Data Protection

Privacy Policy dbltoto

Your privacy is our priority. This document explains in detail how dbltoto collects, uses, stores, and protects your personal data as a member of our platform.

Updated: 1 January 2026
Our Commitment: dbltoto fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We will never sell, rent, or disclose your personal data to third parties without your consent, except under the circumstances stated in this Privacy Policy.

01 Introduction

Dbltoto, operating through the domain dbltoto.bio, is an online gaming platform that understands how important data privacy is to every one of our members. We take this responsibility seriously and are committed to ensuring your personal data is handled in a transparent, secure, and responsible manner.

This Privacy Policy describes our practices regarding the collection, use, disclosure, transfer, and storage of personal information you provide to us when using dbltoto services — whether through our website or the mobile app available for download via the Download.

By registering an account with dbltoto or using any of our services, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any provision herein, please discontinue use of our platform.

Legal Reference: This Privacy Policy is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and the guidelines issued by the Department of Personal Data Protection Malaysia.

02 Personal Data We Collect

Dbltoto collects various types of personal information for different purposes in order to provide and improve our services to you. The following are the categories of data we collect:

Data Category Example Information Collection Method
Identity Information Full name, date of birth, identification card number Registration form, KYC verification
Contact Information Phone number, email address Account registration, profile updates
Financial Information Bank account number, deposit and withdrawal records Payment processing, transaction verification
Usage Data Gaming history, activity logs, session duration The platform system automatically
Technical Data IP address, device type, web browser, operating system Cookies, server logs
Communications Support chat recordings, incoming emails Customer support interactions

We only collect data that is strictly necessary for the stated purposes. You have the right to withhold certain information; however, please note that doing so may limit your ability to access some features of the dbltoto platform, including withdrawal processes that require full KYC verification.

03 How We Use Your Data

The personal data we collect is used for various legitimate purposes to ensure the best experience for every dbltoto member. The following are the primary purposes for which your data is used:

  • Account Management: Creating and managing your member account, including the login process, identity verification, and profile maintenance.
  • Transaction Processing: Securely processing deposits and withdrawals through your chosen payment methods such as DuitNow, FPX, and Touch 'n Go.
  • KYC Verification: Meeting legal compliance requirements by verifying member identity before permitting withdrawals or access to certain features.
  • Customer Support: Providing technical assistance and resolving any queries or complaints you submit to our support team.
  • Fraud Prevention: Detecting and preventing any suspicious activity, fraud, or platform abuse that could compromise the security of other members.
  • Targeted Marketing: Sending promotions, exclusive offers, and information about new games that may interest you — subject to your notification preferences.
  • Platform Improvement: Analysing usage patterns to continuously improve the design, performance, and features of the dbltoto platform.
  • Responsible Gaming: Monitoring gameplay patterns to detect potential problem gambling risks and provide the necessary support.
Marketing Preferences: You may withdraw consent to receive marketing communications at any time through your account settings or by contacting our support team. Withdrawing this consent will not affect the processing of data required to manage your account.

04 Data Storage & Security

Dbltoto employs the latest security technology to protect your personal data from unauthorised access, disclosure, alteration, or destruction. All information transmitted between your device and our servers is protected with 256-bit SSL encryption — the same security standard used by leading banking and financial institutions worldwide.

Key security measures we have implemented include:

  • End-to-End Encryption: All sensitive data, including financial information and passwords, is encrypted using industry-standard encryption protocols before being stored or transmitted.
  • Strict Access Controls: Access to members' personal data is restricted solely to staff who require it to perform their duties, and all access is logged for audit purposes.
  • 24/7 System Monitoring: Our security system is monitored around the clock to detect any intrusion attempts or suspicious activity.
  • Regular Security Testing: We conduct regular penetration testing and security audits with the assistance of independent cybersecurity experts.
  • Data Backup: Your data is automatically backed up to secure data centres to ensure continuous availability.

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection against all cyber threats. In the event of any data breach affecting your information, we will notify you within the timeframe required by applicable law.

Data retention periods depend on the type of data and legal requirements. Generally, active account data is retained for the duration your account remains active, while transaction records and KYC documents are kept for at least 7 years after account closure to comply with legal requirements.

