totoxl Privacy Policy
At totoxl, we take our responsibility to protect every user's personal information seriously. This policy clearly explains how we collect, store, use and disclose your data when you use our online casino and sports betting platform.
totoxl Data Protection Principles
Six core pillars that shape how totoxl manages your personal information with full trust and transparency.
Limited Collection
We only collect information that is genuinely necessary for account operation, payment processing and regulatory compliance. No excess data is collected without a clear and legitimate reason.
Full Confidentiality
Your personal information will not be sold, rented or shared with third parties for marketing purposes without your explicit consent. Your data remains yours.
Data Security
We use industry-grade SSL encryption and strict technical security measures to protect your data from unauthorised access, leaks or misuse.
User Rights Respected
You have the right to access, correct or request deletion of your personal data at any time. totoxl provides support channels to process every data-related request.
Appropriate Retention Period
Personal data is stored only for as long as necessary for the stated purposes or as required by applicable legal and licensing requirements, after which it is securely disposed of.
Full Transparency
This policy is written in plain, easy-to-understand language. We are committed to informing users of any changes to this privacy policy with sufficient notice before they take effect.
1. Information We Collect
When you register an account or interact with the totoxl platform, we may collect the following categories of information:
Personal Identification Information
- Full name as stated on your identity card (MyKad) or passport.
- Date of birth — to verify that the user is 21 years of age or older, in line with responsible gambling requirements.
- Active mobile phone number and email address.
- Identity card number or passport number for identity verification (KYC) purposes.
Financial Information
- E-wallet details (Touch 'n Go eWallet, Boost) or bank account number for processing deposits and withdrawals.
- Crypto wallet address (USDT, BTC, ETH) when you choose a crypto payment method.
- Deposit and withdrawal transaction records — retained for internal audit and regulatory compliance.
Technical and Usage Data
- IP address, web browser type, operating system and device information.
- Login records, session times and gameplay activity patterns.
- Cookies and similar tracking technologies to improve the user experience on the totoxl website.
2. Purposes of Using Information
totoxl uses the personal information collected solely for legitimate purposes related to the services we offer. The main purposes for which data is used are as follows:
- Verifying user identity during account registration and the KYC verification process required by our international licensing.
- Processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX Online Banking, Boost and crypto accurately and securely.
- Providing 24/7 customer support via live chat and email in Malay and English.
- Sending important account-related notifications, including transaction confirmations, security updates and changes to terms of service.
- Preventing fraud, money laundering and unlawful activities that could compromise the integrity of the platform.
- Complying with legal requirements and regulations under the international licensing framework governing totoxl's operations.
- Analysing usage patterns in aggregate (without identifying individuals) to improve platform quality and user experience.
- Sending promotional information and bonus offers — only to users who have given consent to receive such communications.
3. Disclosure to Third Parties
totoxl takes a careful approach to sharing user data. Personal information is disclosed to third parties only in the following situations:
Payment Service Providers
To process financial transactions, relevant information is shared with approved payment service providers such as DuitNow, FPX, Touch 'n Go eWallet and Boost operators. These providers are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.
Legal Requirements and Authorities
We may be required to disclose user information to relevant authorities where there is a valid court order, a request from a law enforcement agency, or compliance obligations under the international licensing framework governing our operations.
Third-Party Technology Providers
Certain software and technical infrastructure providers may process data on our behalf. All such parties are bound by data protection agreements and may only access the information required to carry out their specific tasks.
4. Cookies and Tracking Technologies
The totoxl website uses cookies and similar tracking technologies to keep the website functioning smoothly and to provide a better experience for users.
Types of Cookies Used
- Essential Cookies: Required for basic website operations such as login sessions and security. Cannot be disabled without affecting core functionality.
- Performance Cookies: Collect anonymous information about how users interact with the website to help us improve platform performance.
- Functional Cookies: Store user preferences such as language settings and display themes to make future visits easier.
You can manage cookie settings through your web browser options. However, disabling certain cookies may limit access to some features of the totoxl website.
5. Data Security Measures
totoxl invests in robust security infrastructure to protect user personal information from external and internal threats. The protective measures we employ include:
- Data encryption during transmission using the latest TLS protocols for all communication between your device and our servers.
- Strict role-based access controls — only authorised staff may access user data, and only for permitted purposes.
- Regular security audits and penetration testing by independent experts to identify and address system vulnerabilities.
- Encryption of sensitive data in the database using industry-recognised encryption algorithms.
- Intrusion detection systems and real-time monitoring of unusual activity.
While we take all reasonable steps, no digital security system is completely foolproof. You are encouraged to use a strong password, not share your login credentials, and contact us immediately if you suspect any suspicious activity on your account.
6. Data Retention Period
totoxl retains user personal information in accordance with the data minimisation principle — only for as long as necessary for the stated purposes, or as required by applicable laws and regulations.
- Active account data is retained for as long as your account remains active and our services are in use.
- Financial transaction records are kept for the period required by licensing compliance obligations and laws related to anti-money laundering.
- When an account is closed or a user requests data deletion, personal information that is no longer needed will be securely disposed of using appropriate methods.
- Some data may need to be retained longer for legal requirements or disputes that are currently under investigation.
User Rights under the totoxl Privacy Policy
As a totoxl user, you have several rights regarding your personal data that we are committed to fulfilling.
Right of Access
You may request a copy of the personal information we hold about you at any time.
Right of Rectification
If your information is inaccurate or outdated, you have the right to request an immediate correction or update.
Right of Erasure
In certain situations, you may request the deletion of your personal data from our systems.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time.
7. Changes to This Privacy Policy
totoxl reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technology we use. Whenever this policy is updated, we will:
- Update the "Last Updated" date shown at the top of this page.
- Notify registered users via email or in-account notifications of significant changes.
- Publish the latest version of this Privacy Policy on the totoxl website for all users' reference.
By continuing to use the totoxl platform after any changes take effect, you are considered to have accepted and agreed to the terms of the updated Privacy Policy. We encourage you to review this page periodically.
8. Contact Us About Privacy
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact the totoxl support team through the following channels:
- Live Chat: Available 24/7 in Malay and English — the fastest way to get an immediate response.
- Support Email: [email protected] — for detailed enquiries or formal requests relating to personal data.
Our dedicated customer support team is ready to assist you with any questions about the privacy and protection of your personal data on the totoxl platform.
Questions About Data Privacy
Answers to questions frequently asked by totoxl users about our privacy policy and practices.
Your Data is Safe. Your Game is Fair.
You now know totoxl's commitment to protecting your privacy. Register an account today and enjoy a safe, fair, and responsible online casino and sports betting experience — with full payment support via Touch 'n Go eWallet, DuitNow, FPX, and crypto.