Privacy Policy
At tvtoto, your privacy is not an afterthought — it is built into the foundation of our platform. This Privacy Policy explains what personal data we collect, how we use it, who we may share it with, and what rights you have over your information as a registered player.
Your Data,Your Rights
Six core commitments that define how tvtoto handles the personal data of every Malaysian player on our platform. These are not aspirations — they are operational standards.
Data Security First
All personal data is stored in encrypted form using AES-256 standards. Our infrastructure undergoes regular independent security audits and penetration testing to maintain the highest protection levels.
No Data Sales — Ever
tvtoto does not sell, rent, or trade your personal data to third parties for marketing or commercial profiling purposes. Your information is used solely to deliver and improve your tvtoto experience.
Minimal Data Collection
We collect only what is necessary. Registration requires basic identity and contact information. We do not collect data that has no legitimate purpose in connection with your account or our regulatory obligations.
You Control Your Data
Every tvtoto account holder has the right to access, correct, port, or request deletion of their personal data. Requests are processed within 30 days in accordance with applicable data protection standards.
Clear Retention Limits
Personal data is retained only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. Account data is held for a minimum of five years post-closure for AML compliance purposes.
Plain English, Always
This Privacy Policy is written in clear, straightforward English so that every Malaysian player — whether in Kuala Lumpur, Penang, or Johor Bahru — can understand exactly how their data is handled.
Introduction
This Privacy Policy (the "Policy") is published by tvtoto (the "Operator", "we", "us", or "our"), the entity responsible for operating the online gaming platform accessible athttps://tvtoto.click, including any associated mobile-optimised interfaces and related services.
This Policy explains how tvtoto collects, uses, stores, discloses, and otherwise processes the personal data of individuals who visit, register on, or use the tvtoto Platform (collectively, "Users", "Players", or "you"). It is intended to provide clear and transparent information about our data practices in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia.
By accessing the tvtoto Platform, creating an Account, or continuing to use any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions, which govern the use of the Platform.
Your Consent: Where tvtoto relies on consent as the legal basis for processing your data, you have the right to withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
- "Personal Data" means any information that identifies or can reasonably identify a living individual, including name, identification number, contact details, financial information, and online identifiers such as IP addresses and cookies.
- "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, erasure, or destruction.
- "Data Controller" means tvtoto, the entity that determines the purposes and means by which personal data is processed.
- "Data Processor" means any third party that processes personal data on behalf of tvtoto, such as payment service providers, identity verification services, and cloud infrastructure providers.
- "KYC Data" means identity verification documents submitted by a Player in compliance with Know Your Customer requirements, including government-issued identification such as a Malaysian IC (MyKad) or passport.
- "Cookies" means small text files placed on a User's device by the Platform for the purposes of session management, functionality, and analytics.
- "PDPA" means the Personal Data Protection Act 2010 of Malaysia, the primary legislation governing the processing of personal data in Malaysia.
Personal Data We Collect
tvtoto collects personal data through several channels, including account registration, Platform usage, payment processing, and communications with our support team. The categories of data we collect are set out in the table below:
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / passport number | Registration form; KYC submission |
| Contact Data | Email address, mobile phone number, residential address | Registration form; account settings |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay, etc.), transaction history, deposit and withdrawal amounts in MYR | Payment processing; transaction records |
| KYC Documents | Copies of government-issued ID, proof of address documents, payment method verification | KYC verification portal |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, geolocation (general) | Automatic collection via Platform |
| Usage Data | Games played, bet history, session duration, feature interactions, support chat transcripts | Platform activity logs |
| Marketing Preferences | Communication opt-in / opt-out status, preferred notification channels | Account settings; consent forms |
Note: tvtoto does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information, except where strictly required by law or with your explicit consent in specific circumstances.
How We Use Your Personal Data
tvtoto uses the personal data we collect for the following purposes:
- Account Management: To create, maintain, and administer your tvtoto account, including verifying your identity during registration and throughout your membership.
- Service Delivery: To provide access to all gaming features, process deposits and withdrawals in MYR through supported payment methods, and facilitate your use of all Platform features.
- KYC & Age Verification: To verify that you are at least 21 years of age and meet all eligibility requirements as set out in our Terms & Conditions, in compliance with applicable gaming regulations.
- Financial Processing: To process, record, and audit all financial transactions on your account, including deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank, and withdrawals through the same channels.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity money laundering, identity theft, and other unlawful conduct on the Platform. tvtoto maintains active anti-fraud and anti-money-laundering (AML) monitoring systems.
