Privacy Policy

1.Introduction

This Privacy Policy ("Policy") describes how toto717 ("toto717", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to users ("User", "Player", "you", "your") of the toto717 online gaming platform accessible at toto717.cam ("Platform").

toto717 is firmly committed to the protection of your privacy and the responsible handling of your personal data. This Policy is designed to be transparent about our data practices and to inform you clearly of your rights under applicable data protection legislation.

By registering an account on the toto717 Platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform generally. In the event of any conflict between the terms of this Policy and the Terms & Conditions with respect to data protection matters, this Policy shall prevail.

2.Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, email address, date of birth, Malaysian identity card (MyKad) number, passport number, financial information, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction.
• "Data Controller" means toto717, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of toto717 under a data processing agreement.
• "Cookies" means small text files placed on your device by the Platform to collect and store information about your browsing behaviour and preferences.
• "KYC" means Know Your Customer — the identity and age verification process required under regulatory and anti-money laundering obligations.
• "Special Category Data" means particularly sensitive Personal Data, such as health data (which may be relevant in the context of responsible gambling self-exclusion requests).

3.Data We Collect

toto717 may collect and process the following categories of personal data in connection with the provision of our services:

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for age verification — all Users must be aged 21 or above).
• Malaysian MyKad number or passport number.
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru).
• Nationality and country of residence.

3.2 Contact Data

• Email address registered with the Platform.
• Malaysian mobile phone number.
• Preferred language (English, Bahasa Melayu, or Mandarin).

3.3 Financial and Transaction Data

• Payment method details, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account details (Maybank, CIMB, Public Bank, Hong Leong, RHB), and cryptocurrency wallet addresses.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used.
• Source of funds documentation where requested.

3.4 Gameplay and Behavioural Data

• Game session histories, including games played, wagers placed, wins and losses.
• Sports betting selections, including Liga Super Malaysia, EPL, and other markets.
• Bonus history and wagering requirement progress.
• Responsible gambling tool usage and self-imposed limits.

3.5 Technical and Device Data

• IP address and geolocation data derived therefrom.
• Device type, operating system, and browser information.
• Login timestamps, session duration, and Platform navigation data.

3.6 Communications Data

• Records of live chat, email, and WhatsApp support interactions.
• Feedback, complaints, and dispute correspondence.

4.How Data is Collected

toto717 collects personal data through the following means:

4.1 Directly from You

The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or interact with any feature of the Platform.

4.2 Automatically Through the Platform

Technical and behavioural data is collected automatically as you use the Platform, through the use of cookies, web beacons, server logs, and similar tracking technologies. This data helps us operate the Platform securely, detect fraud, and improve user experience.

4.3 From Third Parties

In certain circumstances, toto717 may receive personal data from third parties, including:

• Payment service providers (e.g., Touch 'n Go eWallet, DuitNow, FPX gateway operators) for the purpose of processing and verifying transactions.
• Identity verification and KYC service providers who assist with document verification and age checks.
• Fraud detection and anti-money laundering (AML) screening services.
• Credit reference agencies where relevant to AML compliance.

5.Data Processing & Legal Basis

toto717 processes your personal data only where there is a valid legal basis for doing so. The primary legal bases on which we rely are as follows:

6.How We Use Your Data

toto717 uses the personal data we collect for the following specific purposes:

• To verify your identity and age (21+) as required under our responsible gambling obligations and applicable regulations.
• To create, manage, and maintain your toto717 account throughout its active lifecycle.
• To process MYR deposits and withdrawals through your chosen Malaysian payment method, including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, DuitNow, and FPX.
• To provide our full range of gaming and sports betting services, including slots, live dealer casino, live football betting, and 4D lottery.
• To administer bonus programmes, VIP loyalty tiers, and promotional offers where you have opted in to receive them.
• To provide multilingual customer support in English, Bahasa Melayu, and Mandarin via live chat and email.
• To fulfil our legal and regulatory obligations, including AML compliance, responsible gambling monitoring, and responding to lawful requests from competent authorities.
• To detect and prevent fraudulent activity, account abuse, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• To improve and personalise your experience on the Platform, including tailoring game recommendations and promotional content where you have consented to personalisation.
• To communicate important account, security, and service-related notices to you.

7.Data Sharing & Disclosure

7.1 No Sale of Personal Data

toto717 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes under any circumstances. This is a firm and unconditional policy.

7.2 Authorised Third-Party Processors

toto717 may share your personal data with carefully selected third-party service providers who act as data processors on our behalf, under contractual obligations that require them to maintain the confidentiality and security of your data. These include:

• Payment processing partners (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX gateway operators, and cryptocurrency processors).
• KYC and identity verification service providers.
• Fraud detection and AML compliance screening services.
• Cloud infrastructure and data hosting providers.
• Customer support platform providers (live chat and email systems).
• Game software and live dealer providers, to the extent necessary for game delivery and integrity.

