Updated: January 2026

Privacy Policy toto22 – Personal Data Protection for Malaysia Players

Your privacy is our priority. This document transparently explains how toto22 collects, uses, stores, and protects your personal information when you use our platform.

SSL 256-bit No Data Sharing Without Consent toto22 Official Documents

Our Commitment to Your Privacy

Toto22 upholds the highest data security standards to ensure every player's personal information remains safe and protected at all times.

256-bit SSL Encryption

All data transmitted between your device and toto22's servers is protected with 256-bit SSL encryption — the same security standard used by leading financial institutions and banks worldwide.

Data Not Sold to Third Parties

Toto22 has never and will never sell, rent, or exchange players' personal information to any third party for marketing or commercial purposes without your explicit consent.

Secure Data Storage

All personal data is stored on servers protected by strict access controls, 24/7 monitoring systems, and regular backups. Only authorised personnel may access user data.

Two-Factor Authentication (2FA)

Access to your toto22 account is protected with two-factor authentication for an added layer of security. You can enable 2FA through your account settings to ensure only you can access your account.

Marketing Preferences Control

You have the right to choose whether to receive marketing communications from toto22. Unsubscribe options are available at any time through your account settings or by contacting our support team.

Right of Access & Data Correction

You have the full right to access, review, and request corrections to your personal data held by toto22. Such requests will be processed within 14 business days.

Scope of This Policy: This Privacy Policy applies to all users who access or use the toto22 platform via toto22.bar or our mobile app. By using our platform, you agree to the data collection and usage practices described in this document.

1Introduction

Toto22 is a licensed online wagering platform committed to protecting the privacy of all its users. We understand that your trust in us depends not only on the quality of our games and speed of payouts, but also on how we handle your personal information.

This Privacy Policy is written in clear, plain language so you know exactly what data we collect, why we need it, and how we protect it. We do not use complex legal language to obscure our intentions — what you read here is an accurate reflection of toto22's privacy practices.

Should there be any changes to this Privacy Policy, we will notify you via in-platform notification or email at least 7 days before the changes take effect. Continued use of the platform after that date will be considered acceptance of the updated policy.

2Personal Data We Collect

Toto22 only collects data that is strictly necessary to provide a safe, seamless, and responsible service. Below is a table of the types of data we collect, along with their purposes and legal basis:

Data Category Example Information Purpose Basic
Identity Data Full name, date of birth, IC number Age verification & KYC Legal compliance
Contact Data Phone number, email address Account communication & support Contract performance
Financial Data Bank account number, e-wallet details Processing deposits & withdrawals Contract performance
Usage Data Betting records, games played Activity & security monitoring Legitimate interest
Technical Data IP address, device type, browser Security & fraud detection Legitimate interest
Communication Data Support chat logs, email Complaint resolution & records Legitimate interest

How Data Is Collected

Your data is collected in several ways: directly when you register or complete your profile; automatically via cookies and tracking technologies when you use the platform; and occasionally from trusted third-party sources such as identity verification providers for KYC purposes.

KYC Note: The Know Your Customer (KYC) process is a legal requirement for online betting platforms. Documents requested during KYC — such as copies of your identification card — are stored in a secure environment protected by full encryption.

3How We Use Your Data

Toto22 uses the personal data collected for the following purposes. We do not use your data for any purpose other than those stated without obtaining your consent first:

  • Service provision — To allow you to register, login, deposit funds, place bets, and withdraw wins
  • Identity verification — To verify that you meet the minimum age requirement and satisfy the applicable KYC requirements
  • Payment processing — To securely process deposits and withdrawals via your chosen payment method
  • Security & fraud detection — To monitor account activity, detect suspicious patterns, and prevent money laundering
  • Customer support — To provide effective assistance when you contact our support team
  • Legal compliance — To fulfil applicable legal and regulatory obligations
  • Platform improvements — To understand usage patterns and enhance the overall user experience
  • Marketing communications — Only if you have given consent to receive promotions and special offers (withdrawable at any time)
Data Minimisation Principle: toto22 adheres to the principle of data minimisation — we only use the data required for a specific purpose, and nothing beyond that.

4Sharing Data with Third Parties

Toto22 does not sell, rent, or disclose your personal information to third parties for commercial gain. However, there are limited situations where we may need to share your data with certain parties:

Trusted Service Providers

We work with carefully selected third-party companies to help operate our platform — including payment processing providers, KYC verification providers, and cloud services. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

Legal Requirements

Toto22 will disclose personal information when required to do so by law, a court order, or a competent regulatory authority. In such cases, we will notify you of the disclosure to the extent permitted by law.

Business Transfers

If toto22 is involved in any merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will provide appropriate notice to users before any such transfer takes place and ensure the receiving party upholds the same privacy standards.

Reminder: toto22 does not share your personal data with advertising companies, data brokers, or any party not listed in this Privacy Policy. If you receive any communication claiming to be from toto22 that appears suspicious, please contact our support team immediately.

