Privacy Policy

1. Definitions

"toto8", "we", "us", and "our" refer to the operator of the toto8 platform accessible at toto8.buzz. "Player", "you", and "your" refer to any individual who registers, uses, or accesses toto8 services. "Personal Data" means any information that identifies or could reasonably be used to identify you as a natural person, including your name, identity document number, residential address, email address, mobile number, payment details, and device identifiers. "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or deletion. "Third Party" means any entity other than toto8 and the player.

2. Personal Data We Collect

toto8 may collect the following categories of Personal Data depending on how you interact with the platform:

You are not required to provide data beyond what is necessary for the service you request. Declining to provide mandatory information may prevent account creation, payment processing, or access to certain features.

3. How We Collect Personal Data

toto8 collects Personal Data through the following means:

• Direct provision: Information you enter during registration, account management, deposit or withdrawal requests, KYC submissions, and support communications.
• Automated collection: Technical and usage data collected automatically when you access toto8.buzz, including via cookies, log files, and session tracking tools.
• Payment processors: Confirmation data received from FPX, DuitNow, and authorised e-wallet and banking partners (Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect) when you transact in Malaysian Ringgit.
• Identity verification providers: Results and outputs from KYC checks conducted through authorised identity verification services.
• Fraud and security tools: Device fingerprinting, login anomaly detection, and third-party fraud screening services used to protect the platform and all players.

4. How We Use Your Personal Data

toto8 uses Personal Data for clearly defined, legitimate purposes:

• Account management: Creating, maintaining, verifying, and securing your player account.
• Payment processing: Facilitating MYR deposits and withdrawals, reconciling transactions, and resolving payment disputes involving DuitNow, FPX, and other Malaysian payment methods.
• Identity and age verification: Confirming that you meet the 21+ age requirement and that your identity matches your payment methods and account details.
• Legal compliance: Meeting anti-money-laundering (AML), counter-terrorism financing (CTF), responsible gambling, and regulatory record-keeping obligations.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, account sharing, unauthorised access, and abuse of toto8 systems or promotions.
• Platform improvement: Analysing aggregated usage patterns to improve game performance, payment flows, mobile experience, and customer support quality.
• Responsible gambling: Monitoring activity for signs of problem gambling and applying limits, restrictions, or self-exclusion tools where appropriate.
• Communications: Sending service notifications, security alerts, verification requests, and — where you have opted in — relevant promotional information.

5. Legal Basis for Processing

toto8 processes Personal Data on the following legal grounds, applied according to the nature and purpose of each processing activity:

• Contractual necessity: Processing required to perform the agreement between toto8 and the player, including account creation, payment processing, verification, and the delivery of betting and casino services.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including AML, CTF, responsible gambling frameworks, and data retention requirements.
• Legitimate interests: Processing conducted for fraud prevention, platform security, abuse detection, and service improvement, where those interests are not overridden by player rights.
• Consent: Processing for optional purposes — such as marketing communications or the use of non-essential cookies — for which explicit opt-in has been obtained. Consent may be withdrawn at any time without affecting prior processing or service access.

6. Data Sharing and Disclosure

toto8 does not sell, rent, or trade Personal Data. We may share data in the following limited circumstances:

• Payment service providers: We share necessary transaction data with licensed Malaysian payment providers — including FPX network banks, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect — to process deposits and withdrawals in MYR.
• Identity verification services: We may share identity document data with authorised KYC providers to complete age and identity checks.
• Fraud prevention and security: We may share limited data with fraud detection, device fingerprinting, and cyber-security service providers operating under strict data processing agreements.
• Game providers: Gameplay session data may be shared with licensed game studios to facilitate game delivery, verify outcomes, and support dispute resolution. No unnecessary personal data is transferred.
• Legal and regulatory authorities: We may disclose data where required by a valid legal order, regulatory direction, law enforcement request, or court process under applicable Malaysian or international law.
• Business transfers: In the event of a merger, acquisition, or sale of assets, Personal Data may be transferred to the successor entity, subject to equivalent privacy obligations.

All third-party data processors engaged by toto8 are contractually required to process Personal Data only for the specified purpose and to maintain appropriate security standards.

7. Data Security

toto8 implements technical and organisational measures to protect Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. Specific measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and toto8 servers;
• encryption of sensitive data fields at rest in toto8 databases;
• access controls restricting Personal Data to authorised personnel with a documented operational need;
• regular security testing, vulnerability assessments, and code review procedures;
• two-factor authentication options for player accounts;
• KYC document storage in isolated, access-restricted environments; and
• ongoing staff training on data handling, phishing awareness, and security protocols.

