toto313 Privacy Policy

This Privacy Policy applies to toto313 ("toto313", "We", "Us", "Our"), an online gaming and sportsbook platform accessible at https://toto313.lat, operated under an international gaming authority licence. toto313 is the data controller responsible for the personal data of players and users of the Platform.

By registering an account on toto313, accessing the Platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your data as described herein.

toto313 collects the following categories of personal data from players and users of the Platform:

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless you voluntarily provide such information in the context of a responsible gaming self-exclusion request or similar protective measure.

toto313 collects personal data through the following means:

• Direct provision: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, and cookies;
• Third-party sources: Identity and fraud screening data from KYC verification providers; payment confirmation data from payment processors such as Touch 'n Go, DuitNow, FPX, and banking partners including Maybank and CIMB;
• Regulatory sources: Screening data from sanctions lists, politically exposed persons (PEP) databases, and other compliance databases as required under our licensing obligations.

toto313 processes your personal data for the following purposes:

• Creating, managing, and administering your toto313 account;
• Verifying your identity and age in accordance with KYC and licensing requirements;
• Processing deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method;
• Detecting and preventing fraud, money laundering, match-fixing, and other prohibited activities;
• Providing customer support and resolving disputes;
• Operating and enforcing responsible gaming tools, including deposit limits and self-exclusion;
• Complying with obligations imposed by our gaming authority licence, including reporting requirements;
• Sending transactional communications (account confirmations, withdrawal notifications, security alerts);
• Improving and personalising the Platform experience, including game recommendations where you have consented to personalisation;
• Analysing Platform usage to improve performance, reliability, and security.

toto313 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and toto313, including account operation, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, licensing conditions, and age verification mandates;
• Legitimate interests: Processing carried out in pursuit of toto313's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing based on your specific, informed consent, such as for marketing communications or personalised game recommendations. You may withdraw consent at any time without affecting the lawfulness of prior processing.

toto313 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Your data may be shared with the following categories of recipients only where necessary and on a lawful basis:

• KYC and identity verification providers: To verify your identity, age, and eligibility to use the Platform;
• Payment processors and financial institutions: Including Touch 'n Go, DuitNow, Boost, FPX, Maybank, CIMB, and USDT network operators, to process deposits and withdrawals;
• Game content providers: Licensed game studios may receive pseudonymised gameplay data for game performance monitoring and dispute resolution purposes;
• Regulatory and law enforcement authorities: toto313 may be required to disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies pursuant to applicable law or a valid legal order;
• Professional advisers: Legal, financial, and audit advisers engaged by toto313 under appropriate confidentiality obligations;
• Business successors: In the event of a merger, acquisition, or sale of substantially all assets of toto313, your data may be transferred to the acquiring entity subject to the terms of this Privacy Policy.

Some of toto313's service providers and infrastructure partners may be located outside Malaysia. Where personal data is transferred internationally, toto313 ensures that adequate safeguards are in place, which may include standard contractual clauses, the recipient country's recognition as providing adequate data protection, or the explicit consent of the data subject for specific transfers.

By using the toto313 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia in connection with the delivery of the Platform's services.

toto313 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by law and licensing obligations:

• Account and identity data: Retained for a minimum of 5 years from the date of account closure, in accordance with anti-money laundering record-keeping requirements;
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction;
• Gaming activity records: Retained for a minimum of 3 years from the date of the recorded activity;
• Customer support communications: Retained for 2 years from the date of the last communication, unless related to an unresolved dispute or regulatory inquiry;
• Technical and log data: Retained for up to 12 months for security and fraud monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an individual.

toto313 uses cookies and similar tracking technologies to operate the Platform, maintain session security, analyse usage patterns, and improve the player experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including authentication tokens and session management. These cannot be disabled without affecting Platform functionality;
• Performance cookies: Used to collect anonymised information about how players navigate the Platform, enabling toto313 to identify and resolve performance issues;
• Functional cookies: Used to remember player preferences such as language settings and game lobby configuration;
• Analytics cookies: Used to understand aggregate usage patterns and inform Platform development decisions. These cookies do not identify you individually.

By continuing to use the toto313 Platform after being presented with our cookie notice, you consent to our use of cookies as described above. You may manage your cookie preferences through your browser settings, though disabling certain cookies may affect your ability to use some Platform features.

Subject to applicable law and regulatory restrictions, you have the following rights in respect of your personal data held by toto313:

• Right of access: You may request a copy of the personal data toto313 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to restriction: You may request that toto313 restrict processing of your data in certain circumstances;
• Right to portability: Where processing is based on consent or contractual necessity, you may request a structured, machine-readable copy of your data;
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team at the address set out in Section 14. Requests will be acknowledged within 5 business days and fulfilled within 30 days, subject to identity verification and any applicable exemptions.

The toto313 Platform is strictly restricted to persons aged 21 years and above. toto313 does not knowingly collect personal data from persons under the age of 21. If toto313 discovers that personal data has been collected from an individual who is under 21, that data will be deleted immediately and the associated account suspended.

If you believe that a person under 21 has provided their personal data to toto313, please contact us immediately using the details in Section 14 so that appropriate action can be taken without delay.

toto313 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive personal data at rest in toto313's databases;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Continuous network monitoring and intrusion detection systems;
• Regular security assessments and penetration testing of Platform infrastructure;
• Data breach response procedures, including notification to relevant authorities and affected players within legally required timeframes.

Notwithstanding the above, no information security system is completely impenetrable. toto313 cannot guarantee the absolute security of data transmitted over the internet and encourages players to use strong, unique passwords and to exercise caution when accessing their toto313 account from shared or public devices.

toto313 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or operational circumstances. When material changes are made, we will notify registered players by email or via a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent update is displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by toto313, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 in-platform after toto313 login
• Response time: Within 5 business days for data-related requests

When submitting a data rights request, please provide sufficient information to allow us to verify your identity before processing the request. This is necessary to protect your data and prevent unauthorised access by third parties.