Privacy Policy dana toto —
Your Personal Data Protection

In operating the dana toto platform, we collect several categories of personal information from our members. This data collection is necessary to ensure we can provide a safe, seamless, and responsible service to every user.

Your personal data is collected through various channels as you interact with the dana toto platform. Understanding how data is collected helps you make more informed decisions about the information you share with us.

• Account Registration: When you register a new account at dana toto, you are required to complete a registration form with basic personal information such as your name, email, phone number, and date of birth.
• KYC Process: When verifying your identity for security and compliance purposes, you will be asked to upload an identity document, proof of address, and complete a digital identity verification process.
• Financial Transactions: Every time you make a deposit or withdrawal, our system records transaction details including the payment method, amount, and transaction time.
• Platform Usage: Our system automatically records technical and behavioural usage data such as pages visited, session duration, and games played.
• Support Communications: Every interaction you have with the dana toto customer support team via live chat, email, or other channels will be recorded for service quality purposes.
• Cookies and Tracking Technology: Our website and app use cookies and similar technologies to remember your preferences and improve your user experience.

Dana toto uses collected data solely for legitimate and necessary purposes in operating the platform. We never use your data for unlawful purposes or for anything unrelated to the services you use.

• Account Management: Create and maintain your account, process secure logins, and manage your account settings.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions accurately and securely.
• Identity Verification (KYC/AML): Comply with legal requirements related to fraud prevention, anti-money laundering, and verification of the minimum age of 18 years.
• Service Improvement: Analyze usage patterns to improve platform features, performance, and the overall user experience.
• Official Communications: Send important notifications regarding your account, promotions you have opted into, and platform updates.
• Platform Security: Detect and prevent fraudulent activity, hacking, or platform abuse.
• Legal Compliance: Fulfill legal obligations, including reporting suspicious transactions to the relevant authorities when required.
• Customer Support: Helps resolve complaints, inquiries, and technical issues you report to our support team.

Dana toto understands how sensitive your personal data is. We only share information that is strictly necessary, with the right parties, and only when there is a strong justification for doing so. We never sell your data.

• Payment Service Providers: To process your deposits and withdrawals, we need to share relevant transaction information with our partner banks, digital wallet providers, and payment gateways.
• Game Software Providers: Third-party game providers that supply gaming content on our platform may receive game session data necessary to operate the games correctly.
• Authorities & Regulatory Bodies: Where required by law or upon a lawful request from authorities, dana toto will disclose the necessary information. This includes financial crime investigations and compliance with court orders.
• Technical Service Providers: Cloud infrastructure providers, analytics services, and security tools that help us operate the platform may process your data as part of their services, under strict confidentiality agreements.

The security of members' personal data is dana toto's top priority. We continuously invest in the latest security infrastructure to ensure your information is protected at all times, whether in transit or at rest.

• 256-bit SSL/TLS Encryption: All data communications between your device and our servers are secured with industry-standard encryption protocols.
• Multi-Layer Firewall: Our infrastructure is protected by an advanced firewall system that monitors and filters all incoming and outgoing traffic in real time.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account.
• 24/7 Monitoring: Our cybersecurity team monitors systems around the clock to detect any suspicious or unusual activity.
• Periodic Audits: Our security systems are regularly audited by independent parties to ensure no vulnerabilities go undetected.
• Strict Access Control: Access to member data within dana toto is restricted to staff with a legitimate operational need, and all access is logged for audit purposes.

Dana toto retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by law. Once the data is no longer needed, it will be securely deleted or anonymised.

• Active Account Data: Retained for the duration of your dana toto membership.
• Data After Account Closure: Retained for a minimum of 7 years after account closure to fulfil legal requirements relating to financial records and anti-money laundering.
• Transaction Records: Retained for a minimum of 5 years in accordance with financial reporting requirements.
• Communication Logs: Customer support conversation records are retained for 2 years for service quality and dispute resolution purposes.
• Cookie Data: Depending on the type of cookie, retention periods range from the current session only to a maximum of 2 years.

As a data subject, you have certain rights regarding your personal data that dana toto is committed to respecting and facilitating. The following are the key rights you hold:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you, including details on how it is used.
• Right of Rectification: If any of your personal information is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data — also known as the "right to be forgotten".
• Right to Restriction of Processing: You may request that we restrict how we process your data in certain situations, such as while a dispute about its accuracy is ongoing.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request to receive your personal data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: For processing based on your consent, you may withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the dana toto customer support team via live chat within the platform. We will process your request within 30 business days.

The dana toto website and app use cookies and similar tracking technologies to enhance user experience, analyze website traffic, and deliver more relevant content. The following are the types of cookies we use:

• Essential Cookies (Strictly Necessary): These cookies are mandatory for the platform to function correctly. They enable core features such as login session security and transaction verification. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how visitors interact with our platform by collecting anonymized information, which we use to continually improve the user experience.
• Functional Cookies: Allows the platform to remember your preferences such as language, region, and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: We use strictly governed third-party analytics tools to understand usage patterns on an aggregate level. This data helps us make data-driven decisions for platform improvements.

The dana toto platform may contain links or integrations with third-party services such as payment providers and game suppliers. It is important to understand that dana toto's Privacy Policy applies solely to our platform.

When you click a link that takes you away from the dana toto platform, you will be subject to the privacy policy of that third-party website or service. dana toto is not responsible for the privacy practices or content of any third-party websites. We recommend that you read the privacy policy of every platform you visit.

Dana toto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, current legal requirements, or improvements in how we protect members' personal data.

Whenever this Privacy Policy is amended, the "Updated" date shown at the top of this page will be revised. For significant and material changes, we will take proactive steps to notify members through:

• Notifications within the dana toto platform or mobile app
• Notification email to the address registered on your account
• A clear statement on the main page of our platform

Your continued use of the dana toto platform following any changes to this Privacy Policy will be considered your acceptance of the latest version. We therefore encourage you to review this page periodically to stay informed of how we protect your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how dana toto handles your personal data, our team is ready to assist you at any time.

For privacy issues that cannot be resolved through our internal channels, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your jurisdiction.