- Regulatory Compliance: To comply with applicable laws, including the Personal Data Protection Act 2010 (Malaysia), anti-money-laundering regulations, and any reporting obligations imposed by our gaming licence conditions.
- Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our24/7 live chat and email support channels.
- Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the overall quality, stability, and user experience of the tvtoto Platform.
- Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and product updates relevant to your interests and activity on the Platform. You may withdraw this consent at any time.
- Responsible Gambling: To monitor your gaming activity for indicators of problem gambling behaviour, and to enforce self-exclusion, deposit limits, and cooling-off periods that you or our responsible gambling team have applied to your account.
Legal Basis for Processing
tvtoto processes personal data on the following legal grounds as applicable under the Personal Data Protection Act 2010 (Malaysia) and other applicable legislation:
- Contractual Necessity: Processing required to enter into and perform the contract with you — specifically, to operate your tvtoto account and deliver the services you have subscribed to.
- Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and regulatory reporting duties.
- Legitimate Interests: Processing carried out in the legitimate interests of tvtoto, including fraud prevention, platform security, and service improvement, where such interests do not override your fundamental data protection rights.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional data sharing. You may withdraw consent at any time without detriment to your account status.
Data Sharing & Disclosure
tvtoto does not sell, rent, or trade your personal data to third parties for commercial gain. We may, however, disclose your personal data to the following categories of recipients where necessary to deliver our services or comply with legal obligations:
- Payment Service Providers: Financial institutions and payment processors, including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank transactions. These parties receive only the data necessary to process your transactions.
- Identity Verification Providers: Third-party KYC service providers who assist us in verifying your identity and age in compliance with regulatory requirements.
- Cloud Infrastructure & IT Service Providers: Providers of secure server hosting, database management, and content delivery services. All such providers are bound by data processing agreements that require them to maintain appropriate security standards.
- Regulatory Authorities: Government bodies, law enforcement agencies, and financial intelligence units, where disclosure is required by applicable law or legal process, including the Financial Intelligence and Enforcement Department (FIED) of Malaysia.
- Fraud Prevention Services: Industry fraud prevention databases and shared intelligence platforms for the purpose of detecting and preventing fraudulent activity.
- Professional Advisers: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations.
All third-party data processors engaged by tvtoto are subject to written data processing agreements that require them to process personal data only on our instructions and to maintain appropriate technical and organisational security measures.
International Transfers: Some of tvtoto's service providers are located outside Malaysia. Where personal data is transferred to processors in other countries, tvtoto ensures that appropriate safeguards are in place, including contractual protections equivalent to or exceeding Malaysian PDPA requirements.
Cookies & Tracking Technologies
tvtoto uses cookies and similar tracking technologies to operate the Platform effectively, understand how it is used, and improve your experience. The following categories of cookies are used:
- Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as session authentication, security verification, and load balancing. These cookies cannot be disabled without materially impacting Platform functionality.
- Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform, including pages visited, session duration, and error events. This information helps us improve Platform stability and user experience.
- Functional Cookies: These cookies remember your preferences, such as language settings, display options, and recently played games, to provide a more personalised experience.
- Security Cookies: Used to support fraud detection, bot identification, and session integrity verification systems that protect your account.
You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies may impair your ability to use the Platform. We do not use third-party advertising cookies or cross-site tracking cookies for external marketing networks.
Data Retention
tvtoto retains personal data for the period necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Active Account Data: Retained for the duration of your active membership on the Platform, plus a minimum post-closure period as specified below.
- Account & Transaction Records: Retained for a minimum of five (5) years following account closure, in compliance with AML and gaming licence record-keeping obligations.
- KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable law.
- Support Communications: Chat transcripts and email correspondence retained for two (2) years from the date of the interaction.
- Technical & Usage Logs: Typically retained for twelve (12) months, after which they are deleted or anonymised.
- Marketing Consent Records: Retained for as long as your marketing consent is active, plus a reasonable period following withdrawal of consent to evidence compliance.
On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. You may request early deletion of your personal data subject to any overiding legal retention obligations — see Section 10(Your Rights) below.
Data Security
tvtoto implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
- Encryption: All personal data is encrypted at rest using AES-256 encryption. All data in transit is protected by TLS 1.2 or higher (SSL) protocols.
- Access Controls: Personal data is accessible only to authorised tvtoto personnel and third-party processors on a strict need-to-know basis. All access is logged and monitored.
- Two-Factor Authentication: Optional two-factor authentication (2FA) is available to all account holders and is mandatory for certain administrative operations.
