Updated: 1 January 2026

Privacy Policy tbltoto — Protection Personal Data Member

At tbltoto, your privacy is more than a legal obligation — it is our commitment. This policy clearly explains how your personal data is collected, used, stored, and protected at all times.

256-bit
SSL Encryption
0
Data Sold to Third Parties
24/7
Security Monitoring
PDPA
Data Protection Act

Commitment Privacy We

Six core personal data protection principles practised by tbltoto every day to keep your information secure.

End-to-End Encryption

All data transmitted between your device and tbltoto's servers is protected with 256-bit SSL encryption, the same technology used by leading banking institutions worldwide.

Secure Data Storage

Your personal data is stored on servers protected with multi-layered access controls, encryption at rest, and regular backups to prevent data loss.

Strict Access Controls

Only specifically authorised staff have access to members' personal data, and all access is recorded in audit logs retained for the period required by law.

Your Rights Are Respected

You have the right to access, correct, or request deletion of your personal data at any time. tbltoto processes all data rights requests within 14 business days.

No Data Sales

Tbltoto never sells, rents or shares your personal data with advertisers or third-party companies without your clear and explicit consent.

Malaysia PDPA Compliance

All tbltoto data management practices comply with the Malaysian Personal Data Protection Act (PDPA) 2010 and applicable international data protection standards.


This Privacy Policy describes tbltoto's practices for managing your personal information as a member of our platform. By using tbltoto's services, you agree to the collection and use of data as described here. Please read this document carefully as it has important implications for your rights.

01 Introduction

Tbltoto (hereinafter referred to as "We", "Platform" or "tbltoto") is an online betting and entertainment platform operator fully committed to protecting the privacy of every member. This Privacy Policy applies to all services we offer through the tbltoto.net website and the official tbltoto mobile app.

As a platform operating in the Malaysian market, tbltoto complies with the Personal Data Protection Act (PDPA) 2010 and all related regulations currently in force. We take these obligations seriously and continuously update our internal procedures to ensure ongoing compliance.

Scope of This Policy: This policy applies to all individuals who register as members, visit our website as guests, or interact with any tbltoto service through any digital channel.

02 Personal Data We Collect

Tbltoto only collects data that is strictly necessary to provide a safe, fair and legally compliant service. The following are the categories of data we collect:

A. Data You Provide Directly

  • Full name as it appears on official identification documents.
  • Date of birth to verify age eligibility (18 years and above).
  • Identity card number (MyKad) or passport number.
  • Active email address and mobile phone number.
  • Full current residential address.
  • Bank account or e-wallet details for processing deposits and withdrawals.
  • Identity verification documents (KYC) such as MyKad copies and proof of address.

B. Automatically Collected Data

  • IP address and geographic location information (city/state level).
  • Device type, operating system, and web browser version used.
  • Platform activity logs including games played, total bets placed, and results.
  • Transaction history for deposits, withdrawals and bonuses.
  • Login session times and durations.
  • Cookie data and website performance trackers.

C. Data From Third Parties

  • Identity verification through approved eKYC service providers.
  • Payment verification information from payment processors partnered with tbltoto.
  • Blacklist screening data from anti-fraud and anti-money laundering agencies.
Data Minimisation Principle: tbltoto only collects data that is strictly necessary. We do not collect sensitive information such as biometric data, religious beliefs or sexual orientation unless required by law.

03 How We Use Your Data

Collected data is used solely for legitimate purposes directly related to tbltoto's services, as follows:

  • Account Management: Creating, verifying, and maintaining your member account securely.
  • Transaction Processing: Processing deposits, withdrawals, and all financial activity in your account quickly and accurately.
  • Identity Verification (KYC): Meeting anti-money laundering (AML) legal requirements and verifying age eligibility.
  • Platform Security: Detecting and preventing fraud, unauthorized access, multiple account use, and suspicious activity.
  • Customer Support: Resolving inquiries, complaints, and disputes efficiently and fairly.
  • Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support.
  • Platform Communications: Sending transaction notifications, security updates, and promotional information (if you have opted in to receive them).
  • Service Improvements: Analyzing anonymized usage data to improve the overall user experience.
Marketing Communication Preferences: You may opt out of marketing communications at any time via your account settings or by contacting the tbltoto support team. Unsubscribing from marketing will not affect important account-related communications.

04 Data Sharing With Third Parties

Tbltoto does not sell your personal data to anyone. However, there are limited situations where we need to share certain information with trusted third parties:

  • Payment Processors: Data required to complete financial transactions is shared with payment providers such as DuitNow, FPX, Touch 'n Go and GrabPay, all of whom are bound by strict confidentiality agreements.
  • eKYC Provider: Identity information is shared with approved identity verification service providers solely for legal compliance purposes.
  • Legal Obligations: tbltoto will disclose required information to lawful authorities when mandated by law, court order or valid legal process.
  • Fraud Prevention: Very limited data may be shared with integrated fraud prevention networks to protect all platform members.
Our Guarantee: All third parties we work with are bound by data processing agreements that require them to protect your information to the same or higher standard as tbltoto. We do not permit them to use your data for their own purposes.

