Privacy Policy toyal188 – Malaysia User Data Protection

Your privacy is our priority. This document clearly explains how toyal188 collects, uses, stores, and protects your personal information as a user of our platform.

Updated: January 2026

Commitment Data Protection We

Six core principles that guide how toyal188 manages your privacy and personal data.

256-bit SSL Encryption

All data transmitted between your device and toyal188 servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.

No Data Sales

Toyal188 has never and will never sell, rent or trade your personal data to third parties for marketing purposes or any other commercial purpose without your consent.

Secure Storage

Your data is stored on servers protected by strict access controls, intrusion detection systems, and regular backups to ensure the security and continuity of your data.

User Controls

You have the full right to access, correct, or request deletion of your personal data. Our team is ready to process privacy-related requests within 30 business days.

PDPA Compliance

The toyal188 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management.

Full Transparency

We clearly disclose the types of data collected, the purposes for which it is used, and the parties that may be involved — nothing is hidden or buried in fine print that is difficult to understand.

This Privacy Policy describes the privacy practices of toyal188 and forms part of the platform's Terms and Conditions. By using our platform, you agree to the collection and use of data as described herein.

01Introduction & Policy Scope

Toyal188 takes user privacy seriously. This Privacy Policy explains in detail how we collect, process, store and protect your personal information when you use the platform, our services, or communicate with our team.

This policy applies to all toyal188 platform users without exception — including visitors browsing the website without registering, active registered members, and individuals who contact us via customer support. By continuing to use this platform, you acknowledge that you have read and understood this policy.

The term "personal data" in this document refers to any information that can be used to identify you directly or indirectly as an individual — including your name, email address, phone number, financial information, and browsing data.

02Types of Personal Data Collected

Toyal188 collects various types of personal data depending on how you interact with our platform. Below is an overview of the data that may be collected:

Registration & Account Data

  • Full name as stated on official identification documents
  • Date of birth for age verification
  • Email address and mobile number
  • Username and chosen password (passwords are stored in encrypted hash form)
  • Residential address and country

Financial & Transaction Data

  • Bank account or e-wallet details used for deposits and withdrawals
  • Deposit, withdrawal, and bonus transaction records
  • Wagering history and gaming activity

Identity Verification Data (KYC)

  • Copy of identity card or passport
  • Proof of address document
  • Payment method verification document

Technical & Usage Data

  • IP address and device information
  • Web browser type and operating system
  • Pages visited and session duration
  • Cookie data and session identifiers

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data categories such as health information, religious beliefs, or users' political views.

03How We Use Your Data

Collected personal data is used solely for legitimate purposes relevant to the operation of the toyal188 platform. Below is a summary table outlining the purposes for which data is used:

Purpose of Use Data Type Legal Basis
Registration & account management Registration data Contract
Deposit & withdrawal processing Financial data Contract
Identity verification (KYC/AML) KYC Data Legal obligations
Customer Support All related categories Contract
Fraud detection & security Technical & transaction data Legitimate interests
Promotional communications (with consent) Email & phone Consent
Platform improvements Usage & technical data Legitimate interests

We will not use your data for any purpose other than those stated above without first obtaining your consent. If you have previously provided consent to receive marketing communications and wish to withdraw it, you may do so by contacting our support team.

04Data Sharing with Third Parties

Toyal188 does not sell or trade users' personal data to third parties. However, in the course of operating the platform, we may share necessary data with a limited and selected range of third-party categories:

  • Payment Processors: Transaction information required to process your deposits and withdrawals is shared with approved payment service providers
  • Game Software Providers: Required game data is shared with game providers integrated with our platform to enable a seamless gaming experience
  • Relevant Authorities: Data may be disclosed to legal authorities, regulatory bodies, or enforcement agencies when required by applicable Malaysian law
  • Technical Service Providers: Companies that provide infrastructure, analytics and cybersecurity services that support our platform operations

All third parties we work with are required to meet data protection standards no lower than those we apply ourselves. We will not share your data with third parties without a clear necessity and a solid legal basis.

If toyal188 is involved in any merger, acquisition, or asset sale, user data may be transferred as part of those business assets. Users will be notified in advance and have the right to request deletion of their data.

