Rujukan Laman

How We Protect Your Personal Data

mineraltoto is built for Malaysian account holders, and this Privacy Policy sets out exactly what personal data we collect, how we use it, and the rights you hold…

Data Collected TransparentlyStored Securely in Encrypted FormYour Rights Respected FullyContact Us to Request ChangesMalaysian Law Applies
mineraltoto How We Protect Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a suspected privacy issue, our support team is available around the clock. Whether you are in Petaling Jaya or anywhere else in Malaysia, you can reach us through any of the three channels below and we will respond within one business day.

Team online

Live Chat

Start a live chat session directly from the mineraltoto website. Our privacy support agents are available 24 hours a day, seven days a week, to handle data queries and account access requests promptly.

Email Support

Send your privacy request or data correction query to our dedicated email address. We acknowledge all emails within 24 hours and resolve straightforward data requests within three working days.

Help Centre

Visit the mineraltoto Help Centre for written answers on data rights, cookie settings, account data downloads, and how to submit a formal request to delete or restrict processing of your information.

HOW WE HANDLE DATA

Explore Our Six Data Protection Principles

We follow six clear principles for every piece of data we process. These principles apply whether you are depositing via Touch 'n Go, browsing our lobby, or contacting support — every touchpoint…

Data Collection

We collect only what is necessary — your registration details, payment identifiers for Touch 'n Go, GrabPay, Boost dan FPX, and your activity logs. We do not collect data beyond what your account genuinely requires.

Cookie Practices

We use session cookies to keep you signed in and analytics cookies to understand how pages perform. You can manage or withdraw cookie consent at any time through the cookie settings panel in your account.

Account Security

All account data is transmitted over TLS-encrypted connections. Passwords are hashed and salted; we never store them in plain text. Suspicious login attempts trigger an automatic alert sent to your registered email.

Data Retention

We retain your account data for as long as your account remains active and for the period required by Malaysian financial regulations thereafter. Once the retention window closes, data is permanently deleted or anonymised.

Your Access Rights

You may request a copy of the personal data we hold about you at any time. Submit a Subject Access Request via email or live chat and we will deliver a structured data export within seven working days.

Data Correction and Deletion

If any data we hold is inaccurate, contact us and we will correct it promptly. You may also request deletion of your data where no legal retention obligation applies, and we will confirm the outcome in writing.

Switch Through Common Privacy Questions

The questions below cover the privacy matters our Malaysian account holders ask most frequently. If your question is not listed here, our support team is ready to help you directly through live chat or email.

We collect your name, email address, phone number, and the payment identifiers associated with Touch 'n Go, GrabPay, Boost dan FPX or FPX. We also log session activity and device type to keep your account secure.

Your data is used to operate your account, process deposits and withdrawals, detect fraud, and send you service-related communications. We do not use your data for third-party advertising without your explicit consent.

Payment data is shared only with the payment processors needed to complete your transaction — such as Touch 'n Go or GrabPay gateways. These processors handle your data under strict contractual data-protection obligations.

Active account data is retained for the lifetime of your account. After you close your account, we keep records for the period required under Malaysian financial law, then securely delete or anonymise them.

Yes. Submit a Subject Access Request through live chat or email. We will verify your identity first, then deliver a structured export of your personal data within seven working days at no charge to you.

Contact our support team with a deletion request. Where no legal retention obligation prevents it, we will delete your data and send you written confirmation within ten working days of verifying your identity.

We will notify you by email within 72 hours of becoming aware of any breach that poses a risk to your data. We will describe what happened, what data was affected, and the steps we have taken to contain it.