Privacy Policy Togel138 — Personal Data Protection for Malaysian Members

This Privacy Policy explains how Togel138 (operating under the domain togel138.my) collects, uses, discloses, stores, and protects your personal data when you use our platform. This document applies to all users accessing the Togel138, registering as a member, conducting financial transactions, or interacting with any of the services we offer.

By registering an account or using the platform Togel138, you hereby give your consent to the processing of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, you should not use our platform.

Togel138 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of handling members' personal data. This means we only collect data that is strictly necessary to provide our services, retain it only for as long as needed for those purposes, and protect it with appropriate security measures.

Togel138 collects two main types of data: information you provide directly to us, and data collected automatically through your use of our platform.

Information you provide directly:

• Registration information: Full name, Malaysian phone number, email address, and password (stored in encrypted form).
• Identity verification information: MyKad or passport number, date of birth — collected when KYC verification is required, primarily for withdrawals exceeding a specified threshold.
• Financial information: E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or bank account details (FPX — Maybank2u, CIMB Clicks) used for deposits and withdrawals. Note: we do not store credit or debit card numbers.
• Communications information: Any messages, complaints, or enquiries you submit to the support team Togel138.

Automatically collected data:

• Log data: IP address, browser type, operating system, pages visited, access time, and referring URL.
• Device data: Device type, unique device identifier, mobile operating system, and application version.
• Activity data: Betting history, games played, wager amounts, wins and losses, and platform usage patterns.
• Cookie data: Information collected through cookies and similar tracking technologies — further details in Section 7.

Togel138 uses your personal data solely for legitimate and necessary purposes. We will not use your data for any purpose not stated here without first obtaining your consent.

The primary purposes for which your personal data is used at Togel138:

• Account management: Creating, verifying, and managing your member account on the platform Togel138.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, as well as withdrawals of winnings to your registered account.
• Identity verification (KYC): Verifying your identity in accordance with anti-money laundering procedures and legal compliance requirements.
• Platform security: Detecting and preventing fraud, unauthorised access, system exploitation, and other suspicious activities.
• Responsible gambling: Monitoring gaming patterns to identify signs of problem gambling and providing appropriate assistance to members who need it.
• Customer support: Handling enquiries, complaints, and assistance requests from members.
• Platform improvements: Analysing aggregated usage patterns to improve the user experience, identify bugs, and develop new features.
• Essential communications: Sending security notifications related to your account, updates to our terms, or other important information relevant to your use of the platform.
• Marketing (with consent): Sending information about promotions, bonuses, and new offers — only to members who have given consent to receive marketing communications.

Togel138 does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. This is an absolute and unwavering commitment.

However, there are limited circumstances in which Togel138 may need to share your data with certain parties:

• Payment processors: Required transaction information is shared with e-wallet operators (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or FPX providers (Maybank, CIMB) solely for the purpose of processing your financial transactions. These providers are bound by their own privacy policies.
• Game software provider: Minimal gaming session information is shared with licensed game providers (Pragmatic Play, PG Soft, Evolution, and others) for technical purposes only. No personally identifiable information is shared.
• Legal authorities: Data may be disclosed to law enforcement agencies or relevant authorities when required by court order or applicable laws in Malaysia.
• Audits and compliance: Authorised independent auditors verifying RNG system compliance and financial procedures may access limited relevant data.

Protecting your personal data is the highest technical priority for the Togel138. We implement multiple layers of security measures to keep your data safe at all times:

• 256-bit SSL Encryption: All communications between your browser or app and the Togel138 encrypted using TLS 1.3 with AES-256 encryption — the same standard used by major Malaysian banks.
• Hashed passwords: Your account password is never stored in plain text. We use a strong one-way hashing algorithm, meaning your actual password is unknown to anyone — including our own technical team.
• Two-factor authentication (2FA): Members are encouraged to enable two-factor authentication for an additional layer of account protection. 2FA requires a one-time OTP code sent to your phone number each time you log in from a new device.
• Real-time threat monitoring: Our system continuously monitors account activity to detect suspicious login patterns, access attempts from unusual locations, or abnormal transaction activity.
• Internal access controls: Access to member data within the organisation Togel138 is limited to staff who genuinely require access to carry out their duties, in accordance with the principle of least privilege.
• Backup and disaster recovery: Member data is automatically and regularly backed up to a separate, secure location to ensure service continuity in the event of an emergency.

Even with all these security measures in place, no system can be guaranteed 100% secure. You also play an important role in protecting your account — never share your password with anyone, use a strong and unique password, and always log out on shared devices.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by Togel138. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the above rights, you may contact our support team Togel138 via Live Chat or by emailing support@togel138.my clearly stating your request. We will process it within 14 business days once your identity verification is complete.

Please note that certain rights may be subject to exceptions in specific circumstances — for example, we may not be able to fully delete transaction data that must be retained to fulfil legal obligations such as PDPA compliance, anti-money laundering requirements, or court orders.

Platform Togel138 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse how our platform is used. Cookies are small text files stored in your browser when you visit our website.

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the platform Togel138 — for example, you may need to log in again each time you visit the platform.

Togel138 retains your personal data only for as long as necessary for the purposes outlined in this policy, or as required by applicable laws in Malaysia. Below are our data retention guidelines:

• Active account data: Retained for as long as your account remains active on the platform Togel138.
• Financial transaction records: Retained for 7 years after the transaction date, in accordance with Malaysian financial and tax legal requirements.
• Platform activity logs: Retained for 12 months for security purposes and dispute resolution.
• Identity verification records (KYC): Retained for 5 years after account closure in accordance with anti-money laundering compliance requirements.
• Customer support communications: Retained for 3 years for reference and service improvement purposes.
• Closed account data: Following account closure, most identifiable personal data will be deleted within 90 days, except for records that must be retained by law as stated above.

Once the retention period has expired and there is no legal requirement for further retention, your data will be securely deleted or anonymised so it can no longer be linked to you personally.

Platform Togel138 is exclusively for individuals aged 21 and above. We do not knowingly collect personal data from anyone below this age. Should we discover that data from an underage user has been collected, we will take immediate steps to delete that data and close the account in question.

If you believe that a child or individual under the age of 21 has registered on the platform Togel138, please notify us immediately by emailing support@togel138.my. We will investigate and take immediate action.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Togel138 handles your personal data, you may reach us through the following channels:

• Email: support@togel138.my — response within 2 business days.
• Live Chat: Available 24/7 within the platform Togel138 — prompt response within business hours.
• VIP Diamond members: Contact your personal account manager directly via the WhatsApp number provided.

Togel138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Members will be notified of any material changes via in-platform notifications and/or email at least 14 calendar days before taking effect.

It is each member's responsibility to review this Privacy Policy periodically. The "Last Updated" date at the top of this document indicates when the most recent amendments were made. Your continued use of the Togel138 after the amendment takes effect will be deemed acceptance of the amended Privacy Policy.