Privacy Policy tvtoto – Personal Data Protection for Malaysian Members

Tvtoto understands that your trust is our most valuable asset. When you choose to register and play on the tvtoto platform, you are entrusting us not only with your money but also with sensitive personal information. We do not take that responsibility lightly.

This Privacy Policy is written in plain, accessible language because we believe every tvtoto member in Malaysia has the right to clearly understand — without needing to be a legal expert — how their data is managed. We do not hide our intentions behind complex legal jargon.

Tvtoto operates in accordance with internationally recognised data protection principles, including data minimisation (collecting only what is strictly necessary), secure data storage, and giving you meaningful control over your own personal information.

As a platform serving Malaysians, tvtoto also complies with Malaysia's Personal Data Protection Act 2010 (PDPA), which sets the minimum standards for how organisations must handle individuals' personal data. We go beyond the minimum PDPA requirements because we believe good privacy is not just about legal compliance – it is about respecting fundamental human rights.

Tvtoto collects only the data necessary to provide you with a safe and quality service. Below are the categories of data we collect, along with the purpose and legal basis for each:

Tvtoto never collecting sensitive data that is irrelevant, such as health information, religious beliefs, political views, or biometric data, unless specifically required for identity verification purposes permitted by law.

The data we collect is used solely for legitimate, stated purposes. tvtoto will not use your data for any purpose to which you have not given consent, whether expressly or implicitly at the time of registration.

The primary purposes for which tvtoto uses your data are as follows:

• Maintaining and managing your account – ensuring your account functions correctly, processing deposits and withdrawals, and granting access to all games and services available on the tvtoto platform.
• Identity verification and fraud prevention – verifying that you are who you claim to be, ensuring no duplicate accounts exist, and detecting any suspicious activity before it affects you or other members.
• Complying with legal obligations – to meet anti-money laundering (AML) requirements, tax compliance obligations, and other reporting duties required under Malaysian law.
• Providing effective customer support – enabling the tvtoto support team to understand the context of your issue and provide an accurate, prompt resolution without you having to explain everything from scratch each time.
• Improving the platform and user experience – analysing usage patterns in aggregate (not at an individual level) to identify areas for improvement, emerging game preferences, and the most frequently used platform features.
• Sending relevant communications – important account notifications such as deposit confirmations, security alerts, and tvtoto promotions that you have consented to receive.

Tvtoto does not share your personal data with any third parties except in the following circumstances, all of which are intended to protect your interests or fulfil legal obligations:

• Payment processors – transaction information is shared with the payment processors that handle your deposits and withdrawals, such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay. This data is limited strictly to what is required to complete each transaction.
• Game providers – usernames and certain game records may be shared with game providers such as Pragmatic Play, PG Soft, Evolution Gaming, and others solely to ensure games function correctly and to resolve any game-related disputes.
• Legal authorities – tvtoto will disclose information if required by a court order, valid legal process, or directive from a Malaysian enforcement agency with jurisdiction. tvtoto will inform you of any such disclosure unless prohibited by law.
• Technical service providers – cloud infrastructure providers, cybersecurity services, and platform analytics tools that act as data processors under strict data protection agreements with tvtoto.

All third parties that receive your data from tvtoto are bound by data protection agreements requiring them to use that data only for permitted purposes, store it securely, and not disclose it to any other party without tvtoto's authorisation.

Tvtoto continually invests in enterprise-grade cybersecurity infrastructure to ensure your data is protected against unauthorised access, loss, or misuse. The following security layers are in place:

While tvtoto takes all reasonable steps to protect your data, no online system can guarantee absolute 100% security. You also play an important role in keeping your account secure by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to us.

Cookies are small text files stored on your device when you browse the tvtoto website. We use cookies to ensure the platform functions correctly, enhance your experience, and understand how the platform is used overall.

Below are the types of cookies used by tvtoto, along with your controls for each:

You can manage your cookie settings through your browser settings or via the privacy settings page in your tvtoto account. Disabling certain cookies may affect the functionality of some parts of the platform.

As a tvtoto member, you have the following rights regarding your personal data. All requests will be processed within 30 business days upon verification of your identity:

The tvtoto platform is strictly for individuals aged 18 and above. tvtoto actively prevents access by minors, and this privacy policy includes specific additional protections in that regard.

Tvtoto does not knowingly collect any personal data from individuals under the age of 18. If we become aware that personal data of someone under 18 has been collected without the knowledge or consent of a valid guardian, we will:

• Immediately suspending the associated account while the investigation is conducted.
• Delete all personal data associated with that individual within 72 hours.
• Returning any funds that may have been deposited.
• Reporting the incident to the relevant authorities where required.

Parents and guardians who suspect their child may have registered an account on tvtoto are urged to contact us immediately at privacy@tvtoto.ws or via live chat for prompt action.

Tvtoto may update this Privacy Policy from time to time in response to changes in how we operate, relevant legislative changes, or the introduction of new features that require additional explanation regarding data handling.

When there are significant changes to this Privacy Policy — particularly those affecting your rights or how we use your data — we will notify you through:

• An in-platform tvtoto notification that will appear upon your next login.
• An email to the address registered to your account at least 14 days before the changes take effect.
• Update the "Effective Date" at the top of this document.

Your continued use of the tvtoto platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data in accordance with the procedure set out in Section 7.

Tvtoto has appointed a Data Protection Officer (DPO) responsible for ensuring the platform complies with all data protection obligations and for handling privacy-related enquiries and complaints from members.