Your privacy is more than a legal obligation to us — it is a genuine commitment. This document explains exactly what data we collect, how it is used, and the full rights you hold as a totowin Malaysia member.
Totowin takes our responsibility to protect every member's personal data seriously. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international standards in the online gaming industry. We do not sell, rent, or commercialise your personal data to any third party without your consent. Every piece of data collected has a clear purpose and is handled with care.
To provide a secure, transparent, and compliant TotoWin platform experience, we collect several categories of personal data from our members. This is done directly through the registration, KYC, and platform usage processes, as well as automatically through industry-standard tracking technologies.
| Data Category | Example Information | How It Is Collected |
|---|---|---|
| Personal Identity | Full name, date of birth, identification card number, nationality | Registration & KYC |
| Contact Information | Email address, phone number, residential address | Registration |
| Financial Information | Bank account number, bank name, transaction statements | Deposit & Withdrawal |
| Verification Documents | MyKad copy, passport, utility bill, bank statement | KYC Process |
| Usage Data | Betting history, games played, login timestamps | Automatic |
| Technical Data | IP address, browser type, device, operating system | Automatic |
Note: We never collect sensitive data such as health information, political views, or religious beliefs unless required by law or a relevant enforcement authority.
Totowin only processes your personal data for legitimate, pre-identified purposes. We adhere to the principle of data minimisation — we do not collect more than what is strictly necessary for the following purposes:
TotoWin will not use your data for any purpose beyond those listed above without first obtaining your explicit consent via in-platform notification or email.
Data security is at the core of totowin's infrastructure. We continuously invest in the latest security technologies and procedures to ensure your personal data remains protected from unauthorized access, loss, or misuse.
While we apply best-in-class security measures, no system is 100% foolproof. You also play an important role — always use a strong password, enable 2FA, and never share your login credentials with anyone.
TotoWin does not sell or rent your personal data to any third party for commercial marketing purposes. However, in the course of legitimate platform operations, there are limited situations where sharing data with certain parties is necessary:
All third parties that receive personal data of totowin members are bound by legally enforceable data processing agreements and must comply with the privacy standards set by totowin and applicable Malaysian law.
Totowin uses cookies and similar tracking technologies to enhance the user experience, ensure security, and understand how the platform is used. Below is detailed information about the technologies we use:
You can manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies may affect certain functions of the totowin platform.
totowin Mobile App available for download on the App we also use device identifiers and in-app usage data for the same purposes described in this policy. The app does not access your camera, microphone, or contacts without your explicit permission.
As a totowin member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data. We are committed to processing every request within 14 business days:
You have the right to request a copy of all personal data we hold about you at any time. Requests can be submitted through our customer support.
If any of your personal data is inaccurate or outdated, you have the right to request a correction. Updates can be made through your account profile or customer support.
You may request the deletion of your personal data, subject to mandatory retention requirements that totowin must comply with as a licensed platform.
You have the right to object to the processing of your data for direct marketing purposes. You can unsubscribe from promotional emails immediately via the link in any email we send.
You may request your personal data in a machine-readable format for transfer to another service, subject to applicable technical limitations.
In certain situations, you have the right to request that we restrict the processing of your data while a dispute or request is being handled.
To exercise any of the rights above, contact our data protection team via 24/7 live chat or email. We will verify your identity before processing any request to ensure your account's security.
Totowin retains your personal data only for as long as necessary for the purposes stated in this policy, or for as long as required by applicable Malaysian law.
Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.
Totowin reserves the right to amend this Privacy Policy at any time to reflect changes in law, industry practices, or improvements to our platform. Any material amendments will be communicated to members via email or in-platform notification at least 7 days before taking effect.
Your continued use of the totowin platform after any amendment takes effect constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your privacy.
For any inquiries, concerns, or requests related to this Privacy Policy, you may contact the totowin data protection team through the following channels:
Live support 24 hours a day, 7 days a week via the chat button within the totowin platform.
Six core pillars that underpin totowin's commitment to protecting the personal data of every Malaysian member.
All data travelling between your device and totowin's servers is protected by 256-bit SSL encryption. No third party can intercept or read your information while in transit.
The totowin Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights are safeguarded by a robust local legal framework.
TotoWin has never sold, rented, or commercialised member personal data to data brokers or third-party advertisers. Your data remains entirely yours.
The identity verification process is conducted through encrypted channels. Your verification documents are stored securely and accessible only to authorised personnel.
Totowin's automated security system operates 24/7 to detect and neutralise any cyber threats, intrusion attempts, or suspicious activity in real time.
From account privacy settings to marketing communication preferences, totowin gives you full control over your data. Update your preferences at any time through your account settings.