Official Documents

Toko88 Privacy Policy
Our Commitment to Protecting Your Data

Your privacy is our priority. This Privacy Policy explains in detail how toko88 collects, uses, stores, and protects the personal information of every member in Malaysia.

Updated: January 2026 SSL 256-bit Bahasa Melayu

Important Note: This Privacy Policy describes Toko88's practices regarding your personal information. By using the Toko88 platform, you agree to the terms set out in this document. Please read this policy carefully in full. If you have any questions, our support team is available via 24/7 live chat.

1Introduction and Scope of This Policy

Toko88 operates an online sports betting and casino platform under a full commitment to member privacy protection. This Privacy Policy applies to all personal information collected through the toko88 website, mobile app, live chat, email, and any other communication channels provided by toko88.

We adhere to internationally recognized data protection principles, including purpose limitation, data minimization, transparency, integrity, and confidentiality. Every decision regarding the handling of your personal data is made carefully, based on legitimate business needs and member interests.

This policy does not apply to third-party websites that may be linked from within the Toko88 platform. We encourage you to read the privacy policy of any third-party service you use separately.

2Types of Personal Data We Collect

Toko88 collects your personal data through two primary methods — information you provide directly to us, and information collected automatically while you use our platform.

2.1 Data You Provide Directly

Data Category Example Information Primary Purpose
Personal Identity Full name, date of birth, identification card number KYC verification & legal compliance
Contact Information Email address, phone number Account communications & support
Financial Information Bank account number, e-wallet name Deposit & withdrawal processing
Verification Documents Copy of identity card, passport, utility bill KYC Identity Verification
Account Information Username, password (encrypted), security questions Account security & access controls

2.2 Data Collected Automatically

  • Technical data: IP address, web browser type, operating system, screen resolution, and language settings.
  • Usage data: Games played, session duration, login frequency, wagering records, and transaction history.
  • Location data: General geographic location based on IP address for compliance and fraud detection purposes.
  • Device data: Unique device identifiers and hardware information for the toko88 mobile app.

3How and Why We Use Your Data

Toko88 uses your personal data only for legitimate purposes directly related to the provision of our services. We will not use your data for any other purpose without first obtaining your consent or without a clear legal basis.

  • Account management: Opening, verifying, and securely maintaining your member account.
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions on the platform.
  • Identity verification (KYC): Meeting anti-money laundering (AML) and know-your-customer (KYC) compliance requirements.
  • Security and fraud prevention: Detecting, investigating, and preventing fraud, hacking, and platform abuse.
  • Customer support: Addressing inquiries, resolving complaints, and providing technical assistance.
  • Personalization and improvement: Personalizing your gaming experience, recommending relevant games, and improving platform features.
  • Marketing communications: Sending promotional information, bonus offers, and platform updates — only if you have consented to receive them.
  • Analytics and reporting: Analyzing aggregate usage patterns for business planning and platform improvement.

Legal Basis: Your data is processed on the basis of contract performance (to provide services), compliance with legal obligations (KYC/AML), the platform's legitimate interests (security), and, in certain cases, your explicit consent (marketing communications).

4Data Sharing with Third Parties

Toko88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we may share your information with certain third parties in the following situations:

4.1 Trusted Service Providers

We work with trusted service providers to operate the platform, including payment processors, cloud service providers, identity verification companies, and gaming software suppliers. All third parties are required to comply with our data security standards and are not permitted to use your data for any other purpose.

4.2 Legal Requirements

Toko88 may disclose your personal data to regulatory authorities, law enforcement, or government bodies when required to do so by applicable law, court order, or anti-money laundering (AML) compliance requirements.

4.3 Business Transfers

If toko88 is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of those assets. You will be notified in advance via a clear notice on the platform.

Our Guarantee: toko88 has never and will never sell your personal data to advertisers, data brokers, or any external party for their own commercial purposes. This is a core principle that cannot be compromised.

5Data Encryption and Security Measures

Toko88 invests seriously in data security infrastructure to ensure your personal information is always protected. We employ multiple layers of security technology recognized by the international banking and finance industry.

5.1 Data Encryption During Transmission

All communications between your web browser or mobile app and toko88 servers are protected by TLS 1.3 protocol with AES-256-bit encryption. This means every piece of information you submit — including login details, bank card information, and personal data — is fully encrypted and unreadable by any unauthorized party.

