toto8 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by toto8 ("toto8," "we," "us," or "our"), the operator of the online gaming platform at toto8.one. This Policy describes how toto8 collects, uses, discloses, and safeguards personal data in connection with your use of our platform and services.

By registering for a toto8 account, accessing the platform, or using any toto8 service, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy is incorporated by reference into and should be read alongside the toto8 Terms & Conditions.

toto8 operates under an international gaming authority licence. As a licensed operator, we are subject to data handling requirements specified by our licensing body, as well as applicable anti-money laundering and counter-terrorism financing regulations that require the collection and retention of certain customer data.

2. Personal Data We Collect

toto8 collects personal data through your direct interactions with the platform, automatically through your use of the site, and from third parties where necessary for compliance purposes. The categories of personal data we collect include:

2.1 Registration & Account Data

• Full legal name;
• Date of birth (for age verification);
• Residential address;
• Email address;
• Mobile phone number;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

• Government-issued identity document (e.g., Malaysian IC / MyKad, passport);
• Proof of address documents;
• Proof of payment method ownership (where required);
• Selfie or facial verification image (where applicable).

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts and dates;
• Payment method identifiers (e.g., partial account numbers, e-wallet IDs);
• Transaction history and betting records;
• Wallet balance and bonus credit history.

2.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser;
• Login timestamps and session duration;
• Pages visited and features used on the toto8 platform;
• Referral source (how you arrived at toto8.one).

2.5 Communications Data

• Records of live chat, email, and support ticket exchanges;
• Feedback and survey responses submitted to toto8;
• Preferences you set for marketing communications.

3. How We Use Your Personal Data

toto8 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and operating your toto8 account;
• Identity & age verification: Confirming that you meet the 21+ eligibility requirement and verifying your identity in compliance with KYC obligations;
• Transaction processing: Facilitating deposits, withdrawals, and the crediting of bonuses in MYR;
• Regulatory compliance: Meeting our obligations under applicable gaming licences, anti-money laundering regulations, and tax reporting requirements;
• Fraud prevention & security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and platform abuse;
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance;
• Platform improvement: Analysing usage patterns to improve toto8's products, features, and user experience;
• Responsible gaming: Monitoring gambling behaviour to identify signs of problem gambling and to enforce responsible gaming tools you have activated;
• Marketing communications: Sending promotional offers and platform updates to members who have opted in (you may unsubscribe at any time).

4. Legal Basis for Processing

toto8 processes your personal data on the following legal grounds:

• Contract performance: Processing necessary to provide the toto8 gaming services you have registered for;
• Legal obligation: Processing required to comply with gaming licensing conditions, AML regulations, and other applicable laws;
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform analytics, where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained.

5. Data Sharing & Disclosure

toto8 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Licensed game providers: To enable access to their games on the toto8 platform (data shared is limited to what is technically necessary);
• Payment processors: Including Touch 'n Go eWallet, Boost, and banking partners, to process your deposits and withdrawals;
• KYC and identity verification service providers: To assist with document verification during the KYC process;
• Regulatory and licensing authorities: Where required by our gaming licence or applicable law;
• Law enforcement agencies: Where required by a valid legal order, court order, or regulatory direction;
• Professional advisors: Including lawyers, auditors, and insurers, where necessary for toto8's business operations.

6. Cookies & Tracking Technologies

toto8 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use include:

• Essential cookies: Required for the platform to function — including session management, authentication, and security features. These cannot be disabled without impairing platform functionality;
• Analytics cookies: Used to understand how players interact with toto8, which pages are most visited, and where technical issues occur. This data is used in aggregate form and does not identify individual players;
• Preference cookies: Store your language, display, and notification preferences across sessions;
• Marketing cookies: Used only with your consent to deliver relevant promotional content.

You may manage cookie preferences via your browser settings. Please note that disabling essential cookies will affect the functionality of the toto8 platform, including the toto8 Login process and wallet features.

7. Data Retention

toto8 retains your personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with our legal and regulatory obligations. Specific retention periods include:

• Account and transaction data: retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• KYC identity documents: retained for a minimum of five (5) years following the end of the business relationship;
• Marketing preference data: retained until you withdraw consent or close your account;
• Support communications: retained for two (2) years following resolution, unless required for longer for legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

8. Data Security

toto8 implements technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• HTTPS encryption for all data in transit between your device and toto8 servers;
• Encryption of sensitive data at rest, including financial and identity records;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of the toto8 platform;
• Two-factor authentication options for player accounts to reduce unauthorised access risk.

9. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by toto8:

• Right of access: Request a copy of the personal data toto8 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restriction: Request that we restrict processing of your data in certain circumstances;
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes;
• Right to data portability: Request a machine-readable copy of data you have provided to toto8, where technically feasible.

To exercise any of these rights, please contact the toto8 support team. We will respond within 30 days. We may request identity verification before processing your request.

10. Children and Minors

The toto8 platform is strictly for individuals aged 21 years and above. toto8 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. Parents and guardians who believe a minor has registered with toto8 should contact our support team immediately.

11. International Data Transfers

As toto8 operates under an international gaming licence, some of your personal data may be processed or stored in jurisdictions outside Malaysia. Where such transfers occur, toto8 ensures that appropriate safeguards are in place — including contractual obligations equivalent to applicable data protection standards — to protect the security and confidentiality of your data.

12. Third-Party Links

The toto8 platform may contain references to third-party game providers or payment services. This Privacy Policy applies only to data collected and processed by toto8. toto8 is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party services you use in connection with toto8.

13. Changes to This Privacy Policy

toto8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, we will notify registered members by email or platform notification at least 14 days before the changes take effect. Your continued use of the toto8 platform after the effective date of any revised Policy constitutes your acceptance of the changes.

The most current version of this Privacy Policy will always be available at toto8.one/privacy-policy. The "Last updated" date at the top of this page indicates when the Policy was most recently revised.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data toto8 holds about you, please contact our Data & Privacy team through the toto8 live chat support or by email at: support@toto8.one

Our support team is available 24/7 and will acknowledge privacy-related enquiries within one (1) business day. Substantive responses to data rights requests will be provided within 30 calendar days.

This Privacy Policy was last reviewed and updated in June 2026. All rights reserved by toto8.