Your personal data belongs to you. totoking is committed to handling the information you share with us responsibly, transparently, and in accordance with the highest Malaysian legal standards.
These are the core values that guide how totoking handles every piece of personal data you entrust to us.
Your personal data has never been and will never be sold, rented, or transferred to any third party for marketing or commercial purposes without your explicit consent. This is totoking's absolute commitment.
All data transmitted between your device and totoking servers is protected with 256-bit SSL encryption — the same security standard used by Malaysia's leading banking institutions. No one can intercept your data in transit.
Totoking is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). All data collection, processing, and storage is carried out in accordance with the legal requirements set by the Personal Data Protection Commissioner of Malaysia.
You have the right to access, correct, delete, or export your personal data at any time through your totoking account settings. We believe you should have real control over the information you share with us.
All data is stored in certified data centres with strict physical and digital access controls. totoking servers undergo regular security audits by independent auditors to ensure protection standards remain up to date against the latest threats.
In the event of any security incident involving user data, totoking is committed to notifying affected users within the timeframe required by law and taking immediate remedial steps to minimise any risk.
Have questions about your personal data?
Frequently Asked Questions (FAQ)This Privacy Policy explains how totoking ("we", "our platform") collects, uses, stores, and protects your personal data when you use the totoking.pro website, the official totoking mobile app, or any services we provide.
This document was drafted to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and aims to give you a clear and honest picture of our data protection practices. By registering or using the totoking platform, you agree to the collection and use of data as described in this Privacy Policy.
This Privacy Policy applies to all users of the totoking platform regardless of access method — whether via web browser, mobile app, or any other channel we may provide in the future. In the event of any conflict between this Privacy Policy and any other communication from totoking, this Privacy Policy shall serve as the primary reference.
Totoking only collects personal data that is strictly necessary to provide services to you. We do not collect excessive information or retain it longer than required by law.
When you register an account or use totoking services, you may provide the following information:
When you use the totoking platform, our systems automatically record certain technical information for security and service improvement purposes:
| Data Type | Example | Purpose |
|---|---|---|
| Device Data | Phone model, OS, browser version | Optimize user experience |
| IP Address | Recorded at login | Security & fraud detection |
| Session Data | Login time, pages visited | Analytics & platform improvement |
| Transaction Data | Deposit, withdrawal, and wagering records | Legal compliance & reporting |
| Location Data | Country based on IP (not GPS) | Geographic compliance |
Totoking uses your personal data solely for the legitimate purposes stated below. We do not use your data for any other purpose without first obtaining additional consent from you.
You can opt out of marketing communications at any time through the notification settings in your account. This choice does not affect important security and account-related notices.
Totoking takes seriously our responsibility not to disclose your personal data inappropriately. Your personal data is only shared in the following limited and lawful circumstances:
To process your deposits and withdrawals, totoking shares the necessary financial information with authorised payment providers including FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost. All these providers are bound by strict confidentiality agreements and PCI-DSS security standards.
Third-party game providers integrated within the totoking platform receive the session data necessary to operate games properly. This data is limited and does not include your financial information or full identity details.
Totoking will disclose personal data when required by court order, law enforcement agency requests, or other applicable legal reporting obligations. totoking will notify you where permitted by law.
Totoking has never and will never sell your personal data to marketing companies, data brokers, or any third party for commercial purposes. If you receive a communication claiming to be from totoking and requesting sensitive personal data, please disregard it and report it to our support team.
Totoking implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.
Totoking retains your personal data only for as long as necessary for the stated purposes or as required by law. Financial transaction data is retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements. Data from inactive accounts will be deleted once the account closure procedure has been completed.
While no security system can be guaranteed 100% foolproof, totoking continually invests in the latest security infrastructure and staff training to maintain the highest achievable protection standards.
Totoking uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. Cookies are small text files stored on your device when you visit our website.
You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of the totoking platform.
Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by totoking:
Request a copy of the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of data that is no longer required (subject to legal obligations)
Object to the processing of your data for direct marketing purposes
Obtain your data in a machine-readable format
Request that the processing of your data be restricted in certain situations
To submit any request relating to your privacy rights, please contact the totoking support team via the in-platform live chat. We will process your request within 30 business days in accordance with the PDPA 2010.
The totoking platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.
Should we discover that a child's personal data has been collected without our knowledge, that data will be deleted immediately and the associated account will be terminated. Parents or guardians who become aware that their child has registered a totoking account are urged to contact our support team right away.
Totoking enforces an age verification process during registration and as part of the KYC process to ensure all active users meet the minimum age requirement.
Totoking reserves the right to amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we provide.
Any significant amendments will be communicated to you via a prominent notice on the website or through in-app notifications before the changes take effect. For minor updates, the changes will be reflected in the "Last Updated" date at the top of this document.
Continued use of the totoking platform after the effective date of any amendment means you accept the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 7.
If you have any questions, concerns, or requests regarding this Privacy Policy or how TotoKing handles your personal data, our team is ready to assist.
We encourage you to reach out to us through the following channels for privacy-related matters:
For formal requests relating to your privacy rights — such as data access, correction, or deletion — please clearly state the type of request and include sufficient identification information so we can process your request accurately and securely.
Totoking is committed to responding to all privacy requests within 30 business days. For more complex requests, we will notify you if additional time is needed.
Totoking safeguards your personal data to the highest security standards. Register a free account today and enjoy a safe, transparent entertainment experience.
18 years and above only | Terms & Conditions | Responsible Gaming