Toto888 respects the privacy of every member and is committed to protecting your personal data with the highest level of security. This Privacy Policy clearly explains what data we collect, how it is used, who may access it, and your rights as the owner of that data.
Privacy is more than a legal document to us — it is a promise we keep to every toto888 member across Malaysia.
As a toto888 member and owner of your personal data, the law grants you several important rights that we are fully committed to upholding.
This Privacy Policy ("Policy") is published by toto888 and applies to all users of the toto888.run website and all services provided by toto888 ("Platform"). This Policy describes our practices for collecting, using, disclosing, and protecting the personal data of our members, who are players of online casino, Live Casino, blackjack, lottery, badminton betting, e-sports, and other services at toto888.
Toto888 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. We take our responsibilities as a data controller seriously and continually strive to ensure your personal data is handled with the utmost integrity and professionalism.
This Policy takes effect on 1 January 2026 and supersedes all previous versions. By using the toto888 platform or registering an account, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact us to close your account.
Toto888 collects various categories of personal data from our members. We only collect data that is necessary for legitimate, clearly stated purposes. Below are the details of the data we collect and how it is obtained.
| Data Type | Example | Purpose of Collection |
|---|---|---|
| Identity Information | Full name, date of birth, MyKad number | Account registration, KYC verification |
| Contact Information | Phone number, email address | Account communications, OTP verification |
| Financial Information | Bank account number, digital wallet phone number | Processing deposits & withdrawals |
| Verification Documents | MyKad copy, utility bill | KYC process, identity verification |
| Login Information | Username, password (encrypted) | Account security |
When you use the toto888 platform, our systems automatically record certain technical information to ensure platform security and enhance the user experience. This includes your device's IP address, web browser type and operating system, game session data (login times, games played, bets placed), financial transaction history, and your account settings preferences.
In certain cases, toto888 may receive your personal data from trusted third parties — such as digital identity verification providers, payment service providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, FPX CIMB Clicks), or fraud prevention bodies. This data is used only for the same purposes as data you provide directly and is subject to the same Privacy Policy.
Toto888 uses collected personal data solely for legitimate purposes directly related to the provision of our services. We do not use your data for any purpose beyond the scope set out in this Privacy Policy.
Toto888 uses your gaming activity data — including play frequency, bet sizes, and deposit patterns — to help identify players who may be experiencing gambling-related issues. This forms part of our commitment to responsible gaming and is carried out in your best interest, not for commercial purposes. For more details, please visit the Responsible Gaming us.
Toto888 may send you promotional information, bonus offers, and platform updates via email or SMS if you gave your consent to receive them during registration. You may withdraw this consent at any time by clicking the "Unsubscribe" link in our promotional emails or by contacting toto888 customer support.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection principles, toto888 processes your personal data on the following legal bases:
Toto888 does not sell or disclose your personal data to third parties without your consent, except in the situations outlined below. Any data sharing is carried out with appropriate safeguards and involves only the minimum information required.
To process your deposits and withdrawals, toto888 needs to share certain transaction information with the Malaysian payment service providers you use — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers (Maybank2u, CIMB Clicks). This sharing is limited strictly to the information required to complete the transaction and does not include your gaming data or full account history.
Toto888 partners with world-class Live Casino game providers such as Evolution Gaming, Pragmatic Play Live, SA Gaming, and Microgaming Live. To facilitate access to their games, basic account information (unique user identifier, game balance) is shared with these providers. They are bound by strict data protection agreements and are not permitted to use your data for any other purpose.
Toto888 may be required by law to disclose certain personal data to authorised authorities — including law enforcement agencies, financial regulatory bodies, or courts — when directed to do so through valid legal process. toto888 will not disclose data beyond what is required and will, where permitted by law, notify the affected member of such disclosure.
Toto888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, deletion, alteration, or accidental disclosure.
While toto888 implements comprehensive security measures, the safety of your account also depends on your own actions. Please ensure you use a strong and unique password for your toto888 account, do not share your password with anyone, log out of your account when you are done using a shared device, and report any suspicious activity to the toto888 support team immediately.
Toto888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. When data is no longer needed, it will be securely deleted or anonymised.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | For the duration of the active account | Service Provision |
| Financial transaction records | 7 years from the date of transaction | Tax & AML legal obligations |
| KYC Documents | 5 years after account closure | Regulatory compliance requirements |
| Security activity logs | 2 years | Security incident investigation |
| Support communication history | 3 years | Complaint management & customer service |
| Gaming & betting data | 3 years from the date of play | Dispute resolution & audits |
| Marketing data (with consent) | Until consent is withdrawn | Member consent |
When a toto888 account is closed at a member's request, we will begin the process of deleting or anonymising data within 90 days, subject to the legal retention requirements set out in the schedule above. Data that must be retained for legal purposes will be segregated from active systems and will not be used for any operational purpose.
Toto888 uses cookies and similar tracking technologies to enhance your experience on our platform, secure your login sessions, and understand how members use the platform.
You can manage or disable optional cookies at any time through your web browser settings. However, disabling essential cookies may affect the functionality of the toto888 platform and your gaming experience. For optional cookies, you can use the cookie preference centre available in the toto888 platform settings.
Toto888 strictly prohibits the use of its platform by individuals under the age of 18. toto888 does not knowingly collect or process personal data from minors. Should we discover that personal data of an underage individual has been collected without proper age verification, we will take immediate action to delete that data and close the account in question.
If you are a parent or guardian who believes your child has registered an account with toto888, please contact us immediately at support@toto888.run and we will investigate and take appropriate action within 24 hours. Child protection is an absolute priority for toto888.
In delivering toto888's services, personal data of Malaysian members may need to be transferred to or processed in other countries — particularly in connection with Live Casino game providers (such as Evolution Gaming, Pragmatic Play Live, and SA Gaming) that operate across multiple jurisdictions.
Toto888 ensures that all cross-border data transfers are protected by appropriate safeguards — including standard contractual clauses, data processing agreements, or equivalent security standard requirements. We only transfer data to recipients in countries that offer an adequate level of data protection, or where appropriate contractual safeguards have been put in place.
Toto888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Where significant changes are made, we will notify you via your registered email or a prominent notice on the platform at least 14 days before the changes take effect.
We encourage you to review this Privacy Policy periodically. The "Updated" date at the top of this page will always reflect the date of the latest version. Your continued use of the toto888 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy.
Toto888 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and handling privacy-related enquiries and complaints from our members. If you have any questions, concerns, or wish to exercise your privacy rights, please contact the toto888 Data Protection Officer through the following channels.
To help us process your request promptly, please include in your email: your toto888 account number, the type of request (access, correction, erasure, complaint, etc.), and full details of your request. All privacy-related communications are handled in strict confidence and accessed only by relevant personnel. toto888 is committed to providing a clear, complete, and satisfactory response to every privacy query we receive.
Answers to the most frequently asked questions by toto888 members about their privacy and personal data protection.
With 256-bit SSL encryption, full PDPA compliance, and a strict no-data-sale policy, toto888 is a platform you can trust completely for the best online casino experience in Malaysia.