Reference

Our Terms, Your Account Rights

toto2win operates under a clear legal framework so you know exactly where you stand when you open an account and fund it via Touch 'n Go eWallet, Boost or GrabPay.

Account TermsPrivacy & DataCookie PolicyJurisdiction Notice
toto2win Our Terms, Your Account Rights
LEGAL CONTACT PATHS

Reach Us on Policy or Account Queries

For questions about your rights under these terms, data held on your account, or any policy matter, our support team handles requests through the channels below. We aim to respond to formal data or legal queries within a reasonable timeframe as required by applicable rules.

Team online

Live Chat

Open the chat widget from any page in your account dashboard. Our team handles policy and account queries directly — no email thread needed for most requests.

Email Support

Send detailed legal or data-access requests to our support address listed in the account help section. Attach your account ID for faster routing.

Account Help Centre

The help centre inside your account covers common policy questions — account closure, data requests and cookie settings — with step-by-step guidance.

DATA & ACCOUNT SECURITY

How We Protect and Handle Your Data

Your account security and data integrity are handled through a combination of technical controls and clear internal policies. We use SSL encryption across all account and payment pages, including the deposit flow for Touch 'n Go eWallet, Boost and GrabPay. Login sessions require OTP verification to your registered mobile number, which means a new device cannot access your account without that second step. We retain transaction and account data for the period required by applicable regulations, after which it is deleted or anonymised.

SSL Encryption

Every page that handles account data or payment input runs over SSL. Your Touch 'n Go eWallet and Boost deposit details are never stored on our servers in plain text.

OTP Login Verification

Each new login from an unrecognised device triggers an OTP sent to your registered mobile number. This step cannot be bypassed, keeping your account access under your control.

Data Retention Policy

We keep your account and transaction records for the period required by applicable law. Once that period ends, records are deleted or anonymised — we do not hold data indefinitely.

Data Access Requests

You may request a copy of your stored data, ask for corrections, or request full account deletion by contacting support with your account ID and a brief description of your request.

Common Legal and Policy Questions

These are the questions we hear most often about account rights, data handling and how our terms apply to Malaysia accounts.

These terms apply to anyone who opens an account on toto2win. Access depends on local law and is available where local law permits. By registering, you confirm you are eligible under the rules of your jurisdiction.

We collect the information you provide at registration — name, contact details, payment method identifiers — plus transaction records generated when you deposit via Touch 'n Go eWallet, Boost or GrabPay. We do not collect more than is needed to operate your account.

Contact our support team via live chat or email with your account ID and a data-access request. We will compile and send you the records we hold within the timeframe required by applicable rules.

Yes. Submit a deletion request through support. We will remove or anonymise your data once any legally required retention period has passed. Some records may be kept longer if required by law.

We use cookies to keep your session active, remember your language preference and measure how pages are used. You can adjust cookie settings through your browser at any time; some features may not work without session cookies.

Closing your account stops new data collection. Existing records are retained for the period required by applicable regulations, then deleted or anonymised. You can request confirmation of deletion through our support channel.
Reference

Legal

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.