Data Protection

Privacy Policy tbltoto — Our Commitment to Your Data Security

Tbltoto takes seriously its responsibility to protect every user's personal information. This document clearly explains how we collect, use, store, and protect your data as a user of our platform.

Updated: 1 January 2026

The Six Pillars of tbltoto Data Protection

Personal Data Encryption

All personal information you submit to tbltoto is protected with industry-standard 256-bit SSL encryption. Your data cannot be read by unauthorised parties during transmission or storage.

No Sale of Data to Third Parties

Tbltoto has never and will never sell, rent, or trade users' personal data to any third party for marketing or commercial gain.

User Data Control

You have the full right to access, amend, download, and request deletion of your personal data. Requests can be made through your account or by contacting our support team.

Secure Data Storage

User data is stored on servers protected by strict access controls, multi-layer firewalls, and 24/7 security monitoring. All database access is logged and audited on a regular basis.

Full Transparency in Data Usage

Tbltoto is fully transparent about the purpose behind every type of data we collect. We do not gather unnecessary information, nor do we use data for purposes not stated in this policy.

Malaysia PDPA Compliance

All of tbltoto's data management practices comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) — ensuring your rights as a Malaysian citizen are fully protected.

Preliminary Note: This Privacy Policy applies to all tbltoto users, including website visitors, registered users, and mobile app users. By using the tbltoto platform, you agree to the data management practices described in this document.

1Information We Collect From You

Tbltoto collects personal information necessary to operate the platform and deliver the best service to users. We only collect data that is strictly required — we do not gather excessive information unrelated to the purpose of our services.

Information You Provide Directly

  • Full name as shown on your identity document
  • National identity card number (MyKad) or passport number
  • Date of birth for age verification
  • Email address and mobile phone number
  • Residential address for KYC requirements
  • Bank account or digital wallet details for transaction purposes
  • Selfie or identity document photo for KYC verification

Information Collected Automatically

When you use the tbltoto platform, our systems automatically record certain technical information required for platform operations and account security. This includes your IP address, device type, operating system version, browser used, access time and date, and login records.

Data Type Example Information Collected During
Identity Data Name, IC, date of birth Registration & KYC
Contact Data Email, phone number Registration
Financial Data Bank account number, transactions Deposit/Withdrawal
Technical Data IP, device, browser Every access
Usage Data Wagering and game records During gameplay

2Purpose of Data Collection and Processing

Every piece of information collected by tbltoto has a clear and legitimate purpose. We do not process your data for purposes unrelated to the services you use. Below are the primary purposes for which tbltoto uses your data:

  • To verify your identity and age during the registration and KYC process
  • To enable and process deposits, withdrawals, and in-account transactions
  • To protect your account from unauthorised access and fraudulent activity
  • To fulfil legal compliance obligations including AML (Anti-Money Laundering)
  • To provide customer support and resolve disputes or complaints
  • To send important account-related communications such as transaction confirmations
  • To analyse usage patterns for platform improvement purposes
  • To send relevant promotions and offers — subject to your preferences

Legal Basis: tbltoto processes your personal data on the basis of (1) contractual necessity — to deliver the services you request; (2) legal obligation — to comply with applicable regulations; and (3) legitimate interests — to protect the security of the platform and all users.

3Security Measures We Take

Protecting your data is one of tbltoto's highest priorities. We continuously invest in security infrastructure and follow industry best practices to keep your information safe at all times.

256-bit SSL encryption ensures all data transmitted between your device and tbltoto's servers cannot be intercepted or read by any third party. This covers login credentials, financial transaction data, and all in-platform communications. At the storage level, sensitive data is held in encrypted format and accessible only by authorised personnel with a legitimate business need.

Strict internal access controls ensure that only authorized personnel can access user data, and every access is recorded in an audit log retained for a defined period. tbltoto also conducts regular security tests, including penetration testing, to identify and address vulnerabilities before they can be exploited.

