Privacy Policy toto11 – Member Personal Data Protection

1 Introduction & Privacy Policy Scope

Welcome to the toto11 Privacy Policy page. This document explains in detail how the toto11 platform — accessible at toto11.pro — collecting, processing, storing, and protecting your personal data while you use our services.

Toto11 takes our responsibility to every member's privacy seriously. As an online wagering platform serving users in Malaysia, we are committed to ensuring that all information you provide is protected to the highest security standards and managed in accordance with applicable laws in Malaysia, including Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all users of the toto11 platform, including visitors browsing the website without registering, registered members using the full suite of services, and anyone who interacts with toto11 via our mobile app, email, or customer support channels.

By registering an account or continuing to use the toto11 platform, you agree to the processing of your personal data as described in this document. If you do not agree, you have the right to discontinue using our platform and request account deletion through official support channels.

2 Types of Personal Data Collected

Toto11 only collects data that is strictly necessary to provide a secure, seamless, and legally compliant service. The following are the categories of data we collect:

3 Purpose of Personal Data Use

All data collected by toto11 has a clear and lawful purpose. We do not use your data for anything unrelated to the services you have joined. The following are the primary purposes for which your data is processed:

• Identity verification and KYC — Ensuring every member is an eligible individual, aged 18 and above, and compliant with anti-money laundering (AML) legal requirements.
• Account management — Processing registration, managing profile information, and enabling you to securely log in to your toto11 account.
• Financial transaction processing — Verifying and processing deposits and withdrawals accurately and securely through approved payment channels.
• Gaming services provision — Enables access to the full collection of slot games, live casino, and sports betting available on the toto11 platform.
• Customer Support — Handling enquiries, complaints, and support requests more effectively based on your account history.
• Security and fraud prevention — Identifying and preventing fraudulent activity, money laundering, and multi-account usage.
• Legal compliance — Fulfilling reporting obligations to the relevant authorities when required by law.
• Relevant marketing — Sending relevant promotional information and bonus offers based on your gaming interests, provided you have not withdrawn your marketing consent.

4 Data Sharing & Disclosure

Toto11 does not sell, rent, or disclose your personal data to external parties for commercial gain. However, there are limited situations where we need to share your data with certain parties in order to deliver a complete service:

• Payment service providers — Required transaction information is shared with approved payment providers such as FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay solely to process your transactions.
• Game software providers — Game session data is shared with licensed game providers to ensure proper technical functionality and game fairness auditing.
• KYC service providers — Identity information is shared with trusted third-party identity verification platforms to meet regulatory compliance requirements.
• Legal authorities — toto11 will disclose the necessary data to the relevant authorities when required by law, court order, or in the course of a legitimate criminal investigation.
• Business transfers — In the event of a merger, acquisition, or sale of toto11 assets, member data may be transferred to the new entity, with prior notice given to affected members.

All third parties that receive data from toto11 are bound by strict confidentiality and data protection agreements. They are only permitted to use such data for the specified purposes and may not process it for their own ends.

5 Security & Data Protection

Toto11 continuously invests in industry-grade information security infrastructure to ensure your personal data is always protected. The key security measures we employ include:

• 256-bit SSL encryption for all communications between users and toto11 servers — no data is transmitted in plain text.
• Data-at-rest encryption (AES-256) for all sensitive information stored in our databases, including passwords hashed using the bcrypt algorithm.
• Role-Based Access Control (RBAC) — only specifically authorised staff may access member data, and every access is logged for audit purposes.
• Penetration testing conducted regularly by independent cybersecurity firms to identify and address any vulnerabilities.
• 24/7 Monitoring by an intrusion detection system (IDS/IPS) that monitors suspicious activity in real time.
• Data backup performed automatically and stored at a separate secure location to ensure service continuity.

6 Cookies & Tracking Technologies

Toto11 uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyse usage patterns for continuous improvement.

• Essential cookies — Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
• Functional cookies — Saving your preferences such as language, display theme, and game settings to deliver a more personalised experience.
• Analytics cookies — Collecting aggregated data on how users interact with the platform to help us identify areas for improvement. This data cannot personally identify you.
• Performance cookies — Helps the platform run faster by storing frequently used resources locally on your device.

You can manage or decline cookies through your browser settings. However, declining essential cookies may affect the functionality of certain parts of the toto11 platform. For more information on managing cookies, please refer to your browser's documentation.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by toto11. We are committed to making it easy for you to exercise these rights:

To exercise any of the above rights, you may contact the toto11 Data Protection Officer (DPO) team via email at [email protected] or through our 24/7 Live Chat channel. Please include your full name and registered email address to speed up the identity verification process.

8 Data Retention Period

Toto11 does not retain your personal data for longer than necessary for the stated purposes or as required by law. Our data retention policy is as follows:

• Active account data — Retained for the duration your account is active and for no less than 5 years after account closure for AML legal compliance purposes.
• Financial transaction records — Retained for a minimum of 7 years in accordance with Malaysia's accounting and financial compliance legal requirements.
• Customer support communication logs — Retained for 3 years for dispute resolution and service improvement purposes.
• Technical log data — Server logs and session data are retained for 90 days for security and fraud detection purposes.
• Marketing data — Retained until you withdraw consent or close your account, whichever comes first.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. The data deletion process is carried out using methods that comply with recognised information security standards.

9 Privacy Policy Amendments

Toto11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or platform improvements. When any material changes are made, we will:

• Displaying a clear notice on the toto11.pro homepage at least 7 days before changes take effect.
• Sending notification emails to all registered members informing them of upcoming material changes.
• Updating the "Last Updated" date at the top of this page to reflect the latest version in force.
• Maintaining an archive of previous Privacy Policy versions that members may request for reference and comparison.

Your continued use of the toto11 platform after changes take effect constitutes your acceptance of the amended Privacy Policy. If you do not agree with any changes, you have the right to close your account and request data deletion in accordance with the procedures set out herein.

10 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how toto11 handles your personal data, or if you wish to exercise any of the rights stated in this policy, please contact us through the following channels:

If you are not satisfied with our response, you have the right to file a formal complaint with Malaysia Department of Personal Data Protection under the Ministry of Communications and Digital.