Important Note: This Privacy Policy describes to388's data protection practices and applies to all information you provide to to388 through our website, mobile app, and all official communication channels. By using the to388 platform, you agree to the Privacy Policy stated here.
1. Introduction
To388 ("we", "Platform") takes seriously its responsibility to protect the privacy of every individual using our services. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards.
We understand that your trust is our most valuable asset. Every data management decision at to388 is made with your interests and privacy as the top priority. The information you provide is used solely to enhance your experience on the to388 platform and never for any other purpose without your consent.
This Privacy Policy applies to all information collected through the to388.vu website, the to388 mobile app, customer support live chat, and all other official to388 communication channels.
2. Types of Personal Data Collected
To388 collects various types of personal information to enable us to provide a safe, efficient, and tailored service for you. The following are the categories of data we collect:
| Data Categories | Example Information | Primary Purpose |
|---|---|---|
| Identity Information | Full name, national ID number (MyKad), date of birth, facial photo | KYC identity verification, fraud prevention |
| Contact Information | Email address, phone number, residential address | Account communications, transaction notifications |
| Financial Information | Bank account number, bank name, transaction history | Deposit and withdrawal processing |
| Technical Data | IP address, device type, web browser, operating system | Account security, suspicious activity detection |
| Usage Data | Game history, game preferences, betting records | Personalize experience, responsible gaming |
| Communication Data | Support chat records, inbound emails, feedback | Customer service improvements |
3. How We Collect Information
To388 collects your personal data through several different channels, depending on your interactions with our platform:
3.1 Directly from You
Most of the information we hold is provided directly by you during the account registration, profile updates, KYC processing, supporting document submission, or when contacting the to388 customer support team.
3.2 Automatically
When you use the to388 platform, our systems automatically record certain technical information including your IP address, browser type and version, device used, pages visited, time and duration of visits, and actions taken within the platform. This data is used solely for security and platform improvement purposes.
3.3 From Trusted Third Parties
In certain cases, to388 may receive information from trusted third-party identity verification providers, payment processors, and fraud prevention service providers — solely for the purpose of verifying your identity and ensuring the security of your financial transactions.
4. Purpose of Data Use
To388 only uses your personal data for legitimate and transparent purposes. The following are the primary reasons we require and process your information:
- Account Management: Creating, verifying, and securely managing your member account.
- Transaction Processing: Processing deposits, withdrawals, and any financial transactions you conduct on the to388 platform.
- Identity Verification (KYC): Complying with legal requirements related to identity verification and anti-money laundering.
- Platform Security: Identifying, investigating, and preventing fraudulent activity, hacking, or platform abuse.
- Customer Support: Answering inquiries, resolving complaints, and providing you with technical support.
- Service Communications: Sending important notifications regarding your account, transactions, terms changes, and security updates.
- Platform Improvements: Analyzing usage patterns to enhance the user experience and develop better new features.
- Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and providing appropriate support.
- Promotions & Offers: Delivering relevant promotions to you — only if you have given consent to receive marketing communications.
to388 will not use your data for any purpose not stated above without first obtaining your explicit consent. You have the right to withdraw consent for marketing purposes at any time.
5. Data Sharing & Disclosure
To388 does not sell, rent, or disclose your personal data to any third party for commercial purposes. However, in the following limited circumstances, to388 may need to share certain information:
5.1 Trusted Service Providers
To388 partners with carefully selected third-party service providers to support platform operations, including payment processors, identity verification providers, and cloud infrastructure providers. All third parties are bound by strict confidentiality agreements and are only permitted to access the data necessary to perform their functions.
5.2 Legal Requirements
To388 may be required to disclose your personal data to the relevant authorities when compelled to do so by Malaysian law, court order, or directive from a legitimate regulatory body. In such circumstances, to388 will endeavour to notify you unless prohibited from doing so by law.
5.3 Protection of Vital Interests
In situations involving serious threats to public safety or the prevention of financial crime, to388 reserves the right to disclose necessary information to the relevant authorities without prior notice.
6. Data Security
The security of your personal data is to388's absolute top priority. We implement multiple layers of technical and organizational security measures to protect your information from unauthorized access, disclosure, modification, or destruction:
- 256-bit SSL Encryption for all data transmitted between your device and to388 servers.
- AES-256 Encryption for all sensitive data stored in the to388 database.
- Two-factor authentication (2FA) available for all member accounts as an added layer of security.
- 24/7 Monitoring by to388's cybersecurity team to detect and respond to any threats.
- Regular security audits by independent third parties to assess and enhance our data protection systems.
- Strict Internal Access Controls — only authorised personnel are permitted to access members' personal data.
While to388 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. You also play an important role in keeping your account secure by using a strong password and never sharing your login credentials with anyone.
7. Cookies & Tracking Technologies
To388 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:
- Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
- Performance Cookies: Helping us understand how users interact with the platform so we can improve performance and usability.
- Functional Cookies: Saving your preferences such as display settings and language choice to deliver a more personalized experience.
- Analytics Cookies: Collecting anonymous statistical information about platform usage patterns for continuous improvement purposes.
You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the to388 platform.
8. Your Rights Over Personal Data
As a to388 member, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010:
To exercise any of the above rights, please contact the to388 privacy team via email at [email protected]. to388 will process your request within 30 working days from the date of receipt of the completed request.
9. Data Retention Period
To388 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. Generally:
- Active account data is retained for as long as your account remains active on the to388 platform.
- Financial transaction records are retained for minimum 7 years in compliance with Malaysia's financial regulatory requirements.
- KYC records and identity verification data are retained for minimum 5 years after account closure.
- Technical and security log data is retained for 12 months for security incident investigation purposes.
- Customer support communication records are retained for 3 years for reference and dispute resolution purposes.
After the applicable retention period expires, your data will be securely deleted or anonymised in accordance with to388's standard procedures.
10. Child Protection
The to388 platform is not suitable for minors and individuals under the age of 18. to388 does not knowingly collect or process personal data of individuals under 18 years of age. Should we discover that a minor's data has been collected without our knowledge, that data will be deleted immediately and the relevant account will be terminated.
If you believe that a minor has registered a to388 account, please contact us immediately at [email protected] so that we may take appropriate action.
11. Amendments to the Privacy Policy
To388 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, or evolving legal requirements. When significant amendments are made, to388 will notify you via:
- A clear notification on the to388 platform homepage.
- Notification emails are sent to the email address registered to your account.
- Updates to the "Last Updated Date" shown at the top of this document.
Your continued use of the to388 platform after an updated Privacy Policy takes effect will be considered your acceptance of those changes. We encourage you to review this Privacy Policy page periodically.
12. Contact Us Regarding Privacy
If you have any questions, concerns, or complaints regarding how to388 handles your personal data, our privacy team is ready to assist:
- Privacy Email: [email protected] (responded to within 3 business days)
- General Support Email: [email protected]
- Live Chat: Available on the to388 platform — 24 hours a day, 7 days a week
- FAQ: Visit FAQ page for quick answers to common questions.
To388 takes every privacy-related complaint seriously and is committed to resolving each case within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.