Privacy Policy TVToto — Our Commitment to Protecting Your Data

TVToto ("we", "the Company") is the operator of an online Sports Betting and casino platform serving Malaysia via tvtoto.biz. We deeply value the trust you place in us when using TVToto's services, and we are committed to protecting your privacy and the security of your personal data.

This Privacy Policy is drafted in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA). It transparently explains how TVToto handles your personal data — including how we collect it, the purposes for which it is used, who may access it, how long it is retained, and what rights you hold as a data subject.

We believe transparency is the foundation of trust. That is why we have made every effort to use plain, straightforward language throughout this document — so you always know exactly what happens to your personal data when you use the TVToto platform, whether you are placing a bet on a Malaysia Super League football match, enjoying a blackjack game in the casino section, or following the Malaysia Open badminton betting.

TVToto collects the personal data necessary to deliver our services safely, fairly, and efficiently. The following are the categories of data we collect:

TVToto only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is needed to operate our platform.

TVToto collects your personal data through various means that occur when you interact with our platform:

• During Account Registration: When you first register a TVToto account, we request basic identity information including your name, Malaysian phone number, and date of birth for eligibility verification and KYC purposes.
• During the Identity Verification (KYC) Process: When you make your first withdrawal, or upon request by the TVToto security team, we may ask for a copy of your identification document such as your MyKad or passport to ensure the security of your account.
• During Financial Transactions: Data related to the payment methods you use for deposits and withdrawals — whether Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks) — is recorded for payment processing and financial compliance purposes.
• During Platform Use: Technical and usage data is collected automatically via cookies, server logs, and similar tracking technologies as you browse and use the TVToto platform.
• When Interacting with Customer Support: When you contact the TVToto support team via live chat, email, or other communication channels, the content of those interactions is recorded for quality monitoring and future reference purposes.
• From Authorised Third Parties: In certain circumstances permitted under Malaysian law, we may receive data from payment service providers or identity verification agencies with whom we partner.

TVToto uses your personal data solely for legitimate purposes directly related to the provision of our services. The primary purposes are as follows:

• Account Management: To create, verify, manage, and secure your TVToto account, including processing logins and two-factor authentication.
• Financial Transaction Processing: To securely and accurately process deposits and withdrawals in Malaysian Ringgit (RM) via your chosen Malaysian payment method.
• Betting Service Provision: To enable you to access and use all TVToto services, including Sports Betting, Live Casino, slots, and e-sports.
• Legal & Regulatory Compliance: To comply with Malaysian legal obligations, including KYC (Know Your Customer), AML (Anti-Money Laundering), and mandatory financial reporting requirements.
• Security & Fraud Prevention: To detect, prevent, and investigate suspicious activity, fraud, money laundering, or violations of TVToto's Terms & Conditions.
• Customer Support: To respond to enquiries, resolve complaints, and provide technical assistance to TVToto members across all available support channels.
• Important Communications: To send important notifications regarding your account, policy changes, security updates, and transaction information via SMS or email.
• Platform Improvements: To analyse usage patterns and make improvements to the TVToto platform based on aggregated, anonymised data.
• Marketing (With Consent): To send promotional information, bonus offers, and TVToto platform updates — exclusively to members who have given explicit consent to receive marketing communications.

TVToto takes an extremely cautious and limited approach to sharing members' personal data with external parties. Our fundamental principle is clear: we do not sell, rent, or trade your personal data to anyone for commercial purposes.

However, there are limited circumstances in which TVToto may share your data with carefully selected third parties:

• Malaysian Payment Service Providers: To process your deposit and withdrawal transactions, the minimum necessary transaction data is shared with licensed Malaysian payment gateway operators such as Touch 'n Go, GrabPay, DuitNow, FPX, and other service providers that TVToto partners with.
• Game Software Providers: Third-party live casino game providers that supply services to TVToto may receive data required for game operations. All such providers are bound by strict data protection agreements.
• Malaysian Authorities: TVToto will disclose personal data to the relevant Malaysian authorities when required by law, court order, or for the purposes of financial crime investigation.
• Technology Service Provider: Cloud computing, cybersecurity, and IT infrastructure service providers engaged by TVToto may have limited access to your data solely in the course of delivering their services to TVToto.

All third parties with whom TVToto shares data are required to uphold data protection standards equal to or higher than those TVToto adheres to, and are prohibited from using that data for any purpose other than what has been specified.

TVToto continually invests in cybersecurity infrastructure to ensure that our members' personal and financial data remains protected to the highest standard. Key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser and TVToto's servers are encrypted using 256-bit TLS/SSL protocols — the same standard used by leading banks in Malaysia.
• Two-Factor Authentication (2FA): TVToto offers two-factor authentication via SMS OTP as an additional layer of security for your account.
• 24/7 Security Monitoring: TVToto's IT security team monitors our systems around the clock — 24 hours a day, 7 days a week — to detect and respond to any security threats.
• Strict Access Control: Access to members' personal data within TVToto's internal systems is restricted to staff who require it to perform their duties, in accordance with the principle of least privilege.
• Regular Data Backups: Your data is regularly backed up to secure, offsite locations to ensure rapid recovery in the event of any unexpected system failure.
• Independent Security Audits: TVToto undergoes regular independent cybersecurity audits to identify and address vulnerabilities before they can be exploited.

While TVToto takes all reasonable steps to protect your data, no digital security system can offer a 100% guarantee. You also play an important role in keeping your account secure — always use a strong, unique password, never share your login credentials, and contact TVToto immediately if you suspect any suspicious activity on your account.

TVToto retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are our general data retention guidelines:

Once the retention period has elapsed, TVToto will securely delete or anonymise your personal data in accordance with approved data disposal procedures.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by TVToto:

The TVToto platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and safeguard your account. The following are the types of cookies TVToto uses:

You can manage your cookie settings through your web browser's options. However, disabling essential cookies may affect the functionality and security of the TVToto platform on your device.

TVToto takes the protection of minors very seriously. The TVToto platform is exclusively for individuals aged 18 years and above only.

TVToto does not knowingly collect or process personal data from individuals under the age of 18. If you believe a minor has registered a TVToto account, please contact us immediately at privacy@tvtoto.biz so we can take appropriate action, including closing the account and deleting all associated data.

TVToto reserves the right to review and update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to our platform.

When material changes are made to this Privacy Policy, TVToto will notify registered members via their registered email address or through a prominent notice on the TVToto platform at least 7 days before those changes take effect. Continued use of the TVToto platform after such notice is deemed acceptance of the updated Privacy Policy.

We encourage you to review this page periodically. The "Last Updated" date at the top of this page will always reflect the latest version of TVToto's Privacy Policy.

If you have any questions, concerns, or requests regarding TVToto's Privacy Policy or the processing of your personal data, please contact us through the following channels:

• Privacy Email (DPO): privacy@tvtoto.biz — for all enquiries and official requests relating to personal data protection
• General Support Email: support@tvtoto.biz — for general enquiries related to your TVToto account and services
• Live Chat: Available on the TVToto platform 24 hours a day, 7 days a week for immediate assistance in Bahasa Malaysia and English

TVToto is committed to responding to all privacy-related requests within 21 working days. For more complex enquiries, we may require additional time; however, we will notify you within that 21-day period with an expected resolution timeline.

If you are not satisfied with TVToto's response to your privacy complaint, you have the right to lodge a complaint with Malaysia Department of Personal Data Protection (JPDP) under the Malaysian Ministry of Communications and Digital.