At toto328, your privacy is more than a legal obligation — it is a core value. This Privacy Policy clearly explains how we collect, store, use, and protect the personal information of every member in Malaysia, in accordance with the Personal Data Protection Act 2010 (PDPA).
Quick Summary: toto328 only collects data that is strictly necessary, never sells your information to anyone, and protects your privacy with high-grade encryption. You can request access, correction, or deletion of your data at any time.
This Privacy Policy is issued by toto328 ("we", "the platform") and applies to all personal information collected through the toto328.my website, related mobile applications, and any services or communications we offer to members and users in Malaysia.
We take data protection responsibilities very seriously. As an online betting platform operating in Malaysia, toto328 fully complies with the provisions of the Personal Data Protection Act 2010 (PDPA Malaysia) as well as related regulations enforced by the Personal Data Protection Commissioner.
By registering for or using the toto328 platform, you consent to the collection and use of your personal information in accordance with the terms set out in this Privacy Policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our platform.
Toto328 only collects personal information necessary for legitimate, clearly stated purposes. The information we collect falls into several categories:
toto328 never collect or store sensitive information such as credit/debit card numbers directly. All financial transactions are processed through secure payment gateways that comply with PCI-DSS standards.
The personal information we collect is used solely for the following legitimate purposes:
toto328 does not use your information for third-party marketing purposes or for fully automated decision-making that materially affects your rights without human intervention.
Toto328 does not sell, rent, or trade members' personal information to any third party for commercial purposes. However, in the following limited circumstances, we may share necessary information:
We work with a select group of service providers who help us operate the toto328 platform, including:
All third-party service providers are bound by strict data confidentiality agreements and are only permitted to process your information for the specific purposes defined.
Toto328 may disclose your personal information to Malaysian authorities where required by law, court order, or direction from a legitimate enforcement body, including cases involving fraud, money laundering, or public security threats.
The security of your data is toto328's top priority. We implement multiple layers of technical and organisational safeguards to keep your personal information protected at all times:
While we take all reasonable precautions, no online system can be guaranteed 100% secure. You play an important role too — always use a strong password and never share your toto328 login credentials with anyone.
Toto328 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.
You can manage or delete cookies through your web browser settings. Please note that disabling essential cookies may affect certain features of the toto328 platform.
Under the Personal Data Protection Act 2010 (PDPA Malaysia), you have the following rights regarding your personal data held by toto328:
| Rights | Description | How to Submit |
|---|---|---|
| Right of Access | Request a copy of the personal data we hold about you | Email support@toto328.my |
| Right to Rectification | Request correction of inaccurate or incomplete personal data | Via account settings or by contacting support |
| Right to Erasure | Request deletion of your personal data (subject to legal obligations) | Email support@toto328.my |
| Right to Object | Object to the processing of your data for direct marketing purposes | Via the unsubscribe link in emails |
| Right to Complain | Lodge a complaint with the Personal Data Protection Commissioner of Malaysia | Via Malaysia's official PDPA portal |
Toto328 will process any requests relating to personal data rights within 21 working days from the date the request is received. For complex cases, we will notify you if additional time is required.
Toto328 only retains your personal information for as long as necessary to fulfil the purpose for which it was collected, or for the period required under applicable Malaysian law.
When data is no longer needed, toto328 will securely delete it using methods that ensure it cannot be recovered.
The toto328 platform may contain links to third-party websites or services. toto328's Privacy Policy does not apply to those external sites. We are not responsible for the privacy practices or content of any third-party website. We recommend that you read the privacy policy of each website you visit separately.
Toto328 is a betting entertainment platform intended exclusively for adults aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18. Should we discover that a minor's personal data has been collected without our knowledge, we will take immediate steps to delete that information and close the associated account.
If you are a parent or guardian who suspects that your underage child has registered on toto328, please contact us immediately at support@toto328.my.
Toto328 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. Members will be notified of any significant changes via in-platform notifications or email at least 14 days before they take effect.
The "Last Updated" date at the top of this page reflects the most recent version of this Privacy Policy in effect. Continued use of the toto328 platform after any amendments take effect constitutes your acceptance of the revised terms.
If you have any questions, concerns, or requests regarding the toto328 Privacy Policy or the processing of your personal data, please contact our Data Protection Officer via:
Every aspect of toto328's data management is built on these principles to protect the privacy of Malaysian members
All your personal data and financial transactions on toto328 are protected by 256-bit SSL encryption — the same security standard used by leading Malaysian banking institutions.
Toto328's Privacy Policy is designed in full accordance with the Personal Data Protection Act 2010 (PDPA Malaysia). Your rights as a data subject are protected and respected at all times.
Toto328 has never and will never sell, rent, or trade members' personal information to any third party for advertising or commercial marketing purposes.
You have the right to access, correct, or request deletion of your personal data on toto328 at any time. Simply contact our team and we will process your request within 21 business days.
Toto328 only collects data that is strictly necessary for platform operations. We do not collect excessive information, and every category of data has a clearly defined purpose.
In the event of any security incident involving your data, toto328 is committed to notifying affected members within the timeframe stipulated by the PDPA and taking immediate remedial action.
Answers to the most common questions asked by toto328 members regarding privacy and data security
With a transparent Privacy Policy and high-grade data protection, you can enjoy the best betting experience at toto328 with complete confidence. Over 100,000 Malaysian members have already trusted us.