Toke66 Privacy Policy – Protecting Your Personal Data in Malaysia

At toke66, your privacy is not merely a legal obligation — it is a moral responsibility we take seriously. This Privacy Policy transparently explains how we collect, use, store, and protect your personal data in accordance with the Personal Data Protection Act 2010 (Malaysia PDPA).

Last updated: 15 July 2026 | Version: 3.1 | Jurisdiction: Malaysia
256
bit SSL Encryption
PDPA
Malaysia Compliant
0
Data Sold to 3rd Parties
24/7
Security Monitoring

Toke66's Commitment to Your Privacy

Six core principles that guide how toke66 handles your personal data

Bank-Grade Encryption

All personal data and financial transactions on toke66 — including deposits via Touch 'n Go, GrabPay, DuitNow, and FPX — are protected with the same 256-bit SSL encryption used by Malaysian financial institutions.

Data Not Sold

Toke66 has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes. Your information belongs to you — not to us as a business asset.

Malaysia PDPA Compliance

All of toke66's data handling practices fully comply with the Personal Data Protection Act 2010 (Malaysia PDPA). We conduct regular internal audits to ensure ongoing compliance with applicable laws.

Restricted & Controlled Access

Toke66 member personal data is accessible only to staff with specific authorisation and strictly within the scope of their role. All access to sensitive data is automatically logged and monitored by our security system.

Right to Data Erasure

You have the right to request deletion of your personal data from toke66's systems. Such requests will be processed within 30 business days, subject to mandatory record-retention requirements under applicable Malaysian law.

Data Breach Notification

In the event of any security breach involving your personal data, toke66 is committed to notifying you within 72 hours of confirming the breach, in line with global industry best practices.

Important Note: This Privacy Policy forms part of the Terms & Conditions toke66. By registering for or using the toke66 platform, you agree to the data collection and usage practices described in this document.

1. Introduction

Toke66 ("we", "platform", "Company") operates an online entertainment and betting platform accessible at https://toke66.bet. We offer a wide range of services including football betting (Malaysia Super League, EPL, and other leagues), Live Casino, Slots, Lottery, Roulette, cricket, Sports Betting, and more.

This Privacy Policy describes how toke66 collects, uses, discloses, transfers, and stores information when you use our platform. We take this responsibility seriously and are committed to protecting the privacy of every toke66 user registered in Malaysia.

This policy is formulated in accordance with the Personal Data Protection Act 2010 (Malaysia PDPA) and global data protection best practices. If you have any questions after reading this policy, please contact our Data Protection Officer (DPO) team at privacy@toke66.bet.

2. Data We Collect

To provide a secure and fully functioning toke66 service, we need to collect several categories of personal data. Below is a summary of the data we collect and the purposes for which it is used:

Data Category Sample Information Required
Identity Data Full name, IC number, date of birth Mandatory
Contact Data Malaysian phone number, email address Mandatory
Financial Data Bank account, digital wallet numbers (TNG, GrabPay) Mandatory
Transaction Data Deposit, withdrawal, betting, and winnings records Mandatory
Technical Data IP address, device type, browser, OS Automatic
Behavioural Data Pages visited, games played, session duration Automatic
Communication Data Support chat records, emails to toke66 Situation

toke66 does not collect special category data (sensitive data) such as medical information, biometric data, or religious information unless mandatorily required by applicable Malaysian law.

3. How We Collect Data

Toke66 collects your personal data through several key channels:

3.1 Information You Provide Directly

  • Toke66 account registration form — name, phone number, email, date of birth
  • Identity verification process (KYC) — copy of IC, bank statement
  • Deposit and withdrawal requests via TNG, GrabPay, DuitNow, Maybank2u, CIMB Clicks, Boost, or ShopeePay
  • Interactions with the toke66 customer support team via live chat or email
  • Feedback forms, surveys, or competitions within the platform

3.2 Automatically Collected Data

When you use the toke66 platform, our systems automatically record certain technical information for security and service improvement purposes, including your device's IP address, browser type and version, operating system, pages you visit on toke66, the time and duration of each session, as well as cookie data and similar tracking technologies.

