🔒 Privacy Policy toto22 – your personal data is protected with full 256-bit SSL encryption 🛡️ We do not sell or share your data with third parties for marketing purposes – no exceptions 💳 Deposit from RM 10 via Touch 'n Go, GrabPay, DuitNow or FPX – safe & secure 🎰 Slots, Live Baccarat, Sports Betting, Badminton & Lottery – all in one secure platform toto22 ⚡ Withdrawals processed within 15 minutes to your Malaysian eWallet – free with no hidden charges 🏆 More 500,000 Malaysian players trust Toto22 – join our community today 📧 24/7 Malay-language customer support – we are here to help you whenever you need us 🔒 Privacy Policy toto22 – your personal data is protected with full 256-bit SSL encryption 🛡️ We do not sell or share your data with third parties for marketing purposes – no exceptions 💳 Deposit from RM 10 via Touch 'n Go, GrabPay, DuitNow or FPX – safe & secure 🎰 Slots, Live Baccarat, Sports Betting, Badminton & Lottery – all in one secure platform toto22 ⚡ Withdrawals processed within 15 minutes to your Malaysian eWallet – free with no hidden charges 🏆 More 500,000 Malaysian players trust Toto22 – join our community today 📧 24/7 Malay-language customer support – we are here to help you whenever you need us
  1. Home
  2. Privacy Policy

Privacy Policy toto22 – Malaysian Player Data Protection

Your personal information is a trust we take seriously and guard with care. This document transparently explains how Toto22 collects, uses, and protects your data – in plain language, not dense legal jargon.

Register a Free Account Account Login
Contents
Effective Date: 1 January 2026

Quick Summary: toto22 collects the data necessary to operate the platform safely and fairly. We do not sell your data. We do not share your data for third-party marketing purposes. You have the right to access, correct and request deletion of your data at any time.

1. Introduction – Toto22's Privacy Commitment

This Privacy Policy explains how toto22 ("we", "our platform") collects, uses, stores, protects, and discloses personal information you provide to us when using our online betting platform at toto22.run, including all related services.

At toto22, we understand that trust is the foundation of our relationship with every Malaysian player. When you register an account, make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX, play slots, or place a sports bet, you are entrusting us with highly personal information. We take that responsibility seriously and never take it for granted.

This policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in the country. By using the toto22, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services and contact the support team to close your account.

2. Types of Personal Data We Collect

toto22 only collects data that is strictly necessary to provide our services safely and responsibly. Below are the categories of data we collect:

Data Category Example Information How It Is Collected
Identification Data Full name, date of birth, MyKad/passport number, gender Registration forms, KYC process
Contact Data Malaysian phone number, email address, residential address Account registration, profile updates
Financial Data Transaction history, payment methods used, account balance Deposit/withdrawal activity
Gaming Data Betting history, games played, session duration Automatic platform activity
Technical Data IP address, device type, browser, operating system Server logs recorded automatically
Communication Data Support chat records, emails, and feedback submitted Communications with our team

We may also collect data from legitimate third-party sources, such as identity verification agencies and gambling blacklist databases, solely to fulfil our legal compliance obligations and protect the security of the platform.

3. How We Use Your Data

The data we collect is used for specific and limited purposes. toto22 does not use your data for any purpose beyond what is stated below:

  • Account Management: Creating and managing your account, verifying your identity, and processing registration and login
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as handling withdrawals to your account
  • Service Provision: Enabling access to all games including slots, live baccarat, Sports Betting, badminton, and lottery
  • Security & Fraud Prevention: Detecting and preventing fraud, money laundering, multiple account use, and any activity that violates our terms.
  • Legal Compliance: Fulfilling obligations under Malaysian law, including the PDPA 2010, and KYC and AML (Anti-Money Laundering) requirements
  • Customer Support: To assist you when you contact our team and to resolve any issues or enquiries
  • Responsible Gaming: Monitoring play patterns to identify signs of problem gambling and activating appropriate protection tools
  • Platform Improvements: Analysing usage patterns on an aggregate basis (without identifying individuals) to improve the interface and user experience
  • Service Communications: Sending important notifications about your account, draw results, security, and policy updates (not for marketing purposes unless you have given your consent)

Regarding Marketing: We will only send you marketing communications (promotions, bonuses, offers) if you have given explicit consent. You may withdraw this consent at any time through your account settings or by contacting our team.

