Privacy Policy

Introduction

This Privacy Policy (the "Policy") is published by toto15 (referred to herein as "toto15", "we", "us", or "our"), the operator of the online gaming platform accessible at toto15.casa. The Policy applies to all individuals (referred to as "you", "your", or "User") who access, register on, or use any service offered through the toto15 platform.

toto15 is committed to protecting the privacy and security of its users' personal data. We process personal information in accordance with applicable data protection principles and the obligations arising under our international operating licence. This Policy explains, in plain and transparent language, what data we collect about you, why we collect it, how we use it, and what rights you retain in relation to that data.

If you have any questions about this Policy or about how toto15 handles your personal data, please contact our Data Support team at [email protected] before using the platform.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or is capable of identifying a natural person, either directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" refers to toto15 as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party service provider that processes personal data on behalf of toto15 under a contractual data processing agreement.
• "User" or "You" means any natural person who accesses or uses the toto15 platform, whether as a registered account holder or as a visitor.
• "KYC Data" means identity verification documents provided by Users in connection with the Know Your Customer process, including government-issued identification, proof of address, and payment method verification.
• "Cookies" refers to small data files placed on your device by the toto15 platform or associated third-party analytics and functionality providers.
• "Sensitive Data" refers to personal data that warrants heightened protection, including financial account details and identity documents submitted during KYC verification.

Data We Collect

toto15 collects personal data that is necessary to provide its gaming services, maintain regulatory compliance, process financial transactions, and deliver customer support. The categories of personal data we may collect are summarised below:

We collect only the minimum personal data required for each identified purpose. We do not collect special category data (such as race, religion, or health information) except where specifically required by applicable regulatory obligations.

How We Collect Data

toto15 collects personal data through the following channels:

• Direct submission: Information you provide voluntarily when creating an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated collection: Technical data collected automatically when you access the toto15 platform, including your IP address, browser characteristics, device identifiers, and interaction logs generated during your session.
• Payment processors: Transaction confirmation data received from third-party payment providers such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking partners including Maybank, CIMB, Public Bank, and Hong Leong Bank, as necessary for deposit and withdrawal processing.
• Third-party verification services: Identity and age verification data may be cross-referenced with authorised third-party KYC and anti-fraud service providers.
• Cookies and tracking technologies: Data collected through cookies and similar technologies placed on your device during platform use, as further described in Section 9 of this Policy.

Data Processing

toto15 processes your personal data for the following specific purposes:

1. Account Registration and Management: To create, verify, and maintain your toto15 Account, including processing identity and age verification in accordance with our 21+ eligibility requirement.
2. Financial Transactions: To process deposits and withdrawals via your chosen payment method, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels.
3. Service Delivery: To provide access to toto15's gaming services, including live casino, slots, sports betting (EPL, Liga Super Malaysia, UFC, and other markets), lottery, and arcade categories.
4. Customer Support: To respond to enquiries, resolve disputes, and provide multilingual support in English, Bahasa Melayu, and Mandarin.
5. Regulatory Compliance: To comply with anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, responsible gambling obligations, and any other applicable regulatory duties.
6. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other prohibited activities.
7. Responsible Gambling: To monitor gameplay patterns and, where appropriate, apply responsible gambling safeguards including deposit limits, session reminders, and self-exclusion measures.
8. Platform Improvement: To analyse usage data and improve the performance, functionality, and user experience of the toto15 platform.
9. Marketing Communications: To send promotional offers and personalised bonus communications, where you have opted in to receive such communications and where this is permitted by applicable law.

Legal Basis for Processing

toto15 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to fulfil the contract between you and toto15 — including account management, financial transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with toto15's legal obligations under applicable AML, KYC, and responsible gambling regulatory frameworks.
• Legitimate Interests: Processing is necessary for toto15's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests do not override your fundamental rights.
• Consent: Where processing is based on your consent — for example, for direct marketing communications — you retain the right to withdraw that consent at any time by contacting us at [email protected].

Data Sharing

toto15 does not sell your personal data to third parties. We will not disclose your personal data to any external organisation except in the circumstances described below:

• Payment Processors: Financial data is shared with authorised payment service providers — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing partners — solely for the purpose of executing your requested transactions.
• Identity Verification Providers: KYC data may be disclosed to approved third-party identity verification and fraud prevention service providers acting as data processors on behalf of toto15.
• Regulatory Authorities: toto15 may be required to disclose personal data to applicable regulatory authorities, licensing bodies, law enforcement agencies, or courts of competent jurisdiction where required by law or in response to a lawful formal request.
• Technology and Infrastructure Providers: Certain personal data may be processed by toto15's technology service providers — including cloud hosting, data analytics, and platform security providers — under strict data processing agreements that prohibit any secondary use of your data.
• Group Companies: Where toto15 operates through affiliated entities, personal data may be shared within the corporate group for the purposes of consolidated account management and compliance, under equivalent data protection standards.

