taken seriously and is reflected in every data practice described in this Policy.

This Policy applies to all personal data we process in connection with your use of toto171, including data collected during account registration, identity verification (KYC), financial transactions, gameplay, customer support interactions, and your use of our website and mobile interface.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — Any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" — Any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
• "Data Controller" — toto171, as the entity that determines the purposes and means of processing Personal Data collected via the Platform.
• "Data Processor" — Any third party engaged by toto171 to process Personal Data on our behalf under documented instructions (e.g., payment processors, KYC verification providers).
• "KYC" — Know Your Customer; the regulatory identity verification process applied to all toto171 account holders prior to enabling full platform functionality.
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for stated purposes.
• "Cookies" — Small data files placed on your device by the toto171 website to support functionality, session management, and platform analytics.

Data We Collect

The categories of personal data toto171 may collect about you depend on how you interact with the Platform. The following categories cover the full scope of data we may hold:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by applicable regulatory obligations (e.g., self-exclusion or problem gambling identification procedures).

How We Collect Data

toto171 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, contacting customer support, or updating your profile settings.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, and session cookies.
• Transaction Processing: Financial data generated when you make deposits or request withdrawals via Malaysian payment channels such as Maybank, CIMB, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, or GrabPay.
• Third-Party Verification: Identity and address verification data received from authorised KYC service providers who process the documents you submit.
• Gaming Activity: Gameplay records, bet history, and session data generated by your use of toto171's slots, live casino, sports betting, lottery, and arcade products.
• Communications: Data you provide when you email us, engage in live chat, or interact with any support or feedback channel on the Platform.

Purposes of Data Processing

We process personal data only for legitimate, clearly defined purposes. The table below maps each processing activity to its purpose and the data categories involved:

Legal Basis for Processing

toto171 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted when creating your account, including account management, payment processing, and game operation.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, anti-money laundering obligations, and age verification requirements.
• Legitimate Interests: Processing carried out for purposes that serve our legitimate business interests, provided those interests are not overridden by your rights — including fraud prevention, platform security, and analytics for service improvement.
• Consent: Where we rely on your consent — for example, in connection with certain marketing communications — you may withdraw that consent at any time by contacting us or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

toto171 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following circumstances and with the following categories of recipient:

• Payment Service Providers: Financial data is shared with authorised payment processors including Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong), e-wallet providers (Touch 'n Go, Boost, GrabPay), and network operators (DuitNow, FPX) solely for the purpose of processing your transactions.
• KYC & Identity Verification Providers: Verification data submitted during KYC is processed by contracted identity verification service providers who operate under strict confidentiality and data processing agreements with toto171.
• Fraud Prevention & Security Services: Technical and transaction data may be shared with anti-fraud platforms for the purpose of detecting and preventing fraudulent activity, account takeovers, and money laundering.
• Legal and Regulatory Authorities: toto171 may disclose personal data to government authorities, law enforcement bodies, or regulatory agencies when required to do so by applicable law, court order, or regulatory direction — including in Malaysia and any other jurisdiction with oversight authority over our operations.
• Professional Advisers: In connection with legal proceedings, compliance audits, or corporate transactions, personal data may be disclosed to legal counsel, auditors, or financial advisers under appropriate confidentiality obligations.
• IT and Infrastructure Providers: Technical data may be accessible to contracted service providers responsible for hosting, security monitoring, and platform maintenance. All such providers are bound by contractual data processing obligations.

Data Retention

toto171 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Accounts: Personal data held in relation to an active account is retained for the full duration of the account's existence on the Platform.
• Closed Accounts: Following the closure or termination of an account, toto171 retains core account data — including identity documents, transaction records, and KYC files — for a minimum period of five (5) years to satisfy anti-money laundering record-keeping obligations and to resolve any outstanding disputes or regulatory enquiries.
• Transaction Records: Detailed deposit, withdrawal, and gaming transaction histories are retained for a minimum of seven (7) years for financial audit and regulatory compliance purposes.
• Marketing Data: Where processing is based on consent, data used for marketing communications will be retained until you withdraw your consent or opt out, after which it will be suppressed within a reasonable time.
• Technical Logs: Server logs and technical data collected for security and fraud prevention are typically retained for up to twelve (12) months, unless a specific investigation requires longer retention.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in a manner that prevents reconstruction of the original information.

