Official Policy

Privacy Policy hbltoto — Your Data Protection is Our Priority

Hbltoto respects the privacy of every user. This page clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act.

Updated: January 2026  |  Version 2.4  |  Malaysia PDPA

Commitment Privacy hbltoto

Six pillars of data protection we implement to keep your information secure at all times

256-Bit SSL Encryption

All data transmitted between your device and hbltoto servers is encrypted using 256-bit SSL standards — the same technology used by the world's leading financial institutions to protect online transactions.

Secure Data Storage

Your personal data is stored on servers protected by multiple layers of security, including firewalls, intrusion detection systems, and strict access controls. Only authorised personnel have access.

Malaysia PDPA Compliance

Hbltoto operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all data collection and processing activities meet applicable local legal requirements.

User Data Controls

You have full rights over your personal data — including the right to access, correct, delete, or transfer it. Data-related requests can be submitted to our support team.

No Sale of Data to Third Parties

Hbltoto has never and will never sell, rent, or disclose your personal information to any third party for marketing purposes without your explicit consent. Your data is not a commodity to us.

24/7 Security Monitoring

Hbltoto's security systems operate around the clock to detect any unauthorised access or suspicious activity. All threats are addressed immediately before they can compromise user data.

Important Information

This Privacy Policy applies to all users who register, access, or use any service on the hbltoto platform. By continuing to use the platform, you agree to the terms set out in this document.

01 Introduction and Purpose of This Policy


Hbltoto ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy is designed to provide full transparency on how your personal information is collected, used, shared, and protected.

We are committed to ensuring that all data processing activities are carried out lawfully, fairly, and transparently in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We only collect data that is strictly necessary to provide you with a better service.

If you have any questions about how we handle your data, the hbltoto support team is available 24 hours a day via our live chat platform.

02 Personal Data We Collect


Data You Provide Directly

During registration and use of the hbltoto platform, we collect the following information from you:

  • Full name as stated on identity card (MyKad)
  • Identity card number (MyKad) or passport number
  • Date of birth for age verification
  • Email address and mobile number
  • Current residential address
  • Registered bank account or e-wallet details
  • KYC documents (copy of MyKad, proof of address, and selfie if required)

Automatically Collected Data

While you use the platform, our systems automatically record technical information including:

  • Your device's IP address
  • Browser type and version
  • Device operating system information
  • Pages visited and session duration
  • Wagering records and transaction history
  • Cookie data and session identifiers

Note

We never collect your credit or debit card information directly. All financial transactions are processed through licensed, PCI-DSS certified payment gateways.

03 How We Use Your Data


Hbltoto uses your personal data only for lawful and necessary purposes. The table below summarises the primary purposes for which your data is used:

Data Type Purpose of Use Legal Basis
Identity Information KYC Identity verification and legal compliance Legal Requirements
Bank Account Information Finance Processing deposits and withdrawals Contract fulfillment
Email & Phone No. Communication Account notifications and promotions User consent
Game History Services Platform improvement and support Legitimate interests
IP Technical Data Security Fraud detection and account protection Legitimate interests
Cookie Data Performance User experience enhancement User consent

04 Data Sharing with Third Parties


Hbltoto does not sell, rent, or disclose your personal information to third parties without your consent. However, under certain limited circumstances, we may share data with the following parties:

Approved Service Providers

We share necessary data with third-party service providers that help us operate the platform, including payment gateway providers, KYC service providers, and server hosting companies. All such providers are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.

Legal & Regulatory Requirements

Hbltoto will disclose user information to lawful authorities when required under Malaysian law — including financial crime investigations, money laundering cases, or court orders. In such circumstances, we will comply with all applicable legal requirements.

