🔒 pgtoto Official Data Protection

Pgtoto Privacy Policy – Our Commitment to Protecting the Personal Data of Every Malaysian Player

Your privacy is our priority. This document transparently explains how pgtoto collects, uses, stores, and protects your personal data as a member of our platform in Malaysia. We operate in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Last Updated: 1 January 2026 Malaysia PDPA 2010 256-bit SSL Protected
🛡️
Your Data, Your Rights
pgtoto does not sell, rent, or misuse your personal data to any third party without your consent.
256-bit SSL Encryption
PDPA 2010 Compliance
No Data Sharing Without Consent

Pgtoto's Six Data Protection Principles

Limited Data Collection

Pgtoto only collects personal data that is strictly necessary for platform operations – there is no excessive collection. Every piece of data gathered has a clear purpose, as stated in this policy.

Data Storage Security

All pgtoto member data is stored on servers protected with AES-256 encryption and subject to strict access controls. Continuous 24/7 security monitoring is in place to detect any threats.

Explicit Consent Required

Pgtoto will not use your data for any new purpose without first obtaining your explicit consent. You retain full control over how your data is used.

No Sale of Data to Third Parties

Pgtoto does not sell, rent, or lease your personal data to advertisers, data brokers, or any third party without your consent. Your data is not a commodity we trade in.

Right to Access & Correction

As a pgtoto member, you have the right to access, review, correct, and request deletion of your personal data at any time through our easily accessible support channels.

Malaysia PDPA Compliance

All of pgtoto's data handling practices fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance audits and continuously update our procedures in line with the latest regulations.

Welcome to pgtoto's Privacy Policy page. At pgtoto, we believe your trust is our most valuable asset. One of the ways we honour that trust is by handling your personal data with integrity, transparency, and full accountability.

This Privacy Policy details the types of data we collect, why we need it, how it is used, who it may be shared with, and what your rights are as the owner of that data. This document is written in Malay and applies to all pgtoto members in Malaysia. Please read it carefully and contact us if any section is unclear.

📌 Legal Basis: This Privacy Policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia and internationally recognised data protection principles. By using the pgtoto platform, you acknowledge that you have read and understood this policy.

01 Introduction & Scope of This Policy

This Privacy Policy is issued by pgtoto ("we", "Company", or "platform") and applies to all individuals who:

  • Visiting the pgtoto website at pgtoto.ws even without registering an account.
  • Registering and becoming an active member of the pgtoto platform.
  • Reach pgtoto's customer support team through any available channel.
  • Participating in pgtoto promotions, contests, or rewards programmes.

This Policy does not apply to third-party websites or services that may be linked from the pgtoto platform. We encourage you to read the privacy policies of those sites separately before using them.

🔑 Core Principles: pgtoto operates on the principle that your personal data belongs to you. We act only as a custodian — using that data for the purposes you have consented to, and protecting it as though it were our most valuable asset.

02 Types of Personal Data Collected

Pgtoto collects various categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data we may collect:

Data Category Specific Examples Requirement
Identity Data Full name, MyKad/passport number, date of birth, gender Mandatory
Contact Data Email address, Malaysian mobile number, residential address Mandatory
Financial Data Bank account number, account holder name, MYR transaction records Mandatory
Technical Data IP address, device type, web browser, operating system Automatic
Usage Data Games played, session duration, betting records Automatic
Preference Data Language preference, self-set deposit limits, gaming preferences Preferences
⚠️ Sensitive Data: pgtoto does not collect sensitive personal data such as medical information, political affiliations, or religious beliefs unless required by law for specific compliance purposes. Any such data collection will be carried out with your explicit consent.

