toto262 Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as the "Policy") is issued by toto262, the operator of the online gaming and sports betting platform accessible at https://toto262.cam (the "Platform"). It sets out how toto262 ("we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals who access or use our services ("you" or "the User").

This Policy applies to all personal data collected in connection with your use of the Platform, including data collected when you register an account, make deposits or withdrawals, place bets, contact our support team, or simply browse the Platform. It applies to all Users regardless of location, including players accessing toto262 from Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other locations across Malaysia.

This Policy should be read alongside our Terms and Conditions, which govern your use of the Platform. In the event of any conflict, the Terms and Conditions shall prevail in respect of your contractual rights and obligations.

2 Definitions

The following defined terms apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means toto262, the entity that determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" means any third party that processes personal data on behalf of toto262 pursuant to a data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process required under our licensing and responsible gambling obligations.
• "Cookies" means small text files placed on your device by the Platform or by third-party tools integrated into the Platform, used to store preference and session information.
• "Platform" means the toto262 website at https://toto262.cam and all related pages, features, and services.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

3 Data We Collect

toto262 collects personal data in the following categories:

3.1 Identity and Account Data

Collected at registration and during KYC verification:

• Full legal name;
• Date of birth and age verification;
• Gender (where voluntarily provided);
• Malaysian identity card number (MyKad) or passport number;
• Residential address;
• Nationality.

3.2 Contact Data

• Email address;
• Mobile phone number;
• Preferred communication language (English by default).

3.3 Financial Data

• Payment method type (e.g., Touch 'n Go eWallet, Boost, Maybank2u, DuitNow, FPX, USDT);
• Transaction reference numbers, deposit amounts, and withdrawal records;
• Account balance history;
• Cryptocurrency wallet addresses where applicable.

toto262 does not store full bank account numbers, complete card numbers, or e-wallet credentials on its own servers. Financial authentication is handled by our third-party payment gateway partners.

3.4 Gambling Activity Data

• Betting history, game sessions, wagered amounts, and win/loss records;
• Bonus claim history and wagering progress;
• Self-exclusion requests and responsible gambling tool settings;
• VIP tier status and loyalty point balances.

3.5 Technical and Device Data

• IP address and approximate geolocation;
• Browser type, version, and operating system;
• Device type (desktop, mobile, tablet) and device identifiers;
• Session timestamps, page views, and clickstream data.

3.6 Communications Data

• Support ticket content and live chat transcripts;
• Email correspondence with toto262;
• Marketing preference settings (opt-in or opt-out).

4 How We Collect Your Data

We collect personal data through the following channels:

• Direct submission: information you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or updating your account profile;
• Automated means: cookies, web analytics tools, server logs, and session tracking as you interact with the Platform;
• Third-party payment processors: transaction confirmation data received from Malaysian payment providers including Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX;
• Identity verification providers: confirmation responses from third-party KYC and document verification services;
• Fraud detection tools: device fingerprinting and risk scoring data generated by integrated fraud prevention services.

5 Legal Basis for Processing

toto262 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: processing required to register your account, manage your membership, process deposits and withdrawals, and provide the gaming and betting services you have requested;
• Legal obligation: processing required for us to comply with anti-money laundering regulations, KYC requirements under our gaming licence, and other applicable legal obligations;
• Legitimate interests: processing necessary for our legitimate business interests, including fraud prevention, platform security, internal analytics, and improvement of our services, provided such interests are not overridden by your privacy rights;
• Consent: processing for which you have given explicit consent, such as receiving promotional emails, marketing communications, or personalised bonus offers. You may withdraw consent at any time.

6 How We Use Your Data

toto262 uses your personal data for the following purposes:

• Account management: to register, maintain, and administer your player account on the Platform;
• Identity and age verification: to conduct KYC checks, verify that you are at least 21 years of age, and confirm your identity before processing withdrawals;
• Transaction processing: to process your deposits via Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, DuitNow, FPX, or cryptocurrency, and to process withdrawal requests;
• Service delivery: to operate, maintain, and personalise your experience on the Platform, including serving appropriate casino games, sports betting markets, and promotional offers;
• Responsible gambling: to monitor gambling activity for signs of problem gambling, enforce self-exclusion restrictions, apply deposit limits, and comply with our responsible gambling obligations under our gaming licence;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other prohibited conduct;
• Legal compliance: to meet our obligations under applicable gaming, financial crime, and data protection regulations;
• Customer support: to respond to your queries, complaints, and support requests;
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates where you have provided consent or where permitted under applicable law. You may opt out at any time.

