Last Updated: January 2026

Privacy Policy toto138 – Malaysia User Data Protection

At toto138, your privacy is not merely a legal obligation — it is a core value we uphold every day. This policy clearly explains how we collect, use, store, and protect your personal data.

256-bit SSL Protected Malay Language PDPA Compliant

Our Commitment Toward Your Privacy

Six data protection principles that form the foundation of toto138's operations

Highest-Level Encryption

All your personal and financial transaction data is protected by 256-bit SSL encryption technology — the same standard used by leading banking institutions worldwide. Your data is secure end to end.

No Sharing Without Consent

Toto138 will never sell, rent, or share your personal data with any third party for marketing purposes without your explicit consent. Your data belongs entirely to you.

Secure Data Storage

All user data is stored on secure servers protected by multi-layered firewalls and real-time intrusion detection systems. Physical and digital access to our servers is strictly restricted.

Data Controls in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time through your account settings or by contacting our support team.

Regular Security Audits

Our security systems undergo independent audits every quarter to ensure our data protection standards consistently meet or exceed the latest industry requirements.

Immediate Breach Notification

In the event of any security incident involving your data, toto138 is committed to notifying affected users within 72 hours and taking immediate remedial action.

1

Introduction

Toto138 ("we", "our platform") understands that privacy is a matter of utmost importance to every user. This Privacy Policy is designed to provide full transparency on how we handle the personal information you provide to us when using the toto138.vu platform and our mobile app.

This policy applies to all users of the toto138 platform, including unregistered visitors, registered members, and anyone who interacts with our content or services. By using our platform, you acknowledge that you have read and understood this Privacy Policy.

Note: This Privacy Policy should be read together with Terms and Conditions toto138. Both documents together form the complete agreement between you and toto138 regarding the use of our platform.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. If you have any questions about this policy, our team is ready to assist you at any time.

2

Personal Data We Collect

Toto138 only collects data required to deliver the best service to you. The following are the categories of data we collect:

Data You Provide Directly:

  • Full name as stated in your identification document
  • Email address and phone number for account verification purposes
  • Date of birth for age eligibility verification
  • Current residential address
  • Bank account or e-wallet details for processing deposits and withdrawals
  • KYC documents including copies of identity card or passport where required

Automatically Collected Data:

  • IP address and general geographic location information
  • Device type, operating system, and web browser used
  • Activity records within the platform, including pages visited and access timestamps
  • Cookie data and similar tracking technologies
  • Betting and transaction history for compliance and security purposes

Data Minimization Principle: toto138 adheres to the principle of collecting only the minimum data necessary. We do not collect information that is irrelevant to the services we provide.

Data Categories Example Primary Purpose
Identity Data Name, IC number, date of birth Account Verification & KYC
Contact Data Email, phone Communication & 2FA Verification
Financial Data Bank account number, e-wallet Deposit & withdrawal processing
Technical Data IP, device, browser Security & Fraud Prevention
Usage Data Betting history, login records Service enhancement
3

How We Use Your Data

Toto138 uses your personal data for legitimate and transparent purposes. Every use of data is grounded in a lawful basis under Malaysia's PDPA:

  • Account Management: Create, verify, and manage your account on the toto138 platform
  • Transaction Processing: Process deposits, withdrawals, and all financial activities related to your account
  • Fraud Prevention: Detect and prevent fraudulent activity, money laundering, and platform abuse
  • Legal Compliance: Fulfill obligations under applicable Malaysian and international legislation
  • Customer Support: Provide assistance and resolve any issues reported by you
  • Platform Improvement: Analyze usage patterns to enhance the toto138 experience and services
  • Service Communications: Send important notifications related to your account, security, and policy updates

We do not use your data for purposes not stated in this policy without obtaining your consent first. If we wish to use your data for a new purpose, we will notify you and request your consent where required.

