Privacy Policy

Toto368 Privacy Policy – We Protect Your Data as if It Were Our Own

At toto368, your privacy is not merely a legal obligation — it is a responsibility we take seriously. This document clearly and honestly explains how we collect, use, and protect your personal information.

Updated: 1 July 2026 · Effective immediately

Toto368 Privacy Commitment

Six core principles that shape how we handle your personal data

End-to-End Encryption

All data transmitted between your device and toto368 servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

Data Not Sold

Your personal information has never been and will never be sold to third parties for marketing or commercial purposes. Your data belongs to you, and we fully respect that.

Minimum Data Collection

We only collect data that is genuinely necessary to provide our services to you. No excess information is collected without a clear and legitimate reason.

Control in Your Hands

You have the right to access, correct, and request deletion of your personal data at any time. We provide a straightforward process for exercising these rights.

Secure & Monitored Servers

Your data is stored in secure data centres with round-the-clock security monitoring. Access to member personal data is strictly limited to authorised personnel only.

Full Transparency

We are transparent about what we do with your data. No confusing language, no hidden conditions — just clear, straightforward explanations.

1 Introduction

Toto368 ("we", "our platform") respects the privacy of every user who accesses our website and mobile app. This Privacy Policy explains in detail the types of personal information we collect, how we use it, who can access it, and what your rights are regarding that data.

This document applies to all toto368 users — whether you are browsing our website, have registered as a member, or are using our mobile app. By continuing to use the toto368 Platform, you agree to the terms of this Privacy Policy.

Important Note: This Privacy Policy should be read together with Terms and Conditions us, which also contains important information about your rights and responsibilities.

2 Data We Collect

We only collect information necessary to provide our services effectively and securely. The types of data we collect are as follows:

Data Category Example Information Purpose of Collection
Personal Identity Full name, date of birth, IC/passport number KYC identity verification, fraud prevention
Contact Information Email address, phone number Account communications, security notifications
Financial Information Bank account number, transaction records Deposit and withdrawal processing
Usage Data Game history, betting preferences, session duration Service improvement, regulatory compliance
Technical Data IP address, device type, operating system Security, fraud detection

We do not collect sensitive information such as your medical, religious, or political views. All data collection is carried out with your consent, either explicitly through registration or implicitly through your use of the Platform.

3 How We Use Your Data

The data we collect is used solely for legitimate and necessary purposes. We do not use your data for any purpose unrelated to the provision of toto368 services. The following are the primary purposes for which your data is used:

  • Process account registration and verify your identity through a secure KYC process
  • Process deposits and withdrawals quickly and securely
  • Provide effective customer support when you need assistance
  • Send important notifications related to your account, such as transaction confirmations and security alerts
  • Detect and prevent fraud, money laundering, and other illegal activities
  • Comply with legal obligations and requirements of relevant authorities
  • Improve our Platform based on aggregated and anonymized usage patterns
  • Send relevant promotional information — only if you have given your consent
Marketing Consent: You may withdraw consent to receive marketing communications at any time through your account settings or by contacting our support team.

4 Data Sharing with Third Parties

Toto368 does not sell, rent, or share your personal information with third parties for their own marketing purposes. However, there are limited situations where we need to share certain information:

  • Payment Processors: Transaction information is shared with approved payment processors to enable deposits and withdrawals to be processed securely
  • Game Providers: Limited game session information is shared with licensed game providers to enable access to their games
  • Authorities: We comply with all lawful requests from legal and regulatory authorities when required to do so.
  • Fraud Prevention: Limited information may be shared with recognized fraud prevention services to protect all users on the platform

All third parties we work with are required to comply with strict data protection standards and are not permitted to use your data for any purpose other than what is specified in their service agreements with toto368.

5 Data Security

Protecting your personal data is toto368's top priority. We implement multiple layers of technical and organizational security measures to ensure your data is always protected from unauthorized access, loss, or misuse.

