Personal Data Protection

Privacy Policy ibltoto —
Your Data Is Fully Protected

Ibltoto takes every aspect of your personal data protection seriously. This policy transparently explains how your information is collected, used, stored, and protected on our platform.

Updated: 1 June 2026

Six Principles Data Protection ibltoto

Before reading the full policy, get to know the six core principles that guide how ibltoto manages our members' personal data.

Minimum Collection

Ibltoto only collects data that is strictly necessary for platform operations and never gathers excessive information irrelevant to the services we offer.

Full SSL 256-bit Encryption

All data transmitted between your device and ibltoto's servers is protected by SSL 256-bit encryption — the same standard used by world-class financial institutions.

No Sale of Data to Third Parties

Your personal data is never sold, rented, or shared with any third party for marketing purposes without your explicit and express consent.

Secure & Restricted Storage

Your data is stored on servers protected with strict access controls. Only authorised ibltoto staff may access user data, and only for permitted purposes.

Full Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time through the ibltoto support team, which operates 24/7.

Malaysia Legal Compliance

Ibltoto fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure all our data handling practices align with applicable legal requirements.

1 Types of Personal Data We Collect

Ibltoto collects your personal data during the registration process, platform usage, and interactions with our support team. The following are the categories of data we collect:

Data Category Example Information Requirements
Personal Identity Full name, identity card number, date of birth Mandatory — KYC
Contact Information Phone number, email address Mandatory — Account
Financial Information Bank account number, bank name, e-Wallet Mandatory — Payment
Device & Access Data IP address, device type, browser, operating system Automatic — Security
Transaction Data Betting history, deposits, withdrawals Automatic — Operations
User Preferences Language, notification settings, game limits Optional — Experience

ibltoto never collects credit card numbers directly. All payments are processed through third-party payment processors that comply with PCI-DSS standards.

2 How We Collect Your Data

Your personal data is collected through various channels when you interact with the ibltoto platform:

  • Account registration — information you enter directly when creating a new account.
  • KYC Process — identity documents you upload for identity verification purposes.
  • Financial transactions — information obtained when you make deposits or withdrawals through our payment system.
  • Platform usage — data collected automatically such as IP addresses, access logs, and gaming usage patterns.
  • Customer support — information you share when contacting the ibltoto support team via live chat.
  • Cookies and similar technologies — data collected by browser cookies to improve user experience (see Clause 6).

All data collection is carried out based on your consent given during registration or use of the platform. You may withdraw this consent at any time, though doing so may affect your ability to use certain platform features.

3 Purposes for Using Your Personal Data

Ibltoto uses the personal data collected for the following purposes, all closely related to delivering the best platform experience to you:

  • Management and maintenance of your ibltoto member account.
  • Accurate processing of deposits, withdrawals, and all financial transactions.
  • Identity verification (KYC) in accordance with regulatory compliance requirements.
  • Detection and prevention of fraudulent activity, money laundering, and platform abuse.
  • Providing effective and responsive customer support.
  • Sending important account-related communications such as transaction confirmations and security notifications.
  • Continuous improvement of the user experience based on platform usage patterns.
  • Compliance with legal requirements and orders from competent authorities.

ibltoto will only send you marketing communications if you have given explicit consent to receive such content. You can unsubscribe at any time through your account settings.

4 Data Sharing with Third Parties

Ibltoto does not sell or rent your personal data to any third party for marketing purposes. However, in certain situations, we may need to share your data with the following parties:

  • Payment processors — such as FPX, DuitNow, and e-Wallet providers to enable financial transactions to be processed securely.
  • KYC service providers — trusted third-party identity verification companies to complete your document verification process.
  • Platform technology providers — software and infrastructure providers that help ibltoto operate, subject to strict confidentiality agreements.
  • Relevant authorities — government agencies or law enforcement bodies when required by law or court order.

All third parties working with ibltoto are required to comply with strict privacy policies and are not permitted to use your data for any purpose outside the agreed scope.

Important: ibltoto never sells member personal data to advertisers, data brokers, or any commercial party unrelated to platform operations.