What We Do Not Do

  • We do not sell your data to advertisers or third-party marketing agencies
  • We do not share your personal information for commercial research purposes without your consent
  • We do not allow third-party access without a valid data protection agreement

05 Our Data Security Measures


Your data security is something we take extremely seriously. hbltoto continuously invests in the latest security infrastructure to ensure your information stays protected:

  • Encryption of data at rest and in transit — All data is encrypted both at rest and in transit using AES-256 and TLS 1.3 encryption
  • Role-based access control — Only staff who require access to specific data to perform their duties are permitted to do so, with access logs recorded
  • Regular security audits — Penetration testing and security audits are conducted periodically by accredited independent third parties
  • 24/7 threat monitoring — Our SIEM (Security Information and Event Management) system continuously monitors for any suspicious activity
  • Two-factor authentication (2FA) — Available to all users and mandatory for every withdrawal

Shared Responsibility

While hbltoto takes all reasonable steps to protect your data, account security also depends on your own actions. Please use a strong password, enable 2FA, and never share your login credentials with anyone.

06 Cookies and Tracking Technologies


Hbltoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit a website.

Types of Cookies We Use

  • Essential Cookies — Required for core platform functions such as login session management and security. Cannot be disabled.
  • Performance Cookies — Collects aggregated data on how users interact with the platform to help us make improvements.
  • Functional Cookies — Stores user preferences such as language, display settings, and game preferences for ease of use.
  • Analytics Cookies — Used to understand overall platform usage patterns for continuous improvement purposes.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of some parts of the hbltoto platform.

07 Your Rights as a User


Under Malaysia's PDPA and the privacy principles we uphold, you have the following rights regarding your personal data:

01
Right to Access

You have the right to obtain a copy of the personal data we hold about you and to know how it is being used.

02
Right to Rectification

If your personal data is inaccurate or incomplete, you may request that we correct it.

03
Right to Erasure

Under certain circumstances, you may request the deletion of your personal data from our systems.

04
Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time.

05
Right to Data Portability

You may request your personal data in a machine-readable format for transfer to another platform.

06
Right to Withdraw Consent

You may withdraw any consent previously given for the processing of your data at any time.

To exercise any of the rights above, please contact the hbltoto support team via our live chat platform. We will process your request within 14 business days.

08 Children's Data Protection


The hbltoto platform is strictly for individuals aged 18 and above. We do not knowingly collect personal information from minors. An age verification process is implemented during registration to prevent access by those below the required age limit.

If we discover that personal data of a child has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

09 Cross-Border Data Transfer


In operating a global platform, your personal data may be processed or stored on servers located outside Malaysia. hbltoto ensures that any such data transfers are carried out with adequate safeguards in compliance with Malaysia's PDPA requirements.

All third parties involved in international data transfers are bound by data processing agreements that meet protection standards equal to or exceeding Malaysia's legal requirements. We do not transfer your data to countries that lack adequate levels of data protection.

10 Data Retention Period


Hbltoto retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law:

  • Active Account Data — Retained for as long as your account remains active on the hbltoto platform
  • KYC and Transaction Records — Retained for at least 7 years after account closure in accordance with Malaysian financial legal requirements
  • Log and Security Data — Retained for 2 years for security and fraud investigation purposes
  • Marketing Data — Retained until you withdraw consent or request deletion

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to any individual.

11 Amendments to This Privacy Policy


Hbltoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Any amendments will be posted on this page along with an updated date and version number.

For material amendments that significantly affect your privacy rights, we will notify you by email or in-platform notification at least 14 days before the changes take effect. Your continued use of the hbltoto platform after the effective date constitutes your acceptance of the updated terms.

12 How to Contact Us Regarding Privacy


If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the hbltoto support team through the following channels:

Live Support (24/7) — Live chat within the hbltoto platform

Privacy Email  [email protected]

Response Time — Within 3 business days for privacy inquiries

You also have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) if you believe your privacy rights have been violated and hbltoto has not addressed it satisfactorily.

Your Data is Protected

Join hbltoto with Full Confidence

With 256-bit SSL encryption, PDPA compliance, and 24/7 support, your personal data is always protected at hbltoto. Register and enjoy safe online entertainment.

18+ only. Please gamble responsibly.

Bahasa Melayu