05 Cookies & Tracking Technologies

Tbltoto uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session management, security, and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform (pages visited, time spent) to help us improve site speed and functionality.
  • Functional Cookies: Saving your preferences such as display size, preferred language, and game settings so you do not need to reconfigure them each time.
  • Analytical Cookies: Helping us understand overall usage patterns using anonymized data for continuous improvement purposes.

You can manage your cookie settings through your web browser at any time. Disabling certain cookies may affect the functionality of some parts of the tbltoto platform.

06 Data Security

Protecting your data is tbltoto's highest priority. We implement multiple layers of technical and organizational security to keep your data safe at all times:

  • 256-bit SSL encryption for all data in transit between your device and our servers.
  • AES-256 encryption for sensitive data stored in our database.
  • Two-factor authentication (2FA) is available for all member accounts and is mandatory for administrative accounts.
  • Round-the-clock security monitoring by tbltoto's internal cybersecurity team.
  • Regular penetration testing conducted by independent security auditors.
  • Server infrastructure segmented with multi-layered firewalls and intrusion detection systems.
  • Mandatory data security training program for all tbltoto staff.
In the Event of a Data Breach: In the event of any security incident affecting your data, tbltoto will notify you and the relevant authorities within the timeframe required by law, no later than 72 hours after we become aware of the incident.

07 Data Retention & Deletion Period

Tbltoto retains your personal data for as long as your account is active and for the required period following account closure to fulfil legal and regulatory obligations:

  • Active Account Data: Retained for the duration your account is active plus 7 years after closure for AML compliance and tax law purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements.
  • Support Communication Logs: Retained for 3 years for dispute resolution purposes.
  • Anonymised Analytics Data: May be retained for a longer period as it can no longer be linked to any specific individual.

Once the retention period expires, data will be securely deleted or anonymised using procedures that ensure it cannot be recovered.

08 Your Rights as a Data Subject

Under Malaysia's PDPA and tbltoto's policy, you have the following rights regarding your personal data. The table below summarises these rights:

Your Rights Description Status
Right to Access Requesting a copy of all personal data we hold about you. Available
Right to Rectification Requesting correction of inaccurate or incomplete data. Available
Right to Erasure Requesting deletion of data that is no longer needed, subject to legal obligations. Subject to Terms
Right to Object Objecting to the processing of your data for direct marketing purposes. Available
Right to Restrict Processing Requesting restrictions on how we process your data under certain circumstances. Subject to Terms
Right to Portability Receiving your data in a machine-readable format for portability. Available

To exercise any of the above rights, contact the tbltoto privacy team via email [email protected] or via the platform's live chat. We will process your request within 14 business days.

Identity Verification Required: To protect your security, tbltoto will request identity verification before processing any data rights request. This ensures that only you can access or modify your personal information.

09 Child Data Protection

Tbltoto services are exclusively for individuals aged 18 and above. tbltoto does not knowingly collect or process personal data of children under the age of 18.

If we discover that a child's personal data has been collected without our knowledge — for example through registration using a false identity — we will take the following immediate action:

  • Suspending the associated account immediately.
  • Deleting all personal data associated with the minor.
  • Reporting the incident to the relevant authorities if required.
  • Forfeiting all funds held in that account.

If you become aware that a minor has registered on the tbltoto platform, please contact us immediately through our official support channels.

10 Privacy Policy Amendments

Tbltoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technology used. Any significant amendments will be communicated to you via:

  • In-platform notification upon your next login.
  • Email notification to your registered email address.
  • Updates the "Last Updated" date shown at the top of this page.

Continued use of the tbltoto platform after amendments are published constitutes your acceptance of those changes. You are encouraged to review this page periodically to stay informed on how we protect your privacy.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your personal data rights, the tbltoto Privacy & Data Protection team is here to help:

  • Privacy Email: [email protected] — for all privacy policy and data rights enquiries.
  • General Support Email: [email protected] — for general account-related assistance.
  • 24/7 Live Chat: Available directly within the tbltoto platform for immediate feedback.
  • FAQ Page: Visit FAQ page for answers to common privacy questions.

We are committed to responding to all privacy-related inquiries within 3 business days. For formal data rights requests, the processing period is up to 14 business days.


YOUR DATA IS SAFE WITH US

Join tbltoto with Full Confidence — Betting Platform Most Trusted in Malaysia

Your privacy and security are tbltoto's top priority. Register today and enjoy a safe, transparent and exciting betting experience alongside over 250,000 members who have already trusted us.

256-bit SSL Encryption   Malaysia PDPA Compliance   No Data Sales

Bahasa Melayu