5 Data Storage and Information Security

Ibltoto stores your personal data in a secure server environment with multiple layers of security controls. We use 256-bit SSL encryption for all data transfers and AES-256 for sensitive data storage at the database level.

Data retention periods depend on the type of information and legal requirements:

  • Active account data — retained for the duration the account remains active plus 5 years after closure.
  • Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia financial regulatory requirements.
  • KYC documents — retained for the duration the account is active and 5 years after closure.
  • Access and activity logs — retained for 2 years for security and investigation purposes.

Technical security measures implemented by ibltoto include industry-grade firewalls, intrusion detection systems, regular security audits, role-based access controls, and two-factor authentication for all internal administrative access.

While no system can be guaranteed 100% secure, ibltoto continuously invests in the latest security infrastructure to ensure your data protection meets industry standards.

6 Cookies and Tracking Technologies

Ibltoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

  • Necessary Cookies — required for core platform functions such as login session management and language preferences.
  • Performance Cookies — collects information on how you use the platform to help us improve the user experience.
  • Functional Cookies — remembers your preferences such as notification settings and favourite game selections.
  • Analytics Cookies — helps us understand overall usage patterns for product development purposes.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the ibltoto platform. Third-party cookies used by our game providers are also subject to their respective privacy policies.

7 Your Privacy Rights as an ibltoto Member

As an ibltoto platform user and as a Malaysian citizen, you have the following rights regarding your personal data, which ibltoto is committed to fulfilling:

Right to Access

You have the right to request a copy of all personal data that ibltoto holds about you. Requests will be processed within 14 business days.

Right to Rectification

If any data we hold is inaccurate or outdated, you have the right to request a correction by contacting ibltoto support with appropriate supporting documentation.

Right to Erasure

You may request deletion of your data, subject to legal retention obligations. Financial transaction data cannot be deleted before the minimum retention period of 7 years.

Right to Object

You may object to the processing of your data for specific purposes such as direct marketing at any time without providing any reason.

Right to Data Portability

You have the right to request your personal data in a machine-readable format for transfer to another service provider if desired.

To exercise any of the rights above, contact the ibltoto support team via 24/7 live chat in the app. We will verify your identity before processing any data-related request.

8 Children's Privacy Protection

The ibltoto platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If ibltoto discovers or suspects that personal data of an underage child has been collected without valid parental or guardian consent, we will take immediate action to delete that data and close the associated account.

If you are a parent or guardian and discover that your underage child has registered at ibltoto, please contact our support team immediately for follow-up action.

Warning: Registration by individuals under 18 is a serious violation of ibltoto's Terms and Conditions and may also breach Malaysia law.

9 Cross-Border Data Transfers

In the context of the ibltoto platform's operations, some of your personal data may be stored or processed on servers located outside Malaysia, primarily for backup and disaster recovery purposes.

When such data transfers occur, ibltoto ensures that protection equivalent to or exceeding Malaysia's standards is in place at the data destination. This is achieved through:

  • Binding data processing agreements with cloud service providers.
  • Use of recognised data transfer mechanisms such as standard contractual clauses.
  • Periodic assessments of data protection standards in destination countries.

10 How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding the ibltoto Privacy Policy or how we manage your personal data, we encourage you to contact us directly.

Ibltoto has a dedicated team responsible for all privacy and data protection matters. We are committed to responding to all privacy enquiries within 3 business days.

Privacy Contact Information
Support Email [email protected]
Operating Hours 24 hours, 7 days a week
Live Chat Available on the ibltoto app
Response Time Under 3 minutes (live chat)

This Privacy Policy was last updated on 1 June 2026. ibltoto reserves the right to update this policy from time to time to reflect changes in our privacy practices or legal requirements. Any significant changes will be communicated via in-platform notifications.

Play with Safe and Secure at ibltoto

Your data privacy and security is ibltoto's top priority. Register now and enjoy a wagering experience protected by industry-leading encryption.

SSL 256-bit Secure KYC Data Not Sold 24/7 Support
Bahasa Melayu