Privacy Policy

Privacy Policy Toto77 – Our Commitment to Protecting the Personal Data of Malaysian Players

At Toto77, your privacy is not merely a legal obligation – it is a moral responsibility we take seriously. This page clearly explains how we collect, use, store, and protect your personal data as a user of our platform. We are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 1 January 2026  |  Malaysia (ms-MY)  |  PDPA 2010 Compliant

Toto77's 6 Data Protection Principles

Six core principles that guide how Toto77 handles the personal data of every Malaysian player.

High-Level Encryption
All your personal data and financial transactions are protected with SSL 256-bit encryption — the same security technology used by Malaysia's leading banks, including Maybank and CIMB.
🔒 SSL 256-bit
Never Sold to Third Parties
Toto77 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes without your explicit consent.
🚫 No Data Selling
Compliant with Malaysia's PDPA 2010
Toto77's Privacy Policy is fully compliant with Malaysia's Personal Data Protection Act (PDPA) 2010 — the primary legislation governing the collection and processing of personal data in our country.
✅ PDPA 2010 Compliant
Full Control in Your Hands
You have the full right to access, correct, delete, and manage your personal data on Toto77 at any time. Requests will be processed within 30 business days.
👤 Full User Control
Secure Data Storage
Your data is stored on encrypted servers with strict access controls. Only Toto77 staff with specific authorisation may access players' personal data, and all access is subject to regular audits.
🗄️ Secure Servers
Full Transparency
We clearly inform you of what data is collected, why it is collected, and how long it is retained. There is no hidden data collection or undisclosed use of data beyond what is stated in this policy.
🔍 100% Transparent
1

Personal Information We Collect

Toto77 collects personal data from you through various touchpoints as you interact with our platform. This collection is carried out transparently and solely for legitimate purposes as set out in this Privacy Policy. The following are the categories of data we may collect:

Live chat records, support emails, feedback
Data Category Examples of Information How It Is Collected
Personal Identity Full name, MyKad number, date of birth, gender Registration form & KYC
Contact Information Email address, phone number, residential address Account Registration
Financial Data Payment methods (TNG, GrabPay, DuitNow, FPX), transaction history Deposit & withdrawal processing
Usage Data Betting history, games played, session duration In-platform activity
Technical Data IP address, browser type, operating system, cookies Automatically upon access
Communications Customer support interactions
Important Note: Toto77 does not collect any sensitive data such as health information, religious beliefs, or political views. We only collect data that is strictly necessary to operate our services safely and effectively.

1.1 Data You Provide Directly

This includes all information you provide when registering a Toto77 account, completing your profile, contacting our support team, or participating in any promotion. You may choose not to provide certain information, but this may affect your ability to use specific features on our platform.

1.2 Data Collected Automatically

When you access the Toto77 platform, our systems automatically collect certain technical data, including your IP address, device type, operating system, and cookie data. This information is used to ensure account security, detect fraudulent activity, and enhance the user experience.

2

How We Use Your Personal Data

Toto77 processes the personal data we collect on lawful legal bases, including the performance of a contract, legitimate interests, legal compliance, and in certain cases, your consent. The primary purposes for which we use your data are as follows:

  • Account Management: Creating and maintaining your Toto77 account, processing registrations, and verifying your identity through the KYC process
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, Boost, and ShopeePay, as well as processing your withdrawal of winnings
  • Service Delivery: Giving you access to sports betting on the Malaysia Super League, EPL, IPL cricket, badminton, live casino, slots, and all other Toto77 services
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance
  • Legal Compliance: To comply with legal obligations, regulations, and regulatory body requirements
  • Marketing (With Consent): Sending promotional information, new bonuses, and exclusive offers — only where you have given your consent
  • Platform Improvements: Analysing usage patterns to improve the Toto77 interface, performance, and user experience
Right to Object to Marketing: You may opt out of marketing communications from Toto77 at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at support@toto77.im. Your request will be processed within 5 business days.
3

Sharing Data with Third Parties

Toto77 does not sell or rent your personal data to any third parties. However, we may share your data in limited circumstances as described below:

3.1 Trusted Service Providers

We work with third-party service providers who assist us in operating the Toto77 platform, including:

  • Payment Gateway Providers: To process transactions via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay. Financial data shared is kept to the minimum necessary to process each transaction.
  • Game Providers: Companies such as Pragmatic Play and PG Soft for slots and casino games – they receive only the session data required for gameplay functionality
  • Identity Verification Services: To assist with the KYC process requiring document verification
  • Cybersecurity Services: To help detect and prevent cyber threats against the Toto77 platform

All these service providers are contractually bound to keep your data confidential and to use it solely for the purposes specified. They are prohibited from using your data for their own marketing purposes.

3.2 Legal Requirements

Toto77 may be required to disclose your personal data to the relevant authorities when mandated by law, court order, or Malaysian regulatory bodies. This includes disclosing information necessary for financial crime investigations, anti-money laundering purposes, or cases involving public safety.

In all data sharing instances described above, Toto77 shares only the minimum necessary information and ensures that equivalent data protection standards are upheld by all parties receiving that data.
4

Cookies & Tracking Technologies

The Toto77 platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored in your browser when you visit our website.

4.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as secure login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Functional Cookies: Saving your preferences such as language, theme, and display settings to provide a more personalised experience
  • Analytics Cookies: Helps us understand how players interact with the platform — data is collected in aggregate and does not personally identify you
  • Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access

4.2 Managing Your Cookies

You can manage and delete cookies through your browser settings. Most modern browsers (Google Chrome, Firefox, Safari, Edge) allow you to view, delete, and block cookies. Please note that disabling essential cookies may affect your ability to log in or use certain features on the Toto77 platform.

