Privacy Policy Toyoslot – Malaysian User Data Protection

This Privacy Policy describes how Toyoslot (referred to as "we", "our platform" or "Toyoslot") collects, uses, stores and protects your personal information when you use our website at toyoslot.run as well as all services we offer, including online casino games, Sports Betting, and all related account functions.

This policy is formulated in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and applies to all users of the platform Toyoslot who are residing in Malaysia or accessing our platform from Malaysia. By registering or using our services, you confirm that you have read and agreed to how we handle your personal data as described in this document.

We understand that privacy is deeply personal. Many Malaysian users are concerned about the safety of their information when transacting online — and that concern is entirely valid. At Toyoslot, we do not treat our privacy policy as a legal document that simply needs to exist. To us, it is a genuine agreement with every player who trusts our platform with their information.

Toyoslot collects your personal information through several means — directly when you provide it to us, automatically during your use of the platform, and through legitimate third parties in certain contexts. The following are the categories of data we collect:

A) Information You Provide Directly

• Registration Information: Full name, date of birth, email address, Malaysian mobile number, and password
• Identity Verification (KYC) Information: A copy of your MyKad, passport, or other valid identity document when required
• Financial Information: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or bank account details for MYR deposit and withdrawal purposes
• Mailing Address: Where applicable to rewards programmes or physical prizes
• Correspondence with Us: A record of all correspondence between you and the Toyoslot support team

B) Automatically Collected Information

• Device Data: Device type, operating system, web browser version, and unique device identifier
• Location Data: The IP address used to access the platform and an estimated geographic location based on that IP
• Usage Data: Pages visited, games played, session duration, bets placed and in-platform activity
• Cookie Data: Cookie and similar tracking technology information – explained in further detail in Section 6

Toyoslot uses the data collected for the following purposes. Each use has a valid legal basis under Malaysia's PDPA, and we will not use your data for any other purpose without prior notice or obtaining your consent again.

• Account Management: Creating, verifying and maintaining your Toyoslot account securely
• Transaction Processing: Processing MYR deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX
• Identity Verification & KYC: Ensures you meet eligibility requirements and comply with legal obligations, including anti-money laundering (AML) requirements
• Service Provision: Enables you to access and use all games and betting options offered by Toyoslot
• Service Communications: Sending important notifications relating to your account, security, transactions and policy updates
• Customer Support: Handling enquiries, complaints and support requests from you
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account use and security breaches
• Platform Improvement: Analysing usage patterns to improve the user experience, introduce new games, and refine platform features
• Legal Compliance: Meeting reporting and compliance obligations as required under Malaysian law
• Consensual Marketing: Sending Toyoslot promotional offers, bonuses and the latest updates – only where you have given consent to receive marketing communications

Direct Marketing

If you agreed to receive marketing communications at the time of registration, Toyoslot may contact you from time to time with bonus offers, sports promotions (such as BWF badminton or Malaysia Super League-related promotions), and the latest platform updates. You can withdraw this consent at any time by updating your communication preferences in your account profile or by contacting our support team.

Toyoslot does not sell, rent or trade your personal information to any third party for marketing purposes. However, there are limited circumstances in which we need to share your information with certain parties in order to operate the platform properly:

• Payment Service Providers: E-wallet and banking service providers that process your MYR deposit and withdrawal transactions (Touch 'n Go, DuitNow, FPX, etc.) – only the information necessary to process those transactions is shared
• Game Software Providers: Companies such as Pragmatic Play, PG Soft and other providers that supply games on the Toyoslot platform may receive the session data necessary to run those games.
• Identity Verification Services: Third-party providers that assist us with KYC processing and document verification
• Legal Authority: Malaysian authorities or relevant regulatory bodies where we are required to do so by law, court order, or to prevent crimes such as money laundering
• Professional Advisors: Lawyers, accountants, or auditors bound by strict professional confidentiality obligations

The security of your data is Toyoslot's highest priority. We continuously invest in our security infrastructure to ensure your information is protected to the highest standards available in the industry.

