Rujukan Laman

How We Handle Your Account Information

Every piece of data you share when you open your account — email, contact details, payment preferences — is encrypted and stored securely.

Encrypted storageMinimal data collectionLocal complianceWithdrawal verificationSession security
toto66 How We Handle Your Account Information
PRIVACY QUESTIONS

Reach Us About Your Data

If you want to request a copy of your account data, update your contact details, ask us to delete records where permitted, or report a concern about how your information is handled…

Live Chat Open the chat panel from any page in the lobby; a support agent will join within one to two minutes during business hours. Privacy requests are handled by a dedicated team who can pull account records, explain retention periods, and process deletion or correction requests where local law allows. If you're asking about a recent withdrawal or deposit, have your transaction reference ready so we can locate the record quickly.
Email Support Send your privacy or data request to our support inbox; you'll receive an acknowledgement within twelve hours and a full response within two business days. Use email when you want to attach identity documents for verification, request a formal data export, or document a correction for your records. Our team will confirm your identity before releasing account information, so be ready to provide the email or phone number you registered with.
Account Settings Log in and navigate to account settings to review what information we hold, update your email or phone number, and see your recent login history. You can also toggle marketing preferences here — opt in or out of promotional messages at any time. The settings page shows which payment methods are linked to your account and when your last withdrawal was processed, giving you a snapshot of the data we store.
HOW WE PROTECT DATA

Security, Storage and Your Rights

We encrypt every session between your browser or app and our servers using industry-standard TLS protocols. Account credentials are hashed so even our own team cannot read your password in plaintext.

Data Encryption

Every piece of information you send to us — login credentials, payment instructions, withdrawal requests — travels over an encrypted connection that meets current security standards. Your password is hashed with salt so it cannot be reversed; even our support team cannot see it. Session tokens expire after a set period of inactivity, so if you leave your account open on a shared device it will log out automatically and protect your balance.

Payment Security

When you deposit via Touch 'n Go, GrabPay, Boost or FPX, your wallet credentials stay with the payment provider — we receive only a transaction reference and confirmation. We never store full card numbers or bank account details. Withdrawal verification uses the same reference system: we match your payout request to the deposit method you used so we can send funds to the right account without holding sensitive financial data on our servers.

Cookie Policy

We use cookies to keep you logged in across pages, remember your language preference, and measure how visitors navigate the site so we can improve the layout. Essential cookies are required for the lobby to function; you cannot disable them and still use your account. Analytics cookies track page views and session length but contain no personal identifiers. You can block these in your browser settings without affecting your ability to deposit, play or withdraw.

Access Rights

You can request a copy of your account data at any time. Contact live chat or email support; we'll verify your identity, then send you a structured file containing your registration details, transaction history, login records and any notes our support team has attached to your account. The export usually arrives within forty-eight hours. If you spot an error — wrong phone number, outdated email — ask us to correct it and we will update the record immediately.

Data Retention

We keep your account records for the period required by local regulations, typically several years from your last transaction. Once that period expires and you have closed your account, we delete personal identifiers and transaction details unless a legal obligation requires us to retain them longer. If you want us to delete your data sooner, contact support; we will comply where the law permits, but some records must stay on file to meet compliance obligations.

Third Parties

We share data with payment processors to complete deposits and withdrawals, and with compliance partners to verify your identity when regulations require it. These partners operate under strict confidentiality agreements and use your information solely for the purpose we specify. We never sell your data to advertisers or marketing platforms. If you receive promotional messages from us it is because you opted in; you can withdraw consent in account settings and the messages will stop immediately.

Privacy Policy FAQ

We collect your email address, phone number, and a payment method reference so we can process deposits and withdrawals. We also log your IP address, device type and browser version to protect your account from unauthorised access. Payment credentials stay with the provider — Touch 'n Go, GrabPay, Boost or FPX — and we receive only transaction references, not full wallet or card details.

Essential cookies keep you logged in and remember your language preference; you cannot disable them without losing access to your account. Analytics cookies track which pages visitors view and how long sessions last, but they contain no personal identifiers. You can block analytics cookies in your browser settings and the lobby will still work normally.

Yes. Contact live chat or email support and ask for a data export. We will verify your identity by matching the email or phone number you registered with, then send you a structured file containing your account details, transaction history, login records and support notes. The export usually arrives within two business days.

We retain your data for the period required by local regulations, typically several years from your last transaction. Once that period expires we delete personal identifiers and transaction details unless a legal obligation requires longer retention. If you want earlier deletion contact support; we will comply where the law permits, but some records must remain on file to meet compliance obligations.

We share data with payment processors to complete deposits and withdrawals, and with compliance partners to verify your identity when regulations require it. These partners operate under strict confidentiality agreements. We never sell your information to advertisers or marketing platforms. If you opted in to promotional messages you can withdraw consent in account settings and the emails will stop immediately.

Log in to account settings and edit your email, phone number or payment preferences directly. If you need help or want to document a correction for your records, contact live chat or email support. We will verify your identity, update the record, and confirm the change. Corrections usually take effect within a few minutes once you save them.

Close your account through the settings page, then contact support and request deletion. We will comply where local law permits, but some records must remain on file to meet compliance obligations — for example, transaction logs required for audits. Once the mandatory retention period expires we delete what we no longer need. If you have an active balance, withdraw it before requesting account closure.