All third-party recipients are required to handle your personal data in accordance with applicable data protection standards. toto15 does not permit any third-party data processor to use your personal data for their own independent marketing or commercial purposes.

Data Retention

toto15 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations, whichever is longer. The following general retention periods apply:

• Account Data: Retained for the duration of your active Account, plus a minimum period of five (5) years following Account closure, to meet AML, KYC, and licensing audit requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, or for such longer period as may be required by the applicable licensing framework.
• Customer Support Records: Retained for a minimum of three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Preferences: Retained until you withdraw your consent to receive marketing communications or request deletion, subject to any overriding legal retention obligations.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with toto15's internal data destruction procedures.

Cookies & Tracking Technologies

toto15 uses cookies and similar tracking technologies to operate the platform, enhance user experience, maintain session security, and analyse platform performance. The following categories of cookies may be placed on your device when you access toto15:

• Strictly Necessary Cookies: Essential for the operation of the toto15 platform, including session management, authentication, and security functions. These cookies cannot be disabled without affecting core platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised or aggregated data about how users interact with the platform — including pages visited, session duration, and error reports — to help toto15 improve performance and user experience.
• Functionality Cookies: Allow the platform to remember your preferences, such as language settings and interface customisations, to provide a more personalised experience.
• Targeting and Preference Cookies: Where applicable, used to deliver more relevant promotional content and to limit the frequency with which specific promotions are displayed to you.

Data Security

toto15 implements a layered approach to data security, combining technical, organisational, and procedural measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the toto15 platform;
• Two-factor authentication (2FA) available on all user Accounts;
• Encrypted storage of sensitive data, including KYC documents and financial account details;
• Access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular internal security audits and penetration testing of the toto15 platform;
• Incident response procedures that include User notification in the event of a material data breach affecting your personal data, in accordance with applicable regulatory notification requirements.

User Rights

Subject to applicable data protection law and any overriding legal obligations, you have the following rights with respect to your personal data held by toto15:

• Right of Access: You may request a copy of the personal data toto15 holds about you, together with information about how it is being processed.
• Right to Rectification: You may request the correction of any inaccurate or incomplete personal data held by toto15.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected — subject to any overriding legal retention obligations.
• Right to Restriction: You may request that toto15 restrict its processing of your personal data in certain specified circumstances pending resolution of a dispute or an objection.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request that your personal data be provided to you in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on toto15's legitimate interests, including where your data is used for direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact toto15's Data Support team by writing to [email protected]. We will respond to all verified rights requests within thirty (30) calendar days of receipt. In exceptional cases requiring extended review, we will notify you of the reason for the delay within the initial thirty-day period.

Minors & Age Policy

The toto15 platform is strictly intended for adults aged 21 years and above. toto15 does not knowingly collect personal data from individuals under the age of 21. Our registration process incorporates age declaration requirements, and all Accounts are subject to KYC age verification prior to the processing of any withdrawal request.

International Data Transfers

toto15 operates under an international licensing framework. As a result, your personal data may be stored on or transferred to servers located outside of Malaysia. Where such transfers occur, toto15 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles.

These safeguards may include, as appropriate: contractual data processing agreements incorporating standard data protection clauses, technical and organisational security measures as described in Section 10 of this Policy, and the selection of third-party processors operating within jurisdictions recognised as providing adequate data protection standards.

By using the toto15 platform, you acknowledge and consent to the transfer of your personal data to servers and service providers located outside Malaysia, subject to the protections described in this Policy.

Policy Amendments

toto15 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Revised versions of this Policy will be published on this page with an updated "Last Updated" date at the top.

Where changes to this Policy are material — meaning they significantly affect your rights or how your personal data is processed — toto15 will notify registered Users by email to the address associated with their Account, or by posting a prominent notice on the platform, at least fourteen (14) days before the revised Policy takes effect.

Continued use of the toto15 platform following the effective date of any revised Privacy Policy constitutes your acceptance of that revised Policy. If you do not accept the updated terms, you must cease using the platform and may request Account closure by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to toto15's handling of your personal data, you are welcome to contact our Data Support team through any of the following channels:

• Live Chat: Available 24/7 directly on the toto15 platform — fastest response for urgent queries
• Email: [email protected] — we aim to respond within one (1) business day

Our support team is available in English, Bahasa Melayu, and Mandarin. Please include your registered Account email address and a clear description of your query or request to assist us in responding as promptly and accurately as possible.