Toyota303 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") describes how Toyota303 collect, use, disclose, store and protect your personal information when you register an account, use our betting platform, or interact with any of the services we offer.

This document forms part of the overall agreement between you and toyota303, and should be read together with Terms & Conditions us. By registering an account or using the toyota303 platform, you consent to the data protection practices described in this Policy.

Toyota303 operates as a responsible data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all personal data processing complies with PDPA principles, including fairness, data integrity, security, limited use, and data subject access rights.

Toyota303 collects various types of personal data to operate our platform and services effectively. Below is a detailed breakdown of the data categories we collect and the reasons for doing so:

Toyota303 does not collect sensitive personal data such as health information, religious beliefs, political views or biometric data, unless specifically required for identity verification purposes in certain exceptional circumstances, and only with prior notice and your consent.

Toyota303 uses your personal data only for legitimate, stated purposes. We will not use your data for any other purpose without prior notice to you:

• Account Management: Creating and managing your Toyota303 account, verifying your identity at login, processing password reset requests, and maintaining the ongoing security of your account.
• Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks or FPX, verifying withdrawals, and resolving any financial disputes that may arise.
• Legal Compliance: Comply with the requirements of the Personal Data Protection Act 2010 (PDPA), anti-money laundering (AML) obligations, know your customer (KYC) requirements, and any other applicable legal obligations in Malaysia.
• Platform Security: Detecting and preventing fraud, unauthorised access, duplicate accounts, and platform abuse using advanced automated detection systems.
• Service Improvement: Analysing usage data on an aggregated and anonymised basis to understand how members use the toyota303 platform, for the purpose of improving our products and services.
• Service Communications: Sending important notifications about your account, transactions, changes to terms, or security updates via SMS or email. These are not marketing communications — they are essential service notifications.
• Responsible Gaming Programme: Monitoring betting patterns to identify members who may need responsible gaming support, in line with toyota303's commitment to the well-being of our members.

Toyota303 understands that your trust depends on how we handle your data with third parties. Our core principle is simple: we does not sell, rent or transfer your personal data to third parties for their own purposes.

However, in the course of operating the platform, toyota303 may share your data with the following limited categories of third parties, and only for the stated purposes:

• Malaysian Payment Processors: To process your deposit and withdrawal transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX providers (Maybank2u, CIMB Clicks). These processors receive only the minimum data necessary to complete each transaction.
• Platform Technology Providers: Software companies that provide the technical infrastructure for the toyota303 platform, including game management and security systems. All such providers are bound by strict confidentiality agreements and adhere to data security standards equivalent to or higher than those of toyota303.
• Legal Authorities: toyota303 will disclose personal data to Malaysian authorities when required to do so by court order, police warrant, or other legal obligation. In such circumstances, toyota303 will endeavour to notify you in advance where permitted to do so.
• Fraud Investigators: In cases of suspected fraud or money laundering, Toyota303 may share relevant information with law enforcement bodies or relevant agencies in Malaysia.

All third parties that receive data from toyota303 are contractually bound to protect that data in accordance with Malaysia's PDPA and are not permitted to use it for any purpose other than those specified in our agreements with them.

The security of your personal and financial data is Toyota303's top priority. We continually invest in the latest security technologies and procedures to ensure your data is always protected against unauthorised access, use, modification, or disclosure.

The technical security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser or app and Toyota303's servers are protected by 256-bit Secure Socket Layer (SSL) encryption — the highest security standard available for web applications today.
• Two-Factor Authentication (2FA): toyota303 members are encouraged to enable two-factor authentication to add an extra layer of security to their accounts, ensuring that only you can access your account even if your password is compromised.
• 24/7 Monitoring: toyota303's security systems operate and are actively monitored 24 hours a day, 7 days a week to detect any anomalies or security threats in real time.
• Data Segregation: Financial data and identity data are stored separately in distinct databases with strict access controls, ensuring minimal exposure in the event of a security incident.
• Regular Security Audits: toyota303 conducts regular internal and external security audits to identify and address vulnerabilities before they can be exploited by malicious parties.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. You also play an important role in keeping your data safe — ensure your toyota303 account password is strong and unique, never share your login credentials with anyone, and contact our support team immediately if you suspect any suspicious activity on your account.

Toyota303 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the Toyota303 website.

You can manage cookie settings through your web browser preferences. Please note, however, that disabling certain cookies may affect the functionality of the toyota303 platform — particularly essential cookies required for login and session security.

Toyota303 retains your personal data for as long as it is needed for the purposes stated in this Policy, or as required by Malaysian law. Below is a general guide to our data retention periods:

• Active Account Data: Personal data and account records are retained for as long as your toyota303 account remains active, and for any further period required by Malaysian law following account closure.
• Financial Transaction Records: Records of all deposits (DuitNow, Touch 'n Go, GrabPay, FPX and others) and withdrawals are retained for a minimum of 7 years in accordance with Malaysian accounting and tax legislation, as well as AML compliance requirements.
• Security Logs: Access logs and security logs are retained for a minimum of 12 months for the purposes of security incident investigation and fraud detection.
• Marketing Data (where permitted): If you have consented to marketing communications, the relevant information is retained until you withdraw that consent.
• After Account Closure: Once an account is closed, toyota303 will delete or anonymise your personal data that is no longer required for legitimate legal or business purposes within a reasonable timeframe — typically no more than 90 days, except for financial records subject to longer statutory retention requirements.

Malaysia's Personal Data Protection Act 2010 (PDPA) grants you several important rights regarding your personal data held by Toyota303. We are committed to making it straightforward for you to exercise these rights.

Toyota303 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, Malaysian law, or other operational requirements. We will notify you of any material changes via in-platform notifications or email before they take effect.

The "Last Updated" date at the top of this page indicates when this Policy was last reviewed. We encourage you to review this Policy periodically, especially before providing any new personal data or using new platform features.

Previous versions of the Privacy Policy are available upon request. Please contact the Toyota303 support team via Live Chat if you would like to view an earlier version for comparison.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way toyota303 handles your personal data, you may reach us through the following channels:

• Live Chat: Our fastest channel — available 24/7 via the Live Chat icon on the toyota303 website. Average response time is under 2 minutes. Full support available in Bahasa Malaysia.
• Email: support@toyota303.asia — for more detailed privacy enquiries or where written documentation is required. We aim to respond within 24–48 hours on business days.

When contacting us regarding your privacy rights, please include the following to help us process your request more efficiently: your full name, the phone number registered to your toyota303 account, the type of request (data access, correction, deletion, etc.) and full details of your request.

Toyota303 will acknowledge receipt of your request within 3 business days and will endeavour to resolve it within 21 business days from the date the request is received, in accordance with Malaysia's PDPA requirements.

This Privacy Policy takes effect on 1 January 2026 and supersedes all previous versions.