Rujukan Laman

Your data, your rights — built for Malaysia

We handle your account details, payment records and gameplay history under local data-protection standards. Access to our platform depends on local law, and we operate only where permitted.

Local data handlingClear consent pathsSecure storageRequest your records anytimeMalaysia account flow
toto888a Your data, your rights — built for Malaysia
CONTACT PATHS

Reach us for policy questions or data requests

Our support team answers every question about how we handle your information, what we store, and what rights you hold under local law.

Live Chat Connect with our policy specialists from 9 AM to midnight Malaysia time every day. Ask about data retention, consent updates, cookie handling, or how to request a full account snapshot. Responses appear in real time so you can clarify anything before you close the conversation.
Email Support Send your privacy inquiry or data request to our dedicated inbox and we will respond within twelve hours with the steps you need. Attach any account reference details to speed things up, or simply describe what you want to know and we will guide you from there.
Account Panel Log in and navigate to the privacy tab inside your account dashboard. Toggle your marketing preferences, review what data we hold, and submit deletion or correction requests without leaving the page. Every action you take appears in your audit log so you have a complete record.
DATA & SECURITY

How we handle your information at every step

We built our policy framework around the principle that you should always know what we collect, why we collect it, and how long we keep it.

What we collect

Registration details such as email and mobile number, payment metadata from Touch 'n Go, GrabPay, Boost or FPX, session timestamps, device information, gameplay history, and support-ticket transcripts. We collect only what the platform requires to verify your identity, process transactions, and answer your questions.

How we store it

All account data lives on encrypted servers in data centres located where local law permits operation. Payment credentials pass through tokenized gateways; we never store full card numbers or bank passwords. Session logs are rotated every ninety days unless required by regulation to keep them longer.

Who can see it

Only authorized personnel with role-based access can view your account details, and every access is logged. We do not sell, rent, or share your information with advertisers or third-party marketing platforms. Regulators may request records under applicable law, and we comply within the timeframe local rules require.

Cookies and tracking

We use session cookies to keep you logged in and functional cookies to remember your language and lobby preferences. No third-party ad networks place trackers on our site. You can disable cookies in your browser, though some features such as wallet balance updates may not work without them.

Your rights

Request a copy of your stored data, ask us to correct outdated details, or request deletion where local law permits. Log in to the privacy panel or contact support to initiate any request. We aim to fulfil data-access requests within ten business days and deletion requests within thirty days.

Policy updates

We review our privacy policy each quarter and notify you by email when a material change takes effect. Minor updates such as wording clarifications appear in the version history inside your account panel. You can always view the full current policy and every previous version from that same tab.

Answers to the policy questions we hear most

We collect your email address, mobile number, date of birth, and residential region to verify your identity and confirm that access is permitted under local law. During deposits we also collect payment metadata such as transaction IDs and timestamps from Touch 'n Go, GrabPay, Boost or FPX.

We retain account records for five years after closure to meet regulatory record-keeping requirements in regions where we operate. After that period we delete all personal details except anonymized transaction logs required for financial audits. You can request early deletion where local law permits.

Yes. Log in to your account panel, navigate to the privacy tab, and click the data-export button. We will generate a JSON file containing your registration details, transaction history, session logs, and support transcripts. The export usually arrives in your inbox within twenty-four hours.

No. We do not share your account information with advertisers, data brokers, or marketing platforms. The only exceptions are payment processors who handle transactions on our behalf, and regulators who request records under applicable law. Both operate under strict confidentiality agreements.

Log in to your account dashboard and open the privacy tab. Toggle the marketing-email switch to opt in or out. Changes take effect immediately and you will see a confirmation message at the top of the page. You can also click the unsubscribe link at the bottom of any promotional email.

If regulatory changes prevent us from serving your region, we will notify you by email at least thirty days before access ends. You will have that window to withdraw your balance and request a full data export. We retain your records for the legally required period and honour deletion requests where permitted.

Use the live-chat priority lane or send an email to our security inbox with the subject line 'Unauthorized Access Report'. Include your account reference and any suspicious activity details. Our team investigates every report within four hours and will lock your account as a precaution until the issue is resolved.