Toyoslot is committed to protecting the personal information of every player on our platform. This Policy explains what data we collect, how we use it, and the rights you hold as a user.
Six core principles that underpin how Toyoslot handles your personal data. The complete legal text follows below.
We collect only the personal information that is strictly necessary to operate your account, process payments, and comply with legal obligations. We do not collect data beyond what is required for these purposes.
All personal and financial data transmitted between your browser and our servers is protected by256-bit SSL/TLS encryption. Sensitive data at rest — including payment credentials — is encrypted using industry-standard protocols.
Toyoslot does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to operate, improve, and secure the Platform.
You have the right to access, correct, delete, and port your personal data at any time. All data rights requests are acknowledged within 72 hours and fulfilled within 30 calendar days.
We use cookies and similar tracking technologies solely to operate the Platform, maintain session security, and analyse aggregate usage patterns. We do not use third-party advertising cookies or cross-site tracking technologies.
All personal data processing is conducted on a lawful basis — either with your explicit consent, as necessary for contract performance, or to comply with applicable legal obligations. We maintain detailed processing records.
This Privacy Policy ("Policy") describes how Toyoslot ("we", "us", "our", "Company") collects, processes, stores, and protects the personal information of users ("Player", "User", "you") who access or use the Toyoslot platform available at toyoslot.cam, including all associated games, services, payment systems, and customer support functions (collectively, the "Platform").
Toyoslot operates primarily as a Malaysia-focused online casino and sports betting platform, serving players who deposit and transact in Malaysian Ringgit (MYR /RM) using local payment methods such as Touch'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. As such, a significant portion of the personal data we process originates from users based in Malaysia. This Policy is drafted to reflect the data protection expectations applicable to such users.
By registering an account on the Platform, accessing our services, or continuing to use the Platform after any update to this Policy is communicated, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.
"We believe privacy is a right, not a feature. This Policy exists not merely to fulfil legal requirements but to give you a clear, honest account of how your information is used on Toyoslot."
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
Toyoslot collects Personal Data from you in several categories, each of which serves a specific operational or legal purpose. The table below provides an overview of the categories of data we collect and the primary purpose for which each category is used.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / passport number | Account registration, KYC verification, age verification (21+ requirement) |
| Contact Data | Email address, phone number, residential address | Account communication, security alerts, support correspondence |
| Financial Data | Payment method details (e-wallet IDs, bank account numbers), deposit and withdrawal history | Payment processing, fraud prevention, AML compliance |
| KYC Documents | Scanned MyKad, passport, utility bills, bank statements | Regulatory identity verification, withdrawal approval |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Security monitoring, fraud detection, platform optimisation |
| Usage Data | Game history, betting activity, session duration, pages visited | Platform improvement, responsible gambling monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer service, dispute resolution, quality assurance |
Personal Data is collected through the following channels:
When you create an account, complete the KYC verification process, make a deposit or withdrawal request, contact our support team, respond to a survey or promotion, or submit any form or communication through the Platform, you provide us with Personal Data directly.
When you interact with the Toyoslot Platform, our systems automatically collect Technical and Usage Data including your IP address, device identifiers, browser type, session timestamps, and game/betting activity logs. This data is collected using server-side logging, session tokens, and first-party cookies.
We may receive data about you from authorised third-party service providers including payment processors (e.g., FPX operators, Touch 'n Go eWallet infrastructure, Boost payment rails), identity verification platforms, and fraud detection services. Data received from these sources is used solely for the purpose for which it was originally provided.
Toyoslot processes your Personal Data for the following purposes:
Toyoslot processes your Personal Data only where a lawful basis exists for doing so. The applicable legal bases are as follows:
Toyoslot does not sell, rent, or disclose your Personal Data to third parties for commercial marketing purposes. Personal Data is shared with third parties only in the following limited circumstances:
We engage trusted third-party service providers to assist with specific operational functions, including payment processing (Touch 'n Go, Boost, GrabPay, DuitNow, FPX infrastructure providers), KYC verification platforms, fraud detection systems, cloud hosting infrastructure, and customer support tooling. All Data Processors are bound by contractual data processing agreements requiring them to process Personal Data only on our documented instructions and to maintain appropriate technical and organisational security measures.
