Privacy & Data Protection

Privacy Policy Toto 99 — Our Commitment to Protecting Your Data

Toto 99 takes your privacy very seriously. This Privacy Policy explains in detail how we collect, use, store and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

🔒
PDPA Compliant
Full compliance with Malaysia's Personal Data Protection Act 2010
Last Updated
1 January 2026

Toto 99's Six Data Protection Principles

The toto 99 Privacy Policy is built on six core principles that ensure your personal data is always protected and used responsibly.

Highest-Grade Encryption

All personal data and financial transactions on the Toto 99 platform are protected with 256-bit SSL encryption — the same standard used by Malaysia's major banking institutions to safeguard sensitive user information.

No Sale of Data to Third Parties

Toto 99 has never and will never sell, rent or share your personal data with any third party for marketing or commercial purposes without your explicit consent.

Your Data, Your Control

As a Toto 99 user, you have the full right to access, correct, transfer or request deletion of your personal data at any time by contacting our support team.

Malaysia PDPA Compliance

Toto 99's Privacy Policy is fully developed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all our data processing practices comply with Malaysian law.

Secure & Local Data Storage

Toto 99 user data is stored on secured, round-the-clock monitored servers. We enforce strict access controls to ensure only authorised personnel can access your data.

Data Breach Notification

In the event of any data breach involving your personal information, Toto 99 is committed to notifying you in a timely manner and taking the necessary remedial steps promptly.

Your Data Protection Rights as a Toto 99 User

Under the Toto 99 Privacy Policy and PDPA 2010, you have the following rights regarding your personal data.

Right of Access

You have the right to request and receive a copy of the personal data we hold about you at any time.

Right of Correction

You have the right to request correction of any inaccurate or outdated personal data held in our records.

Right to Erasure

You may request the deletion of your personal data under certain circumstances as provided by law.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time.

Last Updated: 1 January 2026

Toto 99 respects the privacy of every user on our platform. This Privacy Policy explains clearly and in detail how we manage your personal data — from how it is collected and how it is used, to who it may be shared with and how you can control your own information. By using the toto 99 platform, you agree to the practices described in this Privacy Policy.

1Introduction & Scope of This Privacy Policy

This Privacy Policy applies to all users who access or use the Toto 99 platform via toto99.my, including all services offered such as Live Casino, slots, blackjack, roulette, Sports Betting, live matches and all user account features.

Toto 99 acts as the data controller for all personal information collected through our platform. We are fully responsible for ensuring your data is processed in accordance with the principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy should be read together with Terms & Conditions toto 99 which forms part of your overall agreement with our platform.

If you are under 18 years of age, you are not permitted to use the Toto 99 platform and this Privacy Policy does not apply to you. Please leave this website immediately if you have not yet reached the age of 18.

2Personal Data We Collect

Toto 99 collects several categories of personal data from our users. We only collect data that is genuinely necessary to provide you with a quality, secure service.

Data You Provide Directly:

  • Full name as stated on your MyKad or valid Malaysian passport.
  • National identity card (MyKad) number or passport number.
  • Date of birth and gender.
  • Active email address and Malaysian mobile phone number.
  • Current residential address in Malaysia.
  • Bank account or e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay) for deposit and withdrawal purposes.
  • Identity verification documents uploaded during the KYC process.

Automatically Collected Data:

  • IP address and general location information.
  • Device type, operating system and web browser used.
  • Session data including pages visited, session duration and navigation patterns.
  • Transaction history, games played, and betting activity on the platform.
  • Communication logs with the customer support team.

Important Note: toto 99 does not store credit or debit card numbers directly. All payment processing is handled by approved third-party payment providers that comply with PCI-DSS security standards.

3How We Use Your Personal Data

Toto 99 uses collected personal data solely for legitimate and transparent purposes, as follows:

  • Account management: Registering, verifying your identity and managing your user account on the Toto 99 platform.
  • Transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawals to your bank account or e-wallet.
  • Legal compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering) and other regulatory requirements applicable in Malaysia.
  • Customer service: Responding to enquiries, complaints, and support requests submitted to our team.
  • Platform security: Detecting and preventing fraud, multiple account usage, money laundering and any other suspicious activity.
  • Service improvements: Analysing usage patterns to improve the overall gaming experience and platform features.
  • Marketing communications: Sending toto 99 promotional information and special offers — only if you have given your consent to receive such communications.
  • Responsible gaming: Monitoring gameplay habits and identifying signs of addiction for our responsible gaming program.

Toto 99 will not use your personal data for any purpose other than those stated above without obtaining your consent first.

4Data Sharing with Third Parties

Toto 99 does not sell or rent your personal data to any third party. However, in certain limited circumstances, we may share your data with the following parties:

  • Payment service providers: Authorised providers for Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, solely for the purpose of processing deposit and withdrawal transactions.
  • Technical service providers: Companies that help us operate the platform's technical infrastructure, analytics, and security — subject to strict confidentiality agreements.
  • Regulatory authorities: Relevant regulatory bodies in Malaysia where required by law or court order.
  • Law enforcement authorities: The Royal Malaysia Police (PDRM) or other enforcement agencies where there is a valid legal obligation to do so.
  • Audit partner: Independent audit firms that verify the fairness of games and regulatory compliance of the Toto 99 platform.