3.3 Data from Third-Party Sources

In certain cases, toke66 may receive your personal data from legitimate third-party sources, such as identity verification service providers for KYC purposes, authorised Malaysian payment service providers, and anti-fraud agencies registered in Malaysia.

4. How We Use Your Data

Toke66 uses your personal data only for legitimate, fair, and transparent purposes. The primary purposes for which data is used are as follows:

  • Account Management: Processing registrations, verifying identities, and keeping your toke66 account secure and fully operational.
  • Transaction Processing: Facilitating deposits (TNG, GrabPay, DuitNow, FPX) and withdrawals to your bank account or digital wallet in Malaysia.
  • Service Delivery: Enabling you to enjoy all toke66 games — from Malaysia Super League Sports Betting to Live Casino, slots, and lottery.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
  • Legal Compliance: Fulfilling obligations under Malaysian law, including the PDPA 2010, the Anti-Money Laundering Act 2001, and related regulations.
  • Service Communications: Sending important notifications relating to your account, transactions, security updates, and changes to toke66's terms of service.
  • Platform Improvements: Analysing usage patterns to improve the toke66 platform's interface, performance, and new features.
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical support to toke66 members.

For toke66 marketing and promotional communications, we will only contact you if you have given explicit consent. You may withdraw this consent at any time via your account settings or by contacting our support team.

5. Data Sharing & Disclosure

Toke66 does not sell or trade your personal data. However, in certain limited circumstances, we may share your data with the following parties:

5.1 Service Providers

Third parties that help us deliver toke66 services, including Malaysian payment providers (DuitNow, FPX, and digital wallet providers), cloud hosting providers, platform analytics providers, and customer support service providers. All these providers are bound by strict data confidentiality agreements and may only use your data for the specified purposes.

5.2 Legal Requirements

Toke66 may be required to disclose your personal data to the relevant Malaysian authorities when mandated by a court order, legal writ, or a lawful request from a Malaysian law enforcement agency.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of toke66's assets, members' personal data may be transferred as part of the business assets. You will be notified in advance before any such transfer takes place.

toke66 does not share your personal data with advertising companies, data brokers, or any other third parties for third-party marketing purposes. This is our absolute commitment.

6. Data Security

Toke66 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, use, disclosure, alteration, or destruction.

Key security measures we employ include:

  • 256-bit SSL/TLS Encryption for all data transmitted between your device and toke66 servers
  • Data encryption at rest (AES-256) for sensitive data stored in our databases
  • Two-Factor Authentication (2FA) for all member accounts and internal admin access
  • 24/7 security monitoring using automated threat detection systems
  • Penetration testing periodically by independent security experts
  • Role-based access control ensuring only authorised personnel can access specific data
  • Comprehensive audit logs for all access to sensitive data

While we take every reasonable step to protect your data, no security system is entirely foolproof. We encourage you to take your own protective measures as well — such as using a strong, unique password for your toke66 account and never sharing your login credentials with anyone.

7. Data Retention Period

Toke66 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Malaysian law.

  • Active account data: For as long as your toke66 account remains active, and for a minimum of 7 years after account closure (in line with Malaysia's financial compliance requirements).
  • Financial transaction records: Minimum 7 years from the transaction date, in accordance with the requirements of Malaysia's Anti-Money Laundering Act.
  • Customer support communication records: 3 years from the date of last interaction.
  • Technical data and logs: 12 months from the date of collection, unless required for an ongoing security investigation.
  • Data deleted upon request: Will be deleted within 30 business days, except for data required to be retained under legal obligations.

8. Your Rights Under Malaysia PDPA

As a data subject under the Personal Data Protection Act 2010 (Malaysia's PDPA), you have the following rights regarding your personal data processed by toke66:

Right of Access

You have the right to request a copy of the personal data we hold about you. toke66 will provide this within 21 business days of receiving a valid request.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data. Corrections will be made within 14 business days of your request being verified.