7 Data Sharing & Disclosure

toto262 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and in accordance with applicable law:

7.1 Payment Processors

We share necessary transaction data with approved Malaysian payment service providers — including those operating Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency payment rails — to facilitate deposits and withdrawals. These processors are contractually bound to process data only for the purposes specified.

7.2 Identity Verification Providers

To fulfil our KYC obligations, we may share identity documentation with approved third-party verification providers. These providers process your data solely for identity and age verification purposes.

7.3 Game Content Providers

Our platform hosts games provided by licensed international game studios. Certain technical data (such as session tokens and gameplay events) may be shared with these providers for the purpose of delivering game content. No personally identifiable financial or identity data is shared with game studios.

7.4 Regulatory and Law Enforcement Authorities

We may disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities where required by applicable law, court order, or our gaming licence obligations. We will notify you of such disclosure where we are legally permitted to do so.

7.5 Corporate Transactions

In the event of a merger, acquisition, asset sale, or restructuring involving toto262, your personal data may be transferred to the relevant acquiring or successor entity, subject to that entity maintaining equivalent data protection standards.

8 Data Retention

toto262 retains personal data for as long as is necessary to fulfil the purposes outlined in this Policy, to comply with applicable legal obligations, and to resolve disputes or enforce our agreements. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction protocols.

9 Data Security

toto262 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Firewalls, intrusion detection systems, and regular security audits;
• Two-factor authentication options for player accounts;
• Regular staff training on data protection obligations.

10 Cookies & Tracking Technologies

toto262 uses cookies and similar technologies (such as pixel tags and local storage) on the Platform. By continuing to use the Platform, you consent to our use of cookies as described below.

10.1 Types of Cookies We Use

10.2 Managing Cookies

You may control or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair the functionality of the Platform, including preventing you from logging in or maintaining an active session. Instructions for managing cookies are available in your browser's help documentation.

11 International Data Transfers

toto262 operates under international gaming licensing and may process or store personal data on servers located outside Malaysia. Where personal data is transferred internationally, we take appropriate steps to ensure that the receiving jurisdiction provides an adequate level of data protection, or that appropriate contractual safeguards (such as standard data protection clauses) are in place between toto262 and the receiving party.

In all cases, toto262 remains the Data Controller responsible for your personal data, and the protections described in this Policy apply regardless of the jurisdiction in which processing takes place.

12 Your Rights

Subject to applicable law and our legitimate interests and legal obligations, you have the following rights in respect of your personal data held by toto262:

12.1 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.

12.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

12.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our legal retention obligations; we may be required to retain certain data (such as KYC documents and financial records) for statutory periods even after account closure.

12.4 Right to Restrict Processing

You may request that we limit our use of your personal data in certain circumstances, such as while we investigate the accuracy of data you have disputed.

12.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

12.6 Right to Object

You have the right to object to processing based on our legitimate interests, including the use of your data for direct marketing purposes.

12.7 Exercising Your Rights

To exercise any of the above rights, please contact us using the details in Section 15. We will respond to your request within a reasonable timeframe and in any event within 30 days. We may require proof of identity before processing your request.

13 Protection of Minors

The Platform is strictly intended for individuals aged 21 years and above. toto262 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who believe a minor may have registered on the Platform are encouraged to contact us immediately at the address provided in Section 15.

14 Amendments to This Policy

toto262 reserves the right to update or revise this Privacy Policy at any time. Where amendments are material, we will endeavour to notify registered users by email or via a notice on the Platform. The revised Policy will be published on this page with an updated effective date. Your continued use of the Platform following publication of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure.

15 Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your personal data by toto262, please contact our Data Protection team using the details below.

This Privacy Policy was last updated and is effective as of 1 January 2026. Previous versions are archived and available on request.