All third parties with whom we share data are required to comply with our Privacy Policy and applicable data protection laws. They are not permitted to use shared data for any purpose other than what is specified in the agreement with toto 99.

5Data Security & Protection Measures

Toto 99 applies multiple layers of technical and organisational security controls to protect your personal data against unauthorised access, alteration, disclosure, or accidental deletion.

  • Data encryption in transit using 256-bit TLS/SSL protocols for all communications between your browser and Toto 99 servers.
  • Data encryption at rest for sensitive information such as passwords and identity documents.
  • Role-based access control — only staff with specific authorisation may access certain user data.
  • 24/7 security monitoring and automated intrusion detection systems.
  • Regular security audits conducted by independent third parties.
  • Two-factor authentication (2FA) is available for all Toto 99 user accounts.

Important Reminder: While Toto 99 implements comprehensive security measures, no security system can be guaranteed to be 100% foolproof. You also have a responsibility to protect your account password and to never share your login credentials with anyone.

6Cookies & Tracking Technologies

Toto 99 uses cookies and similar tracking technologies to enhance the user experience and understand how users interact with our platform. The types of cookies we use are as follows:

  • Essential Cookies: Required for core platform functions such as login, game sessions and security. These cookies cannot be disabled.
  • Performance Cookies: Gathering information on how users use the platform to help us improve performance and the overall experience.
  • Functional Cookies: Storing user preferences such as language and display settings to deliver a more personalised experience.
  • Analytics Cookies: Helps us understand aggregated, anonymised usage patterns for service improvement purposes.

You can manage your cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality of the toto 99 platform and your overall experience.

7Data Retention Period

Toto 99 retains your personal data for as long as your account remains active or as long as necessary to provide services to you. Once an account is closed, we will retain your data for the minimum period required under applicable Malaysian law — typically seven years for financial records, to comply with anti-money laundering and tax requirements.

Once the mandatory retention period expires, your personal data will be securely deleted from our systems in accordance with established data disposal procedures. Gaming activity logs and financial transaction records may be retained longer if there is an active investigation or related legal claim.

If you wish to close your Toto 99 account and request data deletion prior to the end of the mandatory retention period, please contact our support team. Such requests will be processed subject to applicable legal obligations.

8Your Rights Under PDPA 2010

As a toto 99 user and Malaysian resident, you have the following rights under the Personal Data Protection Act 2010:

  • Right of Access: Request and receive a copy of the personal data we hold about you.
  • Right of Correction: Request the correction of personal data that is inaccurate, incomplete, or out of date.
  • Right to Withdraw Consent: Withdraw consent for certain data processing activities, such as marketing communications, at any time.
  • Right to Object: Object to the processing of your personal data for specific purposes, including direct marketing.
  • Right to Complain: Lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your rights have been violated.

To exercise any of the rights above, please contact the toto 99 support team by email at privacy@toto99.my or via the in-platform Live Chat. We will process your request within 21 business days from the date it is received, in line with PDPA requirements.

9Children's Privacy

The Toto 99 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18. Should we discover that we have inadvertently collected data from someone under 18, we will take immediate steps to delete that data and close the account in question.

To Parents and Guardians: If you believe that your child or ward under the age of 18 has registered for or used the Toto 99 platform, please contact us immediately at support@toto99.my so that we may take the appropriate action.

10Changes to This Privacy Policy

Toto 99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, current legal requirements, or platform service improvements. Any material changes to this Privacy Policy will be communicated to you via email notification or a prominent announcement within the Toto 99 platform.

The "Last Updated" date at the top of this document will be revised whenever changes are made. We encourage you to review this Privacy Policy periodically. Continued use of the Toto 99 platform after any changes are published constitutes your acceptance of the updated terms.

11Contact Us About Privacy

If you have any questions, concerns or complaints regarding the Toto 99 Privacy Policy or how we handle your personal data, please contact our Privacy Officer through the following channels:

  • Privacy Email: privacy@toto99.my
  • Support Email: support@toto99.my
  • Live Chat: Available 24/7 directly from the toto 99 platform.
  • WhatsApp: Via the official Toto 99 WhatsApp number listed on the platform.

We are committed to responding to all privacy-related enquiries within 48 business hours. For formal complaints under PDPA, you may also contact the Department of Personal Data Protection Malaysia (JPDP) directly through their official channels.

Your Privacy is Toto 99's Priority

We understand that your trust is our most valuable asset. That is why we invest in security and privacy — not merely to meet legal requirements, but because it is simply the right thing to do.

🛡️
256-bit SSL
All data is encrypted to the highest industry security standards.
📋
PDPA 2010
Fully compliant with Malaysia's Personal Data Protection Act.
🚫
No Data Selling
Your data is never sold or shared for third-party commercial purposes.
48-Hour Response
All privacy enquiries are responded to within 48 business hours.
Join toto 99 Today

Enjoy a Safe & Trusted Malaysian Online Casino Platform

Your data is safe with Toto 99. Register now and join over 500,000 Malaysian players who trust our platform for the best online casino experience.

Bahasa Melayu