Data Protection

Ibltoto Privacy Policy – Malaysian User Data Protection

At ibltoto, your privacy is more than a legal obligation — it is a genuine commitment. This document clearly explains how we collect, use, store, and protect your personal information.

Last Updated: 1 January 2026  |  Reading Time: ±8 minutes

1. Introduction

Ibltoto is committed to protecting the privacy of every user on our platform. This Privacy Policy explains our practices regarding the collection, processing, storage, and protection of your personal information when you use the ibltoto website, mobile app, and all related services.

When you register an account, make a deposit, place a wager, or simply browse our platform, you are implicitly granting us permission to process your data in accordance with this Privacy Policy and applicable data protection laws in Malaysia.

We take this responsibility seriously. Every decision we make regarding user data is guided by the principles of transparency, data minimisation, and security — not merely to meet legal requirements.

Scope of Application

This Privacy Policy applies to all ibltoto users, including website visitors, registered members, and anyone who interacts with our platform through any channel.

2. Information We Collect

Ibltoto collects the information needed to provide safe, compliant, and high-quality services. The following are the categories of information we collect:

A. Information You Provide Directly

  • Full name as it appears on your official identity document
  • Date of birth for age verification (must be 18 years or older)
  • Email address and mobile phone number
  • Current residential address
  • Bank account details for processing deposits and withdrawals
  • Identity verification (KYC) documents such as a national ID or passport when requested

B. Information Collected Automatically

  • IP address and device information used to access the platform
  • Web browser type and operating system
  • History of wagering activity and transactions on the platform
  • Login records including date, time, and geographic location
  • App usage data such as features accessed and session duration
Data Type Purpose of Collection Retention Period
Personal Identity Account registration & KYC verification Throughout the active account period + 5 years
Financial Data Deposit & withdrawal processing 7 years (tax compliance)
Technical Data Security & fraud prevention 12 rolling months
Wagering History Responsible services & gaming 5 years after account closure
Cookie Data User experience & analytics 30 days to 2 years

3. How We Use Your Data

Ibltoto uses collected information solely for the following purposes, and nothing beyond that:

  • Account management: To securely create, verify, and manage your ibltoto account
  • Transaction processing: To process all deposits and withdrawals accurately and promptly
  • Identity verification (KYC): To meet compliance requirements and prevent fraud and money laundering
  • Customer support: To provide relevant and effective assistance when you reach out to our support team
  • Platform Security: To detect and prevent unauthorized access, fraud, and other harmful activities
  • Service improvement: To understand how users interact with the platform and drive continuous improvements
  • Communications: To send you important information about your account, transactions, and policy updates
  • Responsible gaming: To monitor usage patterns and provide support when needed

Minimum Necessity Principle

Ibltoto only collects data that is strictly necessary to deliver our services. We do not collect irrelevant or excessive information on the basis that it might be useful in the future.

4. Information Sharing

Ibltoto does not sell, rent, or trade your personal information to third parties for marketing purposes. Your information is shared only in the following limited circumstances:

  • Payment service providers: Trusted payment processing partners facilitating your deposit and withdrawal transactions
  • KYC service providers: A third-party identity verification platform that helps us authenticate your documents
  • Legal authorities: When required by court order, regulatory authority directive, or a legitimate criminal investigation
  • Fraud prevention: With financial institutions or fraud prevention bodies when suspicious activity is suspected

All third parties who receive your data are bound by strict confidentiality agreements and are required to comply with data protection standards equivalent to those of ibltoto.

Business Transfers

In the event of any merger, acquisition, or sale of ibltoto assets, user data may be transferred as part of those assets. You will be notified in advance via email or an in-platform notice.

5. Data Security

Ibltoto continuously invests in security infrastructure to keep your data protected at all times. The security measures we have in place include:

  • 256-bit SSL Encryption: All data transmitted between your device and ibltoto servers is encrypted using the highest industry standards
  • Two-factor authentication (2FA): An extra security layer for login and high-value transactions
  • 24/7 Monitoring: Our cybersecurity team continuously monitors systems to detect any threats
  • Secure password storage: Your password is stored in a hashed format that cannot be read — no one at ibltoto can ever view your original password
  • Data segregation: Sensitive financial data is stored separately from general profile data with strict access controls
  • Regular security audits: Our system undergoes regular penetration testing conducted by independent third parties.

