Toke33 Privacy Policy — Your Data, Our Responsibility

1 Introduction

Toke33 ("we", "Platform") values the privacy of every user who uses our services. This Privacy Policy transparently explains how we collect, process, store, and protect your personal data when you access or use the toke33 platform via the website https://toke33.app or our mobile app.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA), which sets the minimum standards for processing personal data in commercial transactions. Beyond legal compliance, we also adopt stricter data protection principles to ensure your privacy is safeguarded at all times.

This document applies to all users who register, browse, or interact with any part of the toke33 platform, regardless of the access method used — whether via web browser, mobile app, or any other interface we provide.

2 Personal Data We Collect

Toke33 collects your personal data through various means depending on your interactions with our platform. The following are the categories of data we collect:

We only collect data that is strictly necessary for the stated purposes. If you choose not to provide certain information, this may affect our ability to deliver the full range of services to you.

3 How We Use Your Personal Data

The personal data we collect is used for the following purposes, and we always ensure each use has a solid legal basis:

• Account management: Create, verify, and manage your toke33 account, including the login process, password reset, and two-factor authentication.
• Transaction processing: Securely and efficiently process deposits, withdrawals, and all other financial transactions via integrated payment methods.
• KYC and AML Compliance: Fulfil legal obligations related to identity verification and anti-money laundering in accordance with applicable regulations.
• Service improvement: Analyse aggregated usage patterns to improve platform features, user interface, and overall experience.
• Customer support: Provide technical assistance and resolve complaints or enquiries you submit to the toke33 support team.
• Platform security: Detect and prevent fraud, unauthorised access, account misuse, and other suspicious activities.
• Service communications: Send important notices regarding your account, changes to terms, security updates, and other critical information.
• Marketing (with consent): Send promotional offers, bonuses, and toke33 information that may interest you — only where you have given your consent.

We will not use your personal data for any purpose other than those stated above without first notifying you and obtaining your consent.

4 Data Sharing With Third Parties

Toke33 does not sell users' personal data to any party. However, in the course of operating the platform, we may share data with the following selected parties:

• Payment providers: Payment gateways and financial institutions that process your deposit and withdrawal transactions — limited to information required for processing purposes only.
• Technology service providers: Companies that provide server infrastructure, cloud services, and other technical tools required for the operation of the toke33 platform.
• Game providers: Third-party gaming companies whose game software is available on the toke33 platform — limited to the technical data required to ensure smooth game functionality.
• Regulatory authority: Government agencies, regulatory bodies, or legal authorities when we are required to do so under Malaysian law.
• Identity verification: KYC service providers who assist us in verifying user identities in accordance with compliance requirements.

5 Data Security Measures

Toke33 continuously invests in security technology and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures we implement include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols for all communications between your device and toke33 servers.
• Data encryption at rest — passwords and sensitive information such as financial data are stored in an encrypted format that is unreadable even to internal staff.
• Multi-factor authentication (MFA) is available for all user accounts to add an extra layer of protection.
• Round-the-clock security monitoring by our trained cybersecurity team to detect and respond to any threats promptly.
• Regular security audits by independent third parties to assess and strengthen the toke33 platform's security posture.
• Strict internal access controls ensure that only specifically authorised staff can access user data, and every access is logged for audit purposes.

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. In the event of a security incident affecting your data, we will notify you within a reasonable time in accordance with applicable legal requirements.

6 Cookies and Tracking Technologies

Toke33 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance cookies: Helps us understand how users interact with the platform through aggregated statistical data, enabling us to improve functionality and the user interface.
• Functional cookies: Save your preferences such as language, display settings, and other options to deliver a more personalised experience.
• Marketing cookies: Used to display relevant promotional content based on your interests — activated only with your consent.

You may manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the toke33 platform. By continuing to use the platform after the cookie notice is displayed, you consent to the use of cookies as described here.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and international best practices, you have the following rights regarding your personal data at toke33:

To exercise any of the above rights, you may contact the toke33 privacy team via in-platform customer support or through our official email. We will process your request within 30 business days.

8 International Data Transfers

In certain circumstances, your personal data may be transferred to, or processed in, countries outside Malaysia for storage or processing purposes by our service providers. When this occurs, toke33 ensures that:

• Every data transfer is protected by a data transfer agreement that complies with Malaysia's legal requirements.
• Data recipients outside the country are bound by data protection standards equivalent to or higher than those required by PDPA 2010.
• Appropriate technical and organisational measures are implemented to protect your data during and after any transfer.

9 Data Retention Period

Toke33 only retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy or as required by law. Our general data retention guidelines are as follows:

• Active account data: Retained for the duration your account remains active and in use.
• Financial transaction data: Retained for seven (7) years from the transaction date in accordance with Malaysian financial legal requirements.
• KYC Data: Retained for five (5) years after account closure in accordance with AML compliance requirements.
• Technical and security logs: Retained for 12 months for audit and security investigation purposes.
• Marketing data: Deleted when you withdraw consent or close your account.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised in accordance with toke33's standard procedures.

10 Children's Privacy

The toke33 platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.

If you believe a child has registered and is using the toke33 platform, please notify us immediately through our support channels so that appropriate action can be taken.

11 Privacy Policy Amendments

Toke33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. Whenever material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this document.
• Displaying clear notices on the toke33 platform to inform users of such changes.
• Send notices via registered email for changes deemed significant and material.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the toke33 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact the toke33 privacy team through the following channels:

• Live Chat: Available 24/7 via the support icon at the bottom corner of the toke33 platform for the fastest response.
• Official email: Submit your written enquiries to [email protected] (copy this address — not clickable).
• FAQ Section: Visit FAQ page for answers to frequently asked questions about privacy.