Privacy Policy Toke66 —
Your Personal Data Protection

This Privacy Policy describes how toke66 ("we", "platform") handles personal data for all users and members accessing our website and mobile applications. This document applies to all data collected through the toke66 platform, including the official website, Android and iOS apps, and all official communication channels.

By using the toke66 platform, you acknowledge that you have read and understood this Privacy Policy. We encourage you to read this document in full and contact us if any section is unclear.

Toke66 operates in accordance with internationally recognised data protection principles, including data minimisation, accuracy, purpose limitation, data security, and transparency.

We collect data from you through various means when you interact with the toke66 platform. Below are the categories of data collected:

The personal data we collect is used solely for legitimate and necessary purposes. We do not collect excessive or irrelevant data beyond what is required to operate the platform:

• Account Management: Creating, verifying, and maintaining member accounts, including the KYC process required to meet compliance obligations.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions within the platform securely and efficiently.
• Customer Service: Providing technical support and assistance to members, resolving complaints, and responding to inquiries.
• Platform Security: Detecting and preventing fraud, account abuse, money laundering, and other illegal activities.
• Legal Compliance: Fulfilling reporting and compliance obligations to the relevant regulatory authorities.
• Service Improvements: Analyzing aggregated usage patterns to improve user experience and platform features.
• Promotional Communications: Sending promotional information, bonuses, and special offers to members who have consented to receive such communications.

Toke66 does not sell, rent, or trade members' personal data to any third party for marketing purposes. Data is only shared in the following situations:

• Service Providers: Third parties that help us operate the platform — such as payment processors, game technology providers, and identity verification services — are all bound by strict confidentiality agreements.
• Legal Requirements: When required by court order, regulatory authority directive, or applicable law in Malaysia.
• toke66 Rights Protection: If required to prevent fraud, protect platform security, or enforce our Terms and Conditions.
• Your Consent: In other cases where you have given explicit consent for data sharing.

Protecting member personal data from unauthorized access, loss, destruction, or disclosure is a responsibility we take very seriously. Our security measures include:

• 256-bit SSL encryption for all data transmitted between your device and toke66 servers.
• Passwords are stored using advanced hashing algorithms — we never store passwords in plain text.
• Two-factor authentication (2FA) is available and encouraged for all member accounts.
• Round-the-clock 24/7 security monitoring to detect suspicious activity or intrusion attempts.
• Regular security audits conducted by independent cybersecurity specialists.
• Strict internal access controls — only authorized staff may access member data, and only for legitimate purposes.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. We encourage members to also take personal precautions, such as using strong passwords and not sharing login credentials.

Toke66 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly.

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language and display settings for a more personalized experience.
• Analytics Cookies: Collecting anonymized usage data to help us understand how members use the platform and identify areas for improvement.
• Session Cookies: Automatically deleted when you close your browser — used to maintain your login session during active use.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some platform features.

As a toke66 member, you have the following rights regarding the personal data we hold:

Toke66 retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law:

• Active Account Data: Retained for the duration your account remains active and operational.
• Data After Account Closure: Certain information such as transaction records and identity verification data is retained for a minimum of 5 years after account closure to meet legal compliance requirements.
• Technical Log Data: Access logs and technical data are retained for a maximum of 12 months before being automatically deleted.
• Communication Records: Correspondence with customer support is retained for 3 years for reference and dispute resolution purposes.

Toke66 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technologies, or updated legal requirements. When we make material changes:

• We will update the "Updated" date at the top of this page.
• Notice of significant changes will be sent to your registered email address at least 14 days before taking effect.
• For minor changes that do not affect core member rights, we may update this page without separate notice.

We encourage you to review this page regularly to stay informed about how we protect your information.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact our privacy team:

• Email: [email protected]
• Response Time: We aim to respond to all privacy-related enquiries within 5–7 business days.
• Live Chat: Available 24/7 via the chat icon on our platform for any immediate enquiries.

For formal data deletion or data access requests, please clearly state the purpose of your request and include the required identity verification information so we can process it securely.