Rujukan Laman

Privacy Policy – How ttoto88 Handles Your Information

We collect account details, payment records and session logs when you open an account and deposit through Touch 'n Go, GrabPay, Boost dan FPX.

Account securityPayment recordsSession logsRequest changes anytimeLocal law compliance
ttoto88 Privacy Policy – How ttoto88 Handles Your Information
GET IN TOUCH

Contact Us About Your Privacy

If you want to see what data we hold, correct outdated details, or request account deletion, reach out through live chat during operating hours or send…

Live Chat Open the chat bubble in the bottom right corner of any page and select…
Email Support Send your data request to [email protected] with the subject line Data Request and include…
Account Settings Log in and open Account → Privacy to download a JSON file containing your…
HOW WE PROTECT YOU

Security and Retention Practices

We encrypt payment details in transit using TLS and store sensitive fields in hashed form so even our own staff cannot read your raw card or wallet credentials.

Encryption Standards

Every page on ttoto88.com uses TLS 1.3 to encrypt data moving between your browser and our servers. Payment processors receive only the minimum fields needed to authorise a deposit — typically your wallet ID and the amount — and return a transaction token we store instead of your full credentials. Passwords are hashed with bcrypt; we cannot recover your original password, only reset it if you forget.

Cookie Policy

We set a session cookie when you log in so the server remembers your username and wallet balance as you move between pages. Analytics cookies from our own domain count visits to each game lobby and help us decide which titles to feature on the homepage. We do not use third-party advertising cookies or tracking pixels. You can delete cookies anytime in your browser; doing so will log you out immediately.

Data Retention

Profile information and game history remain active as long as your account is open. When you request deletion we remove your email, mobile number and username within fourteen days, but transaction logs showing deposit and withdrawal amounts stay in our compliance archive for six years, anonymised by replacing your username with a random ID. This retention period matches regulatory expectations for financial records in Malaysia and other regions we serve.

Third-Party Sharing

We share your username and wallet balance with game studios when you open a live table or slot so they can track your bets and credit your winnings. Payment processors receive your wallet ID to route deposits. We do not sell contact details to marketers, and we only disclose account data to law enforcement when presented with a valid subpoena or court order covering the jurisdiction where the account was registered.

Your Rights

You can request a copy of all stored data, correct outdated details, or delete your account entirely by contacting support. If you believe we processed your information incorrectly or violated local privacy rules, email [email protected] with a detailed explanation and we will investigate within seven business days. Where local law grants additional rights — such as data portability or automated-decision opt-outs — we honour those requests for accounts registered in the applicable region.

Policy Updates

We revise this policy when we add new payment methods, change data processors, or update retention schedules to meet evolving regulations. Material changes are announced via email to all active accounts and posted on this page with a revision date at the top. Continued use of your account after the revision date means you accept the updated terms; if you disagree, request account deletion before the new policy takes effect.

Privacy FAQ

Players often ask what happens to their data when they close an account, whether we track their location, and how quickly we respond to access requests. Below are the questions our support team hears most often, with concrete answers about collection scope, retention periods and your control options. If your question is not covered here, contact us through live chat or email and we will reply within one business day.

We ask for an email address, mobile number, username and password during sign-up. When you make your first deposit we record the payment method you chose — Touch 'n Go, GrabPay, Boost or FPX — and the transaction ID from your wallet provider. Game sessions log your username, bet amounts and win/loss outcomes, but we do not collect your full name, mailing address or identity-card number unless local law requires it for withdrawal verification.

We log your IP address and device type each time you log in so we can detect unusual activity, such as two logins from different countries within minutes. This data helps us freeze accounts that may have been compromised. We do not track your GPS coordinates or install background monitoring software; location data is limited to the IP your internet provider assigns, which usually indicates city-level geography, such as Ipoh or Johor Bahru.

Profile details like your email, mobile number and username are removed within fourteen days of your deletion request. Transaction logs showing deposit and withdrawal amounts remain in our compliance archive for six years, anonymised by replacing your username with a random ID. This retention period aligns with financial record-keeping rules in jurisdictions where we process payments. Game-session logs are deleted after two years unless linked to an open dispute.

Yes. Log in and go to Account → Privacy → Download Data to generate a JSON file containing your profile details, deposit and withdrawal history, recent session logs and any support tickets you opened. The export typically completes in under thirty seconds. If you need additional records not included in the self-service export, such as detailed game-studio logs or older transactions, email [email protected] and we will compile a complete package within seven business days.

No. We never sell, rent or trade your email, mobile number or any other personal information to third-party marketers. The only external parties who see limited data are payment processors, who need your wallet ID to route deposits, and game studios, who receive your username and current wallet balance when you join a live table or spin a slot. We do not share contact lists with affiliates or advertising networks.

Log in, open Account → Notifications and untick the box labelled Marketing Emails. Once you save that change we will only contact you about withdrawal confirmations, security alerts and updates to this privacy policy. You can re-enable marketing emails anytime by ticking the box again. Unsubscribing does not affect essential account communications, such as password-reset links or suspicious-login warnings, which we always send regardless of your preference.

Contact us immediately via live chat and ask to freeze your account. Our team will disable login access within minutes while we review recent session logs and IP addresses. If we confirm unauthorised activity we will reset your password, reverse any fraudulent withdrawals where possible, and help you secure your email and wallet accounts. You may be asked to provide a copy of your ID to verify ownership before we restore full access, especially if the intruder changed your registered email or mobile number.