Right to Erasure

You may request the deletion of your personal data when it is no longer required for the purpose for which it was collected, subject to mandatory retention requirements under Malaysian law.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. Such requests will be actioned immediately, no questions asked.

Right to Withdraw Consent

Where the processing of your data is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of processing carried out prior to the withdrawal.

How to Exercise Your Rights

To exercise any of the above rights, please contact the toke66 Data Protection Officer at privacy@toke66.bet or via the toke66 platform's live chat. We will respond within 21 business days.

9. Cookies & Tracking Technologies

Toke66 uses cookies and similar tracking technologies to enhance your experience on our platform. We use three categories of cookies:

Cookie Type Function Validity Period Status
Essential Cookies Login, session security, language preferences Session / 30 days Cannot be disabled
Functional Cookies User preferences, recent game history 90 days Optional
Analytics Cookies Platform usage statistics, feature improvements 1 year Optional

You can manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the toke66 platform.

10. Child Protection

The toke66 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that personal data belonging to someone under 18 has been collected, we will take immediate steps to delete that data and close the account in question.

If you believe toke66 has collected personal data of a minor without proper age verification, please contact us immediately at privacy@toke66.bet.

11. Changes to the Privacy Policy

Toke66 reserves the right to update or modify this Privacy Policy at any time in response to changes in legislation, technology, or business practices. Any material changes to this policy will be communicated to you via:

  • Prominent notices displayed on the toke66 platform's homepage;
  • An email to your registered email address;
  • In-platform notifications (push notification or banner).

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information. The "Last updated" date at the top of this policy will reflect the date of the most recent revision.

12. Contact Us

For any enquiries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by toke66, please contact us through the following channels:

  • toke66 DPO Email: privacy@toke66.bet
  • General Support Email: support@toke66.bet
  • Live Chat: Available 24/7 on the toke66 platform

We are committed to responding to all privacy enquiries within 5 business days. For rights requests under Malaysia's PDPA, the response time is within 21 business days.

This Privacy Policy is effective from 15 July 2026 and supersedes all previous versions. Your continued use of the toke66 platform after this date constitutes your acceptance of the terms set out in this latest Privacy Policy.

FAQs – toke66 Privacy Policy

Frequently asked questions about data privacy at toke66

Absolutely not. toke66 has never and will never sell, rent, or trade members' personal data to any advertiser, data broker, or third party for marketing purposes. This is our unconditional commitment — one that cannot be compromised. Your data is used solely for the purposes explicitly stated in this Privacy Policy.

All financial transactions on toke66 — whether deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Maybank2u, CIMB Clicks, Boost, or ShopeePay — are processed through channels secured with 256-bit SSL encryption. Bank account numbers and digital wallet details are stored in AES-256 encrypted format. toke66 staff cannot view your full card or bank account information.

Yes, you have the right to request deletion of your personal data under Malaysia PDPA. However, please be aware that certain data — in particular, financial transaction records — must be retained by toke66 for a minimum of 7 years in accordance with Malaysian legal requirements (Anti-Money Laundering Act, financial reporting requirements). Data not subject to these legal obligations will be deleted within 30 business days upon receipt of a valid request.

When your toke66 account is closed, we will continue to retain your personal data for a minimum period of 7 years in accordance with Malaysian legal requirements. This includes transaction records, betting records, and identity information for legal compliance and fraud prevention purposes. Once this mandatory period expires, your data will be securely deleted from toke66 systems.

Your Privacy Is Protected — Get Started with toke66 Today

With 256-bit SSL encryption, Malaysia PDPA compliance, and an unconditional commitment to never selling your data — toke66 is a betting platform you can trust completely. Register for free and enjoy Malaysia's best entertainment experience.

Malaysia PDPA Compliance 256-bit SSL Encryption Data not sold to third parties

For players aged 18 and above. Please practise responsible gaming.

Bahasa Melayu