Rujukan Laman

How tato888 Handles Your Rights and Data Access

We built our legal framework around Malaysian regulatory context and your account rights. Every policy—data collection, withdrawal verification, payment processing through Touch 'n Go, GrabPay, Boost dan FPX—depends…

Data transparencyAccount rightsPolicy clarityRegional compliance
tato888 How tato888 Handles Your Rights and Data Access
POLICY CONTACT

Three Ways to Reach Our Legal and Privacy Team

When you need to request data access, ask about our policies, or exercise your rights under applicable law, these channels connect you directly to the team that handles those requests.

Email Support Send your data-access request or policy question to our dedicated legal inbox. We aim to respond within three business days with either the information you requested or the next steps required. Include your registered account email so we can verify your identity before sharing any personal data.
Live Chat — Policy Escalation Start a live-chat session and ask the agent to escalate your request to the legal team. They will create a ticket, assign it to the privacy officer, and give you a reference number. Most escalated requests receive a substantive reply within five business days, depending on the complexity of your question.
Account Dashboard — Privacy Center Log in and visit the Privacy Center under Account Settings. You can download a copy of your data, request deletion, update your contact preferences, or submit a formal complaint. The dashboard tracks each request and shows you the status in real time, so you know exactly where your inquiry stands.
DATA HANDLING

How We Secure Your Information and Honor Your Requests

We collect only the data necessary to run your account, process payments via Touch 'n Go, GrabPay, Boost dan FPX, verify withdrawals, and comply with applicable legal requirements.

What We Collect

Registration details—email, password hash, date of birth, country—plus payment records, session logs, device identifiers, and transaction history. We do not collect more than we need to verify your identity, process your deposits and withdrawals, and meet legal record-keeping obligations in the jurisdictions where we operate.

How We Store It

All personal data lives on encrypted servers in data centers that meet industry-standard physical and logical security controls. Access is restricted to employees who need it to complete account verification, payment processing, or support tasks. We log every internal access event so we can audit who viewed what and when.

Who Sees It

Your data is shared only with payment processors—Touch 'n Go, GrabPay, Boost, FPX—when you request a deposit or withdrawal, and with regulatory or law-enforcement authorities when legally required. We do not sell your data to third parties, and we do not use it for marketing unless you have opted in through your account preferences.

Retention Period

We keep your account data for as long as your account remains active, plus the minimum retention period required by applicable financial-record laws—typically five years from your last transaction. If you request deletion, we anonymize or delete your data at the end of that retention window, unless a legal hold or ongoing investigation requires longer storage.

Cookies and Tracking

We use session cookies to keep you logged in, analytics cookies to measure page performance, and preference cookies to remember your language and display settings. You can disable non-essential cookies in your browser, though some features—saved payment methods, lobby filters—may stop working. We do not use third-party advertising trackers.

Your Rights and How to Exercise Them

You can request a copy of your data, ask us to correct inaccuracies, withdraw consent for optional processing, or request deletion where law permits. Submit any request through the Privacy Center in your account dashboard or by emailing our legal team. We respond within the timeframe required by the law that applies to your region—usually fourteen to thirty days.

Common Questions About Data, Rights and Compliance

Here are the questions we hear most often about our legal policies, data handling, and the rights you hold as an account holder. If your question is not answered below, reach out through the channels in the Policy Contact section above.

We collect your email address, password (stored as a cryptographic hash), date of birth, country of residence, and the device identifiers your browser sends—IP address, user-agent string, screen resolution. We also log every deposit, withdrawal, and session so we can verify your identity during payout requests and meet legal record-keeping requirements.

We keep your account data and transaction history for the minimum retention period required by financial-record laws in the jurisdictions where we operate—typically five years from your last transaction. After that window, we anonymize or delete your data unless a legal hold, ongoing investigation, or unresolved dispute requires longer storage.

Yes. Log in to your account, visit the Privacy Center under Account Settings, and click Request Data Export. We will prepare a machine-readable file containing your registration details, transaction history, session logs, and any other personal data we hold. The file is usually ready within three business days, and we will notify you by email when it is available for download.

We share your data only with the payment processors—Touch 'n Go, GrabPay, Boost, FPX—when you request a deposit or withdrawal, and with regulatory or law-enforcement authorities when legally required. We do not sell your data to advertisers, and we do not use it for marketing unless you have opted in through your account preferences.

We use session cookies to keep you logged in, analytics cookies to measure page performance, and preference cookies to remember your language and display settings. You can disable non-essential cookies in your browser settings, though some features—saved payment methods, lobby filters—may stop working. We do not use third-party advertising trackers on any tato888 page.

Log in to your account, visit the Privacy Center, and click Request Account Deletion. We will close your account immediately and anonymize or delete your data at the end of the legal retention period—typically five years from your last transaction. If you have a pending withdrawal or unresolved dispute, we may need to keep certain records until that matter is resolved.

Send your complaint to our legal team by email or through the Privacy Center in your account dashboard. We aim to respond within three business days. If you are not satisfied with our response, you may escalate the matter to the data-protection authority in your region, and we will cooperate fully with any official investigation.