Data Protection

Privacy Policy Toto368 – Your Data, Our Responsibility

Toto368 takes every player's privacy seriously. This document transparently explains how we collect, use, store and protect your personal information while you use our platform.

Updated: January 2026  |  Bahasa Melayu
256-bit SSL Encryption

All data transmitted between your browser and toto368 servers is protected by industry-grade encryption.

No Data Sales

Toto368 does not sell, rent or share your personal data with third parties for marketing purposes.

Secure Storage

Your data is stored on secure servers with strict access controls and continuous security monitoring.

Player Access Rights

You may request, amend, or delete your personal data at any time through your account settings.

Communication Controls

Choose the types of notifications you want to receive — you can unsubscribe from marketing communications at any time.

Legal Compliance

Toto368's Privacy Policy complies with applicable data protection laws and international security standards.

1 Introduction

Toto368 is committed to protecting the privacy of every individual who uses our platform. This Privacy Policy document explains our practices regarding the collection, use, storage and disclosure of your personal information.

By registering an account on Toto368, using our services, browsing our website, or interacting with our mobile app, you agree to the practices described in this policy. If you do not agree, please discontinue use of our platform.

We encourage you to read this document alongside our Terms and Conditions and Responsible Gaming Policy to fully understand how toto368 operates and protects your interests as a player.

Note: This policy applies to all Toto368 services, including the website, Android and iOS mobile apps, and any related services operating under the Toto368 brand.

2 Types of Personal Data We Collect

Toto368 collects various types of information depending on how you interact with our platform. We only collect data that is genuinely necessary for legitimate purposes.

Data you provide directly:

  • Full name as stated on your identification document (MyKad or passport).
  • Date of birth for minimum age verification of 18 years.
  • Email address and phone number for account communications.
  • Residential address for verification and KYC compliance purposes.
  • Financial information including bank account numbers or digital wallet details for processing deposits and withdrawals.
  • Copies of identity documents collected during the KYC process.

Data collected automatically:

  • IP address and approximate location based on IP.
  • Device type, operating system, and web browser used.
  • Gaming activity records including betting history, deposits and withdrawals.
  • Login session times and durations.
  • Cookie data and similar tracking technologies — see Section 7.

Our Commitment: toto368 does not directly collect credit or debit card information. All payments are processed through secure third-party payment gateways that comply with PCI-DSS standards.

3 Data Collection and Use Purpose

Every piece of data collected by toto368 has a clear and lawful purpose. We do not use your data for any purpose other than those stated here:

  • Account management: Creating, maintaining, and verifying player accounts, including KYC and age verification processes.
  • Transaction processing: Processing deposits, withdrawals, and other financial activities accurately and securely.
  • Service delivery: Running platform operations including games, wagering, and Live Casino functions.
  • Platform security: Detecting and preventing fraud, money laundering, and unauthorized access.
  • Account communications: Sending important notices related to accounts, transactions, and policy changes.
  • Marketing (with consent): Sending promotions and special offers to players who have given their consent.
  • Analytics and improvement: Analyzing usage patterns to improve user experience and our services.
  • Legal compliance: Fulfilling applicable legal and regulatory compliance obligations.

4 How Toto368 Protects Your Data

Protecting player data is toto368's top priority. We apply multiple layers of technical and organizational security to keep your information safe.

256-bit SSL Encryption
All data in transit is protected with HTTPS/TLS encryption, the same standard used by banking institutions.
Secure Database
Data is stored on protected servers with role-based access control.
Two-Factor Authentication
An additional security layer via 2FA protects your account from unauthorized access.
24/7 Monitoring
Continuous security monitoring systems detect and respond to threats promptly.

While we take all reasonable steps to protect your data, no security system is one hundred percent perfect. We encourage players to help keep their accounts secure by using strong passwords, not sharing login credentials and reporting any suspicious activity to our support team promptly.

5 Data Sharing with Third Parties

Toto368 does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. Your data is only shared in the following limited situations:

  • Service providers: Third parties that assist in operating our platform — such as payment processors, game providers, and server service providers — are all bound by strict confidentiality agreements.
  • Legal compliance: When required by law, court order, or directive from a competent regulatory authority.
  • Fraud prevention: With fraud prevention agencies where there is suspicion of illegal activity or financial crime.
  • Business transfers: In the event of a merger, acquisition or sale of company assets — players will be notified in advance.

Our Guarantee: All third parties that receive your data are contractually bound to use it only for the specified purposes and to comply with the same data protection standards as toto368.

6 Your Rights as a Data Owner

As a toto368 player, you have certain rights regarding your personal data. We fully respect these rights:

Your Rights Description How to Apply
Right of Access Request a copy of the personal data we hold about you. In Account
Right to Rectification Correct inaccurate or incomplete data. In Account
Right to Erasure Request deletion of your data (subject to legal obligations). Contact Support
Right to Restriction Restrict the processing of your data under certain circumstances. Contact Support
Right to Portability Receive your data in a machine-readable format. Contact Support
Right to Object Object to processing for direct marketing purposes. In Account

All data rights requests will be processed within 30 calendar days. Toto368 reserves the right to request identity verification before processing any request related to personal data.

7 Cookie Policy

Toto368 uses cookies and similar tracking technologies to enhance user experience, analyze traffic and ensure platform security. Cookies are small text files stored on your device.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the Toto368 platform. Third-party marketing cookies are not used on Toto368.

8 Data Storage and Deletion

Toto368 retains your personal data for as long as your account is active and for the period required after account closure to comply with applicable legal and regulatory obligations.

  • Active account data: Retained for as long as the account is active, plus a minimum of 5 years after account closure for legal compliance purposes.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial legal requirements.
  • Security logs: Retained for 12 months for security investigation purposes if required.
  • Marketing data: Deleted within 30 days of your consent withdrawal.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered or accessed again.

9 Third-Party Links and Services

The toto368 platform uses third-party services for certain operations such as payment gateways and game providers. Each of these third-party services has its own privacy policy.

Toto368 is not responsible for the privacy practices of third parties outside our direct control. However, all third-party partners are selected based on their security reputation and compliance with strict industry standards. Every third-party service agreement contains data protection clauses that safeguard our players' information.

10 Privacy Policy Updates

Toto368 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform improvements. Each update will:

  • Notified via an in-platform notice during your next login session.
  • The "Last Updated" date at the top of this document will be revised accordingly.
  • Sent via email for significant changes affecting player rights.

Continued use of the toto368 platform after the effective date of any update constitutes acceptance of the revised policy.

11 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or how toto368 handles your personal data, please contact our team:

Live Support
Live chat is available 24/7 within the platform after login.
Privacy Email
[email protected] for personal data inquiries.

Your Data Journey at toto368

From registration to withdrawal, every stage of your data handling is designed with security as the top priority.

1
Collection

Data is collected only when necessary, via secure forms with end-to-end encryption.

2
Verification

KYC and document verification are conducted in a secure environment by trained staff.

3
Storage

Data is stored on protected servers with strict access controls and secure backups.

4
Usage

Data is accessed solely for legitimate purposes — account operations, transactions, and security.

5
Deletion

Data is securely deleted after the designated retention period expires.

Play with Confidence at Toto368

With 256-bit SSL encryption, rigorous KYC, and a transparent privacy policy, Toto368 provides the data security assurance you need to play with peace of mind. Register today and experience the difference for yourself.

For adults aged 18 and above only. Please play responsibly.

Bahasa Melayu