Official Policy Updated: June 2026

Privacy Policy totokasino – Personal Data Protection for Malaysia Members

Your privacy is our priority. This document transparently explains how totokasino collects, processes, stores and protects your personal data — and the rights you hold as our member.

Totokasino's Privacy Commitment

Six principles that guide how we handle every member's personal data

Industry-Grade Encryption

All personal data and financial transactions are protected with 256-bit SSL encryption. Your data is stored on encrypted servers and safeguarded by multi-layered firewalls monitored around the clock.

Data Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. Totokasino provides easy channels for all member data-related requests.

No Sale of Data to Third Parties

Totokasino has never and will never sell, rent, or share members' personal data to third parties for marketing purposes without your explicit consent.

Minimum Data Collection

We only collect data that is strictly necessary to operate your account, process transactions and fulfil legal obligations. No excessive data is collected beyond what is required.

Identity Masking in Public Records

If your win records or account activity are displayed publicly, your name is automatically masked. Our members' privacy is prioritised in all public communications.

Privacy Law Compliance

Totokasino complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards in the handling of all member information.

Totokasino Full Privacy Policy

1. Introduction

Totokasino ("we", "Platform") takes our responsibility to protect the privacy of every member and platform user seriously. This Privacy Policy explains in detail how we collect, use, store, share and protect your personal information when you use the totokasino website, mobile app or any other totokasino services.

By registering or continuing to use the Totokasino platform, you confirm that you have read and understood this Privacy Policy and agree to the way we handle your personal data as described herein.

This Privacy Policy applies together with Terms and Conditions us. In the event of any conflict, this Privacy Policy shall prevail for matters relating to data protection.

2. Personal Data We Collect

Totokasino collects your personal data through various means — directly when you register or use the platform, and automatically through standard tracking technologies. Below is an overview of the types of data collected:

Data Type Example Information Collection Method
Identity Data Full name, date of birth, MyKad/passport number Account registration & KYC
Contact Data Email address, phone number Account registration
Financial Data Bank account number, e-wallet information Deposit & withdrawal process
Technical Data IP address, device type, web browser Automatically during use
Usage Data Game records, betting history, session duration Automatically during gameplay
Communication Data Support chat records, emails Interactions with customer support

We do not collect sensitive data categories such as health information, religious beliefs or political views unless specifically required by law.

3. How We Use Your Data

The personal data we collect is used for the following purposes:

  • Processing and managing account registration and identity verification (KYC).
  • Processing deposits, withdrawals and all financial transactions securely.
  • Providing gaming services, customer support and account-related communications.
  • Detecting and preventing fraud, money laundering and platform abuse.
  • Fulfilling legal obligations and compliance with applicable regulations.
  • Analysing usage patterns to improve the overall user experience.
  • Sending relevant promotional information — only if you have consented to receive it.
  • Operating responsible gaming programmes including self-limits and control tools.

Totokasino does not use your data to make automated decisions that significantly affect you without human involvement. Any important decisions regarding your account involve manual review by our team.

4. Data Sharing with Third Parties

Totokasino does not sell, rent, or disclose your personal data to any third party for marketing purposes without your consent. However, data may be shared in the following limited circumstances:

  • Service providers we appoint to operate platform functions — such as payment processors, cloud service providers and identity verification companies. All parties are bound by strict confidentiality agreements.
  • Regulatory authorities or law enforcement when required by Malaysian law or a valid court order.
  • Third-party game providers that need to verify the validity of game sessions for technical purposes — only minimum information is shared.
  • In the event of a company merger or acquisition, where data may be transferred as part of business assets, subject to notice being given to members.

In all of the above situations, we ensure that the receiving party is subject to data protection obligations equivalent to our own standards.

5. Data Security

Totokasino invests in robust security infrastructure to protect your personal data from unauthorised access, loss, destruction or accidental disclosure. The security measures we employ include:

  • 256-bit SSL encryption for all data in transit between your device and our servers.
  • Data at rest is protected with AES-256 encryption at the database level.
  • Two-factor authentication (2FA) is available for all member accounts and is mandatory for internal system access.
  • 24/7 real-time security monitoring with automated intrusion detection systems.
  • Regular independent security audits to identify and patch any vulnerabilities.
  • Strict access controls — totokasino staff can only access data required for their specific roles.