5

Data Retention & Security Measures

5.1 Data Retention Period

Toto77 retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or for as long as your account remains active. Following account closure, we will retain certain data for the period required by law — typically 7 years for financial records in accordance with tax reporting and anti-money laundering requirements. Data that is no longer needed will be securely deleted or anonymised.

5.2 Technical Security Measures

Toto77 continually invests in cybersecurity to safeguard player data. The measures we have in place include:

  • 256-bit SSL encryption for all communications between your browser and Toto77's servers
  • Data-at-rest encryption for data stored in our databases
  • Two-factor authentication (2FA) available for all player accounts
  • Round-the-clock security monitoring by our in-house cybersecurity team
  • Regular security audits by independent third parties
  • Role-based access control – only authorised staff may access player data
  • Regular penetration testing to identify system vulnerabilities
In the Event of a Data Breach: In the unlikely event of a data breach affecting your personal information, Toto77 is committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices.
6

Your Rights as a Data Subject

As a Toto77 player and owner of your personal data, you have the following rights under Malaysia's PDPA 2010 and international data protection best practices. All rights may be exercised by contacting us at support@toto77.im:

7

Children's Data Protection

The Toto77 platform is strictly intended for individuals aged 18 years and above. We do not knowingly accept registrations or collect data from individuals under the age of 18.

Should we discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered on Toto77 without permission are urged to contact us immediately at support@toto77.im.

Parental Responsibility: We encourage parents and guardians to monitor their children's online activities and make use of parental control tools available on their devices to prevent unauthorised access to online gambling platforms.
8

Amendments to This Privacy Policy

Toto77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data protection practices, legal developments, or changes to our business operations. When material amendments are made, we will:

  • Updating the "Last Updated" date displayed at the top of this page
  • Displaying clear notices on the Toto77 platform regarding important changes
  • Sending email notices to active players for significant amendments that affect their privacy rights

We encourage you to review this Privacy Policy periodically. Your continued use of the Toto77 platform after the effective date of any amendment will be deemed acceptance of the revised terms.

9

Contact Us About Data Privacy

If you have any questions or concerns, or wish to exercise your data protection rights regarding information Toto77 holds about you, please reach out to us through the following channels:

  • Privacy Email: support@toto77.im (Please state "Data Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24/7 on the Toto77 platform — simply indicate that your enquiry is privacy-related
  • Language: Enquiries accepted in both Bahasa Malaysia and English
  • Response Time: Privacy enquiries will be responded to within 30 days from the date of receipt
Complaints to Regulatory Authorities: If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body overseeing PDPA in this country.

This Privacy Policy is the latest version and is effective from 1 January 2026. It supersedes all previous versions of the Toto77 Privacy Policy.

Your Data Protection Rights at Toto77

Under Malaysia's PDPA 2010 and international privacy best practices, you have the following rights regarding your personal data at Toto77.

01
Right of Access
You have the right to request a copy of the personal data Toto77 holds about you. Your request will be processed within 30 days and provided in a readable format.
02
Right to Rectification
If you find that your personal data held by Toto77 is inaccurate or out of date, you have the right to request a correction. We will update the data within 10 business days.
03
Right to Erasure
Under certain circumstances, you may request that Toto77 delete your personal data — particularly when it is no longer needed for the purpose for which it was originally collected.
04
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes. Your request will be acted upon without delay upon receipt.
05
Right to Restrict Processing
You may request that Toto77 restrict how we process your data in certain circumstances — for example, while you are disputing the accuracy of that data.
06
Right to Data Portability
You have the right to receive your personal data in a structured, machine-readable format, and to transfer it to another platform if you wish.

To exercise any of the rights above, please contact us at support@toto77.im stating the right you wish to exercise. Responses will be provided within 30 days.

Toto77 Data Security Infrastructure

We invest continuously in ensuring that every Toto77 player's personal and financial data is protected by the strongest layers of security in the industry. This goes beyond legal compliance — it is our commitment to the trust you place in us.

COMPLIANCE & CERTIFICATION
Malaysia PDPA 2010 – Fully Compliant
SSL/TLS 256-bit Encryption
Regular Third-Party Security Audits
Anti-Money Laundering (AML) Compliant
24/7 Security Monitoring
End-to-End Encryption
All data transmitted between your device and Toto77's servers is encrypted using 256-bit SSL. This means that even if someone intercepts the data in transit, it cannot be read without the encryption key.
Role-Based Access Control
Within Toto77, access to player data is strictly controlled. Only staff with a legitimate business need and specific authorisation may access designated data. All access is logged for audit purposes.
Auditing & Activity Logs
All access to sensitive data within Toto77's systems is recorded in tamper-proof audit logs, which are reviewed regularly to detect any unauthorised or suspicious access.
Secure Servers & Regular Backups
Toto77 data is stored in certified data centres with robust physical and digital safeguards. Automatic backups are performed regularly to ensure no data is lost in the event of a system failure.
Penetration Testing & Vulnerability Assessment
Toto77 conducts regular penetration testing with the assistance of independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.

Your Transactions Are Protected at Toto77

Touch 'n Go eWallet GrabPay Boost ShopeePay DuitNow FPX / Maybank2u CIMB Clicks

All transactions are SSL 256-bit secured · Min deposit RM 20 · Withdrawals within 15 minutes

Join Toto77 With Confidence – Your Privacy & Data Security Are Our Priority

Now you know how seriously Toto77 protects your personal data. Over 500,000 Malaysian players have trusted us with their data and money. Join them and experience safe, responsible digital entertainment for yourself.

Terms & Conditions Responsible Gambling FAQs About Us
Bahasa Melayu