Updated: January 2026

Hbltoto Privacy Policy – Malaysia Member Personal Data Protection

At hbltoto, we take every piece of information you entrust to us seriously. This Privacy Policy transparently explains how we collect, use, store, and protect your personal data throughout your use of the platform.

Hbltoto's Six Data Protection Principles

Your privacy is not just a legal obligation for us — it is part of how we respect the trust you place in us.

Not Sold to Third Parties

Your personal data has never been and will never be sold, rented, or traded to any third party for commercial purposes without your explicit prior consent.

High-Grade Encryption

All data transmitted between your device and hbltoto's servers is protected with 256-bit SSL encryption — the same security standard used by Malaysia's major financial institutions.

You Are in Control

You have the right to access, correct, or request deletion of your personal data at any time via your account settings or by contacting our support team.

Minimum Data Collection

Hbltoto only collects data that is strictly necessary to provide our services. We do not collect excessive information that is irrelevant to the platform's operational requirements.

Malaysia PDPA Compliance

All our data management practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

Full Transparency

We will always inform you of any material changes to how we handle your data. No silent changes without notification to members.

This Privacy Policy should be read together with Terms and Conditions hbltoto. By using our platform, you agree to the terms of this Privacy Policy.

1Introduction

Hbltoto ("we", "Platform") is committed to protecting the privacy of every user who accesses and uses our services. This Privacy Policy clearly explains how we collect, process, store, and protect your personal information when you interact with the hbltoto platform — whether through the website or mobile app.

We understand that trusting a platform with your personal information is a serious matter. That is why we have written this policy in clear, plain language — not confusing legal jargon — so you truly know what happens with your data at hbltoto.

This policy applies to all users of the hbltoto platform, including casual visitors, registered members, and former members whose information is still within the defined retention period. Continued use of our platform after any amendments to this policy constitutes your acceptance of the updated terms.

2Data We Collect

Hbltoto collects various types of information depending on how you interact with the platform. Here is a detailed breakdown:

2.1 Data You Provide Directly

  • Full name as it appears on your official identification document.
  • Email address and mobile number for verification and communication purposes.
  • Date of birth for age verification purposes.
  • Bank account details or payment methods used for deposits and withdrawals.
  • Copies of KYC documents including MyKad or passport when required.
  • Information you share when contacting customer support.

2.2 Automatically Collected Data

  • IP address and general location information (no more specific than city level).
  • Device type, operating system, and web browser used.
  • Pages visited, session duration, and usage patterns within the platform.
  • Technical data related to platform performance and errors.

2.3 Transaction Data

  • Your account's deposit, withdrawal, and wagering history.
  • Details of promotions and bonuses applied.
  • Communication records with the customer support team.
Data Type Primary Purpose Retention Period
Identity Information Account verification, KYC compliance Throughout the active account period + 7 years
Financial Data Transaction processing, fraud prevention 7 years after the last transaction
Technical Data Security, platform improvements Rolling 90 days
Communications Data Complaint resolution, quality control 2 years after the issue is resolved
Cookies & Tracking User experience, analytics Up to 12 months

3How We Use Your Data

Hbltoto uses the information collected for the following purposes, all of which are directly related to the delivery and improvement of our services:

3.1 Platform Operations

Your data is used to create and manage your account, process deposits and withdrawals, verify your identity through KYC procedures, detect and prevent fraud and illegal activity, and ensure the overall security of the platform.

3.2 User Experience

We use your usage patterns and preferences to personalise your playing experience on hbltoto — including recommending games you might enjoy, displaying relevant content, and remembering your language preferences and settings.

3.3 Communications

Hbltoto uses your contact information to send important account-related notifications (such as deposit confirmations or security alerts), promotional updates and special offers which you may opt out of at any time, and feedback related to customer support.

3.4 Legal Compliance

Some data usage is mandatory under applicable law — including compliance requirements under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) and other financial reporting requirements.

