Official Documents
Your privacy matters to us. Find out how toto88 collects, uses, stores, and protects your personal information in accordance with Malaysian law.
Our Privacy Commitment
These are the core principles that shape how toto88 handles the personal data of each of our members.
All data transmitted between your device and toto88's servers is protected by 256-bit SSL encryption — the same level of security used by leading Malaysian banking institutions such as Maybank and CIMB.
Toto88 has never and will never sell, rent, or disclose players' personal information to third parties for marketing purposes without your explicit consent. This is a commitment we do not compromise on.
Toto88 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All data collection and processing activities meet the legal requirements set out under the Act.
You may access, correct, or request deletion of your personal data at any time through your toto88 account settings or by contacting our support team directly.
Your payment card details and financial data are not stored directly on toto88 servers. All transactions via Touch 'n Go, GrabPay, DuitNow, and FPX are processed by licensed payment processors that are PCI-DSS compliant.
In the event of any security incident affecting your data, toto88 is committed to notifying all affected players within 72 hours — faster than what is required by law.
This Privacy Policy explains how toto88 ("we", "the toto88 platform", "toto88-jit.com") collects, uses, stores, discloses, and protects your personal information when you use our platform. This document has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards.
When you register a toto88 account, make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, play slots, live baccarat, place bets on Malaysia Super League or EPL matches, or reach out to our support team — all of these interactions involve data collection governed by this Privacy Policy.
Privacy is more than a legal obligation for toto88 — it is a core part of our commitment to Malaysian players. Your trust is our most valuable asset, and we do not take lightly our responsibility to protect the personal information of each of our more than 500,000 members.
Important Note: By registering for or using the toto88 platform, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services. You may request a full copy of this Privacy Policy in PDF format by contacting support@toto88-jit.com.
Toto88 only collects data that is strictly necessary to deliver our services safely and efficiently. We do not collect excessive or irrelevant data.
| Data Category | Example | Primary Purpose |
|---|---|---|
| Identity | Full name, date of birth, MyKad number | Age verification, KYC, account security |
| Contact | Email, phone number | Account communications, customer support |
| Finance | Deposit/withdrawal records | Payment processing, fraud prevention |
| Technical | IP address, device type | Security, fraud detection, performance |
| Usage | Games played, sessions | Product improvement, responsible gaming |
| Marketing | Communication preferences | Relevant promotions (with consent) |
Toto88 uses your personal data on a valid legal basis — whether to perform a contract with you, comply with legal obligations, or based on our legitimate interests that do not override your rights.
Toto88 processes your data on one or more of the following legal bases: (a) performance of a contract when you register and use our services; (b) compliance with legal obligations under Malaysia's PDPA and related legislation; (c) the legitimate interests of toto88 in operating a safe and regulated platform; and (d) your consent for marketing purposes, which may be withdrawn at any time.
Marketing Controls: If you no longer wish to receive marketing communications from toto88, you may opt out at any time by clicking the "Unsubscribe" link in any marketing email, or by contacting our support team. This will not affect essential operational communications such as transaction confirmation notices.
Toto88 does not sell, rent, or trade your personal information. However, under certain limited and strictly controlled circumstances, we may share your data with the following parties:
To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks, and other participating banks), toto88 is required to share the necessary transaction details with the relevant payment service providers. All payment processors we work with are licensed, regulated, and compliant with PCI-DSS standards.
Toto88 works with trusted third-party service providers for: server hosting and cloud infrastructure, Live Casino streaming services, platform analytics, cybersecurity support, and email communication systems. All such providers are bound by strict data protection agreements and are only permitted to use your data for the purposes specified in their contracts with toto88.
Toto88 may be required to disclose your personal data to Malaysian authorities — including the Royal Malaysia Police, Bank Negara Malaysia, or relevant regulatory bodies — when mandated by law, court order, or in the course of investigating financial crimes such as money laundering. In such circumstances, toto88 will notify you in advance unless prohibited from doing so by law.
Should toto88 be involved in any merger, acquisition, or sale of assets, players' personal data may be transferred to the new entity. In such cases, all players will be notified in advance and the updated Privacy Policy will be clearly communicated before any changes to data handling take effect.
Important: toto88 will never share your data with third-party advertisers, data brokers, or any entity that has no legitimate business need to access that information. This is a guarantee we make to every toto88 player.
Toto88 continuously invests in the latest security infrastructure to ensure your personal data and financial information remain protected at all times. The following are the key security measures we have in place:
All communications between your browser and the toto88 platform are protected by TLS 1.3 with 256-bit encryption — a security standard recognised as the highest in the industry. Your password is stored as a cryptographic hash (bcrypt), meaning even the toto88 team cannot view your original password. Sensitive data in our databases is also encrypted at rest using AES-256.
Access to player data within toto88's internal systems is governed by the principle of least privilege — only staff who genuinely require access to specific data in order to perform their duties are permitted to do so. All staff access is logged and periodically audited. Two-factor authentication (2FA) is enforced for all staff accounts with access to player data systems.
