toto22 is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains precisely what data we collect, why we collect it, how it is used, and what rights you hold as a Malaysian player and data subject.
Six principles that define how toto22 handles your personal information — before you read the full policy below.
All data transmitted between your browser and toto22's servers is protected by TLS/SSL encryption, preventing interception of your personal and financial information.
toto22 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used solely to operate our services.
We collect only the data that is strictly necessary to provide our platform services, process transactions, and comply with applicable regulatory obligations.
Personal data is not kept indefinitely. We apply clear retention schedules — data is deleted or anonymised once it is no longer needed for the purpose it was collected.
You have the right to access, correct, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 30 days.
Our data handling practices are designed with Malaysian players in mind, aligning with internationally recognised data protection standards applicable to online platforms.
toto22 ("we", "us", "our") operates the online casino and sports betting platform accessible at toto22.buzz (the "Platform"). We take the privacy and security of your personal data seriously. This Privacy Policy ("Policy") describes in detail how toto22 collects, uses, stores, shares, and protects information relating to you when you visit our website, register an account, make deposits or withdrawals, or otherwise interact with our services.
This Policy applies to all registered Players and visitors to the Platform, including Malaysian users accessing our services from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your relationship with toto22.
Your Privacy Matters: If you have questions about how we handle your data at any point, contact us at [email protected] or via 24/7 live chat. We aim to respond to all privacy enquiries within five (5) business days.
The following definitions apply throughout this Privacy Policy:
toto22 collects the following categories of Personal Data in connection with the operation of its Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad or passport number, nationality | Registration & KYC verification |
| Contact Data | Email address, phone number, residential address | Account registration |
| Financial Data | Bank account details, e-wallet identifiers, payment history | Deposits and withdrawals |
| Transaction Data | Deposit amounts, withdrawal requests, bet history, bonus claims | Ongoing platform use |
| Technical Data | IP address, browser type, device type, operating system, session duration | Website visits |
| Usage Data | Pages visited, games played, features used, click patterns | Ongoing platform use |
| Communications Data | Support chat logs, email correspondence, complaint records | Customer support interactions |
| KYC Documents | Scanned copies of MyKad, passport, proof of address, selfie verification | KYC verification process |
toto22 collects Personal Data through the following means:
You provide data directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion.
When you visit toto22.buzz, our servers automatically collect Technical Data and Usage Data through cookies, server logs, and similar technologies. This data helps us maintain platform security, diagnose technical issues, and improve the user experience for Malaysian players on all device types.
We may receive data about you from our payment service providers (such as processors handling Touch'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and Public Bank transactions), identity verification services, fraud prevention partners, and marketing analytics platforms. All such third parties are contractually required to handle your data in compliance with applicable data protection standards.
toto22 processes your Personal Data for the following specific purposes:
toto22 processes your Personal Data on the following legal bases:
toto22 does not sell your Personal Data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:
We share financial and identity data with authorised payment processors to facilitate your deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and supported cryptocurrency networks. These processors operate under their own privacy policies and are contractually bound to protect your data.
KYC documents and identity data may be shared with third-party identity verification service providers to complete your verification process. Such providers are engaged under strict data processing agreements.
We engage cloud hosting, security, and analytics providers who process data on our behalf under data processing agreements. These providers are not permitted to use your data for their own purposes.
We may disclose your Personal Data to law enforcement, regulatory authorities, or courts where required by applicable law, a lawful court order, or where we determine in good faith that disclosure is necessary to protect the rights and safety of toto22, our Players, or third parties.
toto22 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention standards are as follows:
Upon expiry of the applicable retention period, data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.
toto22 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These include:
Cookies are small text files placed on your device when you visit a website. They allow the website to remember your preferences and session state across page loads and visits. toto22 uses cookies and similar technologies (such as web beacons and local storage) to operate the Platform effectively.
You may control cookie settings through your browser's privacy settings. Please note that disabling essential cookies may affect your ability to log in to or use certain features of the Platform.
toto22 may store and process your Personal Data on servers located outside of Malaysia. When we transfer data internationally — for example, to cloud infrastructure providers or game platform servers — we take steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Malaysia.
Such safeguards may include contractual clauses, standard data protection agreements, and the selection of service providers with internationally recognised security certifications. We do not transfer data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate protective measures.
As an individual whose personal data is processed by toto22, you hold the following rights. To exercise any of these rights, contact us at [email protected] or via live chat. We will respond to all verified requests within thirty (30) calendar days.
Request a copy of the Personal Data we hold about you and information about how it is being processed.
Request correction of any inaccurate or incomplete Personal Data we hold about you.
Request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
Request that we restrict processing of your data while a dispute is being resolved or a correction request is pending.
Request a structured, machine-readable copy of Personal Data you provided to us for data you submitted directly.
Object to the processing of your data for direct marketing purposes or where processing is based on legitimate interests.
toto22 strictly prohibits the use of its Platform by individuals under the age of 21 years. We do not knowingly collect Personal Data from persons under 21. If we become aware that we have inadvertently collected data from an underage individual, we will immediately delete that data and close the associated Account.
All registered Players are required to complete KYC verification — including submission of a valid government-issued identity document such as a Malaysian MyKad or passport — prior to processing any withdrawal. This process includes age verification as a mandatory step.
If you are a parent or guardian and believe that a person under 21 in your care has created an account on toto22, please contact us immediately at [email protected] or via live chat so we can take appropriate action.
toto22 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When we make material changes, we will notify registered Players by email or via a prominent notice on the Platform prior to the changes taking effect. The effective date of the most recent revision is displayed at the top of this page.
Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using the Platform and close your Account before the revised Policy takes effect.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the toto22 Privacy Team through the following channels:
We take all privacy enquiries seriously and aim to acknowledge all requests within two (2) business days, with a substantive response provided within thirty (30) calendar days.
We built toto22 with Malaysian players in mind — and that means your privacy is as important to us as your playing experience. Explore our platform knowing your data is protected.
21+ Play responsibly. For players aged 21 and above only.