4. Legal Basis for Data Processing

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, toto22 processes your personal data on the following bases:

  • Consent: For marketing communications and additional analytics – you provide explicit consent and may withdraw it at any time
  • Contractual Performance: Processing necessary to provide the services you registered for – including account management, payment processing, and game delivery
  • Legal Obligations: Compliance with KYC and AML requirements, and reporting to relevant authorities as required under Malaysian law
  • Legitimate Interests: Fraud prevention, platform security, and abuse detection that safeguards the interests of all users on our platform

We always ensure that the purpose of processing is legitimate, limited to what is necessary, and proportionate to your privacy. We do not process your data for purposes incompatible with the original reason it was collected without obtaining fresh consent from you.

5. Data Sharing & Disclosure to Third Parties

toto22 does not sell, rent, or trade your personal data. However, there are limited circumstances in which we need to share data with other parties in order to operate our services:

  • Service Providers: Companies that help us operate the platform, such as payment processors (Touch 'n Go, GrabPay, DuitNow, FPX), cloud service providers, and game providers (Pragmatic Play, Evolution Gaming, and others). They may only use your data for purposes we direct and are bound by strict data protection agreements
  • Identity Verification Agencies: To carry out KYC checks as required by law – sharing is limited to information necessary for verification purposes only
  • Authorities: Where required by Malaysian law, a valid court order, or the relevant regulatory body — we comply with lawful requests but will notify you where permitted by law.
  • Business Transfer: In the event of a merger, acquisition or asset sale, user data may be transferred — you will be notified in advance and your rights will continue to be protected

Our Commitment: All third parties we work with are bound by legally enforceable data processing agreements. They are prohibited from using your data for their own purposes, selling your data, or sharing it with other parties without our authorisation.

6. Cookies, Trackers & Similar Technologies

Platform toto22 uses cookies and similar tracking technologies to enhance the user experience and platform security. Below are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication, session management, and security. Disabling these cookies will affect the platform's functionality
  • Performance Cookies: Collects information on how you use the platform — pages visited, errors encountered — to help us improve. Data is gathered in aggregate and anonymized form.
  • Functional Cookies: Remembers your preferences — such as language, display settings, and game choices — to deliver a more personalized experience.
  • Security Cookies: Helps detect and prevent fraudulent activity, verify user identities, and protect accounts from unauthorized access.

You can manage your cookie settings through your browser. However, disabling certain cookies may affect the functionality of the platform toto22. We do not use third-party cookies for advertising purposes.

7. Data Security Measures

toto22 implements multiple layers of technical and operational safeguards to keep your data secure at all times:

  • Transmission Encryption: All data transmitted between your device and toto22's servers is encrypted using TLS 1.3 and 256-bit SSL protocols – the same security standard used by Malaysia's major banks
  • Storage Encryption: Sensitive data stored in our databases is encrypted using AES-256 algorithms. Passwords are stored as irreversible cryptographic hashes
  • Access Controls: Only authorized personnel with a legitimate business need may access personal data, and all access is logged and audited regularly.
  • Two-Factor Authentication: The 2FA feature is available to all player accounts as an added layer of security, and we strongly encourage all users to enable it.
  • Continuous Monitoring: Our 24/7 security monitoring system detects any unauthorized access attempts or suspicious activity and responds automatically.
  • Security Audit: Independent security audits are conducted periodically by qualified third parties to identify and address any vulnerabilities in our systems.

Your Responsibilities: While we implement robust security measures, the security of your account also depends on your own actions. Use a strong password, do not share your login credentials, and enable 2FA. Contact us immediately if you suspect your account has been compromised.