Toto88's security monitoring system operates 24 hours a day, 7 days a week to detect any unusual activity or unauthorised access attempts. Our cybersecurity team conducts regular penetration testing to identify and patch vulnerabilities before they can be exploited. In the event of a security incident involving your data, toto88 is committed to notifying you within 72 hours.
Shared Responsibility: While toto88 implements all reasonable security measures, data security also depends on your own actions. Please use a strong, unique password for your toto88 account, enable two-factor authentication where available, and never share your login credentials with anyone.
Toto88 uses cookies and similar tracking technologies to keep the platform running smoothly, enhance the user experience, and analyse usage patterns in aggregate.
You can manage cookies through your web browser settings. Most modern browsers — including Chrome, Firefox, Safari, and Edge — allow you to view, manage, and delete stored cookies. Please note that disabling certain cookies may affect the functionality of the toto88 platform, particularly those required for login sessions.
Toto88 uses trusted third-party analytics services to analyse platform usage data in aggregate. Data collected by these services is processed in accordance with the respective provider's privacy policy and is not shared with any other entity.
Toto88 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or for the period required under applicable Malaysian law. In general:
You may request the deletion of personal data that is no longer legally required to be retained. However, toto88 may be unable to fulfil a full deletion request if the data is needed to: meet legal obligations, resolve outstanding disputes, or enforce our agreements. In such cases, we will inform you of the specific reasons why full deletion cannot be carried out.
As a toto88 player in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA). toto88 is committed to respecting and facilitating the exercise of all these rights:
You have the right to request a copy of the personal data we hold about you. We will process your request within 21 business days.
If the data we hold about you is inaccurate or out of date, you have the right to request a correction. Most profile information can be updated directly in your account settings.
You may request the deletion of personal data that is no longer required, subject to any applicable legal retention obligations.
You may withdraw your consent to marketing communications at any time without affecting your use of toto88 services.
You may request your personal data in a machine-readable format (such as CSV or JSON) for transfer to another service.
If you believe toto88 has violated your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
How to Exercise Your Rights: To exercise any of the rights listed above, contact the toto88 privacy team via email support@toto88-jit.com stating the right you wish to exercise along with your account details (username and registered email). We will verify your identity before processing the request to protect your privacy.
The toto88 platform is exclusively for individuals aged 18 and above. toto88 does not knowingly collect or process personal data from individuals under the age of 18. If you believe a minor has registered a toto88 account or provided us with their personal data, please contact us immediately at support@toto88-jit.com.
Upon receiving such a report, toto88 will investigate and take immediate action, including closing the account in question, deleting any collected data, and returning any deposited funds. toto88 employs an age-verification process during registration and reserves the right to request proof of age at any time if there is reasonable cause for doubt.
Warning: Parents and guardians should monitor their children's online activities. If you discover a minor using the toto88 platform, please contact us immediately. We treat the protection of minors as an absolute priority.
The toto88 platform may contain links or integrations with third-party services required for payment and gaming functionality — such as eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX portals (Maybank2u, CIMB Clicks, and other banks). When you interact with these third-party services, their own privacy policies apply, not toto88's Privacy Policy.
Toto88 is not responsible for the privacy practices of third-party services. We encourage you to read the privacy policy of each third-party service you use within the toto88 platform. That said, we carefully vet all our third-party partners and only work with entities that uphold high data protection standards.
Toto88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or technological developments. The date of the most recent update is always indicated at the top of this document.
For material amendments — changes that significantly affect how we collect or use your data — toto88 will send a notice to your registered email address at least 14 days before the changes take effect. This gives you sufficient time to review the updates and take appropriate action if you do not agree.
For minor, non-material amendments — such as spelling corrections or clarification of terminology — toto88 may update this document without prior notice. We encourage you to review this Privacy Policy page periodically to stay informed about how your data is handled.
If you have any questions, concerns, or requests regarding this Privacy Policy or how toto88 handles your personal data, our privacy team is here to help.
For formal data rights requests (access, correction, deletion, or portability), please send an email with the subject line "PDPA Data Rights Request" along with your toto88 account username and registered email address. We will verify your identity before processing the request to ensure the security of your data.
If you are not satisfied with how toto88 has handled your privacy complaint after contacting us, you have the right to lodge a formal complaint with the Personal Data Protection Commissioner of Malaysia, appointed under the Personal Data Protection Act 2010.
Toto88 respects the privacy of every player. Your data is used solely to provide you with a better, safer, and more relevant gaming experience. We will never use your data for any purpose you would not expect or have not consented to. Gambling is for individuals aged 18 and above only.
To learn more about your privacy rights, please review Privacy Policy this in full. For information on responsible gaming, visit Responsible Gaming. For platform terms of use, please read Terms & Conditions ours.
Ready to Play Responsibly?
Your data is fully protected. Easy deposits with Malaysian eWallets. Register for free and start enjoying live baccarat, slots, and toto88 Sports Betting.
Register Free Now Log In