03 How pgtoto Collects Your Data

Pgtoto collects your personal data through several different methods, each occurring within the normal context of using the platform:

3.1 Directly From You
  • New account registration form at pgtoto.
  • Identity verification (KYC) process upon your first withdrawal or as required for compliance purposes.
  • Deposit or withdrawal request forms via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks).
  • Communicating with the pgtoto customer support team via Live Chat, email, or WhatsApp.
  • Participation in pgtoto contests, surveys, or promotional programmes.
  • Update your profile information within your account.
3.2 Automatically
  • Cookies and tracking technologies used to enhance the user experience on the pgtoto platform.
  • Server logs recording technical activity such as access times, IP addresses, and in-platform actions.
  • Device information automatically transmitted by your smartphone or computer when accessing pgtoto.
  • Usage analytics data collected to understand usage patterns and improve our services.
3.3 From Approved Third Parties
  • Malaysian payment service providers (to verify transaction status).
  • Identity verification agencies appointed for the KYC process.
  • Law enforcement authorities where there is a legitimate requirement under Malaysian law.

04 Purpose of Personal Data Use

Pgtoto uses the personal data we collect for the following legitimate and transparent purposes. We will not use your data for any other purpose without prior notice and your consent:

  • Account Management: Creating, verifying, and managing your pgtoto member account, including secure login and password recovery.
  • Transaction Processing: Processing MYR deposits via Touch 'n Go, GrabPay, DuitNow, FPX and other methods, as well as withdrawals to your Malaysian bank account.
  • Legal Compliance: Meeting anti-money laundering (AML) obligations, customer identification (KYC), and reporting to relevant authorities in Malaysia.
  • Platform Security: Detecting and preventing fraud, multi-account abuse, and suspicious activity that may affect other players.
  • Customer Support: Assisting in the resolution of enquiries, complaints, and technical issues you report to pgtoto.
  • Platform Improvements: Analysing usage patterns to improve the design, speed, and features of the pgtoto platform.
  • Promotional Communications: Sending information about bonuses, promotions, and platform updates – only if you have agreed to receive them, and you may unsubscribe at any time.
  • Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and offer appropriate assistance.

05 Sharing Data with Third Parties

Pgtoto upholds strict confidentiality principles. Your personal data will not be shared, sold, or disclosed to third parties except in the limited circumstances set out below:

5.1 Appointed Service Providers

Pgtoto may share necessary data with third-party service providers acting on our behalf, including:

  • Malaysian payment gateway providers (Touch 'n Go, GrabPay, Boost, DuitNow, FPX) for processing financial transactions.
  • Cloud service providers that store data on secure servers.
  • Analytics software providers that help us understand platform usage.
  • Third-party game providers that supply gaming content on pgtoto.

All third-party service providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes specified in their contracts with pgtoto.

5.2 Legal Requirements

Pgtoto may be required to disclose your personal data to the relevant authorities where mandated by Malaysian law, including:

  • Valid court orders or warrants issued by Malaysian authorities.
  • Criminal investigations by law enforcement agencies with the relevant jurisdiction.
  • Reporting obligations under the Anti-Money Laundering Act 2001.
✅ Our commitment: pgtoto has NEVER and WILL NEVER sell, rent, or lease your personal data to advertising companies, data brokers, or any party for commercial purposes without your explicit consent. This is not merely a policy — it is our commitment to every pgtoto member.

06 Data Storage Security

Pgtoto invests heavily in security infrastructure to protect your personal data from unauthorised access, alteration, disclosure, or destruction. The technical and organisational security measures we employ include:

  • Data-in-Transit Encryption: All communications between your browser and pgtoto's servers are protected with TLS 1.3 protocol and 256-bit SSL certificates.
  • Data-at-Rest Encryption: Personal data stored in pgtoto's databases is encrypted using AES-256 standards.
  • Strict Access Controls: Only authorised pgtoto staff with a legitimate business need may access member personal data. All access is logged and audited on a regular basis.
  • 24/7 Monitoring: A continuous threat detection system monitors pgtoto's infrastructure around the clock for suspicious activity.
  • Regular Security Audits: pgtoto conducts regular vulnerability assessments and penetration testing carried out by independent security experts.
  • Incident Response Procedure: pgtoto has a comprehensive data breach incident response plan in place. In the event of a data breach, we will notify affected members and the relevant authorities within the timeframe prescribed by PDPA.
⚠️ Security Limitations: While pgtoto implements comprehensive security measures, no online system is entirely immune to threats. We encourage you to also take personal security precautions, such as using a strong and unique password for your pgtoto account.