While we take all reasonable precautions, no online system can be guaranteed 100% secure. We encourage you to take responsibility for your own account security by keeping your password safe.

6. Cookies & Tracking Technologies

Ibltoto uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled
  • Functional Cookies: Saves your preferences such as language, display settings, and game choices to deliver a more personalised experience
  • Analytics Cookies: Helps us understand how users interact with the platform so we can make improvements
  • Performance Cookies: Helps us monitor platform speed and performance to ensure a smooth experience

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the ibltoto platform.

7. Your Rights as a User

As an ibltoto user, you have the following rights regarding your personal data:

01
Right of Access

Request a copy of all personal data we hold about you at any time

02
Right to Rectification

Request correction of any inaccurate or incomplete information

03
Right to Erasure

Request deletion of your data subject to applicable legal obligations

04
Right to Restriction

Request that we restrict the processing of your data under certain circumstances

05
Right to Portability

Receive your data in a machine-readable format for transfer to another platform

06
Right to Object

Object to the processing of your data for direct marketing purposes at any time

To exercise any of the above rights, please contact the ibltoto support team via live chat or our support email. We will process your request within 30 business days.

8. Data Retention & Deletion

Ibltoto retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by Malaysian law and online betting industry standards.

  • Active account data is retained for the duration your account remains active and for a defined period following account closure
  • Financial records are retained for a minimum of 7 years to comply with financial and tax legal requirements
  • Once the retention period expires and there is no ongoing legal requirement, your data will be securely deleted or anonymised

9. Child Protection

The ibltoto platform is not designed for, and does not direct its services to, individuals under the age of 18. ibltoto takes a strict approach in this regard:

  • The registration process requires age verification through date of birth and a valid identity document
  • Ibltoto conducts KYC checks to verify that all members meet the minimum age requirement.
  • If we find that an account has been created by a minor, that account will be terminated immediately and all associated data will be deleted

Parents & Guardians

If you suspect a minor has accessed the ibltoto platform, please contact our support team immediately. ibltoto will take prompt action.

10. Privacy Policy Changes

Ibltoto reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer.

  • The "Last Updated" date at the top of this page will be updated whenever changes are made.
  • For significant changes that affect your privacy rights, we will provide clear notice via email or an in-platform notification.
  • Continued use of the ibltoto platform after policy changes take effect is considered acceptance of the new terms

We encourage you to review this page regularly to stay informed about how we protect your information.

11. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how ibltoto handles your personal data, our team is ready to help:

  • Live Chat: The fastest way — available 24/7 directly through the ibltoto platform
  • Email: Send your written enquiry to our support email address for issues that require documentation
  • Response Time: We aim to respond to all enquiries within 1 to 3 business days

For formal requests related to data rights (access, correction, deletion), please clearly state the type of request and include sufficient identity verification details so we can process your request accurately.

Why ibltoto is Trusted

Your Privacy Is Our Priority

Every system and process at ibltoto is designed with the security and privacy of Malaysian users as the top priority

256-bit SSL Encryption

All communications between your device and ibltoto servers are protected with military-grade encryption. Your data cannot be intercepted or read by third parties.

Integrated KYC Verification

Ibltoto's KYC system ensures that only verified individuals who meet the required age can register and play — protecting all members from identity fraud.

No Data Sales

Ibltoto has never sold, rented, or traded your personal data to advertisers or data brokers. Your information belongs entirely to you.

Two-Factor Authentication

An additional layer of protection for your account. With 2FA enabled, no one can log in to your account even if they know your password.

Data Control in Your Hands

You have the right to access, correct, or delete your personal data. ibltoto makes this straightforward with a responsive support team and clear procedures.

Regular Security Audits

The ibltoto system undergoes comprehensive security testing by independent third parties on a regular basis to ensure there are no vulnerabilities that could be exploited by malicious actors.

Your Data is Safe. Your Platform is Secure.

Join over 500,000 ibltoto members who enjoy online betting with full confidence that their privacy and security are always protected.

Bahasa Melayu