Technical Security Measures

• 256-bit SSL/TLS encryption for all communications between your device and Toyoslot's servers
• Encryption at rest for all sensitive information, including passwords and KYC documents
• Multi-layered firewall system and an intrusion detection and prevention system (IDS/IPS) active 24 hours a day
• Real-time monitoring of abnormal activity by our internal security team
• Two-factor authentication (2FA) available for all user accounts
• Regular security testing and audits conducted by independent third parties
• Employee access to user data is restricted on a need-to-know basis

Data Retention Period

Toyoslot retains your personal data only for as long as it is needed. As a general rule, active account data is retained for the duration your account remains active. Once an account is closed, most data will be deleted or anonymised within 90 days, except for records that must be kept longer to meet legal requirements – such as financial transaction records, which must be retained for a minimum of 7 years under Malaysian tax and financial compliance laws.

KYC documents are retained for as long as required under Malaysia's anti-money laundering laws. Non-persistent cookie data is typically deleted when you close your browser or after the designated session period expires.

The Toyoslot platform uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for you. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies, each serving a different purpose:

Under Malaysia's Personal Data Protection Act (PDPA), you have several important rights regarding the personal data we hold. Toyoslot fully respects these rights and makes it straightforward for you to exercise them:

• Right of Access: You have the right to request a copy of all personal data we hold about you. This request will be processed within 21 business days.
• Right to Rectification: If you find that any data we hold about you is inaccurate or out of date, you have the right to request a correction. You can also update most profile information directly within your Toyoslot account.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data. Please note that some data may need to be retained to fulfil legal obligations even after an account is closed.
• Right to Object to Processing: You may object to the processing of your data for direct marketing purposes at any time. Objections relating to processing for other purposes will be assessed on a case-by-case basis.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. This does not affect the validity of any processing carried out prior to the withdrawal.
• Right to Lodge a Complaint: If you are dissatisfied with how Toyoslot handles your personal data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact us by email at support@toyoslot.run by clearly stating your request. We may need to verify your identity before processing any privacy-related request to safeguard your data. All requests will be acknowledged within 3 business days and resolved within the timeframes prescribed by law.

Toyoslot services are exclusively for individuals aged 18 and above. We do not knowingly collect, use or store personal data from anyone under the age of 18. The Toyoslot registration process requires age verification, and we conduct KYC checks to ensure compliance with this age requirement.

If we discover that data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. If you have reason to believe that someone under the age of 18 has registered for or is using the platform Toyoslot, please contact us immediately at support@toyoslot.run so that prompt action can be taken.

The Toyoslot platform may contain links to third-party websites or services in certain contexts. Please note that this Privacy Policy applies solely to the Toyoslot platform at toyoslot.run and does not cover the privacy practices of any third-party websites you may access through those links.

We are not responsible for the content, privacy policies or practices of any third-party websites. We encourage you to read the privacy policy of every website you visit independently. The fact that Toyoslot provides a link to another website does not imply our endorsement or approval of its content or privacy practices.

Toyoslot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or new platform features. We will notify you of any material changes via in-platform notifications or email at least 7 days before changes take effect.

The "Updated" date at the top of this page always reflects when this Privacy Policy was last revised. We encourage you to review this page from time to time. Continued use of the platform Toyoslot after the change notification is considered your acceptance of the updated Privacy Policy.

If you disagree with any changes to this Privacy Policy, you have the right to close your account and request the deletion of your personal data. In such cases, please contact us before the effective date of the changes.

If you have any questions, concerns or requests relating to this Privacy Policy or the way Toyoslot handles your personal data, do not hesitate to get in touch. Our support team is on hand 24 hours a day and is happy to assist in Bahasa Melayu.

• Email: support@toyoslot.run
• Live Chat: Available 24/7 directly within the Toyoslot platform
• Response Time: Data privacy enquiries are acknowledged within 3 business days and resolved within the timeframe stipulated by the PDPA

For enquiries regarding your rights under Malaysia's PDPA, or to submit a data deletion or access request, please state clearly in your communication that this is a "Data Protection Rights Request" so it can be handled correctly by the relevant team at Toyoslot.