Tegaltoto is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains precisely what information we collect, how we use it, who we may share it with, and the rights you hold over your own data under applicable law.
A plain-language summary of how Tegaltoto treats your data. The full legal detail follows in the policy below.
All data transmitted between your device and Tegaltoto servers is protected by AES-256 encryption over HTTPS. Stored data — including financial records and identity documents — is encrypted at rest using industry-standard protocols.
Tegaltoto does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is yours. We only share it when legally required or when strictly necessary to deliver our services.
Every category of personal data we collect is listed in this policy along with the specific purpose and legal basis for processing it. We do not collect data speculatively — if we hold it, there is a defined reason for it.
You have the right to access, correct, export, or request deletion of your personal data at any time. We respond to all verified data requests within 30 days in compliance with applicable data protection regulations.
We use only functional and analytics cookies necessary to operate the platform and understand aggregate usage patterns. We do not use invasive tracking technologies or cross-site behavioural advertising networks.
Our data practices are tailored to the context of Malaysian players. Payment data relating to Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, and other local methods is handled with the highest level of care and access restriction.
This Privacy Policy (hereinafter "Policy") is issued by Tegaltoto (hereinafter "we", "us", "our", or "the Platform") and governs the collection, use, storage, and disclosure of personal data relating to individuals (hereinafter "you", "your", or "the User") who access or interact with the Tegaltoto online casino and sports betting platform at https://tegaltoto.cam.
Tegaltoto is committed to handling personal data responsibly and in accordance with internationally recognised data protection standards. We apply principles of data minimisation, purpose limitation, transparency, and security to every data processing activity conducted in connection with the operation of the Platform.
By creating an account, using our Services, or otherwise interacting with the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to arrange closure of your account.
For the purposes of this Policy, the following terms carry the meanings assigned to them below:
Tegaltoto collects Personal Data in the following categories, depending on the nature of your interaction with the Platform:
3.1 Registration & Account Data
3.2 KYC Verification Data
3.3 Financial & Transaction Data
3.4 Usage & Behavioural Data
3.5 Communications Data
The table below summarises the primary purposes for which Tegaltoto processes Personal Data and the categories of data involved in each processing activity:
| Processing Purpose | Data Categories Used | Retention Period |
|---|---|---|
| Account registration and management | Registration Data, KYC Data | Duration of account + 5 years |
| Identity and age verification (KYC) | KYC Data, Registration Data | Duration of account + 7 years |
| Payment processing and fraud prevention | Financial Data, KYC Data | 7 years (regulatory requirement) |
| Platform delivery and personalisation | Usage Data, Registration Data | Duration of account + 2 years |
| Customer support and dispute resolution | Communications Data, Account Data | 3 years from last interaction |
| Responsible gambling monitoring | Usage Data, Financial Data | Duration of account + 5 years |
| Marketing communications (with consent) | Registration Data, Preferences | Until consent is withdrawn |
| Legal and regulatory compliance | All relevant categories | As required by applicable law |
| Anti-money laundering (AML) screening | KYC Data, Financial Data | 7 years (statutory minimum) |
| Platform analytics and improvement | Usage Data (aggregated/anonymised) | Up to 3 years (anonymised) |
Tegaltoto processes Personal Data on the following legal bases, depending on the nature of the processing activity:
Tegaltoto does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share Personal Data with the following categories of recipients, strictly for the purposes described:
In all cases of third-party data sharing, Tegaltoto retains responsibility for ensuring that data is handled in accordance with this Policy and applicable data protection standards.
Tegaltoto retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The specific retention periods applicable to each data category are set out in the processing table in Section 4 above.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where anonymisation is applied, the resulting aggregate data may be retained indefinitely for statistical and analytical purposes.
Please note that certain financial and identity records are subject to mandatory minimum retention periods of 5 to 7 years under applicable anti-money laundering regulations. These retention obligations persist even after account closure and cannot be waived at your request.
Tegaltoto implements a comprehensive suite of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
Notwithstanding the above measures, no method of data transmission over the internet is entirely risk-free. Tegaltoto takes reasonable precautions to protect your data but cannot provide an absolute guarantee of security. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.
In the event of a personal data breach that poses a risk to your rights and freedoms, Tegaltoto will notify affected individuals and relevant authorities in accordance with applicable data breach notification requirements.
Tegaltoto uses cookies and similar session-management technologies to operate the Platform effectively. We apply a minimal-footprint approach — we do not use cross-site tracking, behavioural advertising networks, or social media pixel embeds.
The categories of cookies we use are as follows:
You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features. Analytics and functional cookies may be disabled without affecting core access.
Tegaltoto's infrastructure and certain third-party service providers may be located outside Malaysia. Where your Personal Data is transferred to, processed in, or stored in countries outside your country of residence, Tegaltoto ensures that appropriate safeguards are in place to protect your data in accordance with internationally recognised standards.
Such safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions that have been determined to provide an adequate level of data protection. By using the Platform, you consent to the transfer of your Personal Data to locations outside Malaysia for the purposes described in this Policy.
Subject to applicable law and any overriding regulatory obligations (such as mandatory data retention for AML compliance), you hold the following rights with respect to your Personal Data held by Tegaltoto:
Request a copy of all Personal Data we hold about you, along with information on how it is being processed.
Request correction of inaccurate or incomplete Personal Data held in your account records.
Request deletion of your Personal Data where it is no longer necessary, subject to mandatory legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as while a disputed accuracy claim is being resolved.
Request that we export your Personal Data in a commonly used, machine-readable format for transfer to another service provider.
Object to the processing of your Personal Data for legitimate interest or direct marketing purposes at any time.
To exercise any of these rights, please contact our Data Privacy team via live chat or by email at [email protected] (plain text — not a link). We will acknowledge your request within 5 business days and aim to fulfil all verified requests within 30 days. Where a request is complex or numerous, we may extend this period by up to a further 30 days, with notice to you.
We may require you to verify your identity before processing certain data rights requests in order to prevent unauthorised access to or deletion of another person's data.
The Tegaltoto platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data relating to individuals under the age of 21.
Age verification is a mandatory component of the KYC process for all accounts. Any account where the registered user is identified as being under 21 will be immediately suspended, all pending transactions will be reversed where possible, and any remaining balance will be forfeited in accordance with our Terms & Conditions.
If you are a parent or guardian and believe that a minor has registered on the Platform without your knowledge, please contact our support team immediately. We will investigate and take appropriate action, including account closure and data deletion, as quickly as possible.
Tegaltoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, we will provide reasonable advance notice to registered users via email notification or a prominent on-platform announcement prior to the updated Policy taking effect.
The "Last Updated" date at the top of this page will be revised with each amendment. Continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must discontinue use of the Platform and contact us to arrange account closure.
The current version of this Privacy Policy will always be available at https://tegaltoto.cam/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Tegaltoto, please contact us through any of the following channels:
Tegaltoto serves players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. All privacy-related enquiries are handled with strict confidentiality by our dedicated data privacy team.
⚠️ Play Responsibly. Tegaltoto is strictly for players aged 21 and above only. Gambling can be addictive — please play within your means. Visit our Responsible Gambling page for tools and support resources.
Bank-grade encryption, transparent data practices, and full respect for your rights — all built into the platform from day one. For players aged 21 and above only.
Have questions? Read our FAQ or review our Terms & Conditions.