Toto868 is committed to protecting your privacy and personal data. This Privacy Policy clearly explains how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010.
Effective: 1 January 2026 | Last updated: 15 January 2026
Welcome to the toto868 Privacy Policy. This document explains how the toto868 platform (accessible via toto868.fun and the toto868 mobile app) handles your personal data as a registered user.
We believe privacy is a fundamental right. That's why since toto868 first launched in 2018, protecting members' personal data has been our absolute priority — not merely a regulatory obligation, but a core value we uphold.
This Privacy Policy applies to all toto868 users regardless of how you access the platform — whether via the website, Android, or iOS mobile app. By using any toto868 service, you acknowledge that you have read and understood this policy.
PDPA Compliance: toto868 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We only collect data that is necessary, use it for the stated purposes, and will never sell your personal information to third parties for marketing purposes.
Toto868 only collects information that is strictly necessary to provide a safe, seamless, and regulatory-compliant service. The data we collect falls into several categories:
When you register a toto868 account, we collect the following information:
For security and anti-money laundering compliance purposes, we require the following documents when you make your first withdrawal or when requested:
Every time you make a deposit or withdrawal, we record transaction details including amount, payment method, time, and date. Credit or debit card numbers are not stored on toto868's servers — this information is processed directly by licensed payment providers that comply with PCI DSS standards.
Our systems automatically record technical data whenever you use the platform, including:
| Data Category | Example | Requirements |
|---|---|---|
| Identity | Name, date of birth, MyKad | Required — KYC & registration |
| Contact | Phone number, email | Required — communications & security |
| Financial | Bank account, transaction records | Required — payment processing |
| Technical | IP address, device type | Automatic — system security |
| Conduct | Game history, preferences | Automatic — platform improvement |
Toto868 uses your personal data solely for the following purposes:
Your data is used to create and maintain your account, verify your identity at login, process deposits and withdrawals, and grant you access to all games and features on the toto868 platform.
Toto868's security systems analyze usage patterns to detect suspicious activity such as unauthorized login attempts, money laundering, and identity fraud. This is done to protect the interests of all our members.
As a licensed platform, we are required to retain transaction records and member information for a specified period to meet regulatory requirements, tax reporting, and other applicable legal obligations.
Aggregated, non-identifiable usage data helps us understand how members use the platform, identify areas for improvement, and develop new features better suited to Malaysian users.
We use your contact information to send important account notifications, security alerts, terms updates, and transaction details. Marketing communications — such as promotions and bonus information — are only sent if you have opted in to receive them.
Marketing Controls: You may withdraw consent to receive marketing communications at any time via your account settings or by contacting our support team. This withdrawal will not affect essential transactional communications.
Toto868 does not sell, rent, or trade your personal data to any third party for marketing purposes. Full stop. No exceptions.
However, there are limited situations where we need to share certain information with selected third parties:
We work with third-party service providers who help us operate the platform, including licensed payment processors, cloud service providers, gaming software providers, and identity verification services. All providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.
Toto868 will disclose personal data when required to do so by law, court order, or direction from a lawful authority. In such situations, we will notify you in advance where permitted by law.
In the event of a merger, acquisition, or asset sale involving toto868, user data may be transferred to the new entity. You will be notified in advance and given the option to delete your account if you do not agree to the transfer.
We retain your personal data for as long as your account is active. After account closure, data is kept for a minimum of 7 years in line with anti-money laundering and financial record-keeping regulations. After this period, data is securely deleted.
Toto868's security infrastructure includes 256-bit SSL encryption for all data transmissions, at-rest data encryption on servers, enterprise-grade firewalls, 24/7 security monitoring, two-factor authentication for login, and regular security audits by independent third parties.
In the event of a security breach involving your personal data, toto868 is committed to notifying you within 72 hours of detecting the incident, in line with international data protection best practices.
Toto868 uses cookies and similar tracking technologies to ensure the platform functions properly and to deliver a better experience for you.
You can manage cookie settings through your browser. Note that disabling essential cookies may affect platform functionality. Third-party cookies related to payment providers and game software are governed by their respective service agreements.
As a registered toto868 user in Malaysia, you have the following rights under the Personal Data Protection Act 2010:
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 business days.
If any information we hold is inaccurate or outdated, you have the right to request a correction through your account settings or our support team.
You may request the deletion of your personal data. This request is subject to our mandatory record-keeping obligations under applicable law.
Under certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.
You may object to the processing of your data for direct marketing purposes at any time. Such objections will be enforced immediately.
You have the right to receive your personal data in a machine-readable format for transfer to another platform upon request.
How to Submit a Request: To exercise any of the above rights, contact our Data Protection team by email at [email protected] or via the platform's live chat. We will verify your identity before processing any request to safeguard your privacy.
Toto868 is a betting platform exclusively for adults aged 18 and above. We do not knowingly collect, store, or process personal data of individuals under the age of 18.
If we discover that someone under the age of 18 has registered an account by providing false age information, the account will be terminated immediately and all associated data will be deleted. If you believe a minor has accessed our platform, please contact us right away.
Toto868 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Any material changes will be communicated via in-account notifications or email at least 14 days before taking effect.
The latest version of this Privacy Policy is always available on this page. The "Last Updated" date at the top indicates when the document was last reviewed. Continued use of the toto868 platform after any changes take effect constitutes acceptance of the updated version.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:
Our Data Protection team will respond within 3 business days for all privacy-related inquiries. For data management requests requiring identity verification, the process may take up to 21 business days.
Six layers of protection keeping your privacy secure at all times
Every bit of data transmitted between your device and toto868's servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.
All of toto868's data handling practices are designed and audited to fully comply with the Malaysia Personal Data Protection Act 2010, ensuring your rights as a Malaysian user are always protected.
Toto868 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data belongs to you.
Through your account settings, you can manage privacy preferences, withdraw marketing consent, request a copy of your data, and control how your information is used — all in real time.
Toto868 only collects data that is genuinely required to provide our services. We do not request irrelevant information and always inform you why each piece of data is needed.
In the event of a security incident involving your data, toto868 is committed to notifying you within 72 hours of detection — faster than standard regulatory requirements.
Over 500,000 toto868 members trust us with their personal data. Join today and enjoy a betting platform that is not only entertaining, but also safe and transparent in every aspect.