Privacy Policy

Toyal188 Privacy Policy – How We Protect Your Personal Data

At toyal188, we take our responsibility to protect every member's personal data seriously. This document clearly explains what we collect, why we need it, and how we keep your information safe at all times, in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026 · PDPA 2010 Compliant

Toyal188's Six Data Protection Principles

We do not simply comply with the law — we go further to ensure your data is handled with full respect and transparency.

Military-Grade Encryption

All personal data and financial transactions are protected with 256-bit SSL encryption — the same standard used by leading banking institutions worldwide. Your data is never transmitted unencrypted.

No Sale of Data to Third Parties

Toyal188 never sells, rents, or commercially exploits your personal data to any third party for marketing or any other purpose unrelated to our services.

Full Control in Your Hands

As a toyal188 member, you have the full right to access, correct, or request deletion of your personal data at any time — through your account or by contacting our support team.

Full PDPA 2010 Compliance

All data handling practices at toyal188 are in full compliance with Malaysia's Personal Data Protection Act 2010. We conduct regular internal audits to ensure ongoing adherence.

Secure & Protected Servers

Your data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and strict access protocols. Only authorised staff with a legitimate business need may access members' personal data.

Timely Notifications

In the event of any security incident affecting your data, toyal188 is committed to notifying affected members within the timeframe required by law and taking immediate remedial action.

✓ Note: This Privacy Policy applies to all information collected by toyal188 through our website at toyal188.pro, our mobile app, and all related services. By using our Platform, you agree to the terms of this Privacy Policy.

1

Introduction and Scope of This Policy

Toyal188 ("we", "Platform" or "toyal188") respects the privacy of every individual who uses our services. This Privacy Policy transparently explains how we collect, use, disclose, and protect your personal data when you interact with the toyal188 Platform.

We believe privacy is not merely a legal requirement — it is a fundamental right of every user. That is why we design our systems and procedures with data protection built in from the start, not added as an afterthought.

This policy is drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and explains your rights as a data subject and how to exercise those rights.

2

Types of Personal Data We Collect

Toyal188 collects your personal data through several means — directly when you register or use the Platform, automatically via tracking technologies, and in certain cases from legitimate third-party sources. Below are the details of the data we collect:

Data Category Example Information Collection Method
Identity Data Full name, date of birth, identity card number Registration & KYC
Contact Data Phone number, email address, postal address Account registration
Financial Data Bank account number, deposit and withdrawal transaction records Payment transactions
Technical Data IP address, device type, browser version, operating system Automatically during use
Usage Data Gaming activity records, session duration, games played Automatically during gameplay
Communication Data Support chat logs, emails, complaint records During interactions with support

Toyal188 does not collect sensitive data such as health information, political views, or religious beliefs, unless directly relevant to our service requirements such as responsible gaming programmes.

3

How We Use Your Personal Data

Every piece of data we collect is used for a specific and legitimate purpose. toyal188 uses your personal data for the following:

  • Account management: Create, verify and manage your member account, including the KYC process and identity verification;
  • Transaction processing: Process deposits, withdrawals and all financial transactions securely and accurately;
  • Service Provision: Enable you to access and use all games and features on the toyal188 Platform;
  • Security and fraud prevention: Identify, investigate and prevent fraudulent activity, money laundering or misuse of the Platform;
  • Legal compliance: Meet applicable legal and regulatory requirements, including AML (Anti-Money Laundering) obligations;
  • Service communications: Send important notices related to your account, transactions and policy changes;
  • Product improvement: Analyze aggregated (not individual) usage patterns to improve the user experience;
  • Customer support: Help you resolve issues, answer inquiries and provide technical assistance;
  • Responsible gaming: Monitoring play patterns to identify and assist players who may need support.
4

Legal Basis for Data Processing

Toyal188 only processes your personal data where a valid legal basis exists. The bases we rely on are:

  • Your consent: You have provided explicit consent for specific processing at the time of registration or through the privacy settings in your account;
  • Contractual necessity: Processing is necessary to fulfill the agreement between you and toyal188, including the provision of services you have subscribed to;
  • Legitimate interests: Processing is necessary for the legitimate interests of toyal188 or a third party, such as fraud prevention and network security, provided it does not override your rights and freedoms;
  • Legal obligations: Processing is necessary to comply with applicable Malaysian law.
5

Data Sharing with Third Parties

Toyal188 does not sell your personal data. However, in certain limited and lawful circumstances, we may share your data with the following parties:

  • Payment service providers: Payment gateways such as DuitNow, FPX, and approved e-wallets receive transaction data necessary to process your payments. They are bound by strict data protection agreements with toyal188.
  • KYC service providers: Third-party identity verification providers who assist us with the KYC verification process. Data sharing is limited strictly to the information required for verification purposes only.
  • Competent authority: Law enforcement agencies, regulatory bodies, or courts where required by Malaysian law or a valid court order.
  • Technology providers: Cloud service providers and technical infrastructure vendors involved in operating the Platform, subject to strict confidentiality agreements.

