Official Data Protection

Privacy Policy toke33 — Member Personal Data Protection

We understand how sensitive your personal information is. toke33 is committed to safeguarding every member's privacy to the highest security standards — from the moment you register to every transaction you make.

256-bit SSL Encryption PDPA Compliant No Data Sharing
Updated: 1 January 2026

Why Your Data is Safe with toke33

Six privacy protection principles we practise every day without compromise.

High-Level Encryption

All data transmitted between your device and toke33 servers is protected using 256-bit SSL encryption — the same technology used by leading banking and financial institutions worldwide.

Two-Factor Authentication (2FA)

Every login to your toke33 account is protected by two-factor authentication. Even if your password is compromised, an attacker cannot access your account without the additional verification code.

No Third-Party Data Sharing

Your personal information will not be sold, rented, or shared with any third party for marketing purposes. Your data is used solely for the operation of the toke33 platform.

Secure & Controlled Servers

Your data is stored in licensed data centres equipped with physical access controls, 24/7 monitoring and automated backup systems. No data is stored in unsecured or uncontrolled locations.

Malaysia PDPA Compliance

Toke33 operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. We guarantee your right to access, correct, and delete your personal data at any time.

Suspicious Activity Monitoring

Our system monitors every login activity and transaction in real time. Any suspicious access attempt will be automatically blocked and you will be notified immediately.

toke33 Privacy Commitment: This Privacy Policy transparently explains how toke33 collects, uses, stores and protects your personal information. We take our responsibilities as a data controller seriously and are committed to respecting your privacy at all times.

1 Introduction

Welcome to the toke33 Privacy Policy. This document serves as a comprehensive guide to our personal data protection practices and outlines your rights as a member of our platform.

Toke33 is a legally operating and responsible online betting platform. We recognise that your trust is our most valuable asset — and the greatest part of that trust lies in how we manage your personal data.

This policy applies to all information you provide to us during registration, platform use, interactions with our support team, and any other engagement with toke33. Please read this policy carefully and contact us if you have any questions.

2 Data We Collect

Toke33 only collects data that is strictly necessary to provide you with a safe, seamless, and responsible service. The following are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, MyKad number, date of birth Identity verification (KYC) & fraud prevention
Contact Data Email, phone number, address Account communications & security notifications
Financial Data Bank account number, bank name, transaction records Deposit & withdrawal processing
Technical Data IP address, device type, browser, location Account security & fraud detection
Usage Data Wagering history, games played, active time Responsible gaming & platform improvement
Communication Data Support chat records, emails, feedback Complaint resolution & customer service improvement

Data Minimisation Principle: We only collect data that is genuinely necessary. Any data that is no longer relevant or required will be deleted periodically in accordance with our data retention policy.

3 How We Use Your Data

The personal data we collect is used exclusively for the following purposes and will not be used for any other purpose without your consent:

  • Account Management — Creates, manages, and verifies your account; handles registration and login securely.
  • Transaction Processing — Processes deposits, withdrawals, and all financial transactions accurately and promptly.
  • Identity Verification (KYC) — Fulfils legal requirements related to identity verification and anti-money laundering prevention.
  • Platform Security — Detects and prevents fraud, unauthorised access, account misuse, and other suspicious activity.
  • Customer Support — Addresses enquiries, resolves complaints, and provides technical support to you.
  • Responsible Gaming — Monitors your betting habits to identify early signs of problem gambling and provide appropriate assistance.
  • Service Improvement — Analyses usage data in aggregate (without identifying individuals) to improve the platform and user experience.
  • Important Communications — Sends security notifications, account updates, and important service information.
  • Legal Compliance — Meets legal obligations and ensures compliance with regulations applicable in Malaysia.

4 Legal Basis for Data Processing

Toke33 processes your personal data on valid legal grounds in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010:

  • Consent — You provide explicit consent during toke33 account registration and by agreeing to our Terms and Conditions.
  • Contract Performance — Data processing is required to fulfil the service agreement between you and toke33, including transaction processing and account management.
  • Legal Obligation — We are required by Malaysian law to process certain data for identity verification, anti-money laundering prevention, and reporting to the relevant authorities.
  • Legitimate Interest — We process certain data based on legitimate business interests, including fraud detection and platform security improvements, provided those interests do not override your privacy rights.

5 Data Sharing & Disclosure

Toke33 does not sell your personal data to any party. However, under limited circumstances, we may share your data with the following parties:

  • Payment Service Provider — Banks, payment processors, and e-wallet providers that process your financial transactions, subject to strict confidentiality agreements.
  • Technical Service Provider — Cloud computing companies, infrastructure providers, and cybersecurity solution providers that help us operate the platform securely.
  • Legal Authority — Malaysian government authorities, regulatory bodies, or law enforcement agencies when required by law or court order.
  • KYC & AML Services — Licensed and trusted identity verification and anti-money laundering service providers.