Data Security

toto171 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-Bit SSL Encryption: All data transmitted between your device and the toto171 Platform is encrypted using industry-standard TLS/SSL protocols, ensuring in-transit data cannot be intercepted by third parties.
• Access Controls: Access to personal data is restricted to authorised personnel who require it to perform their roles. Access levels are role-based and subject to regular review.
• Two-Factor Authentication (2FA): Account holders are strongly encouraged to enable 2FA from their account security settings. This significantly reduces the risk of unauthorised account access even if login credentials are compromised.
• Intrusion Detection & Monitoring: Our infrastructure is monitored continuously for suspicious activity, with automated alerting systems and a dedicated security team responsible for incident response.
• Secure Payment Infrastructure: Financial transactions processed via Maybank, CIMB, DuitNow, FPX, and other payment partners are handled through PCI-DSS compliant payment channels.
• Vendor Security Requirements: All third-party data processors engaged by toto171 are required to demonstrate appropriate data security standards as a condition of their engagement.

Cookies & Tracking Technologies

The toto171 website uses cookies and similar technologies to support core Platform functionality, maintain session integrity, and collect analytics data that helps us improve the user experience. We do not use tracking technologies for third-party advertising.

The following categories of cookies are used on the toto171 Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences and settings — such as language selection, preferred game categories, and notification preferences — to personalise your experience across sessions.
• Analytics Cookies: Collect anonymised data about how users navigate the Platform, which pages are most visited, and how errors are encountered. This data is used to improve Platform design and performance and is not associated with individual user identities.
• Security Cookies: Used in fraud detection and session integrity monitoring to identify unusual patterns of behaviour that may indicate account takeover or automated access.

You may configure your browser to refuse certain categories of cookies, though disabling strictly necessary cookies may prevent you from accessing or using certain features of the Platform. toto171 does not use third-party advertising cookies or sell cookie-derived data to external parties.

Your Data Rights

As a toto171 account holder, you hold the following rights in relation to your personal data. Requests to exercise these rights may be submitted to our support team via the contact details in Section 15:

toto171 will respond to rights requests within 30 days of receipt. We may request proof of identity before processing a request to ensure data is not disclosed to unauthorised parties. Where a request cannot be fulfilled in full — for example, due to legal retention obligations — we will explain the reason clearly.

Minors & Age Verification

toto171 is an online gaming platform strictly intended for persons aged 21 years and above. We do not knowingly collect or process personal data relating to individuals under the age of 21. All accounts are subject to age verification as part of the KYC process.

If we become aware that personal data has been collected from or in relation to a person under the age of 21, we will take immediate steps to close the relevant account, delete the associated personal data, and — where funds have been deposited — return those funds to the verified payment source.

International Data Transfers

In the course of providing gaming services to Malaysian players and processing transactions via international payment networks, certain personal data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. Such transfers occur in connection with, for example, our global gaming software providers, cloud infrastructure services, and cryptocurrency transaction processors (for BTC and USDT transactions).

Where personal data is transferred internationally, toto171 ensures that appropriate safeguards are in place to protect the data — including contractual data processing agreements that require the recipient to apply data protection standards consistent with applicable requirements. We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing additional protective measures.

Changes to This Privacy Policy

toto171 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or business operations. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and notify registered account holders via email or a prominent notice on the Platform.

Your continued use of the toto171 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how toto171 protects your personal data. The version currently displayed on this page is always the version in effect.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by toto171, please contact our support team through the following channels:

When submitting a data rights request, please include your registered Account username and a clear description of your request. We may require identity verification before processing requests that involve access to or deletion of personal data to ensure we are responding to the verified account holder.