8. Data Retention Period

toto22 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required under Malaysian law:

  • Active Account Data: Retained for the duration your account remains active and for any additional period required following account closure
  • Financial Transaction Records: Retained for a minimum of 7 years after a transaction takes place – as required under Malaysian financial and tax laws
  • KYC Records: Retained for 5 years after the business relationship ends – in accordance with the requirements of the Anti-Money Laundering and Anti-Terrorism Financing Act 2001
  • Security Logs: Retained for 12 months for fraud investigation and prevention purposes
  • Support Communications: Retained for 2 years for reference and service improvement purposes
  • Cookies & Analytics Data: Depending on the cookie type – from the current session up to a maximum of 13 months

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked back to your identity.

9. Your Rights Under the PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data that we hold:

Right of Access

You have the right to request and receive a copy of the personal data we hold about you. We will process your request within 21 calendar days and may charge a reasonable fee for physical copies where applicable.

Right to Rectification

If the data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. You can update most account information directly through your profile settings, or contact our support team for further assistance.

Right to Erasure

You may request the deletion of your personal data when it is no longer needed for its original purpose, you have withdrawn your consent and there is no other legal basis for processing, or the data has been processed unlawfully. However, such requests may be subject to data retention obligations under Malaysian law.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Once you raise an objection, we will cease processing your data for that purpose without delay.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transfer it to another data controller where applicable.

Right to Restrict Processing

In certain circumstances, such as when you are verifying the accuracy of your data or have raised an objection, you may request that we temporarily restrict the processing of your data without deleting it.

To submit any request relating to the rights above, contact us at support@toto22.run with the subject line "Personal Data Rights Request". We will respond within 21 calendar days as required by law.

10. Protection of Children's Data

Platform toto22 is strictly intended for individuals aged 18 and above. We do not knowingly collect any personal information from children or minors.

Should we discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the associated account. If you believe a child has registered an account at toto22, please contact us immediately at support@toto22.run so we can take the appropriate action.

Parents and guardians who discover that their children have accessed the platform toto22 should contact our support team immediately. We will process account closure and children's data deletion requests as our highest priority.

11. International Data Transfers

In the course of operating the platform, some of your personal data may be processed outside Malaysia by our third-party service providers, such as cloud service providers or international game providers. When this occurs, toto22 ensures:

  • Transfers are only made to countries or organisations that provide an adequate level of data protection
  • Legally binding data processing agreements are in place with all recipients of data transferred overseas
  • Additional safeguards such as encryption and data minimisation are applied for transfers to regions deemed to have inadequate protection
  • Transfers are only carried out where necessary for the provision of services you use and where there is no equivalent alternative that would keep processing within Malaysia

You may contact us for more information about the countries in which your data may be processed and the safeguards in place for such transfers.

12. Amendments to This Privacy Policy

toto22 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When material changes are made:

  • We will display a clear notice on the homepage toto22 at least 14 days before the changes take effect
  • We will send a notification email to your registered address
  • We will display a notification when you log in to the platform
  • The "Last Updated" date at the top of this document will be updated

Ongoing use of the platform toto22 after the effective date of such changes will be considered acceptance of the amended terms. If you do not agree, you have the right to close your account in accordance with the established procedure before the changes take effect.

13. Contact Our Data Protection Officer

If you have any questions, concerns or complaints about how toto22 handles your personal data, or if you wish to exercise any of your rights under the PDPA 2010, please contact us:

  • Email: support@toto22.run
  • Live Chat: Available 24/7 at the bottom-right corner of every page on the platform
  • Email Subject for Privacy Issues: "Personal Data Request – [Your Username]"

We are committed to responding to all privacy-related enquiries within 21 calendar days. For issues requiring further investigation, we will keep you informed of the estimated resolution time and provide regular updates. If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia.

This document is the official version of the Privacy Policy toto22 effective from 1 January 2026. This supersedes all previous versions. Please save or print a copy for your reference.