Our Commitment: All third parties with whom we share data are required to sign a strict data processing agreement and ensure your data is protected to a standard equal to or higher than our own.

6 Data Security

Toke33 continuously invests in the latest security infrastructure to ensure your data is always protected. The technical and organisational security measures we implement include:

  • Data Encryption in Transit — All communications are protected with 256-bit SSL/TLS encryption, ensuring data cannot be intercepted in transit.
  • Stored Data Encryption — Sensitive data such as bank information and KYC documents are encrypted using AES-256 encryption while stored on our servers.
  • Two-Factor Authentication (2FA) — An additional security layer for all member accounts that protects against unauthorised access even if a password is compromised.
  • Role-Based Access Control — Internal staff are granted access only to the data required for their specific duties — the principle of minimum access is strictly observed.
  • Regular Security Audits — We conduct regular penetration testing and security audits by independent third parties.
  • 24/7 Threat Monitoring — An automated threat detection system monitors abnormal activity around the clock and responds immediately to any detected threat.
  • Incident Response Plan — We have clear procedures in place to detect, report, and address any data breach within the stipulated timeframe.

7 Data Retention Period

Toke33 does not retain your personal data longer than necessary. Data retention periods are based on service requirements and applicable legal obligations:

  • Active Account Data — Retained for the duration that your toke33 account remains active on the platform.
  • Post-Account Closure Data — Financial transaction records and KYC documents are retained for 7 years after account closure to fulfil Malaysia's Anti-Money Laundering (AMLA) legal requirements.
  • Security Log — Retained for 12 months for investigation purposes in the event of a security incident.
  • Support Communication Records — Retained for 3 years for service quality and dispute resolution purposes.
  • Marketing Data — Deleted immediately once you withdraw consent to receive marketing communications.

Upon expiry of the retention period, data will be securely deleted using non-recoverable deletion methods.

8 Your Rights

As a toke33 member and as an individual protected under PDPA 2010, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time. Requests will be processed within 14 working days.

Right to Rectification

You have the right to request correction of any personal data that is inaccurate, incomplete or outdated. You may update basic information directly from your account.

Right to Erasure

You have the right to request the deletion of your personal data, subject to legal obligations requiring us to retain certain records for a minimum prescribed period.

Right to Object to Processing

You have the right to object to the processing of your data for direct marketing purposes. Opt-out requests will be enforced within 5 working days.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider if desired.

Right to Restrict Processing

You have the right to request restriction of your data processing in certain situations, such as when you are disputing the accuracy of data or awaiting the outcome of a deletion request.

To exercise any of the above rights, please contact our Data Protection team at [email protected] or via live chat. We will respond within 14 working days.

9 Cookies & Tracking Technology

Toke33 uses cookies and similar tracking technologies to enhance the user experience and platform security. The following are the types of cookies we use:

  • Essential Cookies — Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled.
  • Performance Cookies — Helps us understand how visitors use our website through aggregated and anonymised data, enabling us to improve the user experience.
  • Functional Cookies — Saves your preferences such as language, theme, and display settings to deliver a more personalised experience.
  • Security Cookies — Used to detect and prevent fraudulent activity, automated bots, and unauthorised access attempts.

You can manage your cookie settings through your internet browser at any time. However, disabling certain cookies may affect the functionality and performance of the toke33 platform.

10 Children's Privacy

The toke33 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data of individuals under 18 years of age.

If we find that personal data of an underage child has been collected without our knowledge, we will take immediate steps to delete the relevant data and close the account involved. If you suspect that a minor has registered on our platform, please notify us immediately via email or live chat.

11 Privacy Policy Amendment

Toke33 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material amendments will be communicated to you via:

  • In-platform notifications on toke33 upon login.
  • Email the address registered to your account.
  • A prominent notice on our website at least 7 days before any amendment takes effect.

Continued use of the toke33 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. You are encouraged to review this page periodically to stay informed of the latest version of our policy.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer (DPO):

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 directly from the toke33 platform.
  • Response Time: Within 14 working days for all privacy-related enquiries.

You also have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant data protection authority if you are dissatisfied with how we handle your personal data.

For more information regarding your rights and our platform policies, please refer to Terms and Conditions and the FAQ ours.

🔐

Your Data is Safe. Join toke33 With Confidence.

Toke33 protects your privacy with bank-grade encryption, full PDPA compliance, and a strict no data-sharing policy. Register an account today and experience a betting platform that truly puts your security first.

SSL 256-bit PDPA Compliant No Data Selling Secure KYC
Bahasa Melayu