Introduction and Scope of This Policy
GBLToto ("we", "Platform" or "company") values the privacy of every individual who uses our platform. This Privacy Policy explains in detail how we manage the information you provide to us and information collected automatically when you use GBLToto's services.
This policy applies to all users of the GBLToto platform, including website visitors, registered members, mobile app users and anyone who interacts with our services through any channel. It covers all products and services offered by GBLToto, including Live Casino, Slots, Sports Betting, Fish Shooting Games and the VIP programme.
GBLToto operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best standards in personal data management. We are committed to ensuring your data is handled in a transparent, secure and responsible manner at all times.
Types of Personal Data We Collect
GBLToto collects various types of personal data depending on how you interact with our platform. Below is a detailed explanation of the data categories collected:
| Data Category | Type of Information | Collection Method |
|---|---|---|
| Identity Data | Full name, identity card / passport number, date of birth, gender | Account registration & KYC |
| Contact Data | Email address, phone number, residential address | Registration & profile updates |
| Financial Data | Preferred payment methods, transaction records, deposit & withdrawal history | Financial activity on the platform |
| Game Data | Game history, betting records, bonus activity, game statistics | Platform usage |
| Technical Data | IP address, device type, web browser, operating system, access logs | Automatically during use |
| Cookie Data | Language preferences, account settings, login sessions, analytics data | Cookies & Tracking Technologies |
GBLToto does not unnecessarily collect sensitive data such as religious information, political views, medical records or biometric data unless specifically required for identity verification and legal compliance purposes.
How GBLToto Uses Your Data
The personal data we collect is used for specific, lawful and transparent purposes. GBLToto will not use your data for purposes unrelated to platform operations without your prior consent.
- Account Management: Creating, verifying and managing your member account, including the KYC processes required for legal compliance.
- Transaction Processing: Processing deposits, withdrawals and all financial transactions safely and efficiently.
- Service Provision: Providing access to all games, promotions and services available on the gbltoto platform.
- Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering and platform abuse.
- Platform Communications: Sending account-related notifications, transaction updates, promotions you have opted into and important service updates.
- Service Improvement: Analysing usage patterns to improve user experience, platform performance and content relevance.
- Legal Compliance: Fulfilling the legal, regulatory and reporting obligations applicable to platform operations.
Data Sharing and Disclosure to Third Parties
GBLToto does not sell, rent or disclose your personal data to third parties for their own marketing purposes. Your data is only shared in limited and lawful circumstances as follows:
- Payment Service Providers: Required transaction information is shared with payment providers such as banks and e-wallet operators to securely process your deposits and withdrawals.
- Game Providers: Required game session data is shared with third-party game providers (such as Evolution Gaming, Pragmatic Play) to enable you to play on their platforms through GBLToto.
- IT Service Providers: Technology companies that assist us in managing platform infrastructure, cybersecurity, and data analytics may have limited access to certain data in a data processor capacity only.
- Legal Authorities: GBLToto will disclose data when required by court order, law enforcement requests or valid regulatory requirements.
- Business Transfers: In the event of a merger, acquisition, or sale of company assets, your data may be transferred as part of that transaction, with equivalent privacy protections maintained.
All third parties that receive your data from gbltoto are bound by strict confidentiality agreements and must comply with data protection standards equal to or higher than those set out in this policy.
Data Storage and Security Measures
GBLToto stores your personal data on secure servers protected with the latest security technology. All data is encrypted using 256-bit SSL/TLS protocols during transmission and stored in encrypted format in our databases.
Data retention periods depend on operational and legal requirements:
- Active Account Data: Retained for the duration your account is active on GBLToto and for the required period following account closure in accordance with legal requirements.
- Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial and anti-money laundering (AML) legal requirements applicable in Malaysia.
- Security Logs: Retained for a period of 90 days to 2 years depending on the log type and investigation requirements.
- Marketing Data: Retained until you withdraw consent or request deletion.
The technical and organisational security measures we implement include role-based access controls, regular security audits, penetration testing, 24/7 threat monitoring and security training programmes for all staff handling personal data.
Cookies and Tracking Technologies
GBLToto uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your web browser that help us recognise you and remember your preferences.
Types of cookies we use:
- Essential Cookies: Required for core platform functions such as login session verification, language settings and security. These cookies cannot be disabled without affecting platform functionality.
- Performance Cookies: Collecting information about how you use the platform to help us identify issues and improve performance. All data is collected anonymously.
- Functional Cookies: Remembering your preferences such as language, preferred wagering limits and display settings to deliver a more personalised experience.
- Analytics Cookies: Used to understand overall platform usage patterns for product improvement purposes. Analytics data is not linked to individual identities.
You can manage your cookie preferences through your web browser settings. Disabling certain cookies may affect the functionality and your experience on the GBLToto platform. For more information on managing cookies, please refer to your web browser's help documentation.
Your Rights as a Data Subject
As a gbltoto member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010. gbltoto respects and facilitates the exercise of these rights:
Right to Access
You have the right to request a copy of the personal data we hold about you. Data access requests will be processed within 14 business days.
Right to Rectification
You may request corrections to inaccurate or incomplete personal data through your account profile settings or by contacting our team.
Right to Erasure
You may request deletion of your personal data under certain circumstances. However, we may need to retain certain data to fulfil our legal obligations.
Right to Data Portability
You have the right to receive a copy of your personal data in a machine-readable format for transfer to another service provider where applicable.
Right to Object
You may object to the processing of your data for direct marketing purposes or in other circumstances where we rely on legitimate interest as the legal basis.
Right to Restriction of Processing
Under certain circumstances, you may request that we restrict the processing of your personal data while your request or complaint is being resolved.
To exercise any of the above rights, please contact our data protection team at [email protected]. We will respond to your request within 14 business days.
Children's Data Protection
The gbltoto platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.
If we discover that a minor's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. gbltoto employs a strict identity verification process during registration to ensure only eligible adults can access our platform.
If you believe a minor has accessed the gbltoto platform or that a child's data has been collected, please contact our team immediately so that appropriate action can be taken.
Amendments to This Privacy Policy
GBLToto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments.
When we make material changes to this policy, we will:
- Updating the "Last Updated" date displayed at the top of this page
- Displaying clear notifications on the platform to inform members of such changes
- Sending emails to registered members for highly material changes that affect your rights or responsibilities
We encourage you to review this Privacy Policy periodically. Continued use of the gbltoto platform after any policy amendments take effect will be considered your acceptance of the updated policy.
Contact Us for Privacy Inquiries
If you have any questions, concerns or complaints regarding this Privacy Policy or how gbltoto handles your personal data, please do not hesitate to contact us:
- Data Protection Email: [email protected]
- General Support Email: [email protected]
- Live Chat: Available 24/7 via the chat icon on the gbltoto platform
Our data protection team is dedicated to ensuring your privacy is protected and all inquiries are handled promptly and professionally. We are committed to responding to privacy inquiries within 5 business days.
Thank you for trusting gbltoto with your personal data. We take that trust seriously and will continue working hard to keep your information safe and protected at all times.