Privacy Policy CasinoToto — Our Commitment to Protecting Malaysian Players' Data

This Privacy Policy describes how CasinoToto ("we", "Platform" or "CasinoToto") collects, uses, stores and protects the personal information you provide when using our services at casinototo.pro. This document applies to all platform users — whether you are browsing our website, in the process of registering an account, or an active member using our gaming services.

We take personal data protection extremely seriously. Every action we take regarding user data is governed by responsible data protection principles — collecting only what is necessary, retaining it only as long as required, and safeguarding it to the full extent of our technical capabilities.

By using or registering at CasinoToto, you consent to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform immediately.

CasinoToto collects several categories of personal data from our users. This collection occurs either directly when you provide the information, or automatically when you use our platform.

Every piece of data we collect has a clear and specific purpose. casinototo does not use your data for any purpose other than those stated below:

• Account management: Creating, verifying, and maintaining your account on the casinototo platform
• Transaction processing: Processing deposits, withdrawals, and all financial activities securely
• Identity verification (KYC): Verifying that you meet the age requirement and confirming your identity for legal compliance purposes
• Gaming service delivery: Enabling you to access and enjoy all games available on the platform
• Customer support: Handling inquiries, complaints, and support requests more effectively
• Platform security: Detecting and preventing fraud, unauthorized access, and unlawful activity
• Service improvement: Analyzing usage patterns to improve the overall user experience
• Legal compliance: Meeting reporting and record-keeping obligations under applicable laws
• Marketing communications: Sending relevant promotional information and bonuses — only if you have agreed to receive them

We will not use your data for automated decision-making that materially affects your rights without human review.

CasinoToto does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. However, in the following limited situations, we may share your data:

• Payment service providers: Minimum transaction data required to process your deposits and withdrawals
• Game software providers: Technical data required to run games properly
• KYC verification services: Identity data required to fulfil verification obligations
• Legal authorities: When required by a court order, warrant or directive from a legitimate regulatory body
• Anti-money laundering (AML) body: Mandatory reporting as required under applicable laws

All third parties working with us are bound by strict data protection agreements. They are only permitted to use your data for agreed purposes and may not use it for any other reason.

CasinoToto continuously invests in security infrastructure to keep your data protected at all times. Our integrated security system comprises multiple layers of protection:

• 256-bit SSL Encryption: All communications between your device and our servers are fully encrypted
• Layered access controls: Only authorized personnel may access user data, and every access is logged
• 24/7 threat monitoring: An automated threat detection system monitors all suspicious activity around the clock
• Regular security audits: Vulnerability assessments and penetration testing are conducted periodically by independent third parties
• Secure data backup: Data is regularly backed up across multiple server locations to ensure service continuity
• Two-factor authentication (2FA): An additional security layer for account access that users can enable

While we take all reasonable steps to protect your data, no digital system can guarantee 100% absolute security. We encourage you to also take personal security measures, such as using a strong password and never sharing your login credentials with anyone.

Like most websites, casinototo uses cookies and similar tracking technologies to enhance the user experience and collect analytics data. Cookies are small text files stored on your device when you browse our site.

We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login and game sessions — cannot be disabled
• Performance Cookies: Collecting anonymized data on how users interact with the website to help us improve our services
• Functional Cookies: Saving your preferences such as language and display settings to personalize your experience
• Analytics Cookies: Helping us understand traffic and usage patterns for product improvement

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some platform features.

As a casinototo user, you have the following rights regarding your personal data. We fully respect and support the exercise of these rights:

To exercise any of the above rights, you may contact our customer support team via live chat. We will process your request within 30 days of receipt. In cases requiring additional identity verification, this period may be slightly extended.

CasinoToto retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with relevant legal obligations. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account is active and for the required period following closure
• Financial transaction records: Retained for a minimum of 7 years in accordance with financial and anti-money laundering legal requirements
• KYC and identity verification data: Retained for a minimum of 5 years after the business relationship ends
• Technical and security logs: Typically retained for 12 months for forensic and security purposes
• Customer support communication records: Retained for 3 years for dispute resolution purposes

Once the retention period expires, your data will be securely deleted or anonymised using approved procedures.

In some situations, your personal data may be transferred to or stored on servers located outside Malaysia — for example, for data backup purposes or when using services from international technology providers working with us.

When such data transfers occur, CasinoToto ensures that protection measures equivalent to or higher than those set out in this Privacy Policy are fully observed. All cross-border data transfers are safeguarded by strict data processing agreements.

If you have any questions, concerns, or complaints about how casinototo handles your personal data, we encourage you to contact us directly. Our privacy team is ready to assist you to the best of their ability.

You can reach us through several channels:

• Live Chat: The fastest channel — available 24/7 directly on the casinototo platform
• Email: Submit a written inquiry to our privacy team at [email protected]
• User Account: Some requests such as data corrections can be made directly through your account settings

We are committed to responding to all privacy-related inquiries within 5 working days. For more complex requests such as data deletion or data export, the processing period is up to 30 days.

CasinoToto takes every privacy complaint seriously. If you feel we have not handled your complaint to your satisfaction, you have the right to refer the matter to the relevant data protection authority under applicable law.