07 Data Retention Period

Pgtoto retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. The following are our data retention guidelines:

Active Account DataThroughout the active account period
Financial Transaction Records (RM)7 years (PDPA & AML requirements)
Support Communication Logs2 years after last interaction
Gaming & Betting Records5 years (compliance requirement)
Anonymised Analytics DataUnlimited (anonymised)

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity. The deletion process is carried out using industry-standard secure methods.

08 Cookies & Tracking Technologies

Like most online platforms, pgtoto uses cookies and similar tracking technologies to enhance your experience. Here is an overview of the types of cookies we use:

8.1 Essential Cookies (Required)

These cookies are essential for the basic operation of the pgtoto platform and cannot be disabled. They enable functions such as login authentication, session security, and remembering your basic preferences.

8.2 Performance & Analytics Cookies

These cookies help us understand how players use pgtoto by collecting information on pages visited, time spent, and actions taken. This data is used in aggregate and anonymised form to improve the platform.

8.3 Functional Cookies

These cookies allow the pgtoto platform to remember your preferences such as interface language, display settings, and other personalisation options that enhance your experience.

8.4 Managing Cookies

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the pgtoto platform. We recommend accepting essential cookies to ensure a seamless gaming experience.

09 Your Rights as a Data Owner

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have certain rights regarding your personal data held by pgtoto. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data pgtoto holds about you. Requests will be processed within 21 working days.

Right to Rectification

You may request the correction of inaccurate or incomplete personal data via your account profile settings or by contacting pgtoto support.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. This right is subject to applicable legal retention obligations.

Right to Withdraw Consent

You may withdraw consent for specific uses of your data (such as marketing emails) at any time without affecting the validity of prior processing.

Right to Object to Processing

You may object to the processing of your personal data for direct marketing or profiling purposes at any time.

Right to Data Portability

You have the right to request your personal data in a machine-readable format for transfer to another service provider if required.

📬 How to Submit a Data Rights Request: To submit any request relating to the data rights above, please email privacy@pgtoto.ws with the subject line "PDPA Data Rights Request" along with a copy of your MyKad for identity verification. pgtoto will respond within 21 business days from the date a complete request is received.

10 Child Safety & Minor Protection

Pgtoto enforces a strict zero-tolerance policy against the use of our platform by individuals under the age of 21. We do not knowingly collect or process personal data of children or minors.

  • Pgtoto's registration process is designed to verify age through Malaysian identity document verification.
  • Should pgtoto discover that personal data of a minor has been inadvertently collected, we will take immediate action to delete that data and close the associated account.
  • Parents or guardians who suspect their child is using pgtoto without authorisation are requested to contact us immediately at support@pgtoto.ws.

11 Amendments to the Privacy Policy

Pgtoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform enhancements. When material changes are made:

  • The "Last Updated" date at the top of this page will be revised accordingly.
  • An email notification will be sent to all active pgtoto members affected by any material changes.
  • In-platform notifications will be displayed to members who are logged in.
  • For significant changes, we may request your renewed consent before you continue using our services.

We encourage you to review this Privacy Policy page periodically to stay informed about how pgtoto protects your personal data. Continued use of the platform following the publication of any amendments constitutes your acceptance of the updated policy.

12 Contact Us — Data Protection Officer

Pgtoto has appointed a Data Protection Officer responsible for ensuring PDPA compliance and handling all privacy-related enquiries. If you have any questions, concerns, or wish to lodge a complaint regarding how pgtoto handles your personal data, please contact us through the following channels:

Privacy Email
privacy@pgtoto.ws
Response within 21 working days
Live Chat
pgtoto.ws (chat button)
Response < 5 mins, 24/7
General Support Email
support@pgtoto.ws
For general enquiries
📋 Complaints to the Authorities: If you are dissatisfied with how pgtoto has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia via their official website or official communication channels.
🔐

Your Data is Safe. Your Experience is Assured.

Register your pgtoto account with confidence — our platform is protected with 256-bit SSL encryption, compliant with Malaysia's PDPA, and 100% committed to safeguarding every member's privacy. Begin your entertainment journey safely today.

PDPA 2010 Compliant 256-bit SSL Encryption No Data Sales Privacy Rights Guaranteed
Bahasa Melayu