No internet-based system is completely immune to security risk. toto8 will notify affected players without undue delay if a data breach is identified that poses a material risk to your rights or interests.

8. Data Retention

toto8 retains Personal Data for as long as your account is active and for such additional period as is required by applicable legal, regulatory, compliance, or dispute resolution obligations. Indicative retention principles are set out below:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years following account closure to comply with AML record-keeping requirements.
• Transaction records: Financial transaction records in MYR, including DuitNow, FPX, and e-wallet history, are retained for a minimum of seven years in accordance with applicable financial compliance obligations.
• KYC verification documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later, unless a longer period is required by law.
• Support communications: Live chat transcripts and email correspondence are retained for up to three years or for the duration of any open dispute or claim.
• Marketing data: Retained until you withdraw consent or request deletion, subject to any overriding retention obligation.

At the expiry of applicable retention periods, Personal Data is securely deleted or anonymised from active systems. You may request earlier deletion of data that is not subject to a legal retention requirement by contacting toto8 support.

9. Your Data Rights

As a toto8 player, you have the following rights in relation to your Personal Data. Requests may be submitted by contacting support with your registered account details:

• Right of access: You may request a copy of the Personal Data held about you by toto8, along with information on how it is used.
• Right to rectification: You may request correction of inaccurate or incomplete Personal Data. Corrections affecting account identity must be supported by appropriate documentation.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, consent has been withdrawn, or processing is found to be unlawful — subject to legal retention obligations.
• Right to restrict processing: You may request that toto8 limit the use of your Personal Data to storage only, pending resolution of a dispute or an objection to processing.
• Right to data portability: Where technically feasible, you may request your Personal Data in a structured, commonly used electronic format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing, at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing undertaken before withdrawal.

toto8 will acknowledge a data rights request within a reasonable period and aim to respond substantively within 30 days. Complex or high-volume requests may require additional time, in which case we will notify you of the delay and expected completion date.

10. Cookies and Tracking Technologies

toto8 uses cookies and similar tracking technologies to operate the platform, maintain session integrity, detect fraud, and — where consent is obtained — analyse usage patterns. Categories of cookies used include:

• Strictly necessary cookies: Required for the platform to function, including authentication, session management, and security controls. These cannot be disabled.
• Functional cookies: Used to remember your preferences, language settings, and account display choices across sessions.
• Analytics cookies: Used, where consent is provided, to collect aggregated data on page visits, game loads, and navigation paths to improve platform performance.
• Security cookies: Used for fraud detection, bot prevention, and anomaly monitoring to protect you and the toto8 platform.

Non-essential cookies are activated only where you have provided consent through the cookie preference mechanism on toto8.buzz. You may adjust your preferences or withdraw consent at any time through your browser settings or by contacting support.

11. Minors and Age Restriction

toto8 is strictly intended for individuals aged 21 and above. We do not knowingly collect Personal Data from persons under 21. Registration requires confirmation of eligibility, and all accounts are subject to identity and age verification. If toto8 determines that Personal Data has been collected from a person under the minimum age requirement, that account will be closed and associated data removed in accordance with applicable policy and law.

If you believe that a minor may have registered a toto8 account, please contact support immediately at [email protected] (plain text — not a link) so that the matter can be investigated and resolved promptly.

12. Changes to This Privacy Policy

toto8 may update this Privacy Policy from time to time to reflect changes in our services, payment methods, security practices, legal obligations, or regulatory requirements. The effective date displayed at the top of this page identifies when the current version came into force. Continued use of toto8 after an update constitutes acceptance of the revised policy. We recommend reviewing this page periodically.

Where a change is material — for example, a significant new category of data being collected or a change in how data is shared — we will use reasonable efforts to notify active account holders via the registered email address or a platform notification before the change takes effect.

13. Contact Us

For all privacy-related enquiries, data rights requests, or concerns about how toto8 handles your Personal Data, please contact our support team through the official platform. The toto8 support email is displayed below as plain text only — it is not a clickable link:

Email: [email protected]

Please include your registered username, a clear description of your request, and any relevant account reference. We will acknowledge receipt and respond substantively within 30 days. For general questions, our FAQ page addresses many common queries about accounts, payments, and data.