At toto168, your privacy is our priority. This document clearly explains what information we collect, why we need it, how we use it, and the security measures we take to ensure your data is always protected.
Six core principles that guide how we handle your personal data
All data transmitted between your device and toto168 servers is protected by 256-bit SSL encryption — the same standard used by banks and major financial institutions worldwide.
Toto168 never sells, rents, or shares your personal information with third parties for marketing purposes. Your data belongs to you — we only use it to operate our services.
We only collect information that is strictly necessary to provide toto168 services — no data is collected without a clear and stated purpose.
You have the right to access, correct, or request deletion of your personal data at any time. Requests can be submitted through the toto168 support team.
The toto168 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a user are always protected.
Should there be any changes to this Privacy Policy, toto168 will notify members via an in-platform notification or registered email before the changes take effect.
Toto168 collects the personal information necessary to provide a safe, fair, and effective online casino platform. We adhere to a data minimisation principle — meaning we only request information that is genuinely required for a specific purpose.
The information we collect falls under the following categories:
| Data Category | Information Type | Purpose of Collection |
|---|---|---|
| Identity Information | Full name, date of birth, identification card number | Identity verification (KYC) and legal compliance |
| Contact Information | Email address, phone number | Account communications, notifications, customer support |
| Financial Information | Bank account name, account number (masked) | Processing deposits and withdrawals |
| Technical Data | IP address, browser type, device used | Security, fraud detection, platform optimisation |
| Usage Data | Game records, transaction history, account activity | Account management, fraud detection, customer support |
All information collected by toto168 is used for clear and lawful purposes. We do not use your data beyond the needs stated in this Privacy Policy.
Toto168 will not use your data to send marketing communications without your consent. You can manage your communication preferences through your account settings at any time.
Toto168 takes a highly limited and responsible approach to sharing personal data. We never sell your data to any party for marketing or commercial purposes.
Your personal information may only be shared in the following situations:
All third-party service providers working with toto168 must adhere to the same stringent data security and confidentiality standards that we hold ourselves to.
Toto168 continuously invests in security infrastructure to protect your personal data. Security is not just about technology — it also encompasses procedures, staff training, and an organisational culture that prioritises data protection.
The technical security measures we use include:
That said, no security system can be guaranteed 100% foolproof. You also play an important role in protecting your account — use a strong and unique password, never share your login credentials, and contact us immediately if you suspect any unauthorised activity on your account.
The toto168 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and deliver more personalised services.
You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the toto168 platform.
Toto168 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.
Once the retention period ends, your data will be securely deleted or anonymised so it can no longer be associated with any specific individual.
As a toto168 member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). We respect and support the exercise of these rights.
To submit any request related to your privacy rights, please contact the toto168 support team via our 24/7 customer service. Requests will be processed within 30 calendar days.
Toto168 services are strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors.
Should toto168 find that we have collected data from an individual under the age of 18, we will take immediate action to delete that information and close the relevant account. If you believe a minor has registered on our platform, please contact our support team immediately.
Toto168 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, the technologies we use, legal requirements, or other operational reasons.
When significant changes occur, we will notify members via in-platform notifications or their registered email at least 14 days before the changes take effect. The "Effective Date" at the top of this document reflects the latest version of the Privacy Policy.
Continued use of the toto168 platform after any amendments take effect constitutes acceptance of the latest version of this Privacy Policy.
If you have any questions, concerns, or requests regarding the toto168 Privacy Policy or how we handle your personal data, please contact our support team. We are committed to addressing every enquiry seriously and in a timely manner.
The toto168 support team operates 24 hours a day, 7 days a week via the live chat platform available on all pages at toto168. You can also reach us by email at: