1
Information We Collect
Tebingtoto may collect information that you provide directly, information generated through use of the platform, and information supplied by payment, identity verification, fraud prevention, or technical service providers. The exact information depends on the services you use.
Identity information
Name, date of birth, nationality, MyKad or other identification details, photographs, and verification results.
Contact information
Email address, mobile number, residential address, communication preferences, and support correspondence.
Account information
Username, encrypted credentials, login history, account settings, limits, status, and security events.
Financial information
MYR transaction values, payment references, masked account details, withdrawal records, and ownership evidence.
Gaming information
Casino activity, sports wagers, EPL or Liga Super Malaysia market selections, bonuses, wins, losses, and session history.
Technical information
IP address, browser, device type, operating system, language, approximate location, and diagnostic records.
2
How Information Is Collected
Tebingtoto collects information when you create or update an account, verify your identity, make a deposit or withdrawal, claim a promotion, place a wager, adjust an account limit, request self-exclusion, or communicate with customer support. Information may also be collected automatically when a tebingtoto page or feature is used.
Payment information may be received from services such as Maybank2u, CIMB Clicks, Public Bank online banking, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. Tebingtoto does not necessarily receive complete bank or e-wallet credentials. Payment providers generally return references, status information, account ownership indicators, and transaction values required to complete or review a payment.
Tebingtoto may also receive information from identity verification and fraud prevention providers where necessary to confirm age, detect duplicate accounts, protect payment activity, or investigate suspected misuse.
3
Purposes of Data Processing
Tebingtoto processes personal information only where there is a defined operational, security, responsible gambling, or legal purpose. Information may be used to:
- Create, administer, secure, and close a tebingtoto account.
- Confirm that a player is aged 21 or above and meets account eligibility rules.
- Process RM deposits, withdrawals, refunds, adjustments, and payment enquiries.
- Provide casino games, live dealer content, sports markets, and account histories.
- Detect fraud, collusion, bonus abuse, account takeover, and suspicious transactions.
- Apply deposit limits, cooling-off periods, self-exclusion, and responsible gambling controls.
- Answer support requests and investigate complaints or disputed transactions.
- Maintain website performance, diagnose errors, and improve tebingtoto usability.
- Send essential notices about security, payments, policy updates, or account status.
4
Legal Grounds for Processing
Depending on the context, tebingtoto may process information because it is necessary to provide requested services, comply with applicable obligations, protect legitimate business and security interests, establish or defend legal claims, or act with your consent.
Contract-related processing includes account administration, wager settlement, payment handling, and customer support. Legitimate interests may include platform security, fraud prevention, service improvement, and the protection of players and tebingtoto operations. Where tebingtoto relies on consent, you may withdraw that consent for future processing, although previous lawful processing remains valid.
Some information is essential for account operation. If required identity, verification, security, or transaction information is not supplied, tebingtoto may be unable to open an account, process a withdrawal, or continue providing a particular service.
5
Payments, Identity, and Verification Records
Tebingtoto uses verification records to confirm identity, age, address, payment ownership, and account eligibility. A player may be asked to provide a MyKad or another accepted identity document, a selfie, proof of address, bank or e-wallet ownership evidence, or reasonable source-of-funds information.
Payment records may include transaction dates, MYR amounts, method types, references, status codes, and masked account identifiers. Tebingtoto uses these records to credit deposits, review withdrawals, resolve failed FPX or DuitNow transfers, investigate chargebacks, and meet security requirements.
Documents submitted to tebingtoto must be genuine and must relate to the registered account holder. Access to verification material is restricted according to operational need. Tebingtoto does not use identity documents for unrelated advertising purposes.
6
Cookies and Device Information
Tebingtoto may use cookies and comparable browser storage to keep sessions active, remember preferences, support security controls, measure performance, and understand how pages are used. Essential cookies are required for functions such as account authentication, transaction continuity, and fraud prevention.
Analytics information may show which tebingtoto pages are visited, how long a session lasts, the type of device used, and whether an error occurs. This information helps improve mobile access for players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian locations.