  • 256-bit SSL encryption for all data transmitted over the internet
  • Password storage using irreversible one-way hashing
  • Strict access control — only authorized personnel can access member data
  • Continuous 24/7 security monitoring with automated incident response
  • Regular independent security audits to identify and address vulnerabilities
  • Physically secured data centers with multi-level access controls
Remember: While we take all reasonable steps to protect your data, account security also depends on your own actions. Always use a strong, unique password and enable two-factor authentication.

6 Cookies & Tracking Technologies

Toto368 uses cookies and similar tracking technologies to enhance user experience, analyze Platform usage, and maintain the security of your session.

  • Essential Cookies: Required for core Platform functions such as login and session security. Cannot be disabled.
  • Performance Cookies: Help us understand how users interact with the Platform for improvement purposes. Data is collected anonymously
  • Functional Cookies: Save your preferences such as language and display settings for a smoother experience next time

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect Platform functionality. We do not use third-party cookies for targeted advertising.

7 Your Rights Regarding Personal Data

As a toto368 user, you have clear rights regarding your personal data. We respect and facilitate the exercise of these rights:

Right of Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request correction of any inaccurate or incomplete data in our records.

Right to Erasure

You may request deletion of your personal data, subject to our legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Portability

You have the right to receive your data in a machine-readable format for transfer to another platform.

Right to Restriction

Under certain circumstances, you may request that we temporarily restrict the processing of your data.

To exercise any of the above rights, contact our customer support team via live chat or email. We will process your request within a reasonable timeframe, typically within 30 business days.

8 Data Retention & Deletion Period

Toto368 retains your personal data for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by applicable law.

  • Active account data is retained for as long as your account remains active at toto368.
  • Financial transaction records are retained in accordance with anti-money laundering legal requirements, typically between five and seven years
  • Security log data is retained for the period required for incident investigation purposes.
  • When an account is closed at your request, data not required by law will be deleted within 90 days.

9 Child Protection

The toto368 Platform is strictly for adults aged 18 and above. We do not intentionally collect or store personal data from individuals under 18. Should we discover that a minor's data has been collected inadvertently, we will take immediate action to delete it.

Complaints Involving Minors: If you believe your child or any other minor has registered on our platform, please contact our customer support immediately and we will address the matter with the highest priority.

10 Amendments to the Privacy Policy

Toto368 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform operations. The latest version will always be available on this page.

When significant amendments are made, we will notify you via an in-Platform notification or to your registered email address. The "Updated" date at the top of this page will reflect the date of the latest amendment. Continued use of the Platform after such amendments constitutes your acceptance of the updated policy.

11 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us. Our team is available to assist you 24 hours a day, 7 days a week.

Privacy Email
Response within 3 business days
Live Support
24/7 Live Chat
Available on the Platform

For more information on how to use the platform responsibly, please refer to our Responsible Gaming us. For the platform's terms of use, see Terms and Conditions us.

FAQ – Privacy & Personal Data

Answers to the most frequently asked questions by toto368 members

Yes, your financial information is protected with 256-bit SSL encryption and stored in a highly secure environment. We do not retain full bank account numbers in our systems after a transaction has been processed. All payment processing is handled through payment gateways that hold internationally recognized security certifications.

Yes, you may request the deletion of your personal data by contacting our support team. However, certain data is required by law to be retained, such as financial transaction records for periods defined by anti-money laundering requirements. Beyond those legal obligations, your data will be deleted within 90 days of the request being received.

Absolutely not. toto368 has never sold, rented, or shared your personal data with any advertiser or third party for their own marketing purposes, and never will. Your data is used solely to provide and improve our services to you.

You can update most of your personal information directly through the Account Settings page on the toto368 Platform. For changes to more sensitive details such as your full name or KYC information, please contact our support team and provide the relevant supporting documents for verification.

When you close your account, we will delete all personal data not required by law within 90 days. Data that must be retained to comply with legal requirements, such as financial records, will be kept only for the prescribed period, after which it will be permanently deleted. You will receive an email confirmation once the deletion process is complete.

Play with Confidence — Your Data is Always Safe at toto368

Now you know how seriously toto368 takes your privacy. Register a free account today and enjoy a safe, fair, and fun gaming experience.

Already have an account? Login here · See also Terms and Conditions us

Bahasa Melayu