4

Data Sharing with Third Parties

Toto138 does not sell your personal data to any party. However, in certain limited situations, we may share data with trusted third parties:

  • Payment Service Providers: Data required to process your deposits and withdrawals is shared with authorised payment providers such as licensed banks and e-wallet operators
  • Game Providers: Some basic information is shared with third-party game providers to allow you to play their games within our platform
  • Authority: We will disclose information when required by law, court order, or a valid request from a law enforcement agency
  • Technical Service Providers: Providers that assist us in operating the platform, such as cloud computing services, subject to strict confidentiality agreements

Guarantee: All third parties that receive toto138 user data are bound by data protection agreements and are required to meet security standards equal to or higher than those we maintain.

5

Data Security Measures

The security of your data is an absolute priority for toto138. We implement a range of technical and organizational measures to protect your data from unauthorized access, loss, or disclosure:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
  • Stored data encryption using the robust AES-256 encryption algorithm
  • Two-factor authentication (2FA) for all account logins and sensitive actions
  • 24/7 security monitoring by our dedicated cybersecurity team
  • Regular penetration testing by certified independent parties
  • Strict access control policy — only authorised personnel may access user data
  • Automated and secure data backup systems to prevent data loss

While we take all reasonable precautions, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and not sharing your login credentials with anyone.

6

Cookies & Tracking Technologies

Toto138 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled
  • Performance Cookies: Collect information on how users use the platform to help us identify issues and improve performance
  • Functional Cookies: Remember your preferences and settings such as language, selections, and currency to improve usability
  • Analytics Cookies: Help us understand how users interact with our platform for service improvement purposes

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the toto138 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

7

Your Rights as a User

Under Malaysia's PDPA and toto138's privacy policy, you have the following rights regarding your personal data:

Right of Access

You have the right to request and obtain a copy of the personal data we hold about you at any time.

Right to Rectification

You may request correction of inaccurate or outdated personal data through your account settings or by contacting customer support.

Right to Erasure

In certain circumstances, you may request that your personal data be deleted, subject to applicable legal requirements.

Right to Object

You may object to the processing of your data for specific purposes such as direct marketing or profiling.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service provider.

Right to Restriction

You may request a restriction on the processing of your data in certain situations while a dispute or request is being handled.

How to Exercise Your Rights: To exercise any of the above rights, contact the toto138 support team via live chat or email at [email protected]. We will process your request within 30 calendar days.

8

Data Retention Period

Toto138 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by law:

  • Active account data is retained for as long as your account remains active on the toto138 platform
  • KYC and identity verification data is retained for a minimum of 5 years after account closure for legal compliance purposes
  • Financial transaction records are retained for 7 years in compliance with Malaysia's financial legal requirements
  • Security and access log data is retained for 2 years for the purpose of investigating potential security incidents
  • Marketing and communications data is retained for 3 years or until you withdraw your consent

Upon expiry of the retention period, your data will be securely deleted using methods that ensure it cannot be recovered. Data that requires archiving will be stored in a format with strictly restricted access.

9

Children's Privacy

Toto138 is a platform strictly intended for individuals aged 18 and above. We do not knowingly collect any personal data from children or minors under the age of 18.

If we determine that we have collected data from someone under the age of 18, we will take immediate steps to:

  • Immediately close the account in question
  • Permanently delete all related data from our systems
  • Return any remaining balance in that account to its original source

If you become aware that someone under the age of 18 has registered on our platform, please contact our support team immediately so that appropriate action can be taken.

10

Changes to the Privacy Policy

Toto138 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons.

When we make significant changes to this Privacy Policy, we will:

  • Update the "Last Updated" date shown at the top of this page
  • Send email notifications to all registered members for significant changes
  • Display a clear notice on the platform for at least 30 days before the changes take effect

Our Recommendation: Please review this Privacy Policy page periodically to stay informed about how we handle your personal data. Continued use of the toto138 platform after any changes is considered acceptance of the updated policy.

11

Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact us through the following channels:

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 on the toto138 platform
  • Target Response Time: Privacy-related inquiries answered within 5 business days
  • Official Requests: Processed within 30 calendar days

We take every privacy-related enquiry seriously. Our dedicated data protection team is ready to help you understand your rights and ensure your data is managed in a responsible and transparent manner.

Your Privacy Is Protected with toto138

Play with peace of mind. Your data is fully protected by the latest encryption technology and our dedicated security team. Join the toto138 community today.

By registering, you agree to the Terms and Conditions and our Privacy Policy.

Bahasa Melayu