We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, regulation, or a valid legal order. We will endeavour to notify you of such disclosures where permitted by law and where doing so would not compromise an ongoing investigation.
In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of the Company's assets, Personal Data held by Toyoslot may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance where practicable, and your rights under this Policy will continue to apply.
📌 Important: Toyoslot will never share your personal information with third-party advertisers, data brokers, or marketing networks. Your data stays within the Toyoslot ecosystem and its authorised operational service providers only.
Toyoslot retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in a manner that prevents reconstruction of the original data.
Toyoslot implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security controls include:
Notwithstanding these measures, no internet transmission or digital storage system is entirely secure. In the event of a data security incident that poses a material risk to your rights and freedoms, Toyoslot will notify affected players without undue delay and take all reasonable steps to mitigate the impact.
Toyoslot uses first-party cookies and similar session-based technologies to operate the Platform, maintain your authenticated session, and collect aggregated analytics. We do not deploy third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies.
You may configure your browser to refuse or delete cookies. Note that disabling essential cookies will impair your ability to log in and use the Platform. Non-essential cookies can be managed through your browser's privacy settings without affecting core functionality.
As a user of the Toyoslot Platform, you hold the following rights in respect of your Personal Data. These rights can be exercised at any time by contacting our support team via the channels specified in Section 15.
Request a copy of the Personal Data we hold about you and information about how it is used.
Request correction of inaccurate or incomplete Personal Data held your account record.
Request deletion of your Personal Data where it is no longer necessary, subject to legal retention obligations.
Request that we limit how we use your data in certain circumstances, such as while complaint is under review.
Receive a copy of your Personal Data in a structured, machine-readable format for transfer to another service.
Object to processing carried out on the basis of legitimate interests, including direct marketing communications.
All rights requests will be acknowledged within 72 hours and fulfilled within 30 calendar days of receipt. In cases of complexity or volume, this period may be extended by a further30 days with prior notification to you. Toyoslot will not charge a fee for handling rights requests unless they are manifestly unfounded or excessive.
Toyoslot does not knowingly collect Personal Data from individuals under the age of 21. The Platform is strictly intended for use by adults aged 21 years and above, in line with our responsible gambling policy and age eligibility requirements set out in our Terms and Conditions.
If we become aware that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to delete that data, close the associated account, and return any funds deposited, in accordance with our underage account procedures. If you believe that we may have inadvertently collected data from a person under 21, please contact us immediately at the address provided in Section 15.
Toyoslot's infrastructure and some of our third-party service providers may be located outside of Malaysia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Malaysia, we ensure that appropriate safeguards are in place prior to any such transfer. These safeguards may include standard contractual clauses, data processing agreements incorporating equivalent protections, or transfers to jurisdictions with recognised adequacy determinations.
By using the Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Malaysia, subject to the safeguards described above.
Toyoslot reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our operational practices. Where material changes are made, we will provide advance notice to registered players via the email address associated with their account or through a prominent notice on the Platform, at least fourteen (14) days before the changes take effect.
Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure in accordance with our Terms and Conditions.
The date displayed at the top of this page reflects the date on which this Policy was most recently reviewed and updated. We recommend reviewing this Policy periodically to stay informed of how we protect your information.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Protection team using the following details:
When submitting a data rights request, please provide your registered username, the email address associated with your account, and a clear description of your request. We may need to verify your identity before processing certain requests to ensure we do not disclose Personal Data to an unauthorised party.
📌 Response Commitment: Privacy and data rights requests are acknowledged within 72 hours and fully resolved within 30 calendar days. If your request requires additional time due to complexity, we will notify you in advance with a revised completion date.
Our support team is available24/7 to answer any privacy questions, process data rights requests, or clarify how we handle your personal information on the Toyoslot platform.
🔞 For players aged 21 and above only. Please gamble responsibly.