Privacy Policy Toky88 — Personal Data Protection for Malaysian Players

1Introduction & Scope

Toky88 ("we", "Platform", or "toky88") deeply values the trust you place in us when using our online entertainment services. This Privacy Policy explains in detail how we handle your personal information — from collection through to deletion — in a transparent, responsible, and secure manner.

This policy applies to all users of the toky88 platform, including website visitors, registered account holders, and users of our mobile app on iOS and Android. By using any toky88 service, you agree to the data management practices described in this document.

Toky88 acts as the data controller for all personal information collected through our platform. If you have any questions regarding this policy, please contact our Data Protection Officer through the support channels provided.

2Information We Collect

We collect information necessary to provide a safe, fair, and legally compliant service. The following are the categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data, political views, or religious beliefs unless required by law.

3How We Use Your Data

The information we collect is used exclusively for the following lawful purposes:

• Account Management: Registering, verifying, and managing your player account, including all required KYC processes.
• Transaction Processing: Verifying and processing deposits and withdrawals through your chosen payment method, securely and efficiently.
• Platform Security: Detecting and preventing fraudulent activity, hacking attempts, or any unauthorised access to your account.
• Legal Compliance: Complying with anti-money laundering (AML) regulations, the Personal Data Protection Act (PDPA), and all other applicable reporting requirements.
• Customer Support: Providing technical assistance and resolving any issues or queries you submit to our support team.
• Service Improvements: Analysing usage patterns to improve platform design, introduce new features, and enhance the overall experience.
• Promotional Communications: Sending information about promotions, bonuses, and special offers — only if you have given consent to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need assistance and to enforce limits set by the player.

4Information Sharing

Toky88 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are limited situations where we may need to share your information:

• Payment Service Providers: To process financial transactions, the required payment information is shared with payment gateway providers such as FPX, DuitNow, and approved e-wallet providers.
• Game Software Providers: Third-party game providers may receive the minimum technical data required to operate games correctly within our platform.
• Legal Requirements: We will disclose information to relevant authorities when required by law, court order, or to support financial crime investigations.
• Rights Protection: Information may be disclosed where necessary to protect the rights, property, or safety of toky88, our players, or the general public.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, with appropriate notice provided to users.

All third parties that receive your data are bound by strict data protection agreements and are only permitted to use that information for the stated purposes.

5Data Storage & Security

Toky88 continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. Key security measures we employ include:

• Data Encryption in Transit: All communications between your device and our servers are secured by TLS 1.3 protocol with 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive information such as passwords and financial data is encrypted using robust hashing algorithms before being stored.
• Layered Access Control: Only authorised personnel may access player data, and every access is logged for audit purposes.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect any unusual activity or intrusion attempts.
• Regular Penetration Testing: Security audits and penetration testing are conducted regularly by independent security specialists.
• Automatic Data Backup: Data is automatically backed up to multiple server locations to ensure continuous availability.

6Cookies & Tracking Technologies

Toky88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Preference Cookies: Saving your settings such as preferred language and display theme so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand how players use our platform so we can make meaningful improvements. This data is collected in aggregate and cannot be individually identified.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of some parts of our platform. Refer to your browser's documentation for detailed instructions on managing cookies.

7Your Rights

As a toky88 player, you have the following rights regarding your personal data under Malaysia's PDPA and the data protection principles we uphold:

To exercise any of the above rights, please contact the toky88 support team through the channels provided in your account panel. We will verify your identity before processing any request to ensure the security of your data.

8Children's Data

Toky88 strictly prohibits the use of the platform by individuals under the age of 18. We do not knowingly collect or store any personal information from minors.

If we discover that personal information has been collected from anyone under the age of 18, we will take immediate action to delete that information and close the relevant account. If you believe that someone under the age of 18 has registered an account on our platform, please contact our support team immediately.

9International Data Transfers

In operating our platform, your personal data may be transferred to, stored in, or processed in countries other than Malaysia where our servers or service providers operate. Such transfers are only carried out when necessary to provide the services you have requested.

Toky88 ensures that all international data transfers are safeguarded by adequate protections, including:

• Data processing agreements that comply with international data protection standards.
• Standard contractual clauses approved by the relevant data protection authorities.
• Comprehensive security assessments of all service provider partners before any data transfer takes place.

10Data Retention Period

Toky88 retains your personal data only for as long as necessary for the purposes it was collected, or as required by applicable law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active and for any additional period required after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial reporting and anti-money laundering legal requirements.
• KYC Data (Identification Documents): Retained for 5 years after account closure or as required by regulatory authorities.
• System & Security Logs: Retained for 12 months for security investigation and dispute resolution purposes.
• Support Communication Data: Retained for 3 years to assist in resolving any disputes or claims that may arise.

When data is no longer needed, it will be securely deleted or anonymised so it can no longer be linked to your identity.

11Privacy Policy Amendments

Toky88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform service improvements.

When we make significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications via email to the address registered on your account.
• Displaying a clear notice on the platform's home page for a minimum of 14 days before any changes take effect.

Your continued use of the toky88 platform after any amendments take effect constitutes your acceptance of the revised policy. It is your responsibility to review this policy periodically.

12Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

• Support Email: support@toky88.app
• Live Support Line: Available 24/7 via the Live Chat panel within the platform
• Response Time: We are committed to responding to all privacy enquiries within 5 business days

We also encourage you to visit the FAQ us for answers to frequently asked questions about privacy and account security. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia.