Personal Data Protection

Privacy Policy ttoto88 — Your Data Security Our Priority

At ttoto88, your privacy is not just a legal obligation — it is a core value we have upheld from day one. This policy honestly explains how we collect, use, store, and protect your personal information every time you use our platform.

Six Privacy Principles We Practice at ttoto88

We do not write privacy policies merely to meet requirements — we genuinely practice them in every system and process we build.

End-to-End Encryption

All data transmitted between your device and ttoto88 servers is protected by TLS 1.3 encryption — the same technology used by leading financial institutions worldwide.

No Data Sales

Ttoto88 has never and will never sell your personal information to any third party for marketing or commercial purposes. Your data belongs to you — not to us as a business asset.

Data Control in Your Hands

You have the right to access, correct, and request deletion of your personal data at any time. This process can be initiated directly through your account settings or by contacting our support team.

Secure Data Storage

Member data is stored on servers protected with multi-layered access controls, encrypted backup imaging, and 24/7 security monitoring to detect any unauthorized access attempts.

Data Minimisation

We only collect information that is genuinely necessary to provide services to you — nothing more. This "minimum collection" principle is fundamental to our system design.

Breach Notification

In the event of a security incident affecting your data, ttoto88 will notify you via your registered email within 72 hours — well ahead of standard industry requirements.

Last updated: 1 January 2026
This Privacy Policy describes the data protection practices of ttoto88 ("we") regarding information you ("Member") provide while using the ttoto88.app platform and related mobile apps. Please read this document carefully — it is your right to understand how your data is handled.

01 Information We Collect

1.1 Information You Provide Directly

When you register an account or use ttoto88 services, we collect information you provide directly, including:

  • Full name as shown on your official identification document
  • National identity card number (MyKad) or passport for KYC verification
  • Date of birth for age verification
  • Email address and phone number for communication and account security
  • Bank account or e-Wallet details for processing financial transactions
  • Username and password you create yourself

1.2 Information Collected Automatically

In addition to information you actively provide, our systems also automatically record certain technical information when you use the platform, including:

  • IP address and geolocation data (city level only, not precise location)
  • Device type, operating system, and web browser version used
  • Session activity logs — pages visited, session duration, and in-game actions
  • Technical performance data for platform improvement purposes
Data Category Example Primary Purpose
Identity Name, IC, date of birth KYC verification & age restriction
Contact Email, phone number Communication & 2FA security
Financial Bank account number, e-Wallet Deposit & withdrawal processing
Technical IP address, device type Security & fraud detection
Usage Game logs, betting history Platform improvement & AML

02 How We Use Your Data

Ttoto88 uses the information collected for legitimate and necessary purposes in providing our services, including:

  • Identity verification (KYC) — to comply with anti-money laundering legal requirements and ensure all members meet the minimum age criteria.
  • Transaction processing — deposits, withdrawals, and any financial transactions on the platform.
  • Account security — detecting suspicious activity, preventing fraud, and protecting accounts from unauthorised access.
  • Customer support — identifying you quickly and providing relevant assistance when you contact our team.
  • Service communication — sending important notifications about your account, betting results, and withdrawals.
  • Platform improvement — analysing usage patterns to improve the overall user experience.
  • Legal compliance — fulfilling reporting and compliance obligations set by the relevant authorities.

We do not use your data to make automated decisions that could significantly affect you without human involvement in the review process.

03 Sharing Information with Third Parties

Ttoto88 does not sell or rent your personal data to third parties for marketing purposes. However, in certain circumstances, we may share information with the following parties:

  • Payment service provider — banks, FPX operators, and e-wallet providers required to process your transactions. They receive only the information necessary for that purpose.
  • KYC solution provider — registered and licensed third parties conducting identity verification on our behalf.
  • Government authorities — when required by law, court order, or a valid request from a law enforcement agency.
  • Technical infrastructure provider — server hosting and cybersecurity companies that process your data under strict confidentiality agreements.