4Data Sharing with Third Parties

Hbltoto does not sell your personal data. However, there are limited situations where we may share information with carefully selected third parties:

  • Payment providers: Information required to process your financial transactions is shared with FPX, DuitNow, and integrated payment gateway providers on our platform. All these providers comply with PCI DSS security standards.
  • Game providers: Usernames and account IDs are shared with third-party game providers solely for the technical purpose of providing access to those games.
  • Analytics providers: Anonymised data is used to analyse usage patterns and improve the platform. No personally identifiable information is shared.
  • Legal authorities: hbltoto will disclose information to the authorities if required by law or a valid court order.
hbltoto never sell or rent your personal data to advertisers, data brokers, or any third party for commercial purposes. If you receive unsolicited marketing communications using the hbltoto name, please report it to our support team immediately.

5Data Security

Protecting your data is hbltoto's top priority. We continuously invest in security infrastructure to keep your information safe at all times. Our security measures include:

256-bit SSL Encryption

All data communications between your device and hbltoto's servers are protected with industry-grade encryption.

Two-Factor Authentication

An additional security layer is available for your account to prevent unauthorized access.

Secure Servers & Backups

Data is stored in certified data centres with physical access controls and automated backups.

24/7 Monitoring

Automated monitoring systems detect and respond to suspicious activity in real time.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% free from threats. You also play an important role by keeping your account password confidential and reporting any suspicious activity to us promptly.

6Cookies and Tracking Technologies

The hbltoto platform uses cookies and similar technologies to enhance user experience, analyze usage patterns, and ensure the platform functions correctly.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
  • Performance Cookies: Collects anonymous data on how you use the platform for improvement purposes. Can be disabled.
  • Functional Cookies: Saves your preferences such as language and display settings for a better experience. Can be disabled.
  • Analytics Cookies: Helps us understand aggregated usage patterns to improve our services. Can be disabled.

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the hbltoto platform.

7Your Rights Under PDPA

As a hbltoto platform user based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA):

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request corrections to inaccurate or incomplete data via your account settings.

Right to Erasure

You may request deletion of your data under certain circumstances, subject to legal data retention requirements.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request a copy of your data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

You may request a restriction on the processing of your data while an investigation or dispute is ongoing.

To exercise any of the rights above, contact the hbltoto customer support team via live chat, available 24/7. Requests will be processed within 30 business days, subject to identity verification.

8Data Retention Period

Hbltoto retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. The following is a general guide to retention periods:

  • Active account data is retained for the duration your account remains active on hbltoto.
  • Financial records and transactions are retained for a minimum of 7 years from the transaction date, in line with Malaysia's financial legal requirements.
  • Customer support communication logs are retained for 2 years after case resolution.
  • Technical data and server logs are retained for a rolling 90-day period.
  • After account termination, personal data no longer required will be securely deleted or anonymized within a reasonable period.

9Child Protection

The hbltoto platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal data from underage individuals. If we discover that we have inadvertently received information from someone under 18 years of age, the account will be terminated immediately and all related data will be deleted within a short period.

If you are a parent or guardian and have reason to believe that your child who is under age has created an account on hbltoto, please contact our customer support team immediately so that appropriate action can be taken without delay.

10Amendments to the Privacy Policy

Hbltoto reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any material amendments will be communicated to members via in-platform notifications and/or email at least 14 days before the changes take effect.

The "Updated" date displayed at the top of this page always reflects the date of the latest amendment. You are encouraged to review this page periodically. Continued use of the hbltoto platform after the amendment's effective date constitutes your acceptance of the updated terms.

11Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how hbltoto handles your personal data, we encourage you to reach out to us directly. Our dedicated team is ready to listen and address every matter seriously and within a reasonable timeframe.

You can reach our Privacy & Data Protection team via in-platform live chat (available 24/7) or by email at [email protected]. Written requests will be acknowledged within 3 working days and resolved within 30 working days.

For frequently asked questions related to privacy and account security, you may also refer to the FAQ section, which contains answers to the most frequently asked questions by our members.

Your Data Is Safe — Start Playing at hbltoto

With bank-grade encryption, full PDPA compliance, and an uncompromising commitment to your privacy, hbltoto is a platform you can trust. Register today and enjoy a safe and entertaining betting experience.

By registering, you agree to the Terms and Conditions and this Privacy Policy. For more information, visit FAQ or contact our customer support.

Bahasa Melayu