Toke66 is fully committed to protecting the privacy and personal data of every member. This document transparently explains how we collect, use, store, and safeguard your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
All your personal data is stored with AES-256 encryption, and every data transmission is secured via HTTPS with a 256-bit SSL certificate — the same security technology used by Malaysia's leading financial institutions.
Toke66's Privacy Policy is fully designed and implemented in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have full rights over your data under this act.
Toke66 does not sell, rent, or trade members' personal data to any third party for marketing purposes without the explicit consent of the member concerned.
We have nothing to hide about how your data is used. This toke66 Privacy Policy is a complete and honest guide covering every aspect of how your data is handled.
You may request access to, correction of, or deletion of your personal data at toke66 at any time. The process is straightforward, free of charge, and handled within 14 business days.
Your data is not stored indefinitely. toke66 maintains a clear data retention policy — data that is no longer required is securely deleted in accordance with established procedures.
toke66's Commitment: By using the toke66 platform, you agree to this Privacy Policy. toke66 regards the protection of members' personal data as our foremost responsibility — not merely a legal obligation, but the foundation of trust that sustains our long-term relationship with every member.
This Privacy Policy is issued by toke66, operator of the online sports betting and casino platform accessible at toke66.app. This document outlines our privacy practices covering all your interactions with toke66 — from the moment you first visit our website through every transaction, bet, and communication you make as a member.
This Privacy Policy applies to all registered toke66 members, unregistered visitors to the toke66 website, and anyone who interacts with toke66 through any channel, including email, live chat, WhatsApp, or toke66's official social media.
Toke66 is the "data controller" as defined under Malaysia's Personal Data Protection Act 2010 (PDPA). This means toke66 is fully responsible for determining the purpose and manner in which your personal data is processed and protected.
This Privacy Policy should be read together with Terms & Conditions toke66 which together form the complete agreement between you and toke66 regarding your use of the platform and the handling of your data.
Toke66 only collects data that is genuinely necessary to provide you with a secure, lawful, and quality service. Below are the categories of data we collect, along with specific examples and how they are collected:
| Data Category | Data Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, gender, MyKad number | Registration form, KYC verification |
| Contact Data | Malaysian phone number, email address | Registration, support communications |
| Financial Data | EWallet details (TNG, GrabPay, Boost, ShopeePay), FPX account numbers, transaction history in RM | Deposit / withdrawal process |
| Technical Data | IP address, browser type, device, operating system | Automatically collected during platform use |
| Usage Data | Betting history, games played, session duration | Automated via the toke66 system |
| Communication Data | Live chat conversation records, emails, complaints | Customer support interactions |
Toke66 does not collect sensitive data categories such as health information, religious beliefs, political views, or criminal records, unless required by applicable law in specific compliance contexts.
If you provide information about another person (for example, when contacting support on behalf of a family member), you are responsible for ensuring you have that individual's consent before sharing their information with toke66.
Toke66 uses collected personal data solely for the following purposes. We will not use your data for any purpose outside this list without first obtaining your consent:
Under Malaysia's PDPA 2010, toke66 only processes your personal data where a valid legal basis exists. There are three primary bases on which toke66 relies:
For marketing communications and preference-based purposes, toke66 obtains your explicit consent. This consent may be withdrawn at any time via your toke66 account settings.
For security, fraud prevention, and service improvement purposes at toke66 — where our legitimate interests do not override your privacy rights.
For compliance with PDPA, AMLATFPUAA, and lawful directives from Malaysian authorities — where toke66 is legally obligated to process certain data.
Toke66 does not sell or trade members' personal data to any third party for their own marketing or commercial purposes. However, in the context of legitimate service operations, toke66 may share certain personal data with the following categories of parties:
Important Note: All third parties that receive personal data of toke66 members are contractually required to use such data solely for the stated purpose, implement adequate security measures, and comply with the requirements of Malaysia's PDPA 2010.
Toke66 continually invests in a comprehensive data security infrastructure. We understand that your trust in toke66 depends greatly on the confidence that your data is in safe hands.
Multiple layers of security protecting your data 24×7
At toke66, the principle of least privilege is strictly enforced. Staff may only access member data that is directly relevant to their specific duties. All access to member data is logged in audit trails retained for a minimum of 12 months.
No toke66 staff will ever contact you to request your password or full payment card details through any channel. If you receive such a request, please report it to toke66 support immediately as it may be a phishing attempt.
Toke66 recommends enabling two-factor authentication (2FA) in your account settings for an added layer of security to protect access to your toke66 account.
Toke66 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with Malaysian legal requirements. Once the retention period expires, data is securely deleted or anonymised.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | For the duration of active account | Ongoing service provision |
| Closed account data | 7 years after account closure | Malaysia AML/CTF legal obligations |
| Financial transaction records (RM) | 7 years | AMLATFPUAA & audit requirements |
| Support communication logs | 3 years | Dispute resolution & quality improvement |
| Technical & security logs | 12 months | Security incident investigation |
| Marketing data (with consent) | Until consent is withdrawn | Toke66 promotional communications |
| KYC Records | 5 years after the relationship ends | PDPA compliance & gambling regulations |
Under Malaysia's PDPA 2010 and toke66's commitment to privacy, you have the following rights in relation to your personal data. All requests are processed within 14 working days from the date of receipt and is free of charge, except for repeated or unreasonable requests:
Request a copy of all personal data toke66 holds about you. You have the right to know what we know about you.
Request correction of any personal data that is inaccurate, outdated, or incomplete in your toke66 records.
Request the deletion of your personal data when it is no longer needed — subject to applicable legal retention obligations.
Request that toke66 restrict the processing of your data in certain circumstances, such as when there is a dispute regarding the accuracy of your data.
Object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.
Request a copy of your data in a machine-readable format (JSON/CSV) for portability to another platform should you choose to do so.
To exercise any of the above rights, submit your request by email to privacy@toke66.app with the subject line "PDPA Data Rights Request" along with your full name and toke66 account number for identity verification.
Toke66 uses cookies and similar tracking technologies to enhance your experience, maintain login session security, and understand how the platform is used. The following are the types of cookies we use:
You can manage or delete cookies through your browser settings. Please note that disabling essential cookies may affect certain features of the toke66 platform. For more details on the cookies used, contact the toke66 privacy team.
Toke66 reserves the right to update or amend this Privacy Policy from time to time in line with changes in Malaysian law, technological developments, or updates to toke66's business practices. Any amendments take effect as soon as the latest version is published on toke66.app.
For material changes — those that significantly affect your privacy rights or how toke66 uses your data — we will provide advance notice of at least 14 days before changes take effect via your registered email and/or in-account notification on toke66.
We encourage you to review this Privacy Policy page periodically. The "Updated" date at the top of this document reflects the date of the most recent changes made by toke66. Your continued use of the platform after any changes take effect will be considered acceptance of the updated policy.
Toke66 commits to not making changes that reduce your existing privacy rights without first obtaining your explicit consent. Your rights remain the priority in any amendments to the toke66 Privacy Policy.
Toke66 has appointed a Data Protection Officer (DPO) responsible for ensuring toke66 meets all Malaysia PDPA requirements and handling all privacy-related enquiries from members.
If you are dissatisfied with toke66's response to your privacy enquiry, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory body overseeing PDPA compliance.
Toke66 takes the protection of your personal information seriously. Join over 2 million Malaysian members who have trusted their entertainment experience to a platform that puts your privacy and security first.
Age restriction: 18 and above. Play responsibly. Terms & Conditions applies.