Server Location: Your data is stored in secure data centres in full compliance with international data protection standards. All cross-border data transfers are carried out with adequate contractual safeguards.

05 Data Sharing with Third Parties

Dbltoto does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we may share certain information with the following parties under limited and controlled circumstances:

  • Payment Service Provider: Required transaction information is shared with trusted payment processors (such as DuitNow, FPX, Touch 'n Go) solely to process your deposits and withdrawals.
  • KYC Service Provider: Identity documents are shared with approved identity verification partners to complete your KYC process.
  • Technical Service Provider: Cloud infrastructure providers and technical service partners who help us operate the platform may have limited access to certain data in the course of performing their services.
  • Regulatory Authority: We may disclose information to the relevant authorities when required by law, court order, or valid legal process.
  • Fraud Prevention: Certain information may be shared with fraud prevention agencies or law enforcement authorities to investigate suspected illegal activity.

All third parties we engage are bound by strict confidentiality agreements and are required to use the data provided solely for the specified purpose. We do not permit them to use your data for marketing or any other unrelated purposes.

International Transfers: Should your data need to be transferred outside Malaysia, we ensure that adequate protections are in place through data transfer agreements that comply with PDPA requirements.

06 Cookies & Tracking Technologies

Dbltoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on subsequent visits and deliver a more personalised experience.

The types of cookies we use are as follows:

  • Essential Cookies: These cookies are required for core platform functions such as login security and page navigation. Without them, the platform cannot operate properly.
  • Performance Cookies: Helps us understand how visitors use the platform by collecting anonymous information, such as visit counts and most frequently viewed pages.
  • Functional Cookies: Allows the platform to remember your preferences such as language, region, and display settings to deliver a more personalised experience.
  • Session Cookies: Temporary cookies that are automatically deleted when you close your web browser, used to maintain your login session during active use.

You can manage or block cookies through your web browser settings at any time. Please note, however, that blocking all cookies may affect certain features of the dbltoto platform and you may need to log in again each time you visit.

07 Your Rights Regarding Personal Data

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by dbltoto. We are committed to facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you, including information on how it is used.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction through your account settings or customer support.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to legal retention requirements.

Right to Restrict Processing

You may request that we restrict the processing of your data under certain circumstances provided by law.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing any justification.

To exercise any of the above rights, please contact us via 24/7 Live Chat or our support email. We will process your request within 30 working days from the date the request is received. In certain complex cases, this period may be extended with prior notice to you.

Identity Verification: To protect your data, we may require identity verification before processing any requests related to your privacy rights. This is to ensure that the request is made by you personally.

08 Contact Us & Policy Amendments

Dbltoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. Any significant changes will be communicated to members via email or an in-platform notice.

The "Updated" date at the top of this document will always reflect the latest version of our Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer via:

  • Live Chat: Available 24 hours a day, 7 days a week via the dbltoto platform.
  • Email: [email protected]

We take every privacy inquiry seriously and are committed to providing a clear and satisfactory response in the shortest time possible.

Guaranteed Security

How dbltoto Protects Your Privacy

We invest in the latest security technology so you can play with peace of mind, without worrying about the safety of your personal information.

256-bit SSL Encryption

Every piece of data transmitted between your device and dbltoto's servers is protected with 256-bit SSL encryption — the same standard used by Malaysia's leading banks.

Secure KYC Verification

Our identity verification process uses trusted technology to ensure that only legitimate account owners can access and manage their funds.

No Data Sales

Dbltoto has never and will never sell or rent your personal data to any third party for their marketing or commercial purposes.

Real-Time Monitoring

Our security system operates 24 hours a day, non-stop, to detect any unauthorised access attempts or suspicious activity on your account.

Malaysia PDPA Compliance

We fully comply with Malaysia's Personal Data Protection Act 2010, ensuring all our data handling practices meet local legal standards.

Self-Managed Privacy Controls

You have full control over your personal data. Adjust your privacy settings, withdraw marketing consent, or request data deletion through your account.

Join dbltoto Today

Your Data Is Safe. Your Game Is Fun.

With a transparent privacy policy and world-class security systems, you can focus on what matters — enjoying your favourite games. Register now and start your journey with dbltoto.

256-bit SSL Encryption Malaysia PDPA Compliance No data sales Full privacy control
Bahasa Melayu