Your Privacy Matters: At toto121, we take the privacy of our members seriously. This Privacy Policy explains in plain terms — as well as in legally precise language — what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a data subject. We recommend reading this document in full before creating a toto121 account.
This Privacy Policy ("Policy") describes how toto121 ("toto121", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("Members", "Users", "you") who access or use the toto121 online gaming platform, including its website, mobile-optimised interface, games, sportsbook, and all associated services (collectively, the "Platform").
By registering a toto121 account, using the Platform, or otherwise providing personal data to toto121, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the toto121 Terms & Conditions and Responsible Gaming Policy.
toto121 is committed to handling personal data responsibly, transparently, and in compliance with applicable data protection standards, including those relevant to its international gaming licence jurisdiction and the members it serves across Malaysia — from Kuala Lumpur and Penang to Johor Bahru and beyond.
toto121 acts as the data controller in respect of personal data collected through the Platform. As data controller, toto121 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection requirements.
Where toto121 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, and game software suppliers), those providers act as data processors under written agreements that impose data protection obligations consistent with this Policy.
For all data protection enquiries, including requests to exercise your rights under Section 10 of this Policy, please contact toto121 through the channels specified in Section 14.
toto121 collects personal data through several channels, including account registration, Platform use, customer support interactions, and payment transactions. The categories of personal data we collect include:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / passport / driving licence number and copy | Provided by you during registration or KYC |
| Contact Data | Email address, Malaysian mobile number, residential address | Provided by you during registration or account updates |
| Financial Data | Payment method details (e-wallet account references, bank account identifiers), transaction history, deposit and withdrawal records | Provided by you during payment transactions; received from payment processors |
| Gaming Data | Game play history, wager amounts, win/loss records, session duration, game preferences, bonus activity | Generated automatically through Platform use |
| Technical Data | IP address, device type and identifier, browser type and version, operating system, session timestamps, referring URLs | Collected automatically via cookies and server logs |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Generated through customer support interactions |
| Responsible Gaming Data | Self-imposed deposit limits, loss limits, cooling-off periods, self-exclusion status | Provided by you through account settings; generated automatically upon activation |
toto121 does not collect sensitive categories of personal data (such as racial or ethnic origin, health data, or political opinions) unless specifically required for responsible gaming compliance or compelled by applicable law.
toto121 uses the personal data described in Section 3 for the following purposes:
toto121 processes personal data on the following legal bases:
toto121 uses cookies and similar tracking technologies on the Platform to provide core functionality, maintain session state, and analyse Platform usage. The categories of cookies used include:
You may manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from using certain Platform features, including logging in to your toto121 account.
toto121 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
All third-party processors engaged by toto121 are required to implement appropriate technical and organisational security measures and to process personal data only on toto121's documented instructions.
toto121 operates in an international gaming environment. Some of the service providers and game suppliers we engage may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, toto121 implements appropriate safeguards to ensure that the transferred data receives a level of protection consistent with the standards described in this Policy.
Appropriate safeguards for international transfers may include contractual clauses that impose data protection obligations on the recipient, or transfers to recipients in jurisdictions that have been assessed as providing an adequate level of data protection. If you require further information about the safeguards applied to any specific international transfer of your personal data, please contact toto121 through the channels in Section 14.
toto121 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention principles apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for analytical purposes.
Subject to applicable law and our obligations under gaming licence conditions, you have the following rights in respect of your personal data held by toto121:
To exercise any of these rights, please contact toto121 through the channels in Section 14. We may require you to verify your identity before processing any data subject request. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.
toto121 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Security measures in place at toto121 include:
While toto121 takes all reasonable precautions to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, toto121 will notify affected members and relevant authorities in accordance with applicable requirements.
The toto121 Platform is strictly intended for use by persons aged 21 and above. toto121 does not knowingly collect personal data from individuals under this age. Age verification is conducted as part of the mandatory KYC process prior to the processing of any withdrawal request.
If toto121 becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, any deposits will be returned (less amounts wagered), and the personal data will be deleted in accordance with our data retention procedures. If you believe a minor has provided personal data to toto121, please contact us immediately through the channels in Section 14.
toto121 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. Where changes are material, we will provide notice to members through one or more of the following channels: a notice on the Platform, an email to your registered address, or an in-account notification.
The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Continued use of the toto121 Platform following the effective date of any revised Policy constitutes your acceptance of the changes. We recommend reviewing this page periodically.
If you do not agree with any changes to this Privacy Policy, you should cease using the Platform and may close your account in accordance with the toto121 Terms & Conditions.
For any queries about this Privacy Policy, to exercise your data subject rights as described in Section 10, or to report a data protection concern, please contact toto121 through the following channels:
toto121 aims to acknowledge data subject requests within 5 business days and to provide a substantive response within 30 days. Complex requests may require additional time, in which case we will inform you of the expected timeframe.
This Privacy Policy was last reviewed and updated on 12 June 2026. It supersedes all prior versions of the toto121 Privacy Policy. Questions? Reach our support team via live chat on the Platform 24/7.
Every connection between your device and the toto121 Platform is secured with SSL 256-bit encryption — the same standard used by major financial institutions. Your login credentials, personal data, and financial transaction details are protected in transit at every session.
toto121 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data shared with third-party processors — payment providers, KYC services, game suppliers — is strictly for the purpose of delivering the services you use, under binding data processing agreements.
Two-factor authentication is available to all toto121 members. Enabling 2FA means that even if your password is compromised, your account cannot be accessed without the second verification factor — protecting both your personal data and your wallet balance from unauthorised access.
Within toto121, access to member personal data is restricted on a strict need-to-know basis. Only staff whose roles require access to specific data categories can view them. All internal access is logged and subject to regular audit. Your data is not visible to the full toto121 team.
toto121 members can exercise data subject rights — access, rectification, erasure, portability, and more — by contacting our 24/7 live chat or emailing support. We acknowledge requests promptly and aim to respond in full within 30 days. No legal jargon required — just ask.
toto121 does not hold your data indefinitely. Retention periods are clearly defined — active account data is kept for the duration of membership plus five years for AML compliance; support records for three years. When the retention period expires, data is securely deleted or anonymised.
Your data is protected. Your MYR payouts are fast. Your games are certified fair. toto121 is the online casino and sportsbook built for Malaysian players who expect proper standards — in security, in service, and on the tables.
toto121 is open to members aged 21 and above only. Please read our Privacy Policy and gamble responsibly.