Six Ways toto22 Protecting Your Privacy

The concrete commitments we uphold to safeguard the personal data of every Malaysian player

Bank-Grade Encryption

All data transmitted between your device and our servers toto22 protected with TLS 1.3 and 256-bit SSL encryption – the same security standard used by Maybank2u and CIMB Clicks. No one can intercept or read your data while it is in transit.

No Data Sales

toto22 does not sell, rent, or trade your personal data to any party for marketing or any other purpose. Your data belongs to you – we only use it to deliver the services you request.

Full Control in Your Hands

You can access, correct or request deletion of your data at any time. Marketing preferences, data consent settings and cookie choices are all available in your account panel — straightforward and adjustable whenever you like.

Data Minimisation Principle

We only collect data that is strictly necessary to operate our services securely. There is no excessive data collection. Every category of data we request has a clear justification and is limited to a specific purpose.

Malaysia PDPA 2010 Compliance

Privacy practices toto22 designed to be fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all data protection principles established under the Act and conduct regular compliance reviews.

Data Breach Notification

In the event of any data security breach affecting your information, toto22 committed to notifying you within the timeframe required by law and taking prompt action to minimize any harm.

FAQ – Privacy & Data at toto22

The most frequently asked questions from Malaysian players about data protection at Toto22

No. toto22 does not store your credit card, debit card, or bank account details in our systems. All financial transactions are processed through Level 1 PCI DSS-certified third-party payment gateways, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. This sensitive financial information is handled entirely by licensed payment processors and never passes through or is stored on toto22's servers.

Yes, you have the right to request a copy of the personal data we hold about you under Malaysia's PDPA 2010. Send your request to support@toto22.run with the subject line "Data Access Request", along with your account number and a copy of your identification for verification. We will process your request within 21 calendar days and provide the data in a reasonable format. A small administrative fee may apply for requests involving a large volume of data, but we will notify you in advance.

Once your account is closed, we will initiate the data deletion process within a reasonable timeframe. However, certain data must be retained for specified periods under Malaysian law – for example, financial transaction records must be kept for at least 7 years and KYC records for at least 5 years after account closure. Any data that must be retained will be stored securely and accessed only when required by law or a lawful authority. Once the mandatory retention period expires, the data will be securely deleted.

Toto22 only sends marketing communications if you have given explicit consent during registration or subsequently through your account settings. We do not share your data with third-party advertisers or advertising networks. We do not use third-party cookies for advertising or cross-site tracking purposes. If you wish to stop receiving marketing communications from Toto22, you may unsubscribe via the "unsubscribe" link in any of our emails or through the notification settings in your account panel.

Before engaging any third-party service provider, Toto22 conducts rigorous checks on their privacy and security practices. All providers we work with — whether payment processors, game providers or cloud service providers — are required to sign a legally binding Data Processing Agreement. This agreement obligates them to process your data only in accordance with our instructions, implement adequate security measures, not disclose your data to other parties, and allow us to audit their practices. We also conduct periodic reviews to ensure ongoing compliance.

If you suspect your Toto22 account has been compromised — whether you've noticed unrecognised activity, received suspicious emails claiming to be from Toto22, or believe your password may have been exposed — please act immediately. First, change your account password right away. Second, enable two-factor authentication (2FA) if you haven't already. Third, contact the Toto22 support team via live chat or email at support@toto22.run to report the issue. Our security team will investigate and take appropriate protective action without delay, including temporarily suspending your account during the investigation if necessary.

Your Data Is Safe – Join toto22 with Confidence

Privacy and data security are the foundation of the trust we build with every Malaysian player. Register a free account today and enjoy slots, live baccarat, sports, badminton, and lottery on a platform that is safe, fair, and respects your privacy. Deposit from RM 10 via Touch 'n Go, DuitNow, or FPX.

Register Free Now Log In to Existing Account

For individuals aged 18 and above only. Please gamble responsibly. | Responsible Gambling

Bahasa Melayu