To188 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy is issued by to188 ("We", "Platform") and applies to all users of the to188.biz platform, including all registered members throughout Malaysia. This Policy outlines our approach to personal data privacy — from how information is collected, to how it is protected, stored, and, where applicable, shared with authorized parties.

To188 takes its responsibilities as a personal data controller seriously. We ensure that all data handling practices comply with relevant data protection standards. This policy applies to all personal information we collect, whether through use of the to188 platform, communications with our support team, or through any other interaction channel involving to188.

By registering a to188 account or using any of our services, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read together with Terms & Conditions and Responsible Gaming Policy to188.

To188 collects various categories of information from members to ensure the platform operates safely, efficiently, and responsibly. The types of information we collect are as follows:

To188 does not collect credit or debit card information directly — all financial transactions are processed through secure, certified payment gateways, and we only receive transaction confirmations without storing your card number or sensitive banking details.

To188 collects and uses members' personal information solely for lawful and transparent purposes, which are as follows:

• Account Management: Opening, verifying, maintaining, and managing to188 member accounts, including identity verification (KYC) required for compliance purposes.
• Transaction Processing: Securely processing deposits, withdrawals, and prize payments via to188's supported Malaysian payment methods.
• Service Delivery: Providing access to all to188 games and services, including Live Casino, slots, football, blackjack, roulette, and lottery.
• Customer Support: Handling enquiries, complaints, and support requests submitted to the to188 support team via live chat or email.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, multiple account creation, and other unlawful activity on the to188 platform.
• Legal Compliance: To fulfill applicable legal and regulatory obligations, including lawful requests from Malaysian authorities.
• Platform Improvements: Analyzing aggregated, anonymized usage data to understand user behavior and improve to188 platform features.
• Marketing Communications: Sending you information about to188 promotions, bonuses, and offers that may interest you — only if you have agreed to receive such communications.

To188 will not use your personal information for any purpose not stated above without first obtaining your consent.

To188 processes members' personal data on the following legal bases:

• Performance of Contract: Processing required to fulfil to188's contractual obligations to members — including account management, transaction processing, and the delivery of gaming services.
• Legitimate Interest: Processing for the purposes of fraud prevention, platform security, and service improvement, which constitute to188's legitimate interests and do not override members' fundamental rights.
• Legal Compliance: Processing required under applicable Malaysian law, including KYC requirements and financial transaction reporting.
• Consent: Processing for marketing communications and non-essential cookies is carried out only with your explicit consent, which may be withdrawn at any time.

To188 implements comprehensive technical and organisational security measures to protect all members' personal data from unauthorised access, disclosure, alteration, loss, or destruction:

• Encryption in Transit: All communications between your device and to188's servers are protected by TLS/SSL 256-bit encryption — the same standard used by online banking in Malaysia.
• Encryption at Rest: Sensitive data stored in to188's databases is encrypted using the latest industry-standard encryption protocols.
• Access Controls: Access to members' personal data within to188 is restricted to staff who genuinely require it to perform their duties, enforced through a multi-layered access control system.
• Continuous Monitoring: to188's infrastructure is continuously monitored to detect and respond to any security threats or suspicious activity in real time.
• Regular Security Audits: to188 conducts regular security assessments and penetration testing by independent third parties to identify and address any vulnerabilities.

Members' personal data is retained for as long as necessary to fulfill the purpose for which it was collected, or as required under Malaysian legal obligations. Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

To188 does not sell, rent, or disclose members' personal data to any third party for their own marketing purposes. However, to188 may share necessary information with the following categories of third parties, strictly for the purposes stated:

• Payment Service Providers: Payment gateways handling to188's financial transactions — including Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX payment processing — only the information required to process a transaction is shared.
• Game Service Providers: Third-party game providers that supply game content on the to188 platform — information shared is kept to a minimum and is subject to strict confidentiality agreements.
• Infrastructure Service Providers: Cloud computing, server hosting, and security service providers that support to188 in operating its platform on a technical level.
• Competent Authorities: Law enforcement agencies, courts, or Malaysian regulatory bodies where to188 is required to do so by law or court order.
• Professional Consultants: Lawyers, accountants, or business advisors engaged by to188 who require certain information to provide their professional services, and who are bound by confidentiality obligations.

All third parties that receive to188 members' personal data are bound by data protection agreements ensuring they handle such information to a standard consistent with to188's own.

To188 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The types of cookies used by to188 are as follows:

• Essential Cookies (Required): Required for core platform functionality — including login session management, account security, and language preferences. These cookies cannot be disabled as they are essential to to188's operation.
• Performance Cookies: Collects anonymised information about how you use to188 — pages visited, links clicked, and time spent. This data helps to188 identify areas for improvement.
• Functional Cookies: Saving your personal preferences such as display settings, preferred language, and recent game history so you don't have to reconfigure them each time you log in to to188.
• Marketing Cookies: Used to deliver relevant to188 advertisements and promotions based on your interests. These cookies are only activated with your consent.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the to188 platform and your overall experience.

In certain situations, personal data of to188 members may need to be transferred to or accessed from locations outside Malaysia — for example, when using international cloud computing service providers or working with global game suppliers.

Where such data transfers do occur, to188 ensures that protection equivalent to Malaysian standards is maintained through:

• Legally binding data transfer agreements with data recipients outside Malaysia
• Use of service providers holding internationally recognized data security certifications
• Standard data protection clauses required for all cross-border data transfers

To188 will not transfer members' personal data to countries that do not provide an adequate level of data protection unless appropriate additional safeguards have been put in place.

As a to188 member, you have the following rights regarding your personal data:

To exercise any of the rights listed above, please contact the to188 privacy team at support@to188.biz with the subject line "Privacy Rights Request". to188 will respond within 30 business days of receiving your request.

The to188 platform is strictly for individuals aged 18 and above. to188 does not knowingly collect any personal information from anyone under the age of 18.

If you believe a child under the age of 18 has provided personal information to to188 without parental or guardian consent, please contact us immediately at support@to188.biz. to188 will take prompt action to delete that information and close the account upon receiving such notification.

To188 carries out age verification as part of our KYC procedures to ensure compliance with this age requirement. Where there is any doubt about a user's age, to188 reserves the right to request supporting documentation before granting access to the platform.

The to188 platform may contain links to third-party websites or services. This Privacy Policy applies only to information collected by to188 itself and does not cover the privacy practices of those third-party websites.

To188 has no control over the content, privacy policies, or practices of third-party websites and is not responsible for any information collected by them. We encourage you to read the privacy policy of any third-party website you visit through links on the to188 platform.

To188 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Members will be notified of any material changes through:

• Notice displayed on the to188.biz homepage
• Email notification sent to the member's registered email address (for significant changes)
• In-account notification upon the member's next login

The effective date of the current version of this Privacy Policy is always stated at the top of the document. Continued use of the to188 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how to188 handles your personal data, please contact us:

• Email: support@to188.biz (please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available in your to188 account, 24 hours a day, 7 days a week
• Response Time: We aim to respond to all privacy enquiries within 2 business days, and all formal data rights requests within 30 business days.

To188 takes all privacy-related complaints seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.