At toto88, we take our responsibility towards your personal data seriously. This Privacy Policy transparently explains how we collect, use, store, and protect your information — in line with internationally recognised data protection standards.
Six core principles underpinning the protection of your personal data at toto88
All personal and financial information you share with toto88 is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions such as Maybank and CIMB. This means your data cannot be read by any unauthorised party, even if intercepted during transmission.
Toto88 has never sold, rented, or distributed members' personal information to marketing companies, advertisers, or any other third parties for commercial purposes, and never will. Your data is collected solely for the operation of the toto88 platform and to enhance your gaming experience — not to be monetised by others.
As a toto88 member, you have the full right to request access to the personal data we hold about you, request corrections to inaccurate information, request deletion of your data and withdraw consent for data processing at any time. All such requests can be submitted through our customer support team, available 24 hours a day.
Not all toto88 staff have access to member personal data. Access to sensitive information such as MyKad numbers, banking details, and financial transaction records is restricted to personnel with a legitimate operational need — and all such access is logged and continuously monitored to prevent misuse.
Toto88 only sends marketing communications such as promotional offers and bonus notifications to members who have given explicit consent. You may unsubscribe from marketing emails at any time via the unsubscribe link in any toto88 email, or by adjusting your notification settings within your account.
Toto88 retains your personal data only for as long as necessary for legitimate operational purposes — including legal compliance, dispute resolution, and audit requirements. When data is no longer needed, it is securely deleted or anonymised in accordance with established procedures.
Important Note: This Privacy Policy forms part of the toto88 Terms & Conditions and is binding on all members. By using the toto88 platform, you agree to the processing of your personal data as described herein. If you do not agree, please discontinue use of toto88's services.
toto88 (operated via the domain toto88-bangla.com) is the data controller responsible for processing the personal information of members registered in Malaysia. We take this responsibility seriously and are committed to managing your data with respect, transparency, and in accordance with recognised data protection standards.
This Privacy Policy is written in Bahasa Melayu to ensure all Malaysian members can clearly understand their rights and how we manage their data without any ambiguity. This version takes effect from January 2026 and supersedes all previously published versions of the Privacy Policy.
We encourage you to read this document in full. It contains important information about your rights and how toto88 respects your privacy across every aspect of platform operations — from account registration and gaming activity to deposits via Touch 'n Go or DuitNow, and customer support communications.
Toto88 collects your personal data through several channels when you use our platform. Below are the categories of data we collect and their sources:
| Data Category | Details | Source |
|---|---|---|
| Identity Data | Full name, MyKad/passport number, date of birth, gender | Account registration & KYC process |
| Contact Data | Email address, Malaysian phone number, residential address | Account registration |
| Financial Data | Bank account numbers, digital wallet details (TnG, GrabPay, etc.), transaction records in MYR | Deposit & withdrawal process |
| Gaming Activity Data | Gaming history, betting records, wins and losses, playing duration | Platform activity |
| Technical Data | IP address, device type, web browser, operating system, cookies data | Automated platform access |
| Communication Data | Live chat records, customer support tickets, emails sent to us | Customer support interactions |
We do not collect sensitive data such as medical information, religious beliefs or political views. Financial data such as your full credit card number is never stored by toto88 — this information is processed directly by the relevant payment providers.
Minimum Data: toto88 adheres to the principle of data minimisation — we only collect information that is genuinely necessary for legitimate operational purposes and do not gather excessive data.
Toto88 uses your personal data for the following purposes, each of which has a valid legal basis:
toto88 does not make automated decisions that significantly affect you based solely on data profiling without human involvement. Important decisions such as account closures always involve a manual review by our team.
Toto88 does not sell your personal data. However, in certain limited situations, we may share your information with the following parties for legitimate operational purposes:
In all of the data-sharing scenarios above, toto88 ensures that only the minimum necessary data is shared, and that all receiving parties are bound by confidentiality obligations — whether contractual or legal.
Toto88 implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or disclosure:
Shared Responsibility: Your account security also depends on your own actions. Please use a strong password, enable 2FA, and never share your login credentials with anyone. toto88 will never ask for your password via email, phone, or live chat.
Toto88 uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:
You can manage your cookie settings through your web browser's settings. However, disabling certain cookies may affect the functionality of toto88's platform. For mobile browsers, you can manage cookies through the privacy settings of your Android or iOS browser.
As a toto88 member in Malaysia, you have the following rights regarding your personal data. We fully respect these rights and will process every request promptly:
You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 30 days of submission.
If any personal information held in toto88's records is inaccurate or out of date, you have the right to request an immediate correction.
You may request the deletion of your personal data, subject to our legal obligations to retain certain records for audit and regulatory compliance purposes.
You may object to the processing of your data for direct marketing purposes at any time. Such requests will be honoured immediately.
You have the right to receive the personal data you have provided to toto88 in a machine-readable format (such as JSON or CSV) for reuse where required.
In certain situations, you may request that toto88 restrict the processing of your data while an issue is being resolved — for example, while a data correction request is being handled.
To submit any request relating to the rights above, contact the toto88 support team by email at support@toto88-bangla.com or via live chat on the platform. We will verify your identity before processing any request to ensure the security of your data.
The toto88 platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.
If you are a parent or guardian and believe that your child under the age of 18 has registered an account with toto88, please contact us immediately at support@toto88-bangla.com. We will take immediate action to verify, close the account in question, and delete all associated data.
toto88 implements technical and procedural measures to prevent registration by underage individuals, including date of birth verification at registration and MyKad verification during the KYC process for fund withdrawals.
Toto88 retains your personal data for as long as necessary based on the purpose for which it was collected and applicable legal requirements:
Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered, or anonymised for internal statistical use with no personally identifiable value.
Toto88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or new platform features.
When significant changes are made to this Privacy Policy, we will:
Continued use of the toto88 platform after the effective date of any Privacy Policy changes constitutes full acceptance of the revised policy. If you do not agree with any changes, you have the right to close your account before they take effect.
If you have any questions, concerns, or complaints about how toto88 handles your personal data, or if you wish to submit a request regarding your rights, please contact us through the following channels:
We are committed to handling all privacy enquiries and complaints seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in Malaysia.
The process we follow when you submit a privacy rights request
Reach us by email at support@toto88-bangla.com or via live chat on the platform. Please specify the type of request — access, correction, deletion, or other.
We will verify your identity to confirm that the request is coming from the legitimate account holder. This process safeguards your data from unauthorised access.
The toto88 privacy team will review your request within 3 business days. For more complex requests, processing may take up to 30 days.
We will notify you of the outcome of your request by email. If the request is fulfilled, we will confirm the action that has been taken.
Frequently asked questions from Malaysian members about data privacy at toto88
Toto88's ongoing commitment to protecting Malaysian members' data
Read other important documents related to your use of the toto88 platform
Register free in under 2 minutes. Your data is protected by 256-bit SSL encryption and we never sell your information. Deposit via Touch 'n Go, GrabPay or DuitNow and start playing today.
⚠️ For players aged 18 and above only. Please gamble responsibly.