7.3 Legal and Regulatory Disclosure

toto717 may be required to disclose your personal data to competent regulatory authorities, law enforcement agencies, or courts of law where required by applicable law, court order, or regulatory mandate. We will notify you of any such disclosure where we are legally permitted to do so.

7.4 Business Transfers

In the event that toto717 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify you of any such transfer and ensure that your data continues to be protected under terms no less protective than this Policy.

8.Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the toto717 Platform. They allow the Platform to remember your preferences, maintain your session, and collect analytical data to improve the service.

8.2 Categories of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences (language, currency display, game settings) to provide a personalised experience.
• Analytical Cookies: Collect anonymised data about how users navigate the Platform, which helps us identify areas for improvement. No personally identifiable information is collected through analytical cookies.
• Marketing Cookies: Used to deliver relevant promotional content where you have consented. These are optional and can be declined.

8.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings or the cookie consent controls on the Platform. Please note that disabling strictly necessary cookies will affect Platform functionality and may prevent you from accessing certain features.

9.Data Retention

toto717 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law or regulatory obligation, whichever is longer.

Specific retention periods applicable to key data categories are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum period following account closure as required by applicable AML and regulatory retention obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of transaction, in accordance with financial record-keeping obligations.
• Customer Support Communications: Retained for up to three (3) years from the date of the interaction, unless the matter relates to an ongoing legal or regulatory proceeding.
• Gameplay and Betting History: Retained for the duration of account activity and for a reasonable period thereafter for audit, dispute resolution, and regulatory purposes.
• Marketing Consent Records: Retained for as long as you remain an active subscriber and for a reasonable period thereafter as evidence of consent.

Where data is no longer required, it is securely deleted, destroyed, or anonymised in a manner that prevents re-identification.

10.Data Security

toto717 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform.
• Encryption of sensitive data fields (including identity document numbers and payment credentials) at rest in our databases.
• Strict role-based access controls ensuring that only authorised personnel with a defined operational need can access personal data.
• Comprehensive audit logging of all access to and modifications of personal data records.
• Regular internal and external security assessments, penetration testing, and vulnerability scanning.
• Incident response procedures designed to detect, contain, and report personal data breaches in a timely manner.

Notwithstanding these measures, no method of electronic data transmission or storage is entirely secure. While toto717 takes all reasonable steps to protect your data, we cannot guarantee absolute security. You are encouraged to use a strong, unique password for your account and to notify us immediately if you suspect any unauthorised access.

11.Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by toto717. To exercise any of these rights, please contact us using the details in Section 15.

toto717 will respond to valid data subject requests within a reasonable timeframe and in any event within thirty (30) days of receipt. Where a request is particularly complex or voluminous, we may extend this period by a further thirty (30) days and will notify you accordingly.

Please note that certain rights may be limited or overridden by our legal and regulatory obligations — for example, we may be required to retain transaction records regardless of a deletion request.

12.Minors & Age Verification

The toto717 Platform is strictly intended for adults aged 21 years and above. toto717 does not knowingly collect personal data from individuals under the age of 21. All registrations are subject to mandatory age verification as part of our KYC process, which requires submission of a valid government-issued identification document confirming date of birth.

If toto717 becomes aware that personal data has been collected from an individual under the age of 21, that data will be permanently deleted, the associated account will be immediately closed, and any funds will be returned to the originating payment method. The matter may be escalated to relevant authorities where required by law.

If you are a parent or guardian and have reason to believe that a minor in your care has provided personal data to toto717, please contact us immediately at [email protected] so that we may take appropriate action.

13.International Data Transfers

Given the global nature of online gaming infrastructure, your personal data may be processed by toto717 or its authorised third-party processors in countries outside of Malaysia. Where such international transfers occur, toto717 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that afforded under applicable Malaysian data protection obligations.

Such safeguards include contractual obligations imposed on receiving parties through data processing agreements, which require them to process your personal data only on our instructions, maintain appropriate security measures, and not share the data with unauthorised parties.

14.Policy Amendments

toto717 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to it — toto717 will notify registered Users by email to the address on file and/or by a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the toto717 Platform following notification of any changes to this Policy constitutes your acknowledgement of the amended Policy. If you do not agree with any changes, you should discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

15.Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by toto717, please contact our Data Protection team through the following channels:

For general terms of service queries, refer to our Terms & Conditions. For responsible gambling support, please visit our Responsible Gambling page.