⚠️ Important: toyal188 does not share your personal data with advertisers, marketing companies, or any third party for marketing purposes without your explicit consent.

6

Data Security – How We Protect Your Information

Toyal188 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

  • End-to-end encryption: All communications between your device and toyal188 servers are secured with TLS 1.3 encryption and 256-bit SSL certificates;
  • Database encryption: Personal data is stored in encrypted form at the database level using AES-256 encryption;
  • Strict access controls: Access to members' personal data is restricted to staff with a legitimate business need only, with full audit logs maintained for every access;
  • Two-factor authentication: toyal188's internal systems require multi-factor authentication for all access to sensitive data;
  • Continuous monitoring: Intrusion detection systems and 24/7 security monitoring to identify suspicious activity;
  • Regular penetration testing: Security audits and penetration testing are conducted by independent parties on a regular basis to identify and address system vulnerabilities.

✓ Our commitment: While no system can guarantee 100% security, toyal188 is committed to continuously updating and strengthening our security measures in line with the latest cybersecurity threats.

7

Data Retention Period

Toyal188 retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law:

  • Active account data: Retained for the duration your account is active and for a reasonable period following account closure;
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legislation;
  • KYC records: Retained for a minimum of 5 years after termination of the business relationship in accordance with AML requirements;
  • Technical logs: Typically retained for 90 days for security and technical troubleshooting purposes;
  • Support communication records: Retained for 2 years for customer service reference.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be associated with you.

8

Cookies and Tracking Technologies

Toyal188 uses cookies and similar tracking technologies to enhance your experience on our Platform. The types of cookies we use include:

  • Essential cookies: Required for core Platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting basic functionality.
  • Performance cookies: Collect anonymous information about how visitors use the Platform to help us identify technical issues and improve performance.
  • Functional cookies: Save your preferences such as language, display format and other settings to provide a more personalized experience.
  • Analytics cookies: Help us understand aggregated usage patterns for product improvement. This data is processed anonymously.

You can manage or block cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Platform.

9

Your Rights as a Data Subject

Under PDPA 2010 and toyal188 policy, you have the following rights regarding your personal data:

🔍
Right to Access

You have the right to request a copy of the personal data we hold about you. Requests can be made through your account or via customer support and will be processed within 21 working days.

✏️
Right to Rectification

If any of your personal data is inaccurate or outdated, you have the right to request a correction. Basic profile information can be updated directly in your account settings.

🗑️
Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to legal data retention requirements that may prohibit deletion within a specified period.

🚫
Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests in certain circumstances.

📦
Data Portability Right

You have the right to receive the personal data you have provided to us in a structured, machine-readable format, and to transmit that data to another party in certain circumstances.

⏸️
Right to Restrict Processing

You have the right to request that we temporarily restrict the processing of your personal data in certain circumstances, such as while you await a review of your correction request.

How to submit a request: To exercise any of the above rights, contact the toyal188 privacy team via in-app live chat or our support email. We will process your request within the timeframe required by Malaysian law.

10

Child Protection

The toyal188 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If we find that we have collected personal data from anyone under the age of 18, we will take immediate steps to delete that data and terminate the relevant account. Our KYC process is specifically designed to verify this age requirement.

If you believe we may hold data from underage individuals, please contact us immediately through the toyal188 support channels.

11

Amendments to This Privacy Policy

Toyal188 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make significant changes, we will:

  • Update the "Last Updated" date at the top of this document;
  • Post a clear notice on the toyal188 homepage;
  • Send notifications via the app or registered email for changes that materially affect your rights.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the Platform after any amendments take effect will be considered your acceptance of the updated policy.

12

How to Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact the toyal188 privacy team through the following channels:

  • Live Chat: Available on the toyal188 app and website — the fastest way to get an immediate response;
  • Support Email: [email protected] — for enquiries requiring detailed clarification;
  • Support Page: Visit the FAQ us for frequently asked questions on privacy and data security.

We are committed to responding to all privacy inquiries within 3 business days. For more complex data subject rights requests, we will notify you within 5 business days regarding the timeframe required to process your request.

Effective date of this policy: 1 January 2026. This version supersedes all previous versions of the toyal188 Privacy Policy.

Play with Confidence at toyal188 – Your Data is Safe with Us

With 256-bit SSL encryption, full PDPA 2010 compliance, and an unwavering commitment to member privacy, toyal188 is a Platform you can trust completely. Join now and enjoy the best entertainment without worry.

For adults aged 18+ only. Play responsibly.

Bahasa Melayu