Reference

How toto2win Handles Your Personal Information

This Privacy Policy sets out exactly what data we collect when you open an account, make a deposit via Touch 'n Go eWallet, Boost or GrabPay, and use our platform.

Account data kept securelyLocal wallet deposits coveredYour right to access or remove dataContact us any time to update your detailsPolicy applies where local law permits
toto2win How toto2win Handles Your Personal Information
DATA HANDLING PRACTICES

How We Protect and Manage Your Account Data

We hold your data only as long as your account is active or as required under Malaysian law. When you close your account, we follow a structured deletion process — payment records linked to Touch 'n Go eWallet or GrabPay are retained for the minimum period required for financial compliance, then removed. You can request a copy of your data or ask for corrections at any point through the channels above.

Encryption on Every Transaction

Every deposit and withdrawal — whether via Boost, Touch 'n Go eWallet or GrabPay — is processed over an SSL-encrypted connection. Your payment credentials are never stored on our servers in plain text.

Cookie Control in Your Hands

We place session cookies to keep you logged in and analytics cookies to understand page usage. You can clear or block these from your mobile or desktop browser settings without losing your account access.

Data Retention and Deletion

Account profile data is removed within a reasonable period after you request account closure. Transaction logs tied to e-wallet or FPX payments are kept only for the period required by applicable law, then purged.

Third-Party Access Is Limited

We share only the minimum required data with payment processors to complete your transaction. No marketing partner receives your personal account details without your explicit consent.

PRIVACY CONTACT

How to Reach Us About Your Data

If you want to review what data we hold about you, request a correction, or ask us to delete your account information, our support team handles these requests directly. Reach out through live chat on the platform, send an email to our support address, or use the in-account contact form. We aim to acknowledge your request within one business day and resolve straightforward cases promptly.

Live Chat Start a live chat session from your account dashboard. Our team will verify your identity before discussing any personal data held on your account.
Email Support Send your data request or privacy question to our support email. Include your registered contact number so we can match your request to the right account.
In-Account Form Log in, go to account settings, and use the contact form under Privacy. This routes your request directly to the team that manages data access and corrections.

Common Questions About Our Privacy Policy

These are the questions we receive most often from account holders about how their data is managed. If your question is not covered here, reach out through live chat or the in-account contact form and we will walk you through the specifics for your account.

We collect your name, email, contact number and the payment method you register — such as Touch 'n Go eWallet or GrabPay. We also collect device and session data when you log in.

We share data only with payment processors needed to complete your transaction. No personal data is sold or passed to marketing companies. Sharing is limited strictly to what the transaction requires.

Log in, go to account settings and use the Privacy contact form, or start a live chat. We verify your identity first, then provide a summary of what data your account holds.

Yes. Submit a deletion request through live chat or email. Transaction records tied to Boost or FPX payments may be retained for the minimum period required by law before full deletion.

Payment credentials are passed over SSL-encrypted connections and are never stored in plain text on our servers. Only the transaction reference is kept, not your full wallet credentials.

Yes — this policy applies to all account holders where local law permits access. Whether you are in Kuching or anywhere else in Malaysia, the same data practices and rights apply to your account.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.