While we take reasonable steps to protect your data, no digital system is 100% secure. We encourage you to also take protective measures such as using a strong password and not sharing your login details.

6. Cookies & Tracking Technologies

Totokasino uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies — Required for core platform functions such as login, game sessions and security. Cannot be disabled.
  • Performance Cookies — Collect anonymous data on how you use the platform to help us improve it.
  • Functional Cookies — Store your preferences such as language selection and display settings.
  • Marketing Cookies — Used to display relevant promotions. You may opt out of these cookies.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some areas of our platform.

7. Data Retention Period

Totokasino retains your personal data for as long as your account is active or as needed to provide services to you. After account closure, we retain your data for a specified period in accordance with applicable legal and regulatory requirements:

  • Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian legal requirements.
  • Identity verification (KYC) data — retained for 5 years after account closure.
  • Customer support communication records — retained for 2 years.
  • Usage data and technical logs — retained for 12 months for security and troubleshooting purposes.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be personally linked back to you.

8. Your Rights Regarding Personal Data

As a totokasino member, you have the following rights regarding your personal data, in line with Malaysia's Personal Data Protection Act 2010 (PDPA):

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request data deletion when there is no longer a legal requirement to retain it.

Right to Object

Object to data processing for direct marketing purposes at any time.

Right to Portability

Receive your data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

Request restriction of your data processing under certain circumstances during a complaint investigation.

To submit any request relating to the rights above, contact our data protection team via email or live chat. We will respond within 14 business days. Requests may require identity verification before being processed.

9. Child Protection

Totokasino does not offer services to individuals under the age of 18. We do not knowingly collect personal data from minors. If we discover that a minor's personal data has been collected without our knowledge, we will immediately take steps to delete that data and close the relevant account.

Parents and guardians who believe their child may have registered an account at Totokasino are asked to contact our support team immediately. We take child protection seriously and will respond promptly to such reports.

10. Amendments to the Privacy Policy

Totokasino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. When significant amendments are made, we will notify you via your registered email or in-platform notification before the changes take effect.

It is your responsibility to review this page periodically. The latest update date is always displayed at the top of this document. Continued use of the platform after any amendments take effect constitutes acceptance of the updated policy.

11. Contact Our Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

You may also refer to FAQ section for answers to frequently asked privacy questions. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory authority responsible under PDPA 2010.

FAQ – Privacy & Data at totokasino

Answers to the most frequently asked questions from our members regarding privacy

No. totokasino does not share members' personal data with other gaming companies or any third party for marketing purposes. Your data may be shared with service providers we use to operate the platform — such as DuitNow and FPX payment processors — but only the necessary information, and all parties are bound by strict confidentiality agreements. Third-party game providers such as Pragmatic Play or Evolution Gaming only receive the minimum session data required to verify legitimate gameplay.

You can submit a data access request by contacting the Totokasino support team via live chat or email at [email protected]. Please state that you wish to make a subject access request. We will verify your identity before processing the request and will provide a copy of your data within 14 working days from the date the request is confirmed. Data will be provided in a readable format such as PDF or CSV.

When you close your Totokasino account, we do not immediately delete all your data due to legal obligations to retain certain records. Financial transaction records are kept for 7 years in accordance with Malaysian law. Identity verification data is retained for 5 years. Data with no legal retention requirement will be anonymised or deleted within 90 days of account closure. Once the mandatory retention period ends, all your data will be permanently deleted from our systems.

totokasino does not store full credit or debit card numbers on our servers. All card transactions are processed through third-party payment providers that comply with PCI DSS standards. We only store payment tokens issued by the payment processor — these tokens cannot be used to initiate new transactions without your authorization. For DuitNow and FPX, the only information stored is the bank account number linked to your totokasino account for verified withdrawal purposes.

Your Data Is Safe with Totokasino

Register your account today with full confidence — your privacy is protected with the latest encryption, and we are always transparent about how we handle your information.

Bahasa Melayu