Two-Factor Authentication: tbltoto encourages all users to enable two-factor authentication (2FA) on their accounts. This feature adds an extra layer of security that protects your account even if your password becomes known to another party.

4Information Sharing with Third Parties

Tbltoto does not sell, rent, or disclose users' personal data to third parties for marketing purposes. However, there are limited situations where we need to share certain information to operate the platform or fulfill legal obligations.

Trusted Service Providers

Tbltoto works with trusted third-party service providers — such as payment processors, cloud service providers, and identity verification companies. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for specific, limited purposes.

Legal Requirements

Tbltoto may be required to disclose user information to relevant authorities when mandated by law, such as in investigations involving financial crime, money laundering, or cases requiring a court order. In such situations, we will disclose only the minimum information necessary.

Important: tbltoto will not share your personal data with any third party for marketing purposes without your explicit consent. You have the right to withdraw that consent at any time.

5Cookies, Tracking, and Similar Technologies

Tbltoto uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and analyze usage patterns. Cookies are small text files stored on your device when you visit the tbltoto website.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login and session security — cannot be disabled
  • Performance Cookies: Collects usage data without personally identifying you — helps us improve the platform
  • Functional Cookies: Saves your preferences such as language and display settings so you don't have to reconfigure them each time
  • Analytics Cookies: Helps us understand how users interact with the platform for continuous improvement purposes

You can manage your cookie settings through your browser. Disabling certain cookies may affect the functionality or user experience of the tbltoto platform.

6Your Rights as a User

As a tbltoto user and a Malaysian citizen protected by the Personal Data Protection Act 2010 (PDPA), you hold important rights regarding your personal data. tbltoto is committed to respecting and facilitating the exercise of these rights.

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Update inaccurate or incomplete data in your account.

Right to Erasure

Request deletion of your personal data under certain circumstances.

Right to Data Portability

Receive your data in a machine-readable format.

Right to Object

Object to data processing for specific purposes such as marketing.

Right to Restriction

Request restriction of processing under certain conditions and for specific periods.

To exercise any of the above rights, contact the tbltoto support team via Live Chat or email. We will process your request within 30 business days from the date of receipt.

7Data Retention Period

Tbltoto retains your personal data only for as long as needed for its stated purpose, or as required by applicable law. Different retention periods apply to different types of data.

  • Active account data: For as long as your account remains active on the tbltoto platform
  • KYC and identity verification data: Minimum 5 years after account closure (AML requirements)
  • Financial transaction records: Minimum 7 years (tax and regulatory requirements)
  • Customer support communication logs: 2 years from the date of interaction
  • Technical and security log data: 12 months from the date of record

Upon expiry of the applicable retention period, your data will be securely deleted or de-linked from your personally identifiable information.

8Changes to This Privacy Policy

Tbltoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. We will notify users of significant changes via in-account notifications or their registered email address.

The "Updated" date shown at the top of this page indicates the effective date of the most current version of this policy. Your continued use of the tbltoto platform after any changes take effect will be considered your acceptance of the updated policy.

Recommendation: We encourage you to review this Privacy Policy page periodically — especially when you receive notifications about changes. This ensures you are always informed about how we manage your personal data.

9Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data by tbltoto, we encourage you to contact us directly. Our team is ready to help you understand your rights and options.

The fastest way to get a response is through Live Chat, available 24/7 on the tbltoto platform. You can also reach us by email at [email protected] — we aim to respond to all privacy-related inquiries within 48 business hours.

For formal requests relating to data access, correction, or deletion, please clearly state in your message the type of request you are making and your account details. This allows us to process your request more quickly and accurately.

Privacy Support: tbltoto's dedicated support team is ready to assist with all privacy and data protection enquiries. Reach us via Live Chat or email — we ensure every enquiry is handled with seriousness and professionalism.

Your Data is Safe with tbltoto

Join over 500,000 Malaysian users who trust tbltoto — a platform that puts your safety and privacy first in every aspect of its operations.

256-bit SSL Encryption PDPA Compliance No data sales 18+ only
Bahasa Melayu