Rujukan Laman

How 98toto Handles Your Personal Data

This Privacy Policy sets out exactly what personal data 98toto collects when you open an account, how we store and use that data, and the rights you hold…

Data collection transparencyTouch 'n Go, GrabPay, Boost dan FPX payment data coveredYour right to access and correct recordsSecure retention practicesContact path for all data requests

Explore Lobby Read FAQ

What Data We Collect and Why

98toto Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

When you create an account on 98toto.mobi, we collect the personal details you submit — name, contact number, email address and preferred payment method. If you deposit via Touch 'n Go, GrabPay, Boost dan FPX, or withdraw through FPX, the transaction reference and amount are logged

1
against your account record for reconciliation purposes. We also collect device identifiers, IP address and session timestamps to detect unauthorised access and maintain session integrity. All data processing is subject to local law and applies where local law permits. We do not sell, rent or trade
2
your personal data to third-party marketing networks. Data shared with payment processors is limited strictly to what those processors need to complete your transaction, and they operate under their own published privacy terms.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

DATA REQUEST CHANNELS

How to Reach Us About Your Privacy

If you want to access, correct or delete any personal data we hold on your account, our privacy team is reachable through the channels below. We aim to respond to all data requests within five working days. Requests submitted from Kuching, Kota Kinabalu or anywhere else in Malaysia are handled under the same process — there is no regional queue.

Team online

Live Chat

Start a live chat session directly from the 98toto.mobi footer. Our support agents can raise a formal data request on your behalf and provide a reference number for tracking.

Email

Send your written data request to our dedicated privacy inbox. Include your registered email address and the nature of your request so we can locate your account record without delay.

Account Portal

Log in to your account and navigate to the Privacy section under Settings. From there you can download a copy of your stored profile data or submit a deletion request directly.

HOW WE PROTECT YOUR DATA

Data Handling, Cookies and Account Security at 98toto

We apply layered security practices across every data touchpoint — from the moment you submit your registration details through to each withdrawal you process via Touch 'n Go, GrabPay, Boost dan FPX…

Encryption in Transit

All data sent between your browser or app and our servers travels over TLS encryption. This covers login credentials, payment references and any personal details you submit through account forms.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand which pages are visited most. You can manage cookie preferences through your browser settings at any time without affecting your account access.

Account Security Controls

Two-step verification is available for your 98toto account. We recommend enabling it under Security Settings. Failed login attempts trigger a temporary hold, and you will receive an email alert for any new device sign-in.

Data Retention Period

We retain your account data for as long as your account remains active and for a period thereafter as required by applicable local law. Once the retention window closes, records are deleted from our systems permanently.

Third-Party Sharing Limits

Personal data is shared only with payment processors — Touch 'n Go, GrabPay, Boost dan FPX operators and FPX — and only to the minimum extent needed to process your transaction. We do not share data with advertisers.

Data Correction and Deletion

You can request a correction to any inaccurate record or ask us to delete your data where no legal obligation requires us to retain it. Verified requests are acted on within five working days of confirmation.

Your Questions About Our Privacy Policy Answered

The questions below address the most common concerns about how 98toto handles personal data. If your question is not answered here, use the live chat or email channel listed in the Data Request Channels section above to speak with our privacy team directly.

We collect your name, email address, contact number, date of birth and chosen payment method. If you transact via Touch 'n Go, GrabPay, Boost dan FPX, the transaction reference is also recorded. No additional data is gathered beyond what account and payment processing require.

Payment references passed through Touch 'n Go, GrabPay, Boost dan FPX or FPX are stored in encrypted form and linked to your account for reconciliation. We do not store your full wallet credentials — only the reference number and transaction status that our system needs.

Yes. Log in, go to Privacy under Settings, and submit a data access request. Alternatively, email our privacy inbox with your registered email address. We will compile and send your data within five working days of verifying your identity.

Submit a correction or deletion request through the account portal or by email. Deletion requests are processed where no local legal obligation requires continued retention. We will confirm the outcome in writing once the request has been acted upon.

No. We do not sell, rent or share your data with marketing networks or data brokers. The only third parties who receive your data are payment processors — and only to the minimum extent needed to complete a specific transaction you initiate.

After account closure, we retain records for the period required by applicable local law. Once that window expires, personal data is permanently deleted from our active systems and any backups are purged on the next scheduled cycle.

We use session cookies for login continuity and analytics cookies to see which pages see the most activity. You can block or clear cookies through your browser settings. Disabling analytics cookies does not affect your ability to log in or use your account.

How 98toto Handles Your Personal Data

How to Reach Us About Your Privacy

Live Chat

Email

Account Portal

Data Handling, Cookies and Account Security at 98toto

Encryption in Transit

Cookie Policy

Account Security Controls

Data Retention Period

Third-Party Sharing Limits

Data Correction and Deletion

Your Questions About Our Privacy Policy Answered

01 What personal data does 98toto collect when I open an account?

02 How is my payment data handled when I use Touch 'n Go or GrabPay?

03 Can I request a copy of all the data 98toto holds about me?

04 How do I ask 98toto to correct or delete my personal data?

05 Does 98toto share my data with marketing companies or third parties?

06 How long does 98toto keep my account data after I close my account?

07 What cookies does 98toto use and how can I control them?

Related Pages