5.2 Data Encryption During Storage

Sensitive data such as identification numbers, banking information, and passwords are stored in encrypted form using strong encryption algorithms. Your password is never stored in plain text — we use cryptographic hashing with salt to ensure its security.

5.3 Internal Access Controls

Access to members' personal data within the Toko88 organisation is restricted to staff who require it to perform their job responsibilities. All access is recorded in audit logs that are continuously monitored. Staff who violate data confidentiality policies will face serious disciplinary action.

toko88's server infrastructure is regularly audited by independent third parties to ensure compliance with the latest security standards. These audits include penetration testing and vulnerability assessments.

6Cookies and Tracking Technologies

Toko88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication, session security, and language preference memory. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform to help us improve website performance and speed.
  • Functional Cookies: Remembering your preferences such as game settings and display options to deliver a more personalized experience.
  • Analytics Cookies: Helps us understand aggregate usage patterns for continuous improvement. This data is not linked to your personal identity.

You can control and manage cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of the Toko88 platform.

7Your Rights Regarding Personal Data

Toko88 recognizes and respects your rights as the owner of your personal data. You are entitled to exercise any of the following rights at any time by contacting our support team:

Right of Access

You have the right to obtain a copy of the personal data we hold about you in a readily readable format.

Right to Rectification

You may request the correction of any inaccurate or incomplete personal data in your account.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal record-keeping obligations.

Right to Restriction

You may request that we restrict the processing of your data in certain situations during an investigation or dispute.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without conditions.

8Data Retention Period

Toko88 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law. The following is a general guide to our data retention periods:

  • Active account data: Retained for the duration your account is active and for a reasonable period following account closure.
  • Financial transaction records: Retained for a minimum of 5 years as required by AML compliance and financial reporting obligations.
  • KYC documents: Retained for a minimum of 5 years after the date of termination of the business relationship, in accordance with current legal requirements.
  • Support communication logs: Retained for 2 years for reference and service improvement purposes.
  • Aggregated analytics data: May be retained for a longer period in non-personally identifiable form.

When your personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be linked to you.

9Changes to This Privacy Policy

Toko88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Whenever there is a material change, we will notify you through:

  • A clear notice on the toko88 platform's main page.
  • In-account notifications upon your next login.
  • An email will be sent to the address registered to your account for significant changes.

The "Updated" date at the top of this document always reflects the latest version of this Privacy Policy. Your continued use of the toko88 platform after the effective date of any changes means you accept the updated policy.

10Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the toko88 data protection team through the following channels:

24/7 Live Chat: The fastest way to get an immediate response — available in Bahasa Melayu at all times.

Privacy Email: [email protected] — for official inquiries or requests related to your personal data rights.

Response Time: We are committed to responding to all privacy inquiries within 5 business days.

We will verify your identity before processing any request related to data access, correction, or deletion, ensuring that only the rightful account holder can make changes.

Comprehensive Protection

Toko88's Six Layers of Data Protection

We don't rely on a single mechanism — your data is protected by six integrated and complementary layers of defense.

TLS 1.3 + AES-256 Encryption

All data transmitted between your device and toko88 servers is encrypted using the latest TLS 1.3 protocol with AES-256-bit encryption strength — the same standard used by major banks worldwide.

Two-Factor Authentication (2FA)

Secure your account with an extra layer of protection through two-factor authentication. Every login attempt from a new device requires verification via an OTP code sent to your registered phone number.

Real-Time Fraud Monitoring

Toko88's AI monitoring system analyzes every transaction and login activity in real time to detect suspicious patterns. Any unusual activity will be frozen immediately and you will be notified without delay.

Secure Server Infrastructure

Your data is stored in enterprise-grade data centres with 24/7 physical security, redundant storage, and automated backup systems. Toko88 server uptime is maintained above 99.9% to ensure continuous and secure access.

Regular Security Audits

Toko88's data security infrastructure and practices are independently audited by accredited third-party cybersecurity firms. The results of these audits are used for the continuous improvement of our data protection systems.

Strict Staff Access Controls

Only staff who require access on a strict need-to-know basis are permitted to view members' personal data. All access is recorded in comprehensive audit logs monitored by Toko88's internal security team.

Your Data Is Safe. Your Game Is Free.

Join over 500,000 Malaysian members who have entrusted their personal data to Toko88. Register an account today and enjoy a safe, fair, and enjoyable gaming experience.

Your data is fully protected · 18 years and above only · Responsible Gaming

Bahasa Melayu