At toto33, your privacy is not a checkbox — it is a commitment. This Privacy Policy explains in plain terms how we collect, use, store, and protect your personal data when you use our platform. We encourage you to read it fully before registering.
Six core principles that underpin our approach to data privacy at toto33.
We collect only the personal data that is strictly necessary to operate your account, process transactions, and comply with legal obligations. We do not collect data speculatively.
All data transmitted between your device and the toto33 platform is protected by 256-bit SSL/TLS encryption. Stored personal data is encrypted at rest using industry-standard methods.
Your personal data is never sold to advertisers, data brokers, or marketing aggregators. We share data with third parties only where necessary for platform operations, under strict contractual controls.
We do not keep your data longer than necessary. Retention periods are defined for each data category based on operational requirements and applicable legal retention obligations.
You have the right to access, correct, export, and request deletion of your personal data. These rights can be exercised by contacting our support team through the live chat or email channel.
In the unlikely event of a data breach that affects your personal information, toto33 will notify affected users promptly and take immediate remedial action to contain the incident.
This Privacy Policy ("Policy") is issued by toto33 ("toto33", "We", "Us", "Our") and applies to all personal data collected from users ("You", "User", "Player") of the toto33 online casino and sports betting platform accessible at https://toto33.buzz ("Platform"), including all associated services, promotions, customer support interactions, and communication channels.
toto33 is committed to protecting the privacy and security of your personal data in accordance with applicable data protection legislation. This Policy describes what personal data we collect, the lawful basis on which we process it, how long we retain it, with whom we share it, and the rights you hold in relation to your data.
By registering an account on the toto33 Platform, you acknowledge that you have read and understood this Privacy Policy. Your continued use of the Platform following any updates to this Policy constitutes your acceptance of the revised terms. If you do not agree with this Policy, you should cease use of the Platform and contact us to close your account.
toto33 serves players primarily in Malaysia, including those located in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other regions across West and East Malaysia. This Policy is drafted in English and shall be interpreted accordingly.
The following terms are used throughout this Privacy Policy with the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that relates to an identified or identifiable natural person, including but not limited to name, email address, phone number, payment details, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion. |
| "Data Controller" | toto33, which determines the purposes and means of processing your personal data. |
| "Data Processor" | A third party that processes personal data on behalf of toto33 under a contractual arrangement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data. |
| "KYC" | Know Your Customer — the identity verification process toto33 conducts in compliance with anti-money laundering obligations. |
| "Cookies" | Small text files stored on your device by your browser that enable certain Platform functionality and analytics. |
toto33 collects the following categories of personal data from Platform users:
When you create a toto33 account, we collect your full legal name, email address, date of birth, Malaysian mobile phone number, and a chosen username. This data is required to create and administer your account.
To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, we collect identity verification documents including a copy of your MyKad, Passport, or Driver's License; proof of residential address such as a utility bill or bank statement; and a selfie photograph holding your identity document. This data is processed under strict confidentiality controls.
We collect transaction records including deposit amounts, withdrawal requests, payment methods used (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and cryptocurrency addresses for BTC, ETH, and USDT transactions), and account balance information. We do not store full card numbers, PINs, or banking passwords.
We automatically collect technical data about your interaction with the Platform, including your IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, games played, bets placed, and clickstream behaviour. This data helps us maintain Platform security and improve the user experience.
Records of your communications with toto33 customer support — including live chat transcripts, support ticket history, and email correspondence — are stored for quality assurance, compliance, and dispute resolution purposes.
Any additional information you choose to provide voluntarily, such as preferred contact methods, sporting preferences, or feedback submitted through surveys, is collected and stored subject to this Policy.
toto33 collects personal data through the following channels:
toto33 processes your personal data for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, contact information |
| Identity verification (KYC) | Government ID, proof of address, selfie |
| Payment processing | Financial data, transaction history |
| AML and fraud prevention | Financial data, KYC data, usage data, IP address |
| Platform operation and security | Technical data, usage data, IP address |
| Customer support | Communication data, account data |
| Responsible gambling monitoring | Betting history, deposit/withdrawal patterns, usage data |
| Legal and regulatory compliance | All categories where required by law |
| Platform improvement and analytics | Anonymised or aggregated usage data |
toto33 processes your personal data on the following legal bases:
toto33 does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. We share personal data only in the following circumstances and only to the extent necessary:
Transaction data is shared with Malaysian payment processors, banks, and e-wallet operators (including but not limited to Maybank, CIMB, Public Bank, Hong Leong, FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay) and cryptocurrency network validators solely to process deposits and withdrawals on your behalf.