Browser controls may allow you to delete or block cookies. Disabling essential storage can prevent login, payment, security, or account preference features from working correctly. Tebingtoto does not use cookies to guarantee or influence the outcome of a game or sports wager.
7
Disclosure of Personal Information
Tebingtoto does not sell personal information. Information may be disclosed only where reasonably necessary to operate the platform, process transactions, protect accounts, provide content, investigate misuse, obtain professional advice, or comply with a lawful requirement.
Recipients may include payment processors, identity verification providers, hosting and security providers, customer support systems, game or sports data suppliers, auditors, professional advisers, and competent authorities. Each recipient receives only the information appropriate to its function and is expected to apply suitable confidentiality and security controls.
Tebingtoto may disclose information where required by law, a valid court direction, or an authorised regulatory request. Information may also be shared to protect the rights, safety, property, and integrity of tebingtoto, its players, or other persons.
8
International Processing
Some tebingtoto service providers may process information outside Malaysia. Data protection standards can differ between locations. Where information is transferred internationally, tebingtoto applies reasonable contractual, technical, and organisational measures appropriate to the information and processing activity.
International processing may be required for website hosting, fraud detection, identity checks, game delivery, sports data, technical support, or payment administration. Tebingtoto reviews provider responsibilities and limits access to the services required for platform operation.
9
Information Security and Retention
Tebingtoto uses layered security measures designed to reduce the risk of unauthorised access, loss, misuse, alteration, or disclosure. These measures may include encryption in transit, access controls, monitoring, account authentication, system logging, network protection, staff procedures, and incident response processes.
No internet service can guarantee absolute security. Players should use a unique password, protect authentication details, sign out from shared devices, and notify tebingtoto promptly if suspicious activity is detected. Tebingtoto will assess credible security incidents and take appropriate containment and notification steps.
Information is retained for as long as necessary to operate an account, settle transactions, resolve disputes, enforce terms, support self-exclusion, prevent fraud, and satisfy applicable record-keeping duties. Retention periods vary by information type. When information is no longer required, tebingtoto will delete, anonymise, or securely isolate it as appropriate.
10
Your Privacy Rights
Subject to applicable law and verification of identity, you may ask tebingtoto to provide access to personal information, correct inaccurate details, explain particular processing, restrict certain uses, or delete information that is no longer required.
Some requests may be limited where tebingtoto must retain records for transaction review, fraud prevention, self-exclusion enforcement, legal compliance, dispute handling, or the rights of another person. Closing an account does not require immediate deletion of every record.
To make a request, contact tebingtoto Customer Support at [email protected]. The address is displayed as plain text and is not clickable. Include your account identifier and a clear description of the request, but do not send passwords or unnecessary financial credentials. Tebingtoto may request additional information to confirm identity before releasing or changing personal data.
11
Responsible Gambling and Age Protection
Tebingtoto is intended only for players aged 21 and above. Identity and account activity may be reviewed to enforce age restrictions, deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls.
Responsible gambling information can be sensitive because it may reflect spending patterns, time spent playing, requests for support, or a decision to self-exclude. Tebingtoto limits access to this information and uses it to apply requested protections, identify concerning activity, meet player safety obligations, and prevent a self-excluded person from opening another account.
A self-exclusion record may be retained after account closure where necessary to prevent re-registration. Players should not attempt to bypass a restriction by changing contact details, using another payment method, or creating a new tebingtoto account.
12
Contact Us and Policy Updates
Questions, concerns, or privacy requests may be directed to tebingtoto Customer Support at [email protected]. Please provide enough information for the request to be assessed, but never include your account password, full payment credentials, or unrelated identity documents.
Tebingtoto may revise this Privacy Policy when services, technology, payment options, security practices, or legal requirements change. Material revisions will be identified through an updated effective date and, where appropriate, an account or website notice.
Continued use of tebingtoto after an updated policy takes effect means that you acknowledge the revised information. Where a new processing activity requires consent, tebingtoto will seek that consent rather than relying solely on continued use.
Protect your account information.
Tebingtoto support will never ask you to disclose your complete password. Do not share login credentials, authentication codes, or full banking details with another person. Report suspicious account activity to support as soon as possible.