5Cookies & Tracking Technologies

Toto22 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand usage patterns. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential Cookies — Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are critical to website operation.
  • Performance Cookies — Collects information on how you use the platform to help us improve functionality and performance.
  • Preference Cookies — Stores your preferences such as language, display settings, and other personal configurations.
  • Analytics Cookies — Helps us understand traffic and usage patterns for service improvement purposes.

Managing Cookies

You can control and delete cookies through your internet browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the toto22 platform. Essential cookies cannot be disabled without affecting your ability to use the platform.

6Data Security Measures

Toto22 invests seriously in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we implement include:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL protocols
  • Data encryption at rest for all sensitive information including financial details
  • Strict role-based access controls — only authorised staff may access user data
  • Continuous 24/7 security monitoring and intrusion detection systems
  • Regular security audits by qualified independent parties
  • Data security training programme for all toto22 staff
  • A comprehensive incident response plan in the event of a data breach
Data Breach: In the event of a data breach that may affect your rights, toto22 is committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices.

7Your Rights Regarding Personal Data

As a toto22 user, you have the following rights regarding your personal data. toto22 is committed to facilitating the exercise of these rights within a reasonable timeframe:

Right of Access

You have the right to request a copy of all personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete information in our records.

Right to Erasure

You can request the deletion of your personal data subject to legal record-keeping obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for transfer to another service.

Right to Restriction of Processing

You can request that we restrict the processing of your data in certain situations while a dispute is being resolved.

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will process your request within 14 business days.

8Data Retention & Deletion Period

Toto22 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law — whichever is longer. Below are our general data retention period guidelines:

  • Active account data — Retained for the duration your account remains active and in continuous use
  • Financial transaction data — Retained for a minimum of 7 years in compliance with anti-money laundering legal requirements
  • KYC Records — Retained for 5 years after account termination or last transaction
  • Support communication logs — Retained for 3 years for reference and dispute resolution purposes
  • Technical data & logs — Retained for 12 months for security and fraud detection purposes

Upon expiry of the retention period, your data will be securely deleted or anonymised so that it can no longer be personally linked to you.

9Third-Party Links & Services

The toto22 platform may contain links or integrations with third-party services such as payment providers and game providers. When you use these third-party services, your privacy will be subject to their own privacy policies, which may differ from toto22's Privacy Policy.

Toto22 is not responsible for the privacy practices of any third-party services. We encourage you to read the privacy policy of each third-party service you use alongside the toto22 platform. All third-party providers we work with have undergone a thorough security and privacy assessment process before being permitted to integrate with our platform.

10Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how toto22 handles your personal data, our data protection team is ready to assist you.

  • Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon at the bottom right corner of the platform
  • Response Time: Within 2 business days for privacy inquiries

We take every privacy complaint seriously and will thoroughly investigate each case. If you are not satisfied with our response, you have the right to bring your complaint to the relevant data protection authority.

Our Commitment: toto22 is continually working to improve our privacy practices and stay in line with the latest developments in data protection laws and industry standards.

FAQ – Privacy Policy

Answers to the most frequently asked questions by toto22 players on privacy and data security.

Not at all. toto22 has never and will never sell, rent, or exchange your personal data to any advertising company or data broker. Your information is used solely to provide platform services to you and to comply with applicable legal requirements.

All financial details including bank account numbers and e-wallet information are stored in encrypted format using AES-256 encryption standards. We do not store full credit or debit card numbers. All transactions are processed through secure and trusted payment channels with 256-bit SSL encryption at every stage.

Yes, you have the right to request account closure and deletion of your personal data. Please note, however, that certain data such as financial transaction records and KYC records must be retained for the period required by anti-money laundering laws — typically between 5 and 7 years. Data not subject to legal retention requirements will be deleted within 30 days of the request being received.

When an account is suspended, your data remains securely stored in our systems for the period required for investigation and legal compliance. You can still contact the toto22 support team regarding your data. Once all processes are complete and the minimum retention period has passed, data will be deleted or anonymised in accordance with our standard policy.

No. Your password is never stored in plain text. toto22 uses strong hashing with salting techniques to store passwords — meaning even toto22 staff cannot view your actual password. If you forget your password, a secure password reset process is available via the login page.

You can stop receiving marketing communications at any time in two simple ways: first, via the "Unsubscribe" link at the bottom of every marketing email we send; second, through the Notification Settings section in your toto22 account. Unsubscribe requests will be processed within 5 business days. Please note that you will still receive important account-related emails such as transaction confirmations and security notices.

Privacy Assured, Play with Confidence

Your data is protected, your identity is secure. Join over 500,000 Malaysian players who trust toto22 as their preferred wagering platform.

256-bit SSL Encryption Data Not Sold Withdrawal <5 Minutes 24/7 Support
Bahasa Melayu