Privacy Policy
toto155 Data Protection Commitment

1 Introduction

toto155 (hereinafter referred to as "toto155", "we", "us", or "our") operates the online gaming and sports betting platform accessible at https://toto155.cam (the "Platform"). We are committed to protecting the privacy and personal data of all users who access or register on the Platform (hereinafter referred to as "you", "the User", or "the Data Subject").

This Privacy Policy (the "Policy") describes in detail how toto155 collects, receives, uses, stores, processes, transfers, and protects personal data in connection with your use of the Platform. It also outlines the rights available to you under applicable data protection legislation and explains how to exercise those rights.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the toto155 Platform.

By registering an account on the toto155 Platform or continuing to use it, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to a name, identification number, contact details, location data, online identifiers, and financial information.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, structuring, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means toto155, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of toto155 under a contractual arrangement, including payment processors, KYC service providers, and cloud infrastructure providers.
• "KYC" (Know Your Customer) means the identity verification process required to confirm a User's identity in compliance with anti-money laundering obligations.
• "Cookies" means small data files stored on a User's device by the Platform for the purposes of session management, analytics, and personalisation.
• "Data Breach" means a security incident resulting in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to Personal Data.
• "MYR" means Malaysian Ringgit, the primary operating currency of the toto155 Platform.

3 Data We Collect

toto155 collects various categories of personal data in the course of providing its services. The specific data collected depends on the nature of your interaction with the Platform and the stage of your account lifecycle.

3.1 Registration & Account Data

• Full legal name (as appearing on a government-issued identity document)
• Date of birth (for age verification — users must be 21 years of age or older)
• Email address and contact telephone number
• Residential address (including city and postcode, e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru)
• Chosen username and encrypted password
• Preferred language and communication preferences

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (Malaysian MyKad, passport, or equivalent)
• Proof of residential address (utility bill, bank statement, or official correspondence not older than 3 months)
• Selfie or biometric verification image (where required by our KYC provider)
• Source of funds documentation (where required for enhanced due diligence)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, dates, payment methods)
• Payment method identifiers (e-wallet account IDs, bank account last digits, USDT wallet address where applicable)
• Transaction reference numbers for FPX, DuitNow, and e-wallet transactions
• Wagering history, game session records, and betting activity logs
• Account balance history and bonus transaction records

3.4 Technical & Usage Data

• IP address, device type, operating system, and browser type
• Login timestamps, session duration, and access logs
• Pages visited, features used, and navigation patterns on the Platform
• Referral source and marketing attribution data
• Geolocation data (where applicable and consented to)

3.5 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with the toto155 support team
• Records of consent for marketing communications
• Feedback, complaints, and dispute records

4 How We Collect Data

toto155 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, or contacting customer support.
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, web beacons, and server logs.
• Third-party payment providers: Transaction data received from payment processors including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processors handling USDT TRC20 transactions.
• KYC verification providers: Identity verification data returned by our third-party KYC service providers following document verification processes.
• Fraud detection and compliance services: Risk signals and compliance screening results from authorised third-party fraud prevention and anti-money laundering service providers.
• Marketing and referal partners: Where you have arrived at toto155 via an affiliate or referral link, basic attribution data may be received from the referring partner.

5 Data Processing & Use

toto155 processes your personal data for the following purposes. The table below summarises the principal processing activities and their associated legal basis:

toto155 does not use personal data for any purpose other than those described in this Policy without obtaining your prior consent, except where required by applicable law or regulation.

6 Legal Basis for Processing

toto155 processes personal data under the following legal bases, as applicable to each processing activity:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered Account holder — including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and regulatory reporting duties.
• Legitimate Interests: Processing conducted in pursuit of toto155's legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms — including fraud prevention, platform security, and service improvement.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in connection with marketing communications and certain categories of personalisation. You may withdraw consent at any time without detriment to your account or the core services provided.

7 Data Sharing & Disclosure

toto155 does not sell your personal data. We may share personal data with third parties only in the following limited circumstances:

7.1 Payment Service Providers

To process deposits and withdrawals, toto155 shares necessary transaction data with payment service providers including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing partners. These providers receive only the data necessary to execute the requested transaction and are contractually bound to protect your data.

7.2 KYC and Compliance Providers

Identity documents and verification data are shared with authorised third-party KYC service providers for the purpose of fulfilling our regulatory identity verification obligations. These providers operate under data processing agreements and are prohibited from using your data for any other purpose.

7.3 Legal and Regulatory Authorities

toto155 may disclose personal data to competent authorities, regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, regulation, legal process, or lawful governmental request.

7.4 Professional Advisors

Personal data may be disclosed to legal advisors, auditors, or other professional service providers on a confidential basis where necessary for the provision of their professional services to toto155.

8 Data Retention

toto155 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, tax, accounting, and reporting requirements.

The principal retention periods applicable to categories of data held by toto155 are as follows:

• Account and registration data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory guidance.
• Financial and transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping requirements.
• Customer support communications: Retained for a minimum of three (3) years from the date of the interaction.
• Marketing consent records: Retained for the duration of the consent period plus a reasonable period thereafter to demonstrate compliance.
• Technical and usage data (logs): Retained for a rolling period of up to twelve (12) months, unless required to be retained longer for fraud investigation or legal proceedings.

Upon expiry of applicable retention periods, personal data is securely destroyed or anonymised in accordance with toto155's data disposal procedures.

9 Data Security

toto155 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive personal and financial data stored on our infrastructure;
• Role-based access controls limiting internal access to personal data on strict need-to-know basis;
• Regular penetration testing and vulnerability assessments of the Platform;
• Two-factor authentication (2FA) options for User accounts;
• Continuous monitoring and anomaly detection for unauthorised access attempts;
• Staff data protection training and confidentiality obligations.

In the event of a Data Breach that is likely to result in a risk to your rights and freedoms, toto155 will notify the relevant regulatory authority and, where required by law, affected Data Subjects without undue delay and in accordance with applicable breach notification obligations.

10 Cookies & Tracking Technologies

The toto155 Platform uses cookies and similar tracking technologies to deliver and improve our services. Cookies are small text files stored on your device by your web browser when you visit our Platform.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management, authentication, and security features. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, language settings, and personalisation choices to improve your experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform, enabling us to identify performance issues and improve content.
• Marketing Cookies: Used to track the effectiveness of marketing campaigns and, where you have consented, to serve relevant promotional content.

10.2 Managing Cookie Preferences

You may manage or withdraw consent for non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the toto155 Platform. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Microsoft Edge, etc.).

11 Your Data Rights

As a Data Subject, you have the following rights in relation to the personal data that toto155 holds about you. toto155 is committed to facilitating the exercise of these rights without undue delay and, in most cases, within 30 days of receipt of a valid request.