At toto80, your privacy is a genuine operational commitment — not a compliance checkbox. This Privacy Policy explains in clear terms what personal data we collect from Malaysian players, how we use it, who we share it with, and what rights you hold over your own information.
This Privacy Policy (the "Policy") issued by the operator of toto80, accessible at https://toto80.lat (the "Platform"). It describes how the Operator collects, processes, stores, and protects the personal data of all users who register an account, interact with our services, or browse the Platform.
toto80 is committed to handling personal data in accordance with recognised international data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality. Where applicable, we apply standards consistent with the General Data Protection Regulation (GDPR) as a global benchmark for data privacy best practices.
By registering a toto80 account, depositing funds, or otherwise using the Platform, you confirm that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to request Account closure and deletion of your data.
Malaysian Users: Malaysia's Personal Data Protection Act 2010 (PDPA) may apply to certain aspects of your personal data if the Operator processes data in Malaysia. We are committed to handling your information with the respect and care that Malaysian users expect and deserve, regardless of the precise jurisdictional scope of the PDPA in relation to our Platform.
For the purposes of this Policy, the following terms carry the meanings set out below:
toto80 collects personal data through multiple channels, including account registration, KYC verification, deposit and withdrawal transactions, gameplay activity, and customer support interactions. The categories of data we collect are detailed below.
| Data Category | Examples | Collection Trigger |
|---|---|---|
| Registration Data | Full name, username, email address, date of birth, phone number, country of residence | Account registration |
| KYC / Identity Data | MyKad or passport scan, proof of address, selfie with document, source of funds documents | KYC verification process |
| Financial Data | Payment method details (e.g., bank account number, TNG eWallet ID, DuitNow registered mobile), transaction history, deposit and withdrawal amounts in MYR | Deposits and withdrawals |
| Gameplay Data | Game history, bet amounts, session duration, win/loss records, bonus usage | Platform activity |
| Technical Data | IP address, device type, operating system, browser type, session tokens, geolocation (country level) | Automatic collection on access |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opted-in email or SMS marketing preferences, promotional response history | Registration or subsequent opt-in |
We do not collect sensitive personal data beyond what is strictly necessary for identity verification and legal compliance. We do not collect biometric data beyond document photographs submitted for KYC purposes, and we do not collect data relating to racial or ethnic origin, religious beliefs, or health information.
toto80 processes your personal data for the following specific purposes. We do not process your data for any purpose beyond those listed here without obtaining your separate consent.
toto80 processes personal data under the following legal bases, consistent with internationally recognised data protection principles:
toto80 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and controlled circumstances:
No Sale of Data: toto80 will never sell your personal data — including your name, contact details, financial information, or gaming history — to data brokers, advertisers, or any other third party for commercial purposes. This commitment is absolute and unconditional.
toto80 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:
Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.
toto80 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyse usage patterns. The categories of cookies we use are as follows:
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using core Platform features including account login and payment processing.
The Operator employs a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are encouraged to use a strong, unique password for your toto80 account and to enable two-factor authentication.
Subject to applicable law and our regulatory obligations, you have the following rights with respect to your personal data held by toto80. To exercise any of these rights, please contact us through the channels set out in Section 14.
Request a copy of the personal data we hold about you, including the purposes for which it is processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as while an accuracy dispute is being resolved.
Request a machine-readable copy of your personal data to transfer to another service provider, where technically feasible.
Object to processing of your data based on legitimate interests, including direct marketing. Objections to marketing will always be honoured immediately.
Requests to exercise your data rights will be acknowledged within 3 business days and actioned within 30 calendar days. In cases of complexity, this period may be extended by a further 30 days with prior notification. There is no fee for exercising your data rights unless requests are manifestly unfounded or excessive.
toto80 is strictly for users aged 21 years and above. We do not knowingly collect personal data from individuals below the age of 21. Age verification is a mandatory component of our KYC process, and accounts registered with false date-of-birth declarations will be immediately terminated upon discovery.
If you believe that a minor has accessed the Platform or submitted personal data in connection with an account, please contact us immediately at [email protected]. We will take prompt action to identify and close any such account, delete associated data, and prevent future access.
We also recommend that guardians of minors use parental control software to restrict access to gambling and age-restricted websites, including toto80. For Malaysian users, tools such as web filtering applications available through major Malaysian broadband providers can provide an effective additional layer of protection.
As an internationally licensed platform, toto80 may transfer your personal data to countries outside Malaysia, including countries where our servers are hosted, where our KYC providers operate, and where our payment processing partners are located. These transfers may include jurisdictions in Europe, Southeast Asia, and other regions.
Where personal data is transferred internationally, the Operator ensures that appropriate safeguards are in place, including:
toto80 reserves the right to update this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data we collect, changes to how we share data with third parties, or changes to your rights — we will notify active users by email and/or by displaying a prominent notice on the Platform before the changes take effect.
The date on which this Policy was last reviewed and updated is displayed prominently at the top of this page. We recommend that you review this Policy periodically to remain informed of how we handle your personal data. Your continued use of the Platform following any amendment constitutes acceptance of the updated Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our privacy team through the following channels. We are committed to handling all privacy enquiries promptly and with care.
For requests to exercise your data rights (access, rectification, erasure, portability), please include your registered username and the email address associated with your Account to help us locate and verify your records efficiently.
For concerns relating to responsible gambling, self-exclusion, or deposit limits, please visit our Responsible Gambling page or raise the matter directly through live chat for immediate attention.
Our privacy commitments go beyond legal compliance. Here is what genuinely protecting Malaysian players' data looks like in practice.
Every byte of data transmitted between your device and toto80 is protected by 256-bit SSL/TLS encryption — the same standard used by major international banks. Your login credentials, payment details, and personal information travel securely.
toto80 will never sell, rent, or trade your personal data. Your name, contact details, financial history, and gaming behaviour are yours. We share data with third parties only where strictly necessary to operate the Platform and fulfil our legal obligations.
Internal access to personal data is governed by role-based access controls. Staff members can only access the minimum data necessary for their specific function. All data access is logged and regularly audited by our compliance team.
Requests to access, correct, or delete your personal data are acknowledged within 3 business days and actioned within 30 days. Malaysian users' data rights requests are treated with the same priority as any other jurisdiction.
Our security team operates continuous monitoring for anomalous activity. In the event of a data breach, our incident response protocol is designed to contain the incident, notify affected users promptly, and report to relevant authorities within required timeframes.
We send promotional communications only to users who have explicitly opted in. You can update your marketing preferences or withdraw consent at any time through your account settings or by contacting support — no forced promotional emails, no spam.
We take data protection seriously so you can focus on what matters — enjoying the games. Explore the rest of the platform with confidence.21+ only. Play responsibly.