Privacy Policy SlotToto88 – Malaysia Member Personal Data Protection

SlotToto88 collects various types of personal information from members to ensure our services operate effectively and securely. We only collect information that is strictly necessary for legitimate operational purposes and do not collect anything beyond those requirements.

Information you provide directly:

• Full name as shown on your identity card or passport.
• Date of birth (for age verification — only individuals aged 18 and above are permitted).
• Email address and mobile phone number.
• Bank account details or e-wallet information for deposit and withdrawal purposes.
• Identity verification documents (KYC) – identity card, passport, bank statement, or utility bill.
• The username and password you create (passwords are stored in hashed form and cannot be read by our staff).

Information collected automatically when you use the platform:

• IP address and network information.
• Device type, operating system, and web browser used.
• Game session data including date, time, game type, and wagering amount.
• Complete financial transaction records.
• Cookie and related tracking technology data (further details in Section 5).

SlotToto88 collects and processes your personal information solely for legitimate, stated purposes. We do not use your data for any purpose unrelated to platform operations without first obtaining your explicit consent.

• Account Management: Create, verify, and maintain your slottoto88 member account.
• Transaction Processing: Securely process deposits, withdrawals, and financial transaction history.
• Identity Verification (KYC): Comply with Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) legal requirements.
• Platform Security: Detect and prevent fraud, multi-account usage, and other prohibited activities.
• Customer Support: Handle complaints, enquiries, and assistance requests from members.
• Service Improvements: Analyse usage patterns to improve the user interface and experience.
• Marketing Communications: Send promotional offers, news, and updates — only if you have opted in to receive them.
• Legal Compliance: Meet reporting obligations to the relevant authorities as required by law.

The security of member data is a responsibility we take extremely seriously. SlotToto88 implements multiple layers of technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

Our technical security measures:

• 256-bit SSL Encryption: All data communications between your browser and our servers are encrypted using the latest TLS 1.3 protocol.
• Hashed Password: Member passwords are never stored in plain text — we use the robust bcrypt algorithm to hash all passwords.
• Two-Factor Authentication (2FA): 2FA is available to all members as an additional security layer, and we strongly encourage you to activate it.
• Firewall & Intrusion Detection System: Our platform is protected by enterprise-grade firewalls and a real-time threat monitoring system.
• Regular Security Audits: We conduct quarterly penetration testing and independent security audits.

Our organisational security measures:

• Staff access to member data is limited to those who genuinely need it to perform their duties (least privilege principle).
• All staff who handle member data undergo comprehensive data protection training.
• Strict confidentiality agreements are signed by all slottoto88 staff and contractors.
• Detailed incident response procedures that are regularly tested.

SlotToto88 does not share, sell, or disclose members' personal information to third parties except in the limited circumstances outlined below. In all cases where data sharing is required, we ensure those third parties adhere to data protection standards equivalent to our own.

• Payment Providers: Required transaction information is shared with licensed payment processors (FPX, DuitNow, e-wallet) to enable deposits and withdrawals to be processed securely.
• Game Providers: Limited game session data is shared with our game providers (such as Pragmatic Play, PG Soft) as required to operate the games and verify wins.
• KYC Services: Identity verification documents are processed through a licensed third-party KYC platform to meet AML compliance requirements.
• Legal Requirements: We may be required to disclose certain information to law enforcement authorities if mandated by a court order or applicable legislation.

In all of the above data-sharing cases, we ensure that strict data processing agreements are signed to guarantee your data is handled responsibly and securely.

SlotToto88 uses cookies and similar tracking technologies to enhance the user experience and enable platform features to function correctly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as they are essential for platform operation.
• Performance Cookies: Collect aggregated and anonymised data on how members use the platform — helping us identify areas for improvement.
• Functionality Cookies: Store your preferences such as language, time zone, and display settings to deliver a more personalised experience.
• Analytics Cookies: We use recognised third-party analytics tools to understand overall usage patterns without identifying individual users.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of certain parts of the slottoto88 platform.

SlotToto88 retains members' personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy or to comply with applicable legal obligations.

• Active Account Data: Retained for as long as your account remains active on the slottoto88 platform.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's AML and accounting legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the member relationship ends, in accordance with compliance requirements.
• Log & Security Data: Retained for 2 years for security investigation and fraud purposes if required.
• Support Correspondence: Retained for 3 years for service reference and improvement.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. Our deletion process uses methods that ensure data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we uphold, you have several important rights regarding the personal data we hold. SlotToto88 is committed to helping you exercise these rights quickly and easily.

To exercise any of the above rights, please contact the slottoto88 support team via live chat or email. We will verify your identity before processing any data-related request to ensure your account's security.

As a responsible platform, slottoto88 fully complies with Malaysia's Anti-Money Laundering Act 2001 (AMLA) and the Terrorism Financing Prevention requirements 2013 (PTFA). This means we are legally required to verify member identities before any withdrawal is approved.

The Know Your Customer (KYC) process at slottoto88 is straightforward and secure. The following documents may be required:

• Malaysian Identity Card (MyKad) or a valid passport.
• Most recent 3 months' bank statements showing your name and account number.
• Utility bill or official document confirming your current address.
• Selfie holding your identity document (required in certain high-risk situations).

All KYC documents you submit are processed through a secure system and stored with full encryption. Access to these documents is restricted to licensed compliance teams only. KYC information is not shared with any party other than the relevant authorities when required by law.

The slottoto88 platform is intended exclusively for adults aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.

If we identify or are informed that we have collected information from someone under the age of 18, we will immediately take action to delete that information and close the relevant account. Our strict age verification process — including KYC — is designed to ensure only adults can use our platform.

If you become aware that someone under the age of 18 has registered or is using the slottoto88 platform, please contact our support team immediately so that appropriate action can be taken.

SlotToto88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or developments in the data security industry. Any material amendments will be communicated to members via their registered email or in-platform notifications at least 14 days before the changes take effect.

The date of the latest update will always be displayed at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of the slottoto88 platform following the effective date of any amendments to this Privacy Policy will be deemed as your acceptance of the revised terms.