TotoBet Privacy Policy – Your Personal Data Protection

Totobet (totobet.vu) is committed to protecting the privacy of all its users. As a responsible online gaming platform, we understand that your trust in us starts with how we handle your personal information. This Privacy Policy is written in plain language because we believe you have the right to know exactly what happens to your data — not buried in long, confusing legal text.

This policy applies to all users who register an account, browse the TotoBet website, or use any of our services including the mobile app, live chat, and customer support. By using the TotoBet platform, you agree to the data collection and usage practices described in this document.

If you have any questions about how we handle your data, our privacy team is available through our support channels 24 hours a day, 7 days a week.

Totobet collects your personal information through several different means depending on how you interact with our platform. The following are the categories of information we may collect:

We never collect information beyond what is required for the stated purpose. All data collection follows the principle of data minimisation — only information that is strictly necessary is collected.

Totobet uses the information collected for legitimate and transparent purposes. Every use of data has a clear legal basis — whether to fulfil a contract with you, comply with legal obligations, or serve legitimate business interests.

• Account management: Registering, verifying, and managing user accounts including the KYC process required by law.
• Transaction processing: Processing deposits, withdrawals, and all financial activity on the platform securely and efficiently.
• Gaming service delivery: Ensuring a smooth, fair, and personalised gaming experience tailored to your preferences.
• Service communications: Sending important notifications related to your account, transactions, security updates, and changes to terms.
• Fraud prevention and AML: Monitoring suspicious activity to protect you and the platform from fraud, money laundering, and security threats.
• Regulatory compliance: Meeting the reporting and audit requirements set by the relevant licensing authorities.
• Platform improvements: Analysing usage patterns to continuously improve the platform's design, performance, and functionality.
• Customer support: Resolving complaints, answering enquiries, and providing effective technical assistance.
• Marketing (with consent): Sending promotional offers, bonuses, and relevant updates — only where you have given your consent.

Totobet does not sell, rent, or trade your personal information to third parties for their own marketing purposes. This is a commitment we do not compromise. However, there are certain situations where we need to share your information with others to ensure our services function properly:

• Payment providers: Information required to process deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and other supported payment providers. Information is shared only to the extent necessary to complete the transaction.
• Game providers: Minimum data required by game software providers such as Pragmatic Play, Evolution Gaming, and others to ensure gaming sessions function correctly.
• Cloud and infrastructure service providers: Data storage and cloud computing providers that process data on our behalf under strict data processing agreements.
• Regulatory authorities: When required by law, court order, or a valid request from a law enforcement agency.
• Identity verification services: Third-party KYC service providers that help verify member identities to comply with anti-money laundering legal requirements.

All third parties we work with are bound by strict confidentiality agreements and are required to handle your data in accordance with data protection standards equivalent to this Privacy Policy. They are not permitted to use your data for any purpose other than what is specified in the agreement.

We take your data security extremely seriously. totobet continuously invests in the latest security technologies and processes to ensure your personal information is protected at all times — both in transit and at rest on our servers.

Key security measures we implement:

• 256-bit SSL/TLS encryption: All data transmitted between your browser and totobet servers is encrypted using the banking industry-standard 256-bit SSL/TLS protocol.
• Data-at-rest encryption: Sensitive data stored in our databases — including financial information and identity documents — is kept in encrypted form.
• Two-factor authentication (2FA): We support and encourage the use of 2FA on all accounts for an added layer of protection.
• 24/7 security monitoring: An automated threat detection system continuously monitors our infrastructure to identify suspicious activity.
• Regular security audits: We conduct regular penetration testing and security audits by independent third parties.
• Internal access controls: Only staff with specifically granted authorisation may access member personal data, and every access is logged and monitored.
• Secure data centres: Data is stored in certified data centres with strict physical controls including 24-hour surveillance and multi-layered access control systems.

Totobet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on future visits and provide a more personalised experience.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how visitors use our website — the most frequently visited pages, error messages received, and so on. All information is aggregated and anonymised.
• Functional Cookies: Remembering your preferences such as language, region, and display settings to provide a more personalised experience.
• Analytics Cookies: Helping us understand platform usage patterns through analytics services to continuously improve our offerings.

You can manage your cookie settings through your browser. Most browsers allow you to view, delete, or block cookies. However, disabling certain cookies may affect the functionality and your experience on the TotoBet platform.

Totobet recognises and respects your rights as a data subject. You have meaningful control over your personal information, and we provide straightforward mechanisms for you to exercise those rights:

To exercise any of the above rights, contact our privacy team via live chat or support email. We will process your request within 30 business days. Complex requests or those requiring additional verification may take up to 60 days, and we will notify you if this is the case.

Totobet does not retain your personal data longer than necessary for the stated purposes, or longer than required by applicable law. Retention periods vary by data type:

• Active account data: Retained for the duration your account is active and until the account is officially closed.
• Financial transaction records: Retained for a minimum of 5 years after the transaction occurs, in line with anti-money laundering laws and tax obligations.
• KYC documents: Retained for a minimum of 5 years after the business relationship ends, or longer if required by regulatory authorities.
• Support communication records: Retained for 2 years for reference and dispute resolution purposes.
• Technical and security logs: Retained for 90 days for security monitoring and incident investigation purposes.
• Marketing data: Retained until you withdraw your marketing consent, after which the data will be deleted or anonymised within 30 days.

Once the retention period expires, your data will be securely deleted or permanently anonymised so it can no longer be linked to you as an individual.

Totobet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Whenever changes are made, the "Last Updated" date at the top of this document will be revised.

For material changes — those that significantly affect how we use your data — we will notify you via:

• In-platform notifications on totobet while you are logged in
• Email to the address registered to your account
• A clear notice on the totobet.vu homepage

Continued use of the totobet platform after changes take effect constitutes acceptance of the updated terms. If you disagree with the changes, you have the right to close your account and request a withdrawal of your remaining funds.

If you have any questions, concerns, or wish to exercise your rights as a data subject, the totobet privacy team is ready to assist you through the following channels:

• 24/7 Live Chat: The fastest way to get a response — directly from the TotoBet platform with an average response time of under 2 minutes.
• Privacy Email: [email protected] — for privacy-related enquiries and data access requests, with a response time of 24–48 hours.
• WhatsApp: Available via the in-app link in the totobet mobile app for easier communication.

When contacting us regarding privacy, please provide your account number (if applicable) and describe your request clearly to help speed up the process. All privacy requests are handled in strict confidence by our specially trained team.