KYC document data may be processed by third-party identity verification service providers acting as Data Processors under contractual data processing agreements with toto33. These providers are required to handle your data with the same standard of care as toto33.
toto33 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, lawful order, or in response to valid legal process.
toto33 may share limited data with fraud prevention and risk management partners to detect, prevent, and investigate fraud, money laundering, and other harmful activity that may affect the integrity of the Platform and the security of all users.
toto33 retains personal data for as long as is necessary to fulfil the purposes outlined in this Policy, subject to applicable legal requirements. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years following account closure |
| KYC / identity documents | 5 years from account closure or last transaction date |
| Financial transaction records | 7 years from transaction date (regulatory requirement) |
| Customer support records | 3 years from date of communication |
| Technical / usage logs | 12 months from collection |
| Cookie and tracking data | As per individual cookie expiry (see Section 10) |
Following expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.
toto33 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure:
toto33 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how the Platform is used. The following categories of cookies are employed:
These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged into your account, CSRF protection tokens, and load-balancing cookies. No personal data beyond session identifiers is stored in these cookies.
toto33 uses first-party analytics to understand aggregate user behaviour — such as which games are most popular, which pages have high exit rates, and how navigation patterns change over time. This data is used only in aggregated, anonymised form to improve the Platform experience.
These cookies remember your Platform preferences, such as language settings, display options, and previously entered form data, to improve your experience across sessions.
You may control cookie settings through your browser's privacy configuration. Disabling strictly necessary cookies will impair or prevent your ability to use the Platform. Disabling analytics or preference cookies will not affect core functionality but may result in a less personalised experience.
As a user of the toto33 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at the email address set out in Section 15.
These rights apply to all personal data toto33 holds about you. Contact support to exercise any of them.
You may request a copy of all personal data toto33 holds about you. We will provide this within a reasonable timeframe, ordinarily within 30 days of the verified request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You may update basic account details directly from your Account Settings.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to legal retention obligations — certain financial and KYC records must be retained by law.
Where processing is based on your consent or on a contractual basis, you may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
In certain circumstances — such as where you contest the accuracy of data, or where processing is unlawful but you request restriction rather than deletion — you may request that we restrict processing of your data.
Where processing is based on our legitimate interests, you have the right to object. We will cease that specific processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing relies on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. Withdrawal of consent may limit certain Platform features.
If you believe toto33 has handled your personal data in a manner that does not comply with applicable data protection law, you have the right to lodge a complaint with the relevant regulatory authority in your jurisdiction.
The toto33 Platform is strictly intended for users who are aged 21 years or older. toto33 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register on or use the Platform under any circumstances.
If toto33 discovers or reasonably suspects that a user is under the age of 21, the account will be immediately suspended pending investigation. If confirmed, the account will be permanently terminated, all associated funds will be subject to review in accordance with our Terms & Conditions, and any personal data collected in connection with the under-age account will be deleted subject to applicable legal obligations.
Parents and guardians who believe a minor may have accessed the toto33 Platform should contact our support team immediately via live chat so that we may take appropriate action promptly.
The personal data we collect from Malaysian users may be transferred to and processed in countries outside of Malaysia where toto33's infrastructure providers, Data Processors, or payment service partners are located. Such countries may have data protection laws that differ from those applicable in Malaysia.
When toto33 transfers personal data internationally, we ensure that appropriate safeguards are in place to protect your data. These safeguards may include contractual clauses with receiving parties that impose data protection obligations equivalent to those applicable in Malaysia, or reliance on the receiving country's adequacy status where recognised.
By registering on toto33 and using the Platform, you acknowledge and consent to the international transfer of your personal data on the basis described in this section.
toto33 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered users by prominently displaying a notice on the Platform and, where practicable, by sending a notification to the email address associated with your account.
The updated Policy will display the revised effective date at the top of the document. Continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree to a material change, you must cease use of the Platform and contact us to close your account.
We encourage you to periodically review this Privacy Policy to stay informed about how toto33 protects your personal data. The most current version of this Policy is always available at https://toto33.buzz/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by toto33, please contact our Data Protection team through the following channels:
When contacting us regarding your personal data, please include sufficient information to allow us to identify your account and verify your identity before disclosing or modifying any personal data. This is necessary to protect the security of all users' information.
If you are not satisfied with toto33's response to a privacy complaint, you have the right to refer the matter to the competent data protection authority or regulatory body applicable in your jurisdiction.
Your privacy is protected at every step — from the moment you register to every deposit and withdrawal you make. Explore 500+ casino games and competitive sports betting on Liga Super Malaysia, EPL, UFC, and more. Fast e-wallet payouts, full Malaysian bank support, and 24/7 live chat. For players aged 21 and above only.
Questions about your account? Visit our FAQ. For betting terms, see our Terms & Conditions. Play responsibly — visit Responsible Gambling.