Dana toto is committed to protecting your privacy and personal data. This document transparently explains how we collect, use, store, and safeguard your information when you use our platform.
Important Note: This Privacy Policy applies to all users of the dana toto platform, including our website and mobile app. By using our platform, you agree to the practices described in this document.
Dana toto cares about your privacy. As a trusted online betting platform in Malaysia, we understand that your trust is our most valuable asset. We never take lightly our responsibility to safeguard the personal information you entrust to us.
This Privacy Policy has been prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. We clearly explain what data we collect, why we need it, how it is used, and your rights as a data subject.
Every time you register an account, make a deposit, play a game, or simply browse the dana toto platform, certain information is collected as part of the platform's secure and efficient operation. We ensure that this data collection is minimal, purposeful, and always in your best interest as a user.
Our Core Principles: dana toto never sells, rents, or trades your personal data to any third party for marketing purposes. Your data belongs to you — we hold it solely for legitimate, transparent operational purposes.
We only collect data that is strictly necessary to operate the platform safely and comply with legal requirements. Below are the categories of data we collect and their respective purposes:
| Data Category | Example Information | Purpose of Collection |
|---|---|---|
| Identity Information | Full name, IC/Passport number, date of birth | Age & identity verification (KYC), PDPA compliance |
| Contact Information | Email address, phone number | Account communications, security notifications |
| Financial Information | Bank name, account number, transaction records | Deposit & withdrawal processing |
| Technical Data | IP address, device type, web browser | Account security, fraud detection |
| Usage Data | Games played, session duration, betting history | Service improvement, responsible gaming |
| Location Data | General location based on IP | Regional compliance, fraud detection |
Data is collected through three main methods: directly from you during registration and transactions, automatically through your use of the platform, and in certain cases, through trusted third parties such as payment service providers for verification purposes.
Data Minimisation Principle: We only collect data that is strictly necessary. If certain information is not required for operations or legal compliance, we will not request it from you.
The data we collect is used for specific, legitimate, and transparent purposes. We do not use your data for any purpose unrelated to the services we offer. The following are the primary purposes for which your data is used:
Marketing: We only send promotional communications if you have given explicit consent. You may withdraw this consent at any time through your account settings or by contacting our team.
Dana toto does not sell, rent, or trade your personal data to any party for marketing purposes. However, there are limited situations where we need to share certain information with specific parties to ensure the platform operates properly and remains legally compliant:
What We Do Not Do: dana toto has never sold your data to data brokers, third-party marketing companies, or any commercial entity for the purpose of profiting from your personal information.
Your data security is the absolute priority of dana toto. We continuously invest in the latest security infrastructure to ensure your data is protected against unauthorized access, modification, disclosure, or destruction.
Your data is stored in secure data centres with strict physical and digital access controls. All sensitive data, including financial information and identity documents, is stored in encrypted format using AES-256 encryption.
Data Retention Period: We retain your personal data for as long as your account is active or as needed to provide services to you. Following account closure, we retain data for a minimum of 7 years to comply with Malaysian legal requirements relating to financial records and anti-money laundering.
Data Breach Notice: In the event of a security breach affecting your data, dana toto will notify you within 72 hours of the breach being identified, in line with data protection best practices.
Dana toto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit our site.
You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect platform functionality. Your first visit to our platform will display a cookie notice requiring your consent.
As a dana toto user and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data. We respect and facilitate the exercise of these rights:
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.
You may request correction of inaccurate or incomplete data via your account settings or by contacting our support team.
You may request deletion of your data in certain circumstances, subject to applicable legal retention obligations.
You may object to the processing of your data for specific purposes, including marketing communications, at any time.
You may request your data in a structured, machine-readable format for transfer to another service provider.
In certain circumstances, you may ask us to restrict how we process your data while a dispute is being resolved.
To exercise any of the above rights, contact our data protection team at [email protected]. We will process your request promptly and within the timeframe required by law.
The dana toto platform is strictly for users aged 18 and above. We do not intentionally collect, store, or process personal data from individuals under the age of 18.
All registering users are required to confirm they are at least 18 years of age. Our age verification (KYC) process is designed to identify and reject registrations from underage individuals.
Immediate Action: If we find that personal data of underage individuals has been collected inadvertently, we will promptly delete that data and close the associated account. Parents or guardians who suspect misuse may contact us directly for immediate action.
Dana toto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or relevant technological developments.
When we make significant changes, we will notify you via in-platform notification or email to the address registered on your account, at least 14 days before the changes take effect. The "Updated" date at the top of this page indicates when the latest revision was made.
Your continued use of the dana toto platform following notice of any changes constitutes your acceptance of the amended Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:
Reach our data protection team directly via in-platform live chat. Average response time is under 5 minutes.
Send written enquiries to [email protected] — we will respond within 3 business days.
If you believe we have failed to address your privacy complaint satisfactorily, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for PDPA compliance in Malaysia.
Six key pillars that ensure your data is protected at all times
Every piece of data transmitted between your device and our servers is secured with military-grade 256-bit SSL encryption — no one can read your data in transit.
Dana toto fully complies with Malaysia's Personal Data Protection Act 2010. All data collection, storage, and usage processes are conducted in accordance with strict legal guidelines.
Your personal data has never been and will never be sold, rented, or shared with any advertising company or data broker. Your information stays exclusively within the dana toto ecosystem.
Our KYC process uses a fully encrypted identity verification system. Documents you upload are stored in an isolated environment protected by strict access controls.
Through your account settings, you can update your personal information, manage cookies, withdraw marketing consent, and request a copy of your data at any time.
Our security team monitors the infrastructure around the clock. Any suspicious activity is detected and addressed immediately before it can impact your account.
Register today and enjoy a safe, transparent, and legally compliant online wagering experience. Your data is protected, your transactions are secure, and your privacy is respected at all times.