05Security & Data Protection

User data security is the top technical and operational priority at toyal188. We implement multiple layers of protection to keep your data safe from any threat:

  • 256-bit SSL/TLS encryption for all data communications between user devices and our servers
  • User passwords are stored using one-way irreversible hashing
  • Role-based access control (RBAC) ensures only authorized personnel can access user data
  • Real-time intrusion detection system that monitors for suspicious activity around the clock
  • Regular security audits by independent third parties
  • Automatic encrypted data backups to ensure data recovery in the event of a technical disruption

While we take all reasonable precautions, no security system can guarantee absolute protection. We therefore also encourage users to play their part in keeping their accounts secure — by using strong passwords, not sharing login credentials with anyone, and ensuring their devices are always updated with the latest security patches.

If you suspect any unauthorized access to your account, please contact our support team immediately via in-platform live chat. Our team will respond promptly to help secure your account.

06Cookies & Tracking Technologies

Toyal188 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage patterns and provide essential functionality. There are several categories of cookies in use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security — cannot be disabled
  • Performance Cookies: Collects information on how users interact with the platform to help us improve the user experience
  • Preference Cookies: Saves your preferences such as language and theme for a more convenient return experience
  • Analytics Cookies: Helps us understand aggregated, anonymized usage patterns for platform improvement purposes

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of some platform features, but will not prevent basic use of the toyal188 platform.

07Your Rights as a User

As a toyal188 platform user, you have rights regarding your personal data guaranteed under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own policies:

  • Right of Access

    You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 business days.

  • Right to Rectification

    If your data is inaccurate or outdated, you have the right to request a correction. You may also update certain information directly through your account panel.

  • Right to Erasure

    You may request the deletion of your personal data under certain circumstances. Please note that we may need to retain some data to fulfil legal obligations.

  • Right to Restrict Processing

    In certain situations, you have the right to request that the processing of your data be restricted while a dispute or review is in progress.

  • Right to Object

    You have the right to object to the processing of your data for direct marketing purposes at any time — such requests will be actioned immediately.

  • Right to Data Portability

    You have the right to receive your personal data in a machine-readable format for transfer to another service provider if needed.

To exercise any of the above rights, please contact our customer support team via live chat or email. Requests will be processed within the timeframe stipulated by the PDPA and our policy.

08Data Retention Period

Toyal188 retains your personal data only for as long as it is needed for the stated purpose or as required by applicable law. Our general data retention guidelines are as follows:

  • Active account data is retained for as long as your account remains active
  • After account closure, basic personal data is retained for a minimum of 7 years to comply with AML requirements and Malaysian financial regulations
  • Financial transaction log data is retained for a minimum of 7 years
  • Customer support communication records are retained for 3 years
  • Cookie data and technical logs are typically deleted after 13 months

Once the applicable retention period expires, your data will be permanently deleted or anonymised so it can no longer be linked to your identity. The deletion process is carried out securely using methods that ensure data cannot be recovered.

09Links to Third-Party Websites

The toyal188 platform may from time to time contain links to third-party websites or services, such as payment providers or support services. Please note that this Privacy Policy applies solely to the toyal188 platform.

When you leave our platform and visit third-party websites, your privacy will be governed by the privacy policy of those websites. toyal188 is not responsible for the privacy practices or content of third-party websites and has no control over how they collect or use your data.

We encourage you to read the privacy policy of any third-party website you visit, particularly before submitting any personal information to them.

10Changes to the Privacy Policy

Toyal188 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements to how we protect user data.

Any material changes will be communicated to users via in-platform notifications or registered email at least 7 days before the changes take effect. Minor changes may be updated directly without specific notification.

We encourage you to revisit this page periodically to ensure you are always aware of how we protect your privacy. The "Updated" date at the top of this page indicates when the latest version of this policy was published.

Continued use of the toyal188 platform after any Privacy Policy changes take effect constitutes your acceptance of the updated terms. If you do not agree with the changes, please stop using the platform and contact us to close your account.

11Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact our privacy team:

  • In-platform Live Chat — response within 5 minutes, available 24/7
  • Email: [email protected] — response within 3 business days
  • For formal requests relating to PDPA rights, please include "PDPA Privacy Request" in the subject line of your communication

For more information about your rights under Malaysia's Personal Data Protection Act 2010, you may also refer to the FAQ page us or Terms and Conditions platform.

Documents Related

Your Data Welcome Aboard

Register your toyal188 account with confidence — your privacy and data security are protected at every step with bank-grade encryption.

256-bit SSL PDPA Compliance No data sales
Bahasa Melayu