- Regular Security Audits: The Platform and its underlying infrastructure undergo regular independent security assessments and penetration testing by qualified third-party cybersecurity specialists.
- Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, tvtoto will notify you and the relevant regulatory authorities within the timeframes required by applicable law.
Your Responsibility: While tvtoto takes extensive measures to protect your data, you are also responsible for maintaining the security of your account credentials. Never share your password, and always use a strong, unique password for your tvtoto account. If you suspect unauthorised access, contact our support team immediately via live chat.
Your Data Protection Rights
As a registered tvtoto player, you have the following rights in relation to your personal data under applicable data protection legislation, including the Personal Data Protection Act 2010 (Malaysia):
Right of Access
Request a copy of the personal data tvtoto holds about you and information about how it is processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that we temporarily restrict the processing of your data while a dispute or correction request is being resolved.
Right to Data Portability
Request a machine-readable copy of personal data you provided to us, where technically feasible and legally permitted.
Right to Object
Object to the processing of your data where tvtoto relies on legitimate interests as the legal basis, including for direct marketing communications.
To exercise any of the above rights, please submit a written request to tvtoto's data privacy team via our live chat support channel, or by email to the address set out in Section 14. We will respond to all verified data rights requests within 30 calendar days of receipt. Complex requests may require up to 90 days, in which case we will notify you of the extension.
We may need to verify your identity before processing any data rights request. This verification step is in place to protect your data from unauthorised access or modification. If we are unable to fulfil your request due to an overiding legal obligation, we will explain the reason clearly in our response.
Minors & Age Restriction
The tvtoto Platform is strictly intended for individuals who are 21 years of age or older. tvtoto does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step of our KYC process, and all accounts are subject to identity verification before full access is granted.
If tvtoto becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all associated personal data will be deleted to the extent permitted by law, and any funds held on the account will be returned to the source payment method. The matter may also be referred to relevant authorities where appropriate.
Parental Awareness: If you are a parent or guardian and believe that your child under the age of 21 has created tvtoto account, please contact our support team immediately. We will investigate and take appropriate action without delay.
Third-Party Content & Links
The tvtoto Platform may, from time to time, contain references or links to third-party websites, game providers, or partner services. tvtoto is not responsible for the privacy practices, data handling, or content of any third-party services that are not operated by or on behalf of tvtoto.
We encourage you to review the privacy policies of any third-party services you access in connection with your use of the tvtoto Platform. The inclusion of any third-party reference on the Platform does not constitute an endorsement of that party's privacy practices by tvtoto.
tvtoto's licensed game providers and certified studios supply their game software to the Platform and may, in limited circumstances, collect technical usage data (such as game session statistics) in accordance with their own privacy policies and software licence agreements. Such data collection is limited to technical gameplay metrics and does not include your financial or identity information.
Policy Updates & Amendments
tvtoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or the services we offer. The "Last Updated" date at the top of this page will be revised whenever material changes are made.
Where changes to this Policy are material — meaning they significantly affect how we process your personal data or reduce your rights — we will provide notice to registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect. Your continued use of the Platform following the effective date of any amended Policy constitutes acceptance of those changes.
We recommend that you review this Privacy Policy periodically to stay informed of how tvtoto is protecting your personal data. If you have any questions about a specific update, please contact our support team using the details in Section 14 below.
Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data protection rights as set out in Section 10, please contact tvtoto's privacy team through the following channels:
- Live Chat: Available 24/7 on the tvtoto Platform. Our privacy team is available during standard Malaysian business hours (8AM – 12 AM MYT); all other hours will be directed to our general support team for initial logging of your request.
- Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered account username and a brief description of your query.
tvtoto is committed to resolving all privacy-related requests and complaints promptly, fairly, and in compliance with applicable data protection legislation. We serve players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — and our support team is fully equipped to assist you in English.
Data Protection Officer: tvtoto has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. All formal data protection enquiries should be addressed to the DPO via the contact channels above, marked clearly as "Attention: Data Protection Officer".
If you are not satisfied with our response to a privacy complaint, you may refer your complaint to the relevant data protection authority or regulatory body having jurisdiction over tvtoto's operations. We will cooperate fully with any investigation conducted by such authorities.
Play with Confidence on tvtoto
Now that you understand how tvtoto handles your personal data, explore our full range of live casino tables, online slots, and Malaysia football betting — all in MYR, with full local payment support and24/7 English-language assistance.
For players aged 21 and above only. Gamble responsibly. See our Responsible Gambling page for support tools.