Every third party we engage is required to meet data protection standards equal to or stricter than those we apply ourselves.

04 Data Security

Ttoto88 implements comprehensive technical and organisational security measures to protect your data:

  • TLS 1.3 encryption for all data in transit between your device and our servers
  • AES-256 encryption for sensitive data stored in our database
  • Role-based access control — only staff who need to can access specific data
  • Periodic security audits by independent third parties
  • Intrusion detection system (IDS) operating around the clock
  • Encrypted data backups stored at geographically separate locations

While we take all reasonable measures, no system can guarantee absolute security. That's why you also play an important role — keep your password secure, enable two-factor authentication (2FA), and report any suspicious activity to us immediately.

05 Cookies & Tracking Technologies

Ttoto88 uses cookies and similar tracking technologies to enhance the user experience and platform security. There are three categories of cookies we use:

  • Essential cookies — required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Performance cookies — collecting anonymised data on how users interact with the platform to help us identify areas for improvement.
  • Preference cookies — saving personal settings such as language and display preferences so you don't need to reconfigure them every time you log in.

You can manage cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

06 Cross-Border Data Transfers

Your personal data is processed and stored primarily in data centers located in the Asia region. In certain circumstances, data may be processed by our service providers in other countries. When this occurs, we ensure that such transfers are protected by data protection agreements compliant with internationally recognized standards.

07 Your Privacy Rights

As a ttoto88 member, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If any of your information is inaccurate or out of date, you have the right to correct it. You can update most information directly in your account profile settings.

Right to Erasure

You may request deletion of your personal data. Please note that some data may need to be retained for a specific period for legal compliance purposes.

Right to Object to Processing

You have the right to object to the processing of your data for specific purposes, particularly for direct marketing and automated profiling not required for service delivery.

Right to Data Portability

You may request that we provide your data in a machine-readable format so you can transfer it to another platform if desired.

To exercise any of the above rights, contact our support team via the in-platform live chat. We will verify your identity before processing any request to ensure the security of your account.

08 Data Retention Period

Ttoto88 retains your personal data only for as long as necessary for the purposes outlined in this policy. Generally:

  • Active account data is retained for the duration of your membership with ttoto88.
  • Financial transaction records are retained for a minimum of 7 years from the transaction date, in line with Malaysia's anti-money laundering legal requirements.
  • Platform activity logs are retained for 2 years for security and dispute resolution purposes.
  • After account closure, personal data no longer required for legal compliance purposes will be deleted within 90 days.

09 Children's Privacy

Ttoto88 services are strictly for individuals aged 18 and above. We do not knowingly collect or store personal data from minors. Should we discover that a minor's information has been collected, we will take immediate steps to delete that information and close the associated account.

If you believe your child or a minor has registered an account on ttoto88, please contact our support team immediately for follow-up action.

10 Changes to This Privacy Policy

Ttoto88 reserves the right to update this Privacy Policy from time to time in line with changes in legislation, technical requirements, or industry best practices. Any significant changes will be communicated to you via:

  • Notification emails are sent to your registered email address
  • Notice posted on the platform at least 14 days before changes take effect
  • The "Last updated" indicator at the top of this page will always reflect the latest date

Continued use of the platform after changes take effect constitutes your acceptance of the latest version of this Privacy Policy.

11 How to Contact Us

If you have any questions, concerns, or wish to exercise any of your privacy rights, please contact our Data Protection team via 24/7 live chat on the ttoto88 platform or by email below. We are committed to responding to all privacy-related inquiries within 5 business days.

Data Protection Email: [email protected]

For issues requiring immediate attention, the in-app live chat on ttoto88 is the fastest channel. Our team, trained in data privacy matters, is available to assist you 24 hours a day, 7 days a week.

Your Data Is Safe with ttoto88

Join over 500,000 Malaysian members who trust ttoto88 for a